# Flog Txt Version 1 # Analyzer Version: 4.6.0 # Analyzer Build Date: Jul 8 2022 06:26:21 # Log Creation Date: 20.09.2022 05:55:53.329 Process: id = "1" image_name = "9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe" filename = "c:\\users\\rdhj0cnfevzx\\desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe" page_root = "0x5ba4a000" os_pid = "0xf60" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x670" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f213" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 118 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 119 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 120 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 121 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 122 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 123 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 124 start_va = 0x1b0000 end_va = 0x1b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 125 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 126 start_va = 0x400000 end_va = 0x42dfff monitored = 1 entry_point = 0x40b78e region_type = mapped_file name = "9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe") Region: id = 127 start_va = 0x77760000 end_va = 0x778dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 128 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 129 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 130 start_va = 0x7fff0000 end_va = 0x7ffd0d94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 131 start_va = 0x7ffd0d950000 end_va = 0x7ffd0db10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 132 start_va = 0x7ffd0db11000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffd0db11000" filename = "" Region: id = 271 start_va = 0x430000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 272 start_va = 0x700a0000 end_va = 0x700effff monitored = 0 entry_point = 0x700b8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 273 start_va = 0x70020000 end_va = 0x70099fff monitored = 0 entry_point = 0x70033290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 274 start_va = 0x77340000 end_va = 0x7741ffff monitored = 0 entry_point = 0x77353980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 275 start_va = 0x700f0000 end_va = 0x700f7fff monitored = 0 entry_point = 0x700f17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 276 start_va = 0x5a0000 end_va = 0x70ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 277 start_va = 0x6fda0000 end_va = 0x6fdf8fff monitored = 1 entry_point = 0x6fdb0780 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 278 start_va = 0x77340000 end_va = 0x7741ffff monitored = 0 entry_point = 0x77353980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 279 start_va = 0x75580000 end_va = 0x756fdfff monitored = 0 entry_point = 0x75631b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 280 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 281 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 282 start_va = 0x430000 end_va = 0x4edfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 283 start_va = 0x590000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 284 start_va = 0x710000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000710000" filename = "" Region: id = 285 start_va = 0x743e0000 end_va = 0x74471fff monitored = 0 entry_point = 0x74420380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 286 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 287 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 288 start_va = 0x77420000 end_va = 0x7749afff monitored = 0 entry_point = 0x7743e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 289 start_va = 0x753c0000 end_va = 0x7547dfff monitored = 0 entry_point = 0x753f5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 290 start_va = 0x1c0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 291 start_va = 0x710000 end_va = 0x80ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000710000" filename = "" Region: id = 292 start_va = 0x850000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000850000" filename = "" Region: id = 293 start_va = 0x776b0000 end_va = 0x776f3fff monitored = 0 entry_point = 0x776c9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 294 start_va = 0x74e90000 end_va = 0x74f3cfff monitored = 0 entry_point = 0x74ea4f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 295 start_va = 0x74490000 end_va = 0x744adfff monitored = 0 entry_point = 0x7449b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 296 start_va = 0x74480000 end_va = 0x74489fff monitored = 0 entry_point = 0x74482a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 297 start_va = 0x772c0000 end_va = 0x77317fff monitored = 0 entry_point = 0x773025c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 298 start_va = 0x860000 end_va = 0xa5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 299 start_va = 0x6faf0000 end_va = 0x6fb6cfff monitored = 1 entry_point = 0x6fb00db0 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 300 start_va = 0x74df0000 end_va = 0x74e34fff monitored = 0 entry_point = 0x74e0de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 301 start_va = 0x75700000 end_va = 0x758bcfff monitored = 0 entry_point = 0x757e2a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 302 start_va = 0x75210000 end_va = 0x7535efff monitored = 0 entry_point = 0x752c6820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 303 start_va = 0x74f40000 end_va = 0x75086fff monitored = 0 entry_point = 0x74f51cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 304 start_va = 0x4f0000 end_va = 0x519fff monitored = 0 entry_point = 0x4f5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 305 start_va = 0x860000 end_va = 0x9e7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000860000" filename = "" Region: id = 306 start_va = 0xa50000 end_va = 0xa5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a50000" filename = "" Region: id = 307 start_va = 0x76df0000 end_va = 0x76e1afff monitored = 0 entry_point = 0x76df5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 308 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 309 start_va = 0x4f0000 end_va = 0x4f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 310 start_va = 0xa60000 end_va = 0xbe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a60000" filename = "" Region: id = 311 start_va = 0xbf0000 end_va = 0x1feffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000bf0000" filename = "" Region: id = 312 start_va = 0x500000 end_va = 0x52afff monitored = 1 entry_point = 0x50b78e region_type = mapped_file name = "9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe") Region: id = 313 start_va = 0x77320000 end_va = 0x7732bfff monitored = 0 entry_point = 0x77323930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 314 start_va = 0x6fd90000 end_va = 0x6fd97fff monitored = 0 entry_point = 0x6fd917b0 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 315 start_va = 0x1ff0000 end_va = 0x21affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 316 start_va = 0x6f540000 end_va = 0x6faeffff monitored = 1 entry_point = 0x6f58a848 region_type = mapped_file name = "mscorwks.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorwks.dll") Region: id = 317 start_va = 0x500000 end_va = 0x500fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000500000" filename = "" Region: id = 318 start_va = 0x6fbf0000 end_va = 0x6fc8afff monitored = 0 entry_point = 0x6fbf232b region_type = mapped_file name = "msvcr80.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9193_none_d09188224426efcd\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9193_none_d09188224426efcd\\msvcr80.dll") Region: id = 319 start_va = 0x1ff0000 end_va = 0x213ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 320 start_va = 0x21a0000 end_va = 0x21affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021a0000" filename = "" Region: id = 321 start_va = 0x510000 end_va = 0x510fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 322 start_va = 0x520000 end_va = 0x520fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000520000" filename = "" Region: id = 323 start_va = 0x530000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 324 start_va = 0x540000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 325 start_va = 0x550000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 326 start_va = 0x560000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 327 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 328 start_va = 0x580000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 329 start_va = 0x5a0000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 330 start_va = 0x610000 end_va = 0x70ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 331 start_va = 0x1ff0000 end_va = 0x20effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 332 start_va = 0x2130000 end_va = 0x213ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002130000" filename = "" Region: id = 333 start_va = 0x75960000 end_va = 0x76d5efff monitored = 0 entry_point = 0x75b1b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 334 start_va = 0x75540000 end_va = 0x75576fff monitored = 0 entry_point = 0x75543b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 335 start_va = 0x74820000 end_va = 0x74d18fff monitored = 0 entry_point = 0x74a27610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 336 start_va = 0x77230000 end_va = 0x772bcfff monitored = 0 entry_point = 0x77279b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 337 start_va = 0x74e40000 end_va = 0x74e83fff monitored = 0 entry_point = 0x74e47410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 338 start_va = 0x75530000 end_va = 0x7553efff monitored = 0 entry_point = 0x75532e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 339 start_va = 0x5e0000 end_va = 0x5e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 340 start_va = 0x21b0000 end_va = 0x24e6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 341 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 342 start_va = 0x24f0000 end_va = 0x44effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000024f0000" filename = "" Region: id = 343 start_va = 0x44f0000 end_va = 0x458ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000044f0000" filename = "" Region: id = 344 start_va = 0x810000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000810000" filename = "" Region: id = 345 start_va = 0x4590000 end_va = 0x468ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004590000" filename = "" Region: id = 346 start_va = 0x6ea40000 end_va = 0x6f539fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\mscorlib\\c4a3e0e914e73a68c0072e3064b48767\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\mscorlib\\c4a3e0e914e73a68c0072e3064b48767\\mscorlib.ni.dll") Region: id = 347 start_va = 0x74720000 end_va = 0x7480afff monitored = 0 entry_point = 0x7475d650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 348 start_va = 0x4690000 end_va = 0x4720fff monitored = 0 entry_point = 0x46c8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 349 start_va = 0x74360000 end_va = 0x743d4fff monitored = 0 entry_point = 0x74399a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 350 start_va = 0x9f0000 end_va = 0xa2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009f0000" filename = "" Region: id = 351 start_va = 0x5f0000 end_va = 0x5f2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "l_intl.nls" filename = "\\Windows\\SysWOW64\\l_intl.nls" (normalized: "c:\\windows\\syswow64\\l_intl.nls") Region: id = 352 start_va = 0x600000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 353 start_va = 0x9f0000 end_va = 0xa1afff monitored = 1 entry_point = 0x9fb78e region_type = mapped_file name = "9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe") Region: id = 354 start_va = 0xa20000 end_va = 0xa2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a20000" filename = "" Region: id = 355 start_va = 0x6fd30000 end_va = 0x6fd8afff monitored = 1 entry_point = 0x6fd79010 region_type = mapped_file name = "mscorjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\mscorjit.dll") Region: id = 356 start_va = 0x9f0000 end_va = 0x9f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009f0000" filename = "" Region: id = 357 start_va = 0xa00000 end_va = 0xa0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a00000" filename = "" Region: id = 358 start_va = 0xa10000 end_va = 0xa1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a10000" filename = "" Region: id = 359 start_va = 0x5e430000 end_va = 0x5e4d5fff monitored = 0 entry_point = 0x5e4be14e region_type = mapped_file name = "microsoft.visualbasic.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\microsoft.visualbasic\\8.0.0.0__b03f5f7f11d50a3a\\microsoft.visualbasic.dll") Region: id = 360 start_va = 0x4690000 end_va = 0x4735fff monitored = 0 entry_point = 0x471e14e region_type = mapped_file name = "microsoft.visualbasic.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\microsoft.visualbasic\\8.0.0.0__b03f5f7f11d50a3a\\microsoft.visualbasic.dll") Region: id = 361 start_va = 0x5e430000 end_va = 0x5e4d5fff monitored = 0 entry_point = 0x5e4be14e region_type = mapped_file name = "microsoft.visualbasic.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\8.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\microsoft.visualbasic\\8.0.0.0__b03f5f7f11d50a3a\\microsoft.visualbasic.dll") Region: id = 362 start_va = 0x7afd0000 end_va = 0x7b49dfff monitored = 0 entry_point = 0x7b44c76e region_type = mapped_file name = "system.windows.forms.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.windows.forms\\2.0.0.0__b77a5c561934e089\\system.windows.forms.dll") Region: id = 363 start_va = 0x20f0000 end_va = 0x212ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 364 start_va = 0x4740000 end_va = 0x4c0dfff monitored = 0 entry_point = 0x4bbc76e region_type = mapped_file name = "system.windows.forms.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.windows.forms\\2.0.0.0__b77a5c561934e089\\system.windows.forms.dll") Region: id = 365 start_va = 0xa30000 end_va = 0xa3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a30000" filename = "" Region: id = 366 start_va = 0x7afd0000 end_va = 0x7b49dfff monitored = 0 entry_point = 0x7b44c76e region_type = mapped_file name = "system.windows.forms.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.windows.forms\\2.0.0.0__b77a5c561934e089\\system.windows.forms.dll") Region: id = 367 start_va = 0xa40000 end_va = 0xa4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a40000" filename = "" Region: id = 368 start_va = 0x6e290000 end_va = 0x6ea32fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_32\\System\\2dcc35955cda7c1279cec70d8a3ac1c1\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_32\\system\\2dcc35955cda7c1279cec70d8a3ac1c1\\system.ni.dll") Region: id = 369 start_va = 0x774a0000 end_va = 0x77531fff monitored = 0 entry_point = 0x774d8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 370 start_va = 0x4c10000 end_va = 0x4d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004c10000" filename = "" Region: id = 371 start_va = 0xa40000 end_va = 0xa4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a40000" filename = "" Region: id = 372 start_va = 0x7ade0000 end_va = 0x7ae7bfff monitored = 0 entry_point = 0x7ae6921e region_type = mapped_file name = "system.drawing.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\System.Drawing\\2.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.drawing\\2.0.0.0__b03f5f7f11d50a3a\\system.drawing.dll") Region: id = 373 start_va = 0x4d10000 end_va = 0x4dabfff monitored = 0 entry_point = 0x4d9921e region_type = mapped_file name = "system.drawing.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\System.Drawing\\2.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.drawing\\2.0.0.0__b03f5f7f11d50a3a\\system.drawing.dll") Region: id = 374 start_va = 0x7ade0000 end_va = 0x7ae7bfff monitored = 0 entry_point = 0x7ae6921e region_type = mapped_file name = "system.drawing.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\System.Drawing\\2.0.0.0__b03f5f7f11d50a3a\\System.Drawing.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\system.drawing\\2.0.0.0__b03f5f7f11d50a3a\\system.drawing.dll") Region: id = 375 start_va = 0x2140000 end_va = 0x214ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002140000" filename = "" Region: id = 376 start_va = 0x2150000 end_va = 0x215ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002150000" filename = "" Region: id = 377 start_va = 0x2150000 end_va = 0x215ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002150000" filename = "" Region: id = 378 start_va = 0x2160000 end_va = 0x216ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002160000" filename = "" Region: id = 379 start_va = 0x4db0000 end_va = 0x52a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004db0000" filename = "" Region: id = 380 start_va = 0x52b0000 end_va = 0x62effff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 381 start_va = 0x77540000 end_va = 0x7765efff monitored = 0 entry_point = 0x77585980 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 382 start_va = 0x2160000 end_va = 0x2160fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002160000" filename = "" Region: id = 383 start_va = 0x62f0000 end_va = 0x63abfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000062f0000" filename = "" Region: id = 384 start_va = 0x2160000 end_va = 0x2163fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002160000" filename = "" Region: id = 385 start_va = 0x74340000 end_va = 0x7435cfff monitored = 0 entry_point = 0x74343b10 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 386 start_va = 0x2170000 end_va = 0x2174fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\user32.dll.mui") Region: id = 387 start_va = 0x2180000 end_va = 0x2183fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002180000" filename = "" Region: id = 388 start_va = 0x2190000 end_va = 0x2190fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002190000" filename = "" Region: id = 389 start_va = 0x63b0000 end_va = 0x63b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000063b0000" filename = "" Region: id = 390 start_va = 0x63b0000 end_va = 0x642ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000063b0000" filename = "" Region: id = 391 start_va = 0x6430000 end_va = 0x643ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006430000" filename = "" Region: id = 392 start_va = 0x6430000 end_va = 0x643ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006430000" filename = "" Region: id = 393 start_va = 0x6430000 end_va = 0x643ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006430000" filename = "" Region: id = 394 start_va = 0x6430000 end_va = 0x643ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006430000" filename = "" Region: id = 395 start_va = 0x6440000 end_va = 0x644ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006440000" filename = "" Region: id = 396 start_va = 0x6430000 end_va = 0x643ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006430000" filename = "" Region: id = 397 start_va = 0x6440000 end_va = 0x644ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006440000" filename = "" Region: id = 398 start_va = 0x6430000 end_va = 0x6434fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sorttbls.nlp" filename = "\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp") Region: id = 399 start_va = 0x6440000 end_va = 0x6480fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortkey.nlp" filename = "\\Windows\\assembly\\GAC_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp" (normalized: "c:\\windows\\assembly\\gac_32\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp") Region: id = 417 start_va = 0x6490000 end_va = 0x649ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006490000" filename = "" Region: id = 451 start_va = 0x64a0000 end_va = 0x64dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000064a0000" filename = "" Region: id = 452 start_va = 0x64e0000 end_va = 0x65dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000064e0000" filename = "" Region: id = 482 start_va = 0x65e0000 end_va = 0x661ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000065e0000" filename = "" Region: id = 483 start_va = 0x6620000 end_va = 0x671ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006620000" filename = "" Region: id = 484 start_va = 0x6720000 end_va = 0x675ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006720000" filename = "" Region: id = 485 start_va = 0x6760000 end_va = 0x685ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006760000" filename = "" Region: id = 486 start_va = 0x6860000 end_va = 0x689ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006860000" filename = "" Region: id = 487 start_va = 0x68a0000 end_va = 0x699ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000068a0000" filename = "" Thread: id = 1 os_tid = 0xc88 [0084.844] CreateFileMappingW (hFile=0xffffffff, lpFileMappingAttributes=0x628b90, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfb8, lpName="Global\\Cor_Private_IPCBlock_3936") returned 0x128 [0084.969] CreateFileMappingW (hFile=0xffffffff, lpFileMappingAttributes=0x628ce0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x134, lpName="Global\\Cor_Public_IPCBlock_3936") returned 0x130 [0094.461] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0095.186] GetVersionExW (in: lpVersionInformation=0x64ef40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x64ef40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0095.186] GetLastError () returned 0x0 [0095.187] GetVersionExW (in: lpVersionInformation=0x64ef40*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x64ef40*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0095.187] GetLastError () returned 0x0 [0095.191] CreateFileMappingW (hFile=0x25c, lpFileMappingAttributes=0x19edd4, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x260 [0095.217] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", nBufferLength=0x105, lpBuffer=0x19ece8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", lpFilePart=0x0) returned 0x1e [0095.217] GetLastError () returned 0x0 [0095.287] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", nBufferLength=0x105, lpBuffer=0x19ed40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", lpFilePart=0x0) returned 0x62 [0095.287] GetLastError () returned 0x2 [0095.292] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", nBufferLength=0x105, lpBuffer=0x19ecdc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", lpFilePart=0x0) returned 0x62 [0095.293] GetLastError () returned 0x2 [0095.302] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", nBufferLength=0x105, lpBuffer=0x19eca4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", lpFilePart=0x0) returned 0x1e [0095.302] GetLastError () returned 0x2 [0095.310] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", nBufferLength=0x105, lpBuffer=0x19ed40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", lpFilePart=0x0) returned 0x1e [0095.310] GetLastError () returned 0x2 [0095.310] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", nBufferLength=0x105, lpBuffer=0x19ecdc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\", lpFilePart=0x0) returned 0x1e [0095.310] GetLastError () returned 0x2 [0095.310] CreateFileMappingW (hFile=0x260, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x25c [0095.564] CreateFileMappingW (hFile=0x26c, lpFileMappingAttributes=0x0, flProtect=0x1000002, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x270 [0096.012] CreateFileMappingW (hFile=0x274, lpFileMappingAttributes=0x0, flProtect=0x1000002, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x278 [0097.504] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.504] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.533] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.534] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.535] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.536] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.537] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.538] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.538] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.538] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.538] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.538] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x1 [0097.538] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.538] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.541] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.541] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.541] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.541] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.541] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.541] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.541] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.541] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.541] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.542] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.543] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.544] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.545] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.546] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.547] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.547] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x0 [0097.547] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.547] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x1 [0097.547] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.547] VarDecCmp (pdecLeft=0x19f1c0, pdecRight=0x19f1b0) returned 0x2 [0097.676] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x19eae4 | out: lpLuid=0x19eae4*(LowPart=0x14, HighPart=0)) returned 1 [0097.693] GetLastError () returned 0x0 [0097.696] GetCurrentProcess () returned 0xffffffff [0097.696] GetLastError () returned 0x0 [0097.699] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19eae0 | out: TokenHandle=0x19eae0*=0x2b0) returned 1 [0097.699] GetLastError () returned 0x0 [0097.724] AdjustTokenPrivileges (in: TokenHandle=0x2b0, DisableAllPrivileges=0, NewState=0x24f3c04*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0097.724] GetLastError () returned 0x0 [0097.726] CloseHandle (hObject=0x2b0) returned 1 [0097.726] GetLastError () returned 0x0 [0097.741] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x34f5de0, Length=0x20000, ResultLength=0x19f290 | out: SystemInformation=0x34f5de0, ResultLength=0x19f290*=0x15eb0) returned 0x0 [0097.805] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3515e00, Length=0x20000, ResultLength=0x19f290 | out: SystemInformation=0x3515e00, ResultLength=0x19f290*=0x15e70) returned 0x0 [0097.818] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3535e20, Length=0x20000, ResultLength=0x19f290 | out: SystemInformation=0x3535e20, ResultLength=0x19f290*=0x15e70) returned 0x0 [0097.848] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3555e40, Length=0x20000, ResultLength=0x19f290 | out: SystemInformation=0x3555e40, ResultLength=0x19f290*=0x15e70) returned 0x0 [0097.862] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3575e60, Length=0x20000, ResultLength=0x19f290 | out: SystemInformation=0x3575e60, ResultLength=0x19f290*=0x15e70) returned 0x0 [0097.876] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3595e80, Length=0x20000, ResultLength=0x19f290 | out: SystemInformation=0x3595e80, ResultLength=0x19f290*=0x15e70) returned 0x0 [0097.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35b5ea0, Length=0x20000, ResultLength=0x19f290 | out: SystemInformation=0x35b5ea0, ResultLength=0x19f290*=0x15e70) returned 0x0 [0097.908] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35d5ec0, Length=0x20000, ResultLength=0x19f290 | out: SystemInformation=0x35d5ec0, ResultLength=0x19f290*=0x15e70) returned 0x0 [0097.922] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x35f5ee0, Length=0x20000, ResultLength=0x19f290 | out: SystemInformation=0x35f5ee0, ResultLength=0x19f290*=0x15e70) returned 0x0 [0097.932] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3615f00, Length=0x20000, ResultLength=0x19f290 | out: SystemInformation=0x3615f00, ResultLength=0x19f290*=0x15e70) returned 0x0 [0097.946] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3635f20, Length=0x20000, ResultLength=0x19f290 | out: SystemInformation=0x3635f20, ResultLength=0x19f290*=0x15e70) returned 0x0 [0097.958] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x3655f40, Length=0x20000, ResultLength=0x19f290 | out: SystemInformation=0x3655f40, ResultLength=0x19f290*=0x15e70) returned 0x0 [0098.376] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", nBufferLength=0x105, lpBuffer=0x19ee24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", lpFilePart=0x0) returned 0x62 [0098.376] GetLastError () returned 0x7e [0098.415] lstrlenW (lpString="䅁") returned 1 [0098.462] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", nBufferLength=0x105, lpBuffer=0x19ee50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", lpFilePart=0x0) returned 0x62 [0098.462] GetLastError () returned 0x7e [0098.464] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", nBufferLength=0x105, lpBuffer=0x19eebc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", lpFilePart=0x0) returned 0x62 [0098.464] GetLastError () returned 0x7e [0098.467] SetFileAttributesW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", dwFileAttributes=0x2) returned 1 [0098.468] GetLastError () returned 0x7e [0098.468] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", nBufferLength=0x105, lpBuffer=0x19ee50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", lpFilePart=0x0) returned 0x62 [0098.468] GetLastError () returned 0x7e [0098.468] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", nBufferLength=0x105, lpBuffer=0x19eebc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", lpFilePart=0x0) returned 0x62 [0098.468] GetLastError () returned 0x7e [0098.468] SetFileAttributesW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", dwFileAttributes=0x1) returned 1 [0098.468] GetLastError () returned 0x7e [0098.468] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.468] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.468] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.468] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.469] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.470] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.471] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x1 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.472] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.473] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.474] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0098.475] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0098.526] CreateFileMappingW (hFile=0x2b0, lpFileMappingAttributes=0x0, flProtect=0x1000002, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x2b4 [0099.261] GetProcessWindowStation () returned 0xf0 [0099.266] GetUserObjectInformationA (in: hObj=0xf0, nIndex=1, pvInfo=0x26c3c34, nLength=0xc, lpnLengthNeeded=0x19f2cc | out: pvInfo=0x26c3c34, lpnLengthNeeded=0x19f2cc) returned 1 [0099.266] GetLastError () returned 0x2 [0099.307] GetActiveWindow () returned 0x0 [0099.388] GetCurrentProcess () returned 0xffffffff [0099.390] GetCurrentThread () returned 0xfffffffe [0099.390] GetCurrentProcess () returned 0xffffffff [0099.426] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x19f2bc, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x19f2bc*=0x2b8) returned 1 [0099.426] GetLastError () returned 0x2 [0099.508] GetCurrentThreadId () returned 0xc88 [0099.657] OleInitialize (pvReserved=0x0) returned 0x0 [0099.658] GetLastError () returned 0x2 [0099.663] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x19f27c | out: lplpMessageFilter=0x19f27c*=0x0) returned 0x0 [0099.732] GetCurrentThreadId () returned 0xc88 [0099.743] EnumThreadWindows (dwThreadId=0xc88, lpfn=0x21a0722, lParam=0x0) returned 1 [0099.775] GetActiveWindow () returned 0x0 [0099.782] GetFocus () returned 0x0 [0099.788] MessageBoxW (hWnd=0x0, lpText="The application failed to initialize properly (0x0000022). Click on OK to terminate the application.", lpCaption="Explorer.exe - Application Error", uType=0x10) returned 1 [0102.731] SendMessageW (hWnd=0x0, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0102.731] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.768] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.768] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.769] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.770] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.771] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.772] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x0 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x1 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.773] VarDecCmp (pdecLeft=0x19f240, pdecRight=0x19f230) returned 0x2 [0102.876] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.876] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.876] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.876] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.876] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.876] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.876] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.876] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.877] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.878] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.879] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.880] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.881] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.882] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.882] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.882] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.882] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.882] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.882] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.882] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0102.882] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.882] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x1 [0102.882] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0102.882] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.114] LoadLibraryA (lpLibFileName="kernel32") returned 0x77340000 [0103.120] GetProcAddress (hModule=0x77340000, lpProcName="GetModuleHandleA") returned 0x773599f0 [0103.224] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", nBufferLength=0x105, lpBuffer=0x19edc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", lpFilePart=0x0) returned 0x62 [0103.224] GetLastError () returned 0x578 [0103.225] GetModuleHandleA (lpModuleName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe") returned 0x400000 [0103.226] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.226] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.226] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.226] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.226] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.226] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.226] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.226] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.226] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.226] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.227] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.228] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.229] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.230] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.231] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.231] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.231] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.231] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.231] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.231] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.231] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.231] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.231] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.231] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x1 [0103.231] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.231] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.231] LoadLibraryA (lpLibFileName="kernel32") returned 0x77340000 [0103.233] GetProcAddress (hModule=0x77340000, lpProcName="FindResourceA") returned 0x7735cb90 [0103.241] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.241] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.241] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.241] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.241] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.241] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.241] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.241] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.241] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.242] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.242] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.242] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.242] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.242] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.242] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.242] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.242] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.242] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.242] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.242] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.242] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.242] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.242] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.243] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.244] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x0 [0103.245] VarDecCmp (pdecLeft=0x19f1b0, pdecRight=0x19f1a0) returned 0x2 [0103.245] FindResourceA (hModule=0x400000, lpName="yj210wxj", lpType="RC_IMAGE") returned 0x40e080 [0103.245] LoadLibraryA (lpLibFileName="kernel32") returned 0x77340000 [0103.246] GetProcAddress (hModule=0x77340000, lpProcName="SizeofResource") returned 0x77358f80 [0103.258] SizeofResource (hModule=0x400000, hResInfo=0x40e080) returned 0x1cc00 [0103.259] LoadLibraryA (lpLibFileName="kernel32") returned 0x77340000 [0103.259] GetProcAddress (hModule=0x77340000, lpProcName="LoadResource") returned 0x773576f0 [0103.266] LoadResource (hModule=0x400000, hResInfo=0x40e080) returned 0x40e0c4 [0103.301] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.301] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.301] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.301] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.301] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.302] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.303] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.303] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.303] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.303] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.303] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.303] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.303] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.303] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.303] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.303] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.303] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.303] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.303] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.304] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.305] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.306] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.307] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.307] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x0 [0103.307] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.307] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x1 [0103.307] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.307] VarDecCmp (pdecLeft=0x19f2a4, pdecRight=0x19f294) returned 0x2 [0103.555] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", nBufferLength=0x105, lpBuffer=0x19ebc4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", lpFilePart=0x0) returned 0x62 [0103.555] GetLastError () returned 0x578 [0103.560] GetSystemDirectoryW (in: lpBuffer=0x652798, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0103.560] GetLastError () returned 0x578 [0103.560] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x19ebc4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0103.560] GetLastError () returned 0x578 [0103.573] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.573] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.573] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.573] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.573] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.573] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.573] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.573] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.573] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.573] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.588] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.589] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.590] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.590] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.590] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.590] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.590] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.590] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.590] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.590] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.590] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.590] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.590] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.590] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.591] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.592] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.593] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.593] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.593] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.593] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.593] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.593] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.593] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.593] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.593] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.593] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.593] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x1 [0103.593] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.593] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.593] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x19ec20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0103.593] GetLastError () returned 0x578 [0103.594] GetVersionExW (in: lpVersionInformation=0x6527b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x6527b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0103.595] GetLastError () returned 0x578 [0103.598] SetErrorMode (uMode=0x1) returned 0x0 [0103.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), fInfoLevelId=0x0, lpFileInformation=0x19f0a0 | out: lpFileInformation=0x19f0a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xaec2cf40, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xaec2cf40, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0103.600] GetLastError () returned 0x578 [0103.600] SetErrorMode (uMode=0x0) returned 0x1 [0103.600] GetSystemDirectoryW (in: lpBuffer=0x652798, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0103.600] GetLastError () returned 0x578 [0103.600] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x105, lpBuffer=0x19ebc4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0103.600] GetLastError () returned 0x578 [0103.600] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.601] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.602] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.603] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.604] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x1 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.605] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.623] CreateFileMappingW (hFile=0x2f4, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x2f8 [0103.673] CreateFileMappingW (hFile=0x2fc, lpFileMappingAttributes=0x0, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x300 [0103.682] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework", nBufferLength=0x105, lpBuffer=0x19eb78, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework", lpFilePart=0x0) returned 0x22 [0103.682] GetLastError () returned 0x0 [0103.686] SetErrorMode (uMode=0x1) returned 0x0 [0103.691] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\*" (normalized: "c:\\windows\\microsoft.net\\framework\\*"), lpFindFileData=0x6527c8 | out: lpFindFileData=0x6527c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c227, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xdf6a59a9, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xdf6a59a9, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x669c30 [0103.692] GetLastError () returned 0x0 [0103.693] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c227, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xdf6a59a9, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xdf6a59a9, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.693] GetLastError () returned 0x0 [0103.693] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7793ab0, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc7793ab0, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xaa4f2100, ftLastWriteTime.dwHighDateTime=0x1d06b07, nFileSizeHigh=0x0, nFileSizeLow=0x15710, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETFXSBS10.exe", cAlternateFileName="")) returned 1 [0103.693] GetLastError () returned 0x0 [0103.693] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde8c62be, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xdd7ff711, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xdd7ff711, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0xa1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfxsbs12.hkf", cAlternateFileName="NETFXS~1.HKF")) returned 1 [0103.693] GetLastError () returned 0x0 [0103.694] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f5fe91, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33f5fe91, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33f5fe91, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbscmp10.dll", cAlternateFileName="")) returned 1 [0103.694] GetLastError () returned 0x0 [0103.694] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3358a37b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3358a37b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3358a37b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbscmp20_mscorwks.dll", cAlternateFileName="")) returned 1 [0103.694] GetLastError () returned 0x0 [0103.694] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x335b05d6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x335b05d6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x335b05d6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbscmp20_perfcounter.dll", cAlternateFileName="")) returned 1 [0103.694] GetLastError () returned 0x0 [0103.694] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x335b05d6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x335b05d6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x335b05d6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_diasymreader.dll", cAlternateFileName="")) returned 1 [0103.694] GetLastError () returned 0x0 [0103.695] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77a86c4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc77a86c4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xaa4f2100, ftLastWriteTime.dwHighDateTime=0x1d06b07, nFileSizeHigh=0x0, nFileSizeLow=0x3848, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_iehost.dll", cAlternateFileName="")) returned 1 [0103.695] GetLastError () returned 0x0 [0103.695] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3358a37b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3358a37b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3358a37b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_microsoft.jscript.dll", cAlternateFileName="")) returned 1 [0103.695] GetLastError () returned 0x0 [0103.695] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77ac1d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc77ac1d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xaa4f2100, ftLastWriteTime.dwHighDateTime=0x1d06b07, nFileSizeHigh=0x0, nFileSizeLow=0x3848, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_microsoft.vsa.vb.codedomprocessor.dll", cAlternateFileName="")) returned 1 [0103.695] GetLastError () returned 0x0 [0103.695] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3358a37b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3358a37b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3358a37b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_mscordbi.dll", cAlternateFileName="")) returned 1 [0103.695] GetLastError () returned 0x0 [0103.696] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3358a37b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3358a37b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3358a37b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_mscorrc.dll", cAlternateFileName="")) returned 1 [0103.696] GetLastError () returned 0x0 [0103.696] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x335b05d6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x335b05d6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x335b05d6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_mscorsec.dll", cAlternateFileName="")) returned 1 [0103.696] GetLastError () returned 0x0 [0103.696] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33564121, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33564121, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33564121, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_system.configuration.install.dll", cAlternateFileName="")) returned 1 [0103.696] GetLastError () returned 0x0 [0103.696] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f5fe91, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33f5fe91, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33f5fe91, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_system.data.dll", cAlternateFileName="")) returned 1 [0103.696] GetLastError () returned 0x0 [0103.697] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33564121, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33564121, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33564121, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_system.enterpriseservices.dll", cAlternateFileName="")) returned 1 [0103.697] GetLastError () returned 0x0 [0103.697] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77b4a86, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc77b4a86, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xaa4f2100, ftLastWriteTime.dwHighDateTime=0x1d06b07, nFileSizeHigh=0x0, nFileSizeLow=0x3848, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_VsaVb7rt.dll", cAlternateFileName="")) returned 1 [0103.697] GetLastError () returned 0x0 [0103.697] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3358a37b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3358a37b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3358a37b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_wminet_utils.dll", cAlternateFileName="")) returned 1 [0103.697] GetLastError () returned 0x0 [0103.697] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3358a37b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3358a37b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3358a37b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedReg12.dll", cAlternateFileName="")) returned 1 [0103.697] GetLastError () returned 0x0 [0103.698] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c227, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x4e708d5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4e708d5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0.3705", cAlternateFileName="V10~1.370")) returned 1 [0103.698] GetLastError () returned 0x0 [0103.698] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c227, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x4e708d5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4e708d5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.1.4322", cAlternateFileName="V11~1.432")) returned 1 [0103.698] GetLastError () returned 0x0 [0103.698] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c227, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xdf5fe36d, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xdf5fe36d, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2.0.50727", cAlternateFileName="V20~1.507")) returned 1 [0103.698] GetLastError () returned 0x0 [0103.698] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf5fe36d, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xdf6708e5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xdf6708e5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0103.698] GetLastError () returned 0x0 [0103.699] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf6a59a9, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xdf73e635, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xdf73e635, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0103.699] GetLastError () returned 0x0 [0103.700] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c227, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd4bc93bd, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0xd4cfa8b8, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 1 [0103.700] GetLastError () returned 0x0 [0103.700] FindNextFileW (in: hFindFile=0x669c30, lpFindFileData=0x6527b0 | out: lpFindFileData=0x6527b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c227, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd4bc93bd, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0xd4cfa8b8, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 0 [0103.700] GetLastError () returned 0x12 [0103.705] FindClose (in: hFindFile=0x669c30 | out: hFindFile=0x669c30) returned 1 [0103.706] SetErrorMode (uMode=0x0) returned 0x1 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.708] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.709] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.709] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.709] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.709] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.709] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.709] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.709] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.709] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.709] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.709] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.709] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.709] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.709] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.709] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.710] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.711] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.712] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x1 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.713] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.714] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.715] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.716] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.812] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.813] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.814] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.815] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.816] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.817] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.817] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0103.817] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.817] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x1 [0103.817] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.817] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0103.817] LoadLibraryA (lpLibFileName="kernel32") returned 0x77340000 [0103.818] GetProcAddress (hModule=0x77340000, lpProcName="CreateProcessA") returned 0x77380750 [0103.827] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26c9468*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26c9188 | out: lpCommandLine="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe", lpProcessInformation=0x26c9188*(hProcess=0x308, hThread=0x304, dwProcessId=0xc08, dwThreadId=0xc54)) returned 1 [0104.070] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.070] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.070] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.070] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.070] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.070] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.070] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.070] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.070] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.070] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.071] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.072] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.073] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.074] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.074] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.074] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.074] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.074] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.074] LoadLibraryA (lpLibFileName="kernel32") returned 0x77340000 [0104.074] GetProcAddress (hModule=0x77340000, lpProcName="GetThreadContext") returned 0x7735ec60 [0104.082] GetThreadContext (in: hThread=0x304, lpContext=0x26c9474 | out: lpContext=0x26c9474*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x2e2000, Edx=0x0, Ecx=0x0, Eax=0x404d61, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0104.102] LoadLibraryA (lpLibFileName="kernel32") returned 0x77340000 [0104.102] GetProcAddress (hModule=0x77340000, lpProcName="ReadProcessMemory") returned 0x77381c80 [0104.110] ReadProcessMemory (in: hProcess=0x308, lpBaseAddress=0x2e2008, lpBuffer=0x19f318, nSize=0x4, lpNumberOfBytesRead=0x19f310 | out: lpBuffer=0x19f318*, lpNumberOfBytesRead=0x19f310*=0x4) returned 1 [0104.123] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.123] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.123] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.123] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.124] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.125] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.126] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.126] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.126] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.126] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.126] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.126] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.126] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.126] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.126] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.126] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.126] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.126] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.127] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x1 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.128] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.129] LoadLibraryA (lpLibFileName="ntdll") returned 0x77760000 [0104.129] GetProcAddress (hModule=0x77760000, lpProcName="NtUnmapViewOfSection") returned 0x777d6f40 [0104.134] NtUnmapViewOfSection (ProcessHandle=0x308, BaseAddress=0x400000) returned 0x0 [0104.364] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.364] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.364] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.364] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.364] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.364] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.364] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.364] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.364] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.364] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.364] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.364] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.364] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.365] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.365] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.365] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.365] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.365] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.365] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.365] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.365] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.365] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.382] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.382] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.382] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.382] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.382] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.382] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.382] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.382] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.382] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.382] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.382] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.383] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.384] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.385] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.385] LoadLibraryA (lpLibFileName="kernel32") returned 0x77340000 [0104.385] GetProcAddress (hModule=0x77340000, lpProcName="VirtualAllocEx") returned 0x77382730 [0104.390] VirtualAllocEx (hProcess=0x308, lpAddress=0x400000, dwSize=0x22000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0104.399] LoadLibraryA (lpLibFileName="kernel32") returned 0x77340000 [0104.399] GetProcAddress (hModule=0x77340000, lpProcName="WriteProcessMemory") returned 0x77382850 [0104.403] WriteProcessMemory (in: hProcess=0x308, lpBaseAddress=0x400000, lpBuffer=0x3676f70*, nSize=0x400, lpNumberOfBytesWritten=0x19f310 | out: lpBuffer=0x3676f70*, lpNumberOfBytesWritten=0x19f310*=0x400) returned 1 [0104.435] WriteProcessMemory (in: hProcess=0x308, lpBaseAddress=0x401000, lpBuffer=0x3693b90*, nSize=0x15000, lpNumberOfBytesWritten=0x19f310 | out: lpBuffer=0x3693b90*, lpNumberOfBytesWritten=0x19f310*=0x15000) returned 1 [0104.454] WriteProcessMemory (in: hProcess=0x308, lpBaseAddress=0x416000, lpBuffer=0x26cabf4*, nSize=0x1400, lpNumberOfBytesWritten=0x19f310 | out: lpBuffer=0x26cabf4*, lpNumberOfBytesWritten=0x19f310*=0x1400) returned 1 [0104.539] WriteProcessMemory (in: hProcess=0x308, lpBaseAddress=0x418000, lpBuffer=0x26cc018, nSize=0x0, lpNumberOfBytesWritten=0x19f310 | out: lpNumberOfBytesWritten=0x19f310) returned 0 [0104.540] WriteProcessMemory (in: hProcess=0x308, lpBaseAddress=0x419000, lpBuffer=0x26cc03c*, nSize=0x1200, lpNumberOfBytesWritten=0x19f310 | out: lpBuffer=0x26cc03c*, lpNumberOfBytesWritten=0x19f310*=0x1200) returned 1 [0104.546] WriteProcessMemory (in: hProcess=0x308, lpBaseAddress=0x41b000, lpBuffer=0x26cd260, nSize=0x0, lpNumberOfBytesWritten=0x19f310 | out: lpNumberOfBytesWritten=0x19f310) returned 0 [0104.546] WriteProcessMemory (in: hProcess=0x308, lpBaseAddress=0x41c000, lpBuffer=0x26cd284*, nSize=0x200, lpNumberOfBytesWritten=0x19f310 | out: lpBuffer=0x26cd284*, lpNumberOfBytesWritten=0x19f310*=0x200) returned 1 [0104.551] WriteProcessMemory (in: hProcess=0x308, lpBaseAddress=0x41d000, lpBuffer=0x26cd4a8*, nSize=0x1000, lpNumberOfBytesWritten=0x19f310 | out: lpBuffer=0x26cd4a8*, lpNumberOfBytesWritten=0x19f310*=0x1000) returned 1 [0104.556] WriteProcessMemory (in: hProcess=0x308, lpBaseAddress=0x41e000, lpBuffer=0x26ce4cc*, nSize=0x4000, lpNumberOfBytesWritten=0x19f310 | out: lpBuffer=0x26ce4cc*, lpNumberOfBytesWritten=0x19f310*=0x4000) returned 1 [0104.640] WriteProcessMemory (in: hProcess=0x308, lpBaseAddress=0x2e2008, lpBuffer=0x26d24f0*, nSize=0x4, lpNumberOfBytesWritten=0x19f310 | out: lpBuffer=0x26d24f0*, lpNumberOfBytesWritten=0x19f310*=0x4) returned 1 [0104.653] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.653] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.653] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.653] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.653] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.653] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.653] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.653] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.653] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.653] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.654] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.655] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.656] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.656] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.656] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.656] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.656] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.657] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.658] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.659] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.660] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.660] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.660] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x1 [0104.660] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.660] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.660] LoadLibraryA (lpLibFileName="kernel32") returned 0x77340000 [0104.661] GetProcAddress (hModule=0x77340000, lpProcName="SetThreadContext") returned 0x77382490 [0104.661] SetThreadContext (hThread=0x304, lpContext=0x26c9474*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x2e2000, Edx=0x0, Ecx=0x0, Eax=0x415d8c, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0104.667] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.667] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.667] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.667] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.667] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.667] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.667] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.667] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.667] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.667] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.667] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.667] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.667] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.667] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.668] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.669] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.670] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.671] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.671] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.671] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.671] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x0 [0104.671] VarDecCmp (pdecLeft=0x19efb4, pdecRight=0x19efa4) returned 0x2 [0104.671] LoadLibraryA (lpLibFileName="kernel32") returned 0x77340000 [0104.671] GetProcAddress (hModule=0x77340000, lpProcName="ResumeThread") returned 0x7735a800 [0104.680] ResumeThread (hThread=0x304) returned 0x1 [0104.761] CoGetContextToken (in: pToken=0x19fdf4 | out: pToken=0x19fdf4) returned 0x0 [0104.761] CObjectContext::QueryInterface () returned 0x0 [0104.762] CObjectContext::GetCurrentThreadType () returned 0x0 [0104.762] Release () returned 0x0 [0104.872] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0x62dd08*=0x13c, lpdwindex=0x19fc60 | out: lpdwindex=0x19fc60) returned 0x0 Thread: id = 2 os_tid = 0xcb0 Thread: id = 3 os_tid = 0xd0c Thread: id = 4 os_tid = 0xc78 [0095.145] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0104.845] CloseHandle (hObject=0x2b8) returned 1 [0104.845] GetLastError () returned 0x0 Thread: id = 7 os_tid = 0x10d8 Thread: id = 8 os_tid = 0xc80 Thread: id = 9 os_tid = 0x640 Thread: id = 10 os_tid = 0x178 Process: id = "2" image_name = "cvtres.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\cvtres.exe" page_root = "0x586c1000" os_pid = "0xc08" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xf60" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f213" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 400 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 401 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 402 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 403 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 404 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 405 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 406 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 407 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 408 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 409 start_va = 0x400000 end_va = 0x409fff monitored = 0 entry_point = 0x404d61 region_type = mapped_file name = "cvtres.exe" filename = "\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\cvtres.exe") Region: id = 410 start_va = 0x77760000 end_va = 0x778dafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 411 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 412 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 413 start_va = 0x7fff0000 end_va = 0x7ffd0d94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 414 start_va = 0x7ffd0d950000 end_va = 0x7ffd0db10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 415 start_va = 0x7ffd0db11000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffd0db11000" filename = "" Region: id = 416 start_va = 0x400000 end_va = 0x421fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 418 start_va = 0x430000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 419 start_va = 0x700a0000 end_va = 0x700effff monitored = 0 entry_point = 0x700b8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 420 start_va = 0x70020000 end_va = 0x70099fff monitored = 0 entry_point = 0x70033290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 421 start_va = 0x77340000 end_va = 0x7741ffff monitored = 0 entry_point = 0x77353980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 422 start_va = 0x700f0000 end_va = 0x700f7fff monitored = 0 entry_point = 0x700f17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 423 start_va = 0x510000 end_va = 0x64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 424 start_va = 0x77340000 end_va = 0x7741ffff monitored = 0 entry_point = 0x77353980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 425 start_va = 0x75580000 end_va = 0x756fdfff monitored = 0 entry_point = 0x75631b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 426 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 427 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 428 start_va = 0x430000 end_va = 0x4edfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 429 start_va = 0x500000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 430 start_va = 0x74f40000 end_va = 0x75086fff monitored = 0 entry_point = 0x74f51cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 431 start_va = 0x75210000 end_va = 0x7535efff monitored = 0 entry_point = 0x752c6820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 432 start_va = 0x510000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 433 start_va = 0x550000 end_va = 0x64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 434 start_va = 0x650000 end_va = 0x74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000650000" filename = "" Region: id = 435 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 436 start_va = 0x77420000 end_va = 0x7749afff monitored = 0 entry_point = 0x7743e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 437 start_va = 0x753c0000 end_va = 0x7547dfff monitored = 0 entry_point = 0x753f5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 438 start_va = 0x776b0000 end_va = 0x776f3fff monitored = 0 entry_point = 0x776c9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 439 start_va = 0x74e90000 end_va = 0x74f3cfff monitored = 0 entry_point = 0x74ea4f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 440 start_va = 0x74490000 end_va = 0x744adfff monitored = 0 entry_point = 0x7449b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 441 start_va = 0x74480000 end_va = 0x74489fff monitored = 0 entry_point = 0x74482a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 442 start_va = 0x772c0000 end_va = 0x77317fff monitored = 0 entry_point = 0x773025c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 443 start_va = 0x774a0000 end_va = 0x77531fff monitored = 0 entry_point = 0x774d8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 444 start_va = 0x75700000 end_va = 0x758bcfff monitored = 0 entry_point = 0x757e2a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 445 start_va = 0x75960000 end_va = 0x76d5efff monitored = 0 entry_point = 0x75b1b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 446 start_va = 0x75540000 end_va = 0x75576fff monitored = 0 entry_point = 0x75543b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 447 start_va = 0x74820000 end_va = 0x74d18fff monitored = 0 entry_point = 0x74a27610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 448 start_va = 0x74df0000 end_va = 0x74e34fff monitored = 0 entry_point = 0x74e0de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 449 start_va = 0x77320000 end_va = 0x7732bfff monitored = 0 entry_point = 0x77323930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 450 start_va = 0x77230000 end_va = 0x772bcfff monitored = 0 entry_point = 0x77279b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 453 start_va = 0x74e40000 end_va = 0x74e83fff monitored = 0 entry_point = 0x74e47410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 454 start_va = 0x75530000 end_va = 0x7553efff monitored = 0 entry_point = 0x75532e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 455 start_va = 0x6e1f0000 end_va = 0x6e281fff monitored = 0 entry_point = 0x6e1fdd60 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll") Region: id = 456 start_va = 0x1d0000 end_va = 0x1f9fff monitored = 0 entry_point = 0x1d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 457 start_va = 0x750000 end_va = 0x8d7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000750000" filename = "" Region: id = 458 start_va = 0x76df0000 end_va = 0x76e1afff monitored = 0 entry_point = 0x76df5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 459 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 460 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 461 start_va = 0x8e0000 end_va = 0xa60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008e0000" filename = "" Region: id = 462 start_va = 0xa70000 end_va = 0x1e6ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 463 start_va = 0x1e70000 end_va = 0x1f8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e70000" filename = "" Region: id = 464 start_va = 0x1e70000 end_va = 0x1f59fff monitored = 0 entry_point = 0x1ead650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 465 start_va = 0x1f80000 end_va = 0x1f8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 466 start_va = 0x1f90000 end_va = 0x20dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f90000" filename = "" Region: id = 467 start_va = 0x1e70000 end_va = 0x1f6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e70000" filename = "" Region: id = 468 start_va = 0x74360000 end_va = 0x743d4fff monitored = 0 entry_point = 0x74399a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 469 start_va = 0x1e0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 470 start_va = 0x77540000 end_va = 0x7765efff monitored = 0 entry_point = 0x77585980 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 471 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 472 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 473 start_va = 0x1f90000 end_va = 0x204bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001f90000" filename = "" Region: id = 474 start_va = 0x20d0000 end_va = 0x20dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 475 start_va = 0x1e0000 end_va = 0x1e3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 476 start_va = 0x74340000 end_va = 0x7435cfff monitored = 0 entry_point = 0x74343b10 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 477 start_va = 0x4f0000 end_va = 0x4f4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\user32.dll.mui") Region: id = 478 start_va = 0x1f70000 end_va = 0x1f73fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f70000" filename = "" Region: id = 479 start_va = 0x2050000 end_va = 0x2050fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002050000" filename = "" Region: id = 480 start_va = 0x2060000 end_va = 0x2060fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002060000" filename = "" Region: id = 481 start_va = 0x20e0000 end_va = 0x215ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020e0000" filename = "" Region: id = 488 start_va = 0x650000 end_va = 0x74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000650000" filename = "" Region: id = 489 start_va = 0x2160000 end_va = 0x225ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002160000" filename = "" Region: id = 490 start_va = 0x2260000 end_va = 0x235ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002260000" filename = "" Region: id = 491 start_va = 0x2360000 end_va = 0x245ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002360000" filename = "" Region: id = 492 start_va = 0x71790000 end_va = 0x717a2fff monitored = 0 entry_point = 0x71799950 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 493 start_va = 0x510000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 494 start_va = 0x2460000 end_va = 0x255ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002460000" filename = "" Region: id = 495 start_va = 0x707c0000 end_va = 0x707eefff monitored = 0 entry_point = 0x707d95e0 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 496 start_va = 0x71ad0000 end_va = 0x71aeafff monitored = 0 entry_point = 0x71ad9050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 497 start_va = 0x2560000 end_va = 0x2896fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 498 start_va = 0x2070000 end_va = 0x2080fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1251.nls" filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls") Region: id = 499 start_va = 0x28a0000 end_va = 0x38dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 500 start_va = 0x38e0000 end_va = 0x3dd1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000038e0000" filename = "" Region: id = 501 start_va = 0x2090000 end_va = 0x2096fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002090000" filename = "" Thread: id = 5 os_tid = 0xc54 [0105.733] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0105.733] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x19fe54, nSize=0x105 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\cvtres.exe")) returned 0x38 [0105.735] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x19fd2f, nSize=0x105 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\cvtres.exe")) returned 0x38 [0105.736] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Borland\\Locales", ulOptions=0x0, samDesired=0xf003f, phkResult=0x19fe44 | out: phkResult=0x19fe44*=0x0) returned 0x2 [0105.736] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Borland\\Delphi\\Locales", ulOptions=0x0, samDesired=0xf003f, phkResult=0x19fe44 | out: phkResult=0x19fe44*=0x0) returned 0x2 [0105.736] lstrcpyA (in: lpString1=0x19fd2f, lpString2="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" | out: lpString1="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe") returned="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" [0105.736] GetThreadLocale () returned 0x409 [0105.736] GetLocaleInfoA (in: Locale=0x409, LCType=0x3, lpLCData=0x19fe3f, cchData=5 | out: lpLCData="ENU") returned 4 [0105.737] lstrlenA (lpString="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe") returned 56 [0105.737] lstrcpyA (in: lpString1=0x19fd64, lpString2="ENU" | out: lpString1="ENU") returned="ENU" [0105.737] LoadLibraryExA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.ENU", hFile=0x0, dwFlags=0x2) returned 0x0 [0105.738] lstrcpyA (in: lpString1=0x19fd64, lpString2="EN" | out: lpString1="EN") returned="EN" [0105.738] LoadLibraryExA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.EN", hFile=0x0, dwFlags=0x2) returned 0x0 [0105.740] GetKeyboardType (nTypeFlag=0) returned 7 [0105.740] GetKeyboardType (nTypeFlag=1) returned 0 [0105.741] GetCommandLineA () returned="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" [0105.741] GetStartupInfoA (in: lpStartupInfo=0x19fee8 | out: lpStartupInfo=0x19fee8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0105.741] GetCurrentThreadId () returned 0xc54 [0105.743] InitCommonControls () [0105.743] LoadLibraryA (lpLibFileName="comctl32.dll") returned 0x6e1f0000 [0105.743] GetProcAddress (hModule=0x6e1f0000, lpProcName="InitCommonControlsEx") returned 0x6e1f5000 [0105.744] InitCommonControlsEx (picce=0x19ff2c) returned 1 [0105.746] LocalAlloc (uFlags=0x0, uBytes=0xff8) returned 0x562260 [0105.746] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x1) returned 0x1e70000 [0105.746] LocalAlloc (uFlags=0x0, uBytes=0x644) returned 0x563260 [0105.746] VirtualAlloc (lpAddress=0x1e70000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1e70000 [0105.749] RegisterClipboardFormatA (lpszFormat="inner message") returned 0xc20c [0105.751] GetCommandLineA () returned="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" [0105.756] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0105.757] GetClassInfoA (in: hInstance=0x400000, lpClassName="App", lpWndClass=0x19fe94 | out: lpWndClass=0x19fe94) returned 0 [0105.757] GetClassInfoA (in: hInstance=0x400000, lpClassName="obj_App", lpWndClass=0x19fdfc | out: lpWndClass=0x19fdfc) returned 0 [0105.757] RegisterClassA (lpWndClass=0x19fe94) returned 0xc150 [0105.757] CreateWindowExA (dwExStyle=0x40000, lpClassName="obj_App", lpWindowName="Form", dwStyle=0x80ca0000, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x5020a [0105.947] SetPropA (hWnd=0x5020a, lpString="SELF_", hData=0x1e7037c) returned 1 [0105.948] NtdllDefWindowProc_A (hWnd=0x5020a, Msg=0x81, wParam=0x0, lParam=0x19f9d0) returned 0x1 [0105.953] GetPropA (hWnd=0x5020a, lpString="SELF_") returned 0x1e7037c [0105.953] NtdllDefWindowProc_A (hWnd=0x5020a, Msg=0x83, wParam=0x0, lParam=0x19f9bc) returned 0x0 [0105.968] GetPropA (hWnd=0x5020a, lpString="SELF_") returned 0x1e7037c [0105.968] NtdllDefWindowProc_A (hWnd=0x5020a, Msg=0x1, wParam=0x0, lParam=0x19f9d0) returned 0x0 [0105.999] GetPropA (hWnd=0x5020a, lpString="SELF_") returned 0x1e7037c [0105.999] NtdllDefWindowProc_A (hWnd=0x5020a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0105.999] GetPropA (hWnd=0x5020a, lpString="SELF_") returned 0x1e7037c [0105.999] NtdllDefWindowProc_A (hWnd=0x5020a, Msg=0x3, wParam=0x0, lParam=0x1a0003) returned 0x0 [0105.999] SendMessageA (hWnd=0x5020a, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0106.000] GetPropA (hWnd=0x5020a, lpString="SELF_") returned 0x1e7037c [0106.000] NtdllDefWindowProc_A (hWnd=0x5020a, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0106.000] GetPropA (hWnd=0x5020a, lpString="SELF_") returned 0x1e7037c [0106.000] LoadIconA (hInstance=0x400000, lpIconName="MAINICON") returned 0x0 [0106.000] SendMessageA (hWnd=0x5020a, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0106.000] GetPropA (hWnd=0x5020a, lpString="SELF_") returned 0x1e7037c [0106.001] NtdllDefWindowProc_A (hWnd=0x5020a, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0106.001] GetSystemMenu (hWnd=0x5020a, bRevert=0) returned 0x9037d [0106.009] EnableMenuItem (hMenu=0x9037d, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0106.009] DeleteMenu (hMenu=0x9037d, uPosition=0xf000, uFlags=0x0) returned 1 [0106.009] DeleteMenu (hMenu=0x9037d, uPosition=0xf010, uFlags=0x0) returned 1 [0106.009] DeleteMenu (hMenu=0x9037d, uPosition=0xf030, uFlags=0x0) returned 1 [0106.009] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0106.010] GetClassInfoA (in: hInstance=0x400000, lpClassName="Form", lpWndClass=0x19fe10 | out: lpWndClass=0x19fe10) returned 0 [0106.010] GetClassInfoA (in: hInstance=0x400000, lpClassName="obj_Form", lpWndClass=0x19fd78 | out: lpWndClass=0x19fd78) returned 0 [0106.010] RegisterClassA (lpWndClass=0x19fe10) returned 0xc208 [0106.010] CreateWindowExA (dwExStyle=0x10000, lpClassName="obj_Form", lpWindowName="Form", dwStyle=0x6cf0000, X=-2147483648, Y=-2147483648, nWidth=64, nHeight=64, hWndParent=0x5020a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x502b2 [0106.010] SetPropA (hWnd=0x502b2, lpString="SELF_", hData=0x1e709b8) returned 1 [0106.011] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x24, wParam=0x0, lParam=0x19f95c) returned 0x0 [0106.011] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.011] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x81, wParam=0x0, lParam=0x19f950) returned 0x1 [0106.012] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.012] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x83, wParam=0x0, lParam=0x19f93c) returned 0x0 [0106.013] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.013] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x1, wParam=0x0, lParam=0x19f950) returned 0x0 [0106.014] SendMessageA (hWnd=0x502b2, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0106.014] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.014] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0106.014] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.014] LoadIconA (hInstance=0x400000, lpIconName="MAINICON") returned 0x0 [0106.014] SendMessageA (hWnd=0x502b2, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0106.014] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.015] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0106.015] LoadIconA (hInstance=0x400000, lpIconName="ASMA") returned 0x170165 [0106.018] SendMessageA (hWnd=0x5020a, Msg=0x80, wParam=0x1, lParam=0x170165) returned 0x0 [0106.018] GetPropA (hWnd=0x5020a, lpString="SELF_") returned 0x1e7037c [0106.018] NtdllDefWindowProc_A (hWnd=0x5020a, Msg=0x80, wParam=0x1, lParam=0x170165) returned 0x0 [0106.045] SendMessageA (hWnd=0x502b2, Msg=0x80, wParam=0x1, lParam=0x170165) returned 0x0 [0106.045] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.045] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x80, wParam=0x1, lParam=0x170165) returned 0x0 [0106.047] InvalidateRect (hWnd=0x502b2, lpRect=0x0, bErase=1) returned 1 [0106.047] GetWindowRect (in: hWnd=0x502b2, lpRect=0x19feb4 | out: lpRect=0x19feb4) returned 1 [0106.047] GetWindowRect (in: hWnd=0x502b2, lpRect=0x19fe98 | out: lpRect=0x19fe98) returned 1 [0106.047] SetWindowPos (hWnd=0x502b2, hWndInsertAfter=0x0, X=0, Y=156, cx=136, cy=64, uFlags=0x14) returned 1 [0106.047] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.047] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x46, wParam=0x0, lParam=0x19fe44) returned 0x0 [0106.047] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.048] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x24, wParam=0x0, lParam=0x19fb2c) returned 0x0 [0106.049] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.049] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x47, wParam=0x0, lParam=0x19fe44) returned 0x0 [0106.049] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.049] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x3, wParam=0x0, lParam=0xbb0008) returned 0x0 [0106.056] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.056] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x70215 [0106.057] GetWindowRect (in: hWnd=0x502b2, lpRect=0x19feb0 | out: lpRect=0x19feb0) returned 1 [0106.057] GetWindowRect (in: hWnd=0x502b2, lpRect=0x19fe98 | out: lpRect=0x19fe98) returned 1 [0106.057] SetWindowPos (hWnd=0x502b2, hWndInsertAfter=0x0, X=0, Y=0, cx=136, cy=64, uFlags=0x14) returned 1 [0106.057] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.057] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x46, wParam=0x0, lParam=0x19fe44) returned 0x0 [0106.057] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.057] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x24, wParam=0x0, lParam=0x19fb2c) returned 0x0 [0106.059] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.059] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x47, wParam=0x0, lParam=0x19fe44) returned 0x0 [0106.059] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.059] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x3, wParam=0x0, lParam=0x1f0008) returned 0x0 [0106.060] GetWindowRect (in: hWnd=0x502b2, lpRect=0x19fec4 | out: lpRect=0x19fec4) returned 1 [0106.060] GetWindowRect (in: hWnd=0x502b2, lpRect=0x19fea8 | out: lpRect=0x19fea8) returned 1 [0106.060] SetWindowPos (hWnd=0x502b2, hWndInsertAfter=0x0, X=0, Y=0, cx=400, cy=300, uFlags=0x14) returned 1 [0106.060] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.060] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x46, wParam=0x0, lParam=0x19fe54) returned 0x0 [0106.060] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.060] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x24, wParam=0x0, lParam=0x19fb3c) returned 0x0 [0106.060] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.060] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x83, wParam=0x1, lParam=0x19fe2c) returned 0x0 [0106.061] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.062] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x47, wParam=0x0, lParam=0x19fe54) returned 0x0 [0106.062] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.062] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x5, wParam=0x0, lParam=0x1050180) returned 0x0 [0106.063] GetWindowLongA (hWnd=0x502b2, nIndex=-16) returned 114229248 [0106.063] GetWindowLongA (hWnd=0x502b2, nIndex=-20) returned 65792 [0106.063] GetClassLongA (hWnd=0x502b2, nIndex=-26) returned 0x8 [0106.063] IsWindowEnabled (hWnd=0x502b2) returned 1 [0106.063] LoadCursorA (hInstance=0x0, lpCursorName=0x0) returned 0x0 [0106.063] CreateFontIndirectA (lplf=0x1e710fd) returned 0xb0a065e [0106.063] SendMessageA (hWnd=0x502b2, Msg=0x30, wParam=0xb0a065e, lParam=0xffff) returned 0x0 [0106.063] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.063] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x30, wParam=0xb0a065e, lParam=0xffff) returned 0x0 [0106.063] InvalidateRect (hWnd=0x502b2, lpRect=0x0, bErase=1) returned 1 [0106.063] GetDC (hWnd=0x0) returned 0x220106d6 [0106.063] GetDeviceCaps (hdc=0x220106d6, index=90) returned 96 [0106.063] ReleaseDC (hWnd=0x0, hDC=0x220106d6) returned 1 [0106.064] CreateFontIndirectA (lplf=0x1e710fd) returned 0x510a0689 [0106.064] SendMessageA (hWnd=0x502b2, Msg=0x30, wParam=0x510a0689, lParam=0xffff) returned 0x0 [0106.064] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.064] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x30, wParam=0x510a0689, lParam=0xffff) returned 0x0 [0106.064] InvalidateRect (hWnd=0x502b2, lpRect=0x0, bErase=1) returned 1 [0106.064] DeleteObject (ho=0xb0a065e) returned 1 [0106.064] SendMessageA (hWnd=0x502b2, Msg=0x30, wParam=0x510a0689, lParam=0xffff) returned 0x0 [0106.064] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.064] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x30, wParam=0x510a0689, lParam=0xffff) returned 0x0 [0106.064] InvalidateRect (hWnd=0x502b2, lpRect=0x0, bErase=1) returned 1 [0106.064] SetWindowPos (hWnd=0x502b2, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x293) returned 1 [0106.064] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.064] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x46, wParam=0x0, lParam=0x19fe94) returned 0x0 [0106.064] ShowWindow (hWnd=0x502b2, nCmdShow=0) returned 0 [0106.064] GetClientRect (in: hWnd=0x5020a, lpRect=0x19feb0 | out: lpRect=0x19feb0) returned 1 [0106.065] FindResourceA (hModule=0x400000, lpName="Str1", lpType=0x64) returned 0x41e1a0 [0106.065] LoadResource (hModule=0x400000, hResInfo=0x41e1a0) returned 0x41f4b0 [0106.065] LockResource (hResData=0x41f4b0) returned 0x41f4b0 [0106.065] FreeResource (hResData=0x41f4b0) returned 0 [0106.065] FindResourceA (hModule=0x400000, lpName="Str2", lpType=0x64) returned 0x41e1b0 [0106.065] LoadResource (hModule=0x400000, hResInfo=0x41e1b0) returned 0x4202f8 [0106.065] LockResource (hResData=0x4202f8) returned 0x4202f8 [0106.065] FreeResource (hResData=0x4202f8) returned 0 [0106.065] VirtualAlloc (lpAddress=0x1e74000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1e74000 [0106.065] LoadCursorA (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005 [0106.065] GetClientRect (in: hWnd=0x502b2, lpRect=0x19fe90 | out: lpRect=0x19fe90) returned 1 [0106.065] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.066] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.066] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.066] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0106.066] GetClassInfoA (in: hInstance=0x400000, lpClassName="EDIT", lpWndClass=0x19fe80 | out: lpWndClass=0x19fe80) returned 1 [0106.066] GetClassInfoA (in: hInstance=0x400000, lpClassName="obj_EDIT", lpWndClass=0x19fde8 | out: lpWndClass=0x19fde8) returned 0 [0106.066] RegisterClassA (lpWndClass=0x19fe80) returned 0xc207 [0106.066] CreateWindowExA (dwExStyle=0x10200, lpClassName="obj_EDIT", lpWindowName=0x0, dwStyle=0x460108c0, X=90, Y=60, nWidth=255, nHeight=20, hWndParent=0x502b2, hMenu=0x8000, hInstance=0x400000, lpParam=0x0) returned 0x9002a [0106.066] SetPropA (hWnd=0x9002a, lpString="SELF_", hData=0x1e742e8) returned 1 [0106.066] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x81, wParam=0x0, lParam=0x19f9c0) returned 0x1 [0106.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.068] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x83, wParam=0x0, lParam=0x19f9ac) returned 0x0 [0106.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.068] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x1, wParam=0x0, lParam=0x19f9c0) returned 0x1 [0106.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x5, wParam=0x0, lParam=0x1000fb) returned 0x0 [0106.078] GetClientRect (in: hWnd=0x502b2, lpRect=0x19f7f4 | out: lpRect=0x19f7f4) returned 1 [0106.078] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.078] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.078] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.078] GetClientRect (in: hWnd=0x9002a, lpRect=0x19f7f4 | out: lpRect=0x19f7f4) returned 1 [0106.078] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x3, wParam=0x0, lParam=0x3e005c) returned 0x0 [0106.078] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.078] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x210, wParam=0x80000001, lParam=0x9002a) returned 0x0 [0106.078] SendMessageA (hWnd=0x9002a, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0106.078] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0106.078] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.079] CreateFontIndirectA (lplf=0x1e74949) returned 0xd0a065e [0106.079] SendMessageA (hWnd=0x9002a, Msg=0x30, wParam=0xd0a065e, lParam=0xffff) returned 0x1 [0106.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.079] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x30, wParam=0xd0a065e, lParam=0xffff) returned 0x1 [0106.086] SendMessageA (hWnd=0x9002a, Msg=0x30, wParam=0xd0a065e, lParam=0xffff) returned 0x1 [0106.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x30, wParam=0xd0a065e, lParam=0xffff) returned 0x1 [0106.087] SetWindowPos (hWnd=0x9002a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x293) returned 1 [0106.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x46, wParam=0x0, lParam=0x19fe8c) returned 0x0 [0106.087] ShowWindow (hWnd=0x9002a, nCmdShow=5) returned 0 [0106.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.087] IsWindowVisible (hWnd=0x9002a) returned 0 [0106.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0106.087] GetClientRect (in: hWnd=0x502b2, lpRect=0x19feac | out: lpRect=0x19feac) returned 1 [0106.087] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.087] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.087] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.088] GetClientRect (in: hWnd=0x9002a, lpRect=0x19feac | out: lpRect=0x19feac) returned 1 [0106.088] ShowWindow (hWnd=0x9002a, nCmdShow=5) returned 1 [0106.088] GetClientRect (in: hWnd=0x502b2, lpRect=0x19fea8 | out: lpRect=0x19fea8) returned 1 [0106.088] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.088] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.088] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.088] GetClientRect (in: hWnd=0x9002a, lpRect=0x19fea8 | out: lpRect=0x19fea8) returned 1 [0106.088] SetWindowLongA (hWnd=0x9002a, nIndex=-20, dwNewLong=131072) returned 66048 [0106.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x7c, wParam=0xffffffec, lParam=0x19fe54) returned 0x0 [0106.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.089] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x7d, wParam=0xffffffec, lParam=0x19fe54) returned 0x1 [0106.089] SetWindowPos (hWnd=0x9002a, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0106.089] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.089] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x46, wParam=0x0, lParam=0x19fe84) returned 0x0 [0106.089] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.089] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x83, wParam=0x1, lParam=0x19fe5c) returned 0x0 [0106.090] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.100] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x47, wParam=0x0, lParam=0x19fe84) returned 0x0 [0106.100] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.100] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x3, wParam=0x0, lParam=0x3d005b) returned 0x0 [0106.100] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.101] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0x5, wParam=0x0, lParam=0x1200fd) returned 0x0 [0106.101] GetClientRect (in: hWnd=0x502b2, lpRect=0x19f830 | out: lpRect=0x19f830) returned 1 [0106.101] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.101] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.101] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.101] GetClientRect (in: hWnd=0x9002a, lpRect=0x19f830 | out: lpRect=0x19f830) returned 1 [0106.101] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0106.101] SendMessageA (hWnd=0x9002a, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0106.101] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.101] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0106.101] SetWindowTextA (hWnd=0x9002a, lpString="") returned 1 [0106.101] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.101] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e749b8) returned 0x1 [0106.102] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.102] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.102] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0106.102] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.102] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0106.102] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.102] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.102] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0106.102] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0106.103] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0106.103] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0106.103] LoadCursorA (hInstance=0x0, lpCursorName=0x0) returned 0x0 [0106.103] GetClientRect (in: hWnd=0x502b2, lpRect=0x19fe90 | out: lpRect=0x19fe90) returned 1 [0106.103] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.103] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.103] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.103] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.103] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.103] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.103] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0106.103] GetClassInfoA (in: hInstance=0x400000, lpClassName="EDIT", lpWndClass=0x19fe80 | out: lpWndClass=0x19fe80) returned 1 [0106.103] GetClassInfoA (in: hInstance=0x400000, lpClassName="obj_EDIT", lpWndClass=0x19fde8 | out: lpWndClass=0x19fde8) returned 1 [0106.104] CreateWindowExA (dwExStyle=0x10200, lpClassName="obj_EDIT", lpWindowName=0x0, dwStyle=0x460100c0, X=65, Y=60, nWidth=195, nHeight=20, hWndParent=0x502b2, hMenu=0x8001, hInstance=0x400000, lpParam=0x0) returned 0xa001e [0106.104] SetPropA (hWnd=0xa001e, lpString="SELF_", hData=0x1e74d60) returned 1 [0106.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0x81, wParam=0x0, lParam=0x19f9c0) returned 0x1 [0106.105] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.105] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0x83, wParam=0x0, lParam=0x19f9ac) returned 0x0 [0106.105] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.105] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0x1, wParam=0x0, lParam=0x19f9c0) returned 0x1 [0106.106] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0x5, wParam=0x0, lParam=0x1000bf) returned 0x0 [0106.106] GetClientRect (in: hWnd=0x502b2, lpRect=0x19f7f4 | out: lpRect=0x19f7f4) returned 1 [0106.106] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.106] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.107] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.107] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.107] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.107] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.107] GetClientRect (in: hWnd=0xa001e, lpRect=0x19f7f4 | out: lpRect=0x19f7f4) returned 1 [0106.107] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0x3, wParam=0x0, lParam=0x3e0043) returned 0x0 [0106.107] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.107] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x210, wParam=0x80010001, lParam=0xa001e) returned 0x0 [0106.107] SendMessageA (hWnd=0xa001e, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0106.107] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0106.108] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.108] SendMessageA (hWnd=0xa001e, Msg=0x30, wParam=0x510a0689, lParam=0xffff) returned 0x1 [0106.108] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0x30, wParam=0x510a0689, lParam=0xffff) returned 0x1 [0106.111] SendMessageA (hWnd=0xa001e, Msg=0x30, wParam=0x510a0689, lParam=0xffff) returned 0x1 [0106.111] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.111] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0x30, wParam=0x510a0689, lParam=0xffff) returned 0x1 [0106.111] SetWindowPos (hWnd=0xa001e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x293) returned 1 [0106.111] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0x46, wParam=0x0, lParam=0x19fe8c) returned 0x0 [0106.113] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0x47, wParam=0x0, lParam=0x19fe8c) returned 0x0 [0106.113] ShowWindow (hWnd=0xa001e, nCmdShow=5) returned 0 [0106.113] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.113] IsWindowVisible (hWnd=0xa001e) returned 0 [0106.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0106.114] GetClientRect (in: hWnd=0x502b2, lpRect=0x19feac | out: lpRect=0x19feac) returned 1 [0106.114] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.114] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.114] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.114] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.114] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.114] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.114] GetClientRect (in: hWnd=0xa001e, lpRect=0x19feac | out: lpRect=0x19feac) returned 1 [0106.114] ShowWindow (hWnd=0xa001e, nCmdShow=5) returned 1 [0106.114] GetClientRect (in: hWnd=0x502b2, lpRect=0x19fea8 | out: lpRect=0x19fea8) returned 1 [0106.114] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.114] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.114] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.114] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.114] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.114] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.114] GetClientRect (in: hWnd=0xa001e, lpRect=0x19fea8 | out: lpRect=0x19fea8) returned 1 [0106.114] SendMessageA (hWnd=0xa001e, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0106.114] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.114] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0106.114] SetWindowTextA (hWnd=0xa001e, lpString="C:\\Users") returned 1 [0106.114] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.114] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0xc, wParam=0x0, lParam=0x1e75424) returned 0x1 [0106.115] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.115] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.115] SendMessageA (hWnd=0xa001e, Msg=0xb005, wParam=0x4008001, lParam=0xa001e) returned 0x0 [0106.115] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0xb005, wParam=0x4008001, lParam=0xa001e) returned 0x0 [0106.115] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.115] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.115] SendMessageA (hWnd=0xa001e, Msg=0xb005, wParam=0x3008001, lParam=0xa001e) returned 0x0 [0106.115] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0106.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0xb005, wParam=0x3008001, lParam=0xa001e) returned 0x0 [0106.115] InvalidateRect (hWnd=0xa001e, lpRect=0x0, bErase=1) returned 1 [0106.116] LoadCursorA (hInstance=0x0, lpCursorName=0x0) returned 0x0 [0106.116] GetClientRect (in: hWnd=0x502b2, lpRect=0x19fe90 | out: lpRect=0x19fe90) returned 1 [0106.116] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.116] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.116] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.116] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.116] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.116] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.116] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.116] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.116] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.116] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0106.116] GetClassInfoA (in: hInstance=0x400000, lpClassName="EDIT", lpWndClass=0x19fe80 | out: lpWndClass=0x19fe80) returned 1 [0106.116] GetClassInfoA (in: hInstance=0x400000, lpClassName="obj_EDIT", lpWndClass=0x19fde8 | out: lpWndClass=0x19fde8) returned 1 [0106.116] CreateWindowExA (dwExStyle=0x10200, lpClassName="obj_EDIT", lpWindowName=0x0, dwStyle=0x460100c0, X=525, Y=255, nWidth=50, nHeight=20, hWndParent=0x502b2, hMenu=0x8002, hInstance=0x400000, lpParam=0x0) returned 0x60240 [0106.116] SetPropA (hWnd=0x60240, lpString="SELF_", hData=0x1e75744) returned 1 [0106.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0x81, wParam=0x0, lParam=0x19f9c0) returned 0x1 [0106.117] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0x83, wParam=0x0, lParam=0x19f9ac) returned 0x0 [0106.117] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0x1, wParam=0x0, lParam=0x19f9c0) returned 0x1 [0106.118] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.118] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0x5, wParam=0x0, lParam=0x10002e) returned 0x0 [0106.118] GetClientRect (in: hWnd=0x502b2, lpRect=0x19f7f4 | out: lpRect=0x19f7f4) returned 1 [0106.118] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.118] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.118] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.118] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.118] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.118] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.118] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.119] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.119] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.119] GetClientRect (in: hWnd=0x60240, lpRect=0x19f7f4 | out: lpRect=0x19f7f4) returned 1 [0106.119] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0x3, wParam=0x0, lParam=0x101020f) returned 0x0 [0106.119] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.119] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x210, wParam=0x80020001, lParam=0x60240) returned 0x0 [0106.119] SendMessageA (hWnd=0x60240, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0106.119] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0106.119] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.119] SendMessageA (hWnd=0x60240, Msg=0x30, wParam=0x510a0689, lParam=0xffff) returned 0x1 [0106.119] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.120] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0x30, wParam=0x510a0689, lParam=0xffff) returned 0x1 [0106.120] SendMessageA (hWnd=0x60240, Msg=0x30, wParam=0x510a0689, lParam=0xffff) returned 0x1 [0106.120] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.120] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0x30, wParam=0x510a0689, lParam=0xffff) returned 0x1 [0106.120] SetWindowPos (hWnd=0x60240, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x293) returned 1 [0106.120] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.120] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0x46, wParam=0x0, lParam=0x19fe8c) returned 0x0 [0106.121] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0x47, wParam=0x0, lParam=0x19fe8c) returned 0x0 [0106.122] ShowWindow (hWnd=0x60240, nCmdShow=5) returned 0 [0106.122] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.122] IsWindowVisible (hWnd=0x60240) returned 0 [0106.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0106.122] GetClientRect (in: hWnd=0x502b2, lpRect=0x19feac | out: lpRect=0x19feac) returned 1 [0106.122] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.122] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.122] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.122] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.122] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.122] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.122] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.122] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.122] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.122] GetClientRect (in: hWnd=0x60240, lpRect=0x19feac | out: lpRect=0x19feac) returned 1 [0106.122] ShowWindow (hWnd=0x60240, nCmdShow=5) returned 1 [0106.122] GetClientRect (in: hWnd=0x502b2, lpRect=0x19fea8 | out: lpRect=0x19fea8) returned 1 [0106.122] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.122] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.122] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.122] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.122] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.123] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.123] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.123] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.123] IsWindowVisible (hWnd=0x502b2) returned 0 [0106.123] GetClientRect (in: hWnd=0x60240, lpRect=0x19fea8 | out: lpRect=0x19fea8) returned 1 [0106.123] SendMessageA (hWnd=0x60240, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0106.123] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xc5, wParam=0x0, lParam=0x0) returned 0x1 [0106.123] SetWindowTextA (hWnd=0x60240, lpString="kokoskd949949393939dksds") returned 1 [0106.123] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xc, wParam=0x0, lParam=0x1e75e18) returned 0x1 [0106.123] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.123] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.123] SendMessageA (hWnd=0x60240, Msg=0xb005, wParam=0x4008002, lParam=0x60240) returned 0x0 [0106.123] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.124] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xb005, wParam=0x4008002, lParam=0x60240) returned 0x0 [0106.124] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0106.124] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.124] SendMessageA (hWnd=0x60240, Msg=0xb005, wParam=0x3008002, lParam=0x60240) returned 0x0 [0106.124] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.124] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xb005, wParam=0x3008002, lParam=0x60240) returned 0x0 [0106.124] InvalidateRect (hWnd=0x60240, lpRect=0x0, bErase=1) returned 1 [0106.124] ShowWindow (hWnd=0x5020a, nCmdShow=0) returned 0 [0106.125] VirtualAlloc (lpAddress=0x1e78000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1e78000 [0106.125] FindFirstFileA (in: lpFileName="C:\\Users\\*.*" (normalized: "c:\\users\\*.*"), lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x3ce179de, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3ce179de, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x3008002, cFileName=".", cAlternateFileName="")) returned 0x55e3d0 [0106.126] FindNextFileA (in: hFindFile=0x55e3d0, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x3ce179de, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3ce179de, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x3008002, cFileName="..", cAlternateFileName="")) returned 1 [0106.126] FindNextFileA (in: hFindFile=0x55e3d0, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x4f6643a1, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x4f6643a1, ftLastAccessTime.dwHighDateTime=0x1d112ea, ftLastWriteTime.dwLowDateTime=0x4f6643a1, ftLastWriteTime.dwHighDateTime=0x1d112ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x3008002, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0106.126] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\*.*" (normalized: "c:\\users\\all users\\*.*"), lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x408337, dwReserved1=0x777eafb0, cFileName=".", cAlternateFileName="")) returned 0x55e850 [0106.127] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x408337, dwReserved1=0x777eafb0, cFileName="..", cAlternateFileName="")) returned 1 [0106.127] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x777eafb0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0106.127] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Application Data\\*.*" (normalized: "c:\\users\\all users\\application data\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x550000, ftCreationTime.dwHighDateTime=0x56cde8, ftLastAccessTime.dwLowDateTime=0xfffffffe, ftLastAccessTime.dwHighDateTime=0x23e, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0xc0002, nFileSizeHigh=0x56cdf0, nFileSizeLow=0x56cde8, dwReserved0=0x555908, dwReserved1=0x23e, cFileName="7", cAlternateFileName="PèU")) returned 0xffffffff [0106.128] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x777eafb0, cFileName="Comms", cAlternateFileName="")) returned 1 [0106.128] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Comms\\*.*" (normalized: "c:\\users\\all users\\comms\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0106.128] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.128] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0106.128] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0106.129] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x777eafb0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0106.129] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Desktop\\*.*" (normalized: "c:\\users\\all users\\desktop\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="PèU")) returned 0xffffffff [0106.129] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x777eafb0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0106.129] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Documents\\*.*" (normalized: "c:\\users\\all users\\documents\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="PèU")) returned 0xffffffff [0106.129] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1b54cf26, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b54cf26, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x777eafb0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0106.129] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*.*" (normalized: "c:\\users\\all users\\microsoft\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1b54cf26, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b54cf26, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0106.129] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1b54cf26, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b54cf26, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.129] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5e44e88, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0106.130] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5e44e88, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x56ee00, dwReserved1=0x43d, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0106.132] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5e44e88, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x56ee00, dwReserved1=0x43d, cFileName="..", cAlternateFileName="")) returned 1 [0106.132] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x56ee00, dwReserved1=0x43d, cFileName="4BAD322A-C043-4DED-A97A-6FE0C4412FBE", cAlternateFileName="4BAD32~1")) returned 1 [0106.132] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e00023c, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0106.135] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e00023c, cFileName="..", cAlternateFileName="")) returned 1 [0106.135] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f5640, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b5f5640, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e00023c, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0106.135] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\en-us.16\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f5640, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b5f5640, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x570e10, dwReserved1=0x43b, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0106.138] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f5640, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b5f5640, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x570e10, dwReserved1=0x43b, cFileName="..", cAlternateFileName="")) returned 1 [0106.138] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f0737, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f0737, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x22d02900, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5765, dwReserved0=0x570e10, dwReserved1=0x43b, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0106.139] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f1a63, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f1a63, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x740070, dwReserved1=0x72006f, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0106.139] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f2f99, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f2f99, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x740000, dwReserved1=0x72006f, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0106.139] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0106.139] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0106.139] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e7a66c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0106.139] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e7a66c) returned 0x18 [0106.140] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\en-us.16\\stream.x86.en-us.man.dat")) returned 0x20 [0106.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\en-us.16\\stream.x86.en-us.man.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0106.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16\\stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\en-us.16\\stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0106.192] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.194] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.196] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.197] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.197] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.197] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.198] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.198] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.198] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.198] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.198] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.198] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.199] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.199] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.200] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.200] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.201] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.201] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.201] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.201] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.201] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.201] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.202] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.202] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.202] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.202] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.203] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.203] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.203] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.203] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.205] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.205] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.205] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.206] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.206] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.206] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.207] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.207] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.207] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.207] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.207] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.207] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.208] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.208] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.208] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.208] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.208] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.208] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.209] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.209] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.209] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.209] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.209] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.209] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.210] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.210] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.210] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.210] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.210] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.210] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.211] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.211] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.211] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.211] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.211] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.211] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.212] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.212] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.212] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.212] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.212] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.212] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.213] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.213] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.213] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.213] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.213] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.213] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.214] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.214] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.214] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.214] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.214] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.214] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.215] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.215] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.215] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.215] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.215] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.215] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.216] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.216] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.216] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.217] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.217] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.218] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.218] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.218] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.218] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.218] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.218] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.219] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.219] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.219] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.219] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.219] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.219] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.220] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.220] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.220] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.220] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.220] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.220] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.221] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.221] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.221] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.221] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.221] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.221] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.221] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.222] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.222] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.222] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.222] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.222] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.222] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.223] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.223] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.223] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.223] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.224] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.224] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.224] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.225] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.225] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.225] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.225] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.225] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.225] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.225] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.226] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.226] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.226] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.226] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.226] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.226] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.227] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.227] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.227] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.227] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.227] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.227] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.228] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.228] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.228] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.228] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.228] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.229] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.230] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.230] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.231] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.231] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.231] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.231] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.231] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.231] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.232] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.232] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.232] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.232] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.232] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.232] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.233] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.233] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.233] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.233] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.233] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.233] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.234] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.234] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.234] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.234] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.234] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.234] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.235] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.235] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.235] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.235] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.235] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.236] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.236] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.236] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.236] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.236] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.237] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.237] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.237] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.237] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.237] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.246] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.256] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.257] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.257] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.257] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.257] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.257] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.257] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.258] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.258] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.258] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.258] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.258] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.259] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.259] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.259] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.259] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.259] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.259] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.260] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.260] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.260] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.260] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.261] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.261] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.262] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.262] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.262] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.262] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.262] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.262] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.263] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.263] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.263] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.263] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.263] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.264] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.264] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.264] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.264] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.264] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.264] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.265] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.265] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.265] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.265] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.265] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.265] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.266] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.266] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.266] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.266] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.266] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.266] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.267] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.267] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.267] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.267] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.267] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.268] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.268] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.268] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.268] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.269] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.269] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.269] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.269] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.269] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.270] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.270] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.270] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.270] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.270] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.270] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.271] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.271] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.271] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.271] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.271] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.271] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.272] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.272] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.272] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.272] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.272] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.272] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.273] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.274] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.274] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.275] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.275] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.275] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.275] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.275] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.276] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.276] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.276] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.276] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.276] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.276] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.277] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.277] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.277] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.277] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.277] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.277] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.278] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.278] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.278] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.278] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.278] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.278] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.279] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.279] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.279] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.279] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.279] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.279] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.279] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.280] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.280] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.280] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.280] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.280] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.280] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.281] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.281] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.281] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.281] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.281] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.281] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.282] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.282] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.282] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.282] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.282] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.282] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.282] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.283] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.283] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.283] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.283] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.283] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.283] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.284] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.284] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.284] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.284] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.284] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.285] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.286] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.286] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.286] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.286] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.286] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.286] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.287] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.287] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.287] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.287] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.287] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.287] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.288] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.288] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.288] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.288] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.288] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.288] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.289] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.289] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.289] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.289] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.289] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.289] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.290] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.290] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.290] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.290] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.290] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.290] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.291] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.291] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.291] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.291] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.291] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.291] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.291] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.292] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.292] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.293] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.293] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.293] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.293] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.293] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.293] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.294] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.294] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.294] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.294] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.294] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.294] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.295] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.295] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.295] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.295] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.295] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.295] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.296] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.296] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.296] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.296] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.296] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.296] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.297] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.298] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.298] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.298] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.298] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.299] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.299] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.299] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.299] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.299] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.300] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.300] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.301] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.302] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.302] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.302] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.302] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.302] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.302] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.303] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.303] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1d4, lpOverlapped=0x0) returned 1 [0106.303] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1d4, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1d4, lpOverlapped=0x0) returned 1 [0106.303] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0106.303] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0106.303] CloseHandle (hObject=0x1b0) returned 1 [0106.303] CloseHandle (hObject=0x1b4) returned 1 [0106.330] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\en-us.16\\stream.x86.en-us.man.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16\\stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\en-us.16\\stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0106.332] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16\\stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\en-us.16\\stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0106.332] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\en-us.16\\stream.x86.en-us.man.dat"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f2f99, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f2f99, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x550370, dwReserved1=0xe, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x55e690 [0106.333] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f2f99, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f2f99, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x550370, dwReserved1=0xe, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0106.333] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0106.334] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\en-us.16\\stream.x86.en-us.man.dat")) returned 1 [0106.346] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\en-us.16\\stream.x86.en-us.man.dat")) returned 0xffffffff [0106.346] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f2f99, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f2f99, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x740000, dwReserved1=0x72006f, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0106.346] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0106.346] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363878, dwReserved1=0x752d6e65, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0106.347] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\x-none.16\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558380, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0106.356] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558380, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0106.356] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x206dcf00, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5220, dwReserved0=0x558380, dwReserved1=0x2000002, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0106.357] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x740070, dwReserved1=0x72006f, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0106.357] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x740070, dwReserved1=0x72006f, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0106.357] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0106.357] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0106.357] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e7ba58, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0106.357] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e7ba58) returned 0x18 [0106.358] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\x-none.16\\stream.x86.x-none.man.dat")) returned 0x20 [0106.358] VirtualAlloc (lpAddress=0x1e7c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1e7c000 [0106.359] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\x-none.16\\stream.x86.x-none.man.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0106.359] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16\\stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\x-none.16\\stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0106.360] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.362] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.372] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.372] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.372] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.373] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.373] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.373] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.374] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.374] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.374] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.374] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.374] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.374] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.375] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.375] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.375] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.375] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.375] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.375] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.375] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.376] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.376] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.376] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.376] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.376] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.376] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.376] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.377] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.377] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.377] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.379] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.379] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.379] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.379] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.379] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.380] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.380] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.380] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.380] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.380] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.380] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.381] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.381] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.381] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.381] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.381] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.381] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.381] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.382] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.382] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.382] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.382] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.382] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.382] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.382] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.383] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.383] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.383] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.383] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.383] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.383] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.384] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.384] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.384] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.384] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.384] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.384] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.384] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.385] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.385] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.385] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.385] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.385] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.385] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.386] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.386] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.386] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.386] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.386] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.386] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.387] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.387] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.387] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.387] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.387] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.387] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.387] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.388] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.388] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.388] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.388] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.388] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.389] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.389] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.390] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.390] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.390] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.390] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.390] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.391] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.391] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.391] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.391] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.391] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.391] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.392] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.392] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.392] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.392] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.392] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.392] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.392] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.393] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.393] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.393] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.393] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.393] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.393] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.394] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.394] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.394] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.394] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.394] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.394] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.395] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.395] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.395] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.395] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.395] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.396] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.396] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.396] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.396] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.397] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.397] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.397] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.397] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.397] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.397] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.397] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.398] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.398] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.398] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.398] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.398] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.398] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.399] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.399] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.399] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.399] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.399] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.399] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.399] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.400] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.400] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.400] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.412] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.412] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.412] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.412] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.412] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.413] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.413] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.413] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.413] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.414] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.414] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.414] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.414] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.414] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.415] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.415] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.415] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.415] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.415] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.415] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.416] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.416] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.416] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.416] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.416] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.416] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.417] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.417] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.417] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.417] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.417] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.418] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.418] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.418] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.418] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.418] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.418] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.419] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.419] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.419] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.419] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.419] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.419] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.420] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.420] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.420] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.420] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.420] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.420] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.421] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.421] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.421] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.421] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.421] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.421] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.422] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.422] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.422] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.422] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.422] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.422] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.423] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.423] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.423] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.424] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.424] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.425] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.425] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.425] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.425] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.425] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.426] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.426] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.426] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.426] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.427] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.427] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.427] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.427] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.427] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.427] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.428] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.428] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.428] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.428] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.428] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.428] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.429] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.429] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.429] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.429] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.429] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.429] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.430] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.430] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.430] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.430] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.430] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.430] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.430] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.431] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.431] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.432] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.432] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.432] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.432] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.432] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.432] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.433] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.433] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.433] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.433] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.433] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.433] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.434] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.434] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.434] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.434] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.434] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.434] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.434] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.435] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.435] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.435] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.435] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.435] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.435] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.436] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.436] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.436] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.438] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.438] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.438] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.439] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.439] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.439] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.439] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.439] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.439] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.440] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.440] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.440] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.440] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.440] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.441] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.441] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.441] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.441] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.441] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.442] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.442] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.442] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.442] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.442] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.442] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.443] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.443] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.443] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.443] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.443] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.443] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.443] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.444] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.444] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.444] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.444] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.444] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.444] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.445] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.445] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.445] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.445] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.445] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.446] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.446] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.446] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.446] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.446] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.447] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.447] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.447] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.447] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.448] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.448] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.448] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.448] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.448] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.448] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.449] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.449] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.449] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.449] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.488] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.488] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.488] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.489] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.489] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.489] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.489] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.489] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.490] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.490] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.490] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.490] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.491] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.491] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.491] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.491] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.491] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.491] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.492] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.492] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.492] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.492] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.492] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.492] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.493] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.493] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.493] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.493] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.493] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.493] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.494] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.494] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.494] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.494] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.494] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.494] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.495] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.495] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.495] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.496] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.496] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.496] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.496] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.496] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.496] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.497] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.497] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.497] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.497] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.497] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.497] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.498] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.498] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.498] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.498] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.498] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.498] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.499] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.499] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.499] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.499] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.499] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.499] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.499] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.501] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.502] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.502] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.503] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.503] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.503] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.503] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.504] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.504] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.504] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.504] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.504] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.505] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.505] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.505] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.505] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.505] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.505] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.506] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.506] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.506] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.506] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.506] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.506] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.506] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.507] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.507] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.507] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.507] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.507] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.507] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.508] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.508] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.508] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.509] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.509] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.509] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.509] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.509] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.510] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.510] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.510] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.510] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.510] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.511] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.511] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.511] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.511] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.511] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.512] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.512] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.512] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.512] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.512] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.512] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.513] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.513] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.513] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.513] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.513] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.513] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.514] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.514] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.514] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.514] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.515] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.515] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.516] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.516] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.516] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.516] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.516] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.517] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.517] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.517] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.517] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.517] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.517] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.518] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.518] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.518] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.518] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.518] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.518] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.519] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.830] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\x-none.16\\stream.x86.x-none.man.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16\\stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\x-none.16\\stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0106.832] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16\\stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\x-none.16\\stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0106.832] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\x-none.16\\stream.x86.x-none.man.dat"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x550370, dwReserved1=0xd, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x55e590 [0106.832] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x550370, dwReserved1=0xd, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0106.832] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0106.832] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\x-none.16\\stream.x86.x-none.man.dat")) returned 1 [0106.839] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\x-none.16\\stream.x86.x-none.man.dat")) returned 0xffffffff [0106.840] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x740070, dwReserved1=0x72006f, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0106.840] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0106.840] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363878, dwReserved1=0x752d6e65, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0106.840] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0106.840] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd58489b0, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd584c46a, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd584c46a, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563631, dwReserved1=0x43d, cFileName="9566930B-D1DD-4075-BFE6-74DD69B13189", cAlternateFileName="956693~1")) returned 1 [0106.840] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd58489b0, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd584c46a, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5911742, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363878, dwReserved1=0x6f6e2d78, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0106.841] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd58489b0, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd584c46a, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5911742, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363878, dwReserved1=0x6f6e2d78, cFileName="..", cAlternateFileName="")) returned 1 [0106.841] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5911742, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5926364, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5926364, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363878, dwReserved1=0x6f6e2d78, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0106.841] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\en-us.16\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5911742, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5926364, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5926364, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0106.846] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5911742, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5926364, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5926364, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0106.846] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5916623, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5916623, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x22d02900, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5765, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0106.850] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd59215d7, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd59215d7, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x740070, dwReserved1=0x72006f, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0106.851] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5924f73, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5924f73, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x740000, dwReserved1=0x72006f, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0106.851] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0106.851] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0106.852] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e7da28, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0106.852] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0106.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e7da28) returned 0x18 [0106.852] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\en-us.16\\stream.x86.en-us.man.dat")) returned 0x20 [0106.853] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\en-us.16\\stream.x86.en-us.man.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0106.853] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16\\stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\en-us.16\\stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0106.854] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.856] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.858] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.859] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.859] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.860] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.860] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.860] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.861] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.861] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.861] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.861] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.861] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.862] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.862] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.862] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.862] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.887] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.887] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.888] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.888] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.888] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.888] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.889] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.889] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.889] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.889] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.890] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.890] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.890] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.892] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.892] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.893] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.893] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.893] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.893] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.893] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.893] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.894] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.894] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.894] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.894] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.895] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.895] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.895] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.895] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.895] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.896] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.896] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.896] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.896] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.896] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.897] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.897] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.897] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.897] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.897] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.898] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.898] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.898] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.898] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.898] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.898] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.899] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.899] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.899] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.899] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.899] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.900] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.900] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.900] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.900] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.900] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.901] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.901] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.901] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.901] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.901] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.902] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.902] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.902] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.902] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.902] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.903] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.903] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.903] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.903] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.903] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.904] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.904] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.904] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.904] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.904] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.907] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.907] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.907] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.908] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.908] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.908] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.908] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.908] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.909] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.909] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.909] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.909] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.910] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.910] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.910] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.910] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.910] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.911] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.911] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.911] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.911] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.911] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.912] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.912] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.912] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.912] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.912] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.913] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.913] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.913] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.913] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.913] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.913] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.913] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.914] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.914] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.914] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.915] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.915] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.915] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.916] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.916] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.916] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.916] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.916] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.917] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.917] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.917] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.917] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.917] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.918] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.918] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.918] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.918] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.918] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.919] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.919] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.919] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.919] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.919] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.920] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.920] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.920] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.920] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.925] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.926] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.926] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.926] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.926] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.927] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.927] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.927] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.927] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.928] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.928] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.928] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.928] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.928] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.929] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.929] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.929] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.929] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.929] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.930] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.930] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.930] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.930] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.930] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.931] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.931] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.931] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.931] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.931] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.932] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.932] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.932] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.932] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.933] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.933] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.933] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.933] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.933] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.934] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.934] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.934] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.934] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.934] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.934] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.935] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.935] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.935] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.935] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.935] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.935] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.935] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.936] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.936] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.936] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.936] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.936] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.936] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.937] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.937] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.937] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.937] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.937] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.937] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.937] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.941] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.941] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.942] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.942] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.943] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.943] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.943] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.943] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.943] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.943] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.944] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.944] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.944] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.944] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.944] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.945] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.945] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.945] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.945] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.945] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.945] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.946] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.946] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.946] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.946] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.946] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.946] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.947] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.947] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.947] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.947] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.947] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.947] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.948] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.948] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.948] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.948] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.949] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.949] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.949] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.949] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.950] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.950] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.950] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.950] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.950] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.950] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.951] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.951] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.951] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.951] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.951] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.951] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.952] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.952] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.952] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.952] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.952] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.952] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.953] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.953] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.953] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.953] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.953] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.954] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.954] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.955] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.956] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0106.956] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.029] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.029] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.029] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.029] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.030] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.030] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.030] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.030] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.030] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.030] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.031] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.031] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.031] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.031] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.031] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.031] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.032] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.032] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.032] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.032] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.032] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.032] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.032] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.033] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.033] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.033] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.033] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.033] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.033] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.034] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.034] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.034] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.035] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.035] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.035] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.035] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.035] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.035] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.036] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.036] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.036] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.036] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.036] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.037] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.037] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.037] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.037] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.037] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.038] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.038] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.038] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.038] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.038] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.039] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.039] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.039] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.039] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.039] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.040] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.043] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.043] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.043] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.043] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.044] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.044] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.044] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.044] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.044] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.045] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.045] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.045] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.045] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.046] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.046] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.046] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.046] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.047] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.047] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.047] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.047] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.047] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.048] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.048] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.048] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.048] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.048] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.049] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.049] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.049] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.049] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.049] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.050] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.050] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.050] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.051] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.051] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.052] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.052] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.052] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.052] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.052] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.052] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.053] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.053] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.053] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.053] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.054] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.054] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.054] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.054] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.054] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.055] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.055] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.055] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.055] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.055] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.056] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.056] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.056] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.056] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.056] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.057] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.057] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.057] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.057] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.058] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.058] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.058] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.058] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.058] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.059] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.059] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.059] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.059] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.060] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.060] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.060] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.060] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.060] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.061] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.061] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.061] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.061] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1d4, lpOverlapped=0x0) returned 1 [0107.061] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1d4, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1d4, lpOverlapped=0x0) returned 1 [0107.061] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.062] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.062] CloseHandle (hObject=0x1b0) returned 1 [0107.062] CloseHandle (hObject=0x1b4) returned 1 [0107.084] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\en-us.16\\stream.x86.en-us.man.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16\\stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\en-us.16\\stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.085] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16\\stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\en-us.16\\stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.085] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\en-us.16\\stream.x86.en-us.man.dat"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5924f73, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5924f73, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x550370, dwReserved1=0xe, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x55e390 [0107.085] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5924f73, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5924f73, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x550370, dwReserved1=0xe, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0107.085] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0107.085] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\en-us.16\\stream.x86.en-us.man.dat")) returned 1 [0107.096] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\en-us.16\\stream.x86.en-us.man.dat")) returned 0xffffffff [0107.096] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5924f73, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5924f73, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x21ebc700, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x740000, dwReserved1=0x72006f, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0107.096] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0107.096] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587b51b, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd587b51b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363878, dwReserved1=0x752d6e65, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0107.096] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\x-none.16\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587b51b, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd587b51b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0107.099] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587b51b, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd587b51b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0107.099] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd585af2f, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd585af2f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x206dcf00, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5220, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0107.100] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5876774, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5876774, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x740070, dwReserved1=0x72006f, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0107.100] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a18c, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587a18c, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x740070, dwReserved1=0x72006f, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0107.101] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.101] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.101] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.101] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e7f8cc, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.101] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.101] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e7f8cc) returned 0x18 [0107.101] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\x-none.16\\stream.x86.x-none.man.dat")) returned 0x20 [0107.103] VirtualAlloc (lpAddress=0x1e80000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1e80000 [0107.103] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\x-none.16\\stream.x86.x-none.man.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.103] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16\\stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\x-none.16\\stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.104] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.110] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.113] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.113] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.114] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.114] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.114] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.114] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.115] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.115] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.115] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.115] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.115] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.115] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.116] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.116] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.116] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.116] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.116] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.116] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.117] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.117] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.117] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.117] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.117] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.117] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.117] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.118] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.118] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.119] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.120] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.120] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.120] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.120] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.120] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.120] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.120] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.121] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.121] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.121] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.121] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.121] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.121] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.121] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.122] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.122] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.122] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.122] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.122] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.122] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.122] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.123] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.123] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.123] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.123] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.123] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.123] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.123] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.124] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.124] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.124] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.124] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.124] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.124] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.125] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.125] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.125] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.125] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.125] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.125] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.126] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.126] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.126] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.126] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.126] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.126] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.126] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.127] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.127] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.127] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.127] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.127] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.127] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.127] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.128] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.128] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.182] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.183] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.183] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.183] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.183] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.183] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.184] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.184] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.184] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.184] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.185] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.185] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.186] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.186] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.186] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.186] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.186] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.186] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.186] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.187] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.187] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.187] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.187] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.187] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.187] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.188] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.188] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.188] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.188] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.188] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.188] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.189] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.189] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.189] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.189] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.189] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.189] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.189] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.190] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.190] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.190] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.190] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.190] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.190] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.199] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.199] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.199] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.199] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.200] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.200] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.200] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.200] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.201] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.201] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.201] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.201] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.201] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.202] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.202] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.202] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.202] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.202] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.203] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.203] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.203] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.203] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.203] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.204] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.204] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.204] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.204] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.205] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.208] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.208] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.208] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.208] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.208] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.209] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.209] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.209] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.209] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.209] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.210] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.210] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.210] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.210] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.210] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.211] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.211] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.211] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.211] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.211] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.212] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.212] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.212] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.212] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.212] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.213] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.213] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.213] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.213] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.213] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.214] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.214] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.214] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.214] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.215] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.215] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.215] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.215] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.215] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.216] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.216] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.216] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.216] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.216] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.217] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.217] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.217] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.217] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.218] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.218] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.218] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.218] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.218] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.219] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.219] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.219] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.219] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.219] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.219] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.220] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.220] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.220] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.220] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.221] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.222] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.222] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.222] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.222] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.222] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.223] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.223] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.223] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.223] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.223] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.224] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.224] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.224] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.224] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.224] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.225] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.225] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.225] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.225] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.225] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.226] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.226] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.226] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.227] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.227] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.227] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.227] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.227] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.228] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.228] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.228] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.228] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.229] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.229] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.229] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.229] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.230] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.230] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.231] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.231] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.231] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.231] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.231] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.232] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.232] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.232] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.232] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.233] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.233] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.233] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.233] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.233] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.234] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.234] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.234] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.234] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.234] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.235] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.235] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.235] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.235] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.235] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.236] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.241] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.242] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.242] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.242] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.242] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.242] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.242] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.243] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.243] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.243] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.243] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.243] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.243] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.244] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.244] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.244] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.244] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.244] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.244] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.245] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.245] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.245] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.245] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.245] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.245] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.246] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.246] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.246] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.246] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.246] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.246] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.247] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.247] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.247] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.247] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.247] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.247] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.248] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.248] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.248] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.248] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.248] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.248] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.249] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.249] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.249] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.249] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.249] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.249] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.250] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.250] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.250] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.250] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.250] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.250] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.251] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.251] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.251] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.251] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.252] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.252] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.252] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.252] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.253] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.253] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.254] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.255] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.255] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.255] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.255] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.255] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.255] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.256] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.256] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.256] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.256] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.256] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.256] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.257] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.257] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.257] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.257] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.257] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.258] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.258] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.258] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.258] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.258] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.258] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.258] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.259] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.259] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.259] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.259] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.259] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.259] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.260] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.260] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.260] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.260] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.260] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.262] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.262] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.262] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.262] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.262] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.263] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.263] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.263] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.263] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.263] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.264] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.264] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.264] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.264] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.264] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.264] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.265] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.265] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.265] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.265] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.265] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.266] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.266] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.266] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.266] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.266] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.267] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.267] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.269] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.269] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.270] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.270] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.270] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.270] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.270] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.270] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.271] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.271] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.271] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.271] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.271] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.272] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.272] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.272] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.272] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.273] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.273] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.273] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.273] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.273] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.274] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.274] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.274] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.274] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.274] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.275] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.275] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.275] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.275] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.276] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.276] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.276] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.276] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.277] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.277] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.277] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.277] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.278] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.278] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.278] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.278] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.279] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.279] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.279] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.279] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.279] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.279] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.280] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.280] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.280] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.280] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.280] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.280] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.281] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.281] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.281] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.281] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.282] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.282] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.282] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.282] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.286] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.287] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.287] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.287] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.287] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.288] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.288] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.288] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.288] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.289] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.289] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.289] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.289] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.289] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.290] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.290] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.290] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.290] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.291] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.291] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.291] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.610] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\x-none.16\\stream.x86.x-none.man.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16\\stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\x-none.16\\stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.610] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16\\stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\x-none.16\\stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.610] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\x-none.16\\stream.x86.x-none.man.dat"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a18c, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587a18c, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x550370, dwReserved1=0xd, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x55e890 [0107.610] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a18c, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587a18c, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x550370, dwReserved1=0xd, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0107.611] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0107.611] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\x-none.16\\stream.x86.x-none.man.dat")) returned 1 [0107.617] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\x-none.16\\stream.x86.x-none.man.dat")) returned 0xffffffff [0107.617] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd587a18c, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587a18c, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x32e90800, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x740070, dwReserved1=0x72006f, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0107.617] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0107.617] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd587b51b, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd587b51b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363878, dwReserved1=0x752d6e65, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0107.617] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0107.617] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d04153d, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d04153d, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d04153d, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x563631, dwReserved1=0x43d, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0107.618] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e44e88, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5e47593, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x66006e, dwReserved1=0x670069, cFileName="DeploymentConfig.1.xml", cAlternateFileName="DEPLOY~3.XML")) returned 1 [0107.618] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c5095b, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x85c5095b, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x85c5095b, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x66006e, dwReserved1=0x670069, cFileName="DeploymentConfig.2.xml", cAlternateFileName="DEPLOY~2.XML")) returned 1 [0107.619] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x66006e, dwReserved1=0x670069, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0107.619] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363878, dwReserved1=0x6f6e2d78, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0107.621] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363878, dwReserved1=0x6f6e2d78, cFileName="..", cAlternateFileName="")) returned 1 [0107.621] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a4d6f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363878, dwReserved1=0x6f6e2d78, cFileName="Catalog", cAlternateFileName="")) returned 1 [0107.621] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a4d6f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0107.622] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a4d6f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.622] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a743f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="Packages", cAlternateFileName="")) returned 1 [0107.622] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xfc9e8858, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0107.623] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xfc9e8858, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.623] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xfc9e8858, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 0 [0107.623] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0107.623] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a743f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="Packages", cAlternateFileName="")) returned 0 [0107.623] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0107.623] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363873, dwReserved1=0x6f6e2d78, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0107.623] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0107.624] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.624] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 1 [0107.624] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0107.624] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.624] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 0 [0107.624] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0107.624] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 0 [0107.624] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0107.625] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363873, dwReserved1=0x6f6e2d78, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 0 [0107.625] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0107.625] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1c4bfed4, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e6f6974, dwReserved1=0x670069, cFileName="UserData", cAlternateFileName="")) returned 1 [0107.625] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\userdata\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1c4bfed4, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x63614274, dwReserved1=0x7370756b, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0107.626] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1c4bfed4, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x63614274, dwReserved1=0x7370756b, cFileName="..", cAlternateFileName="")) returned 1 [0107.626] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1c4bfed4, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x63614274, dwReserved1=0x7370756b, cFileName="..", cAlternateFileName="")) returned 0 [0107.626] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0107.626] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe25ce006, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e6f6974, dwReserved1=0x670069, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0107.626] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe25ce006, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x63614274, dwReserved1=0x7370756b, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0107.631] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe25ce006, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x63614274, dwReserved1=0x7370756b, cFileName="..", cAlternateFileName="")) returned 1 [0107.631] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x828cdbb9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x64e40818, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0xd1e70, dwReserved0=0x63614274, dwReserved1=0x7370756b, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0107.631] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x828cdbb9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x64e40818, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0xd1e70, dwReserved0=0x63614274, dwReserved1=0x7370756b, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 0 [0107.631] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0107.632] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe25ce006, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e6f6974, dwReserved1=0x670069, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0107.632] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0107.632] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x322d3939, dwReserved1=0x2d423033, cFileName="Crypto", cAlternateFileName="")) returned 1 [0107.632] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e726f74, dwReserved1=0x657865, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0107.633] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e726f74, dwReserved1=0x657865, cFileName="..", cAlternateFileName="")) returned 1 [0107.633] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e726f74, dwReserved1=0x657865, cFileName="DSS", cAlternateFileName="")) returned 1 [0107.633] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0107.633] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.633] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0107.634] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0107.634] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.634] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 0 [0107.634] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0107.634] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0107.634] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0107.634] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7379654b, dwReserved1=0x657865, cFileName="Keys", cAlternateFileName="")) returned 1 [0107.634] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0107.634] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.634] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 0 [0107.634] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0107.634] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7379654b, dwReserved1=0x657865, cFileName="PCPKSP", cAlternateFileName="")) returned 1 [0107.635] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\pcpksp\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0107.635] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.635] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 1 [0107.635] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\pcpksp\\windowsaik\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0107.635] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.636] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 0 [0107.636] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0107.636] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 0 [0107.636] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0107.636] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4a8a1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc4a8a1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x734b4941, dwReserved1=0x657865, cFileName="RSA", cAlternateFileName="")) returned 1 [0107.636] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4a8a1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc4a8a1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0107.636] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4a8a1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc4a8a1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.636] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0107.636] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0107.636] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.636] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 0 [0107.636] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0107.636] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc4a8a1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc4a8a1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc70b72, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0107.637] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc4a8a1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc4a8a1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc70b72, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0107.637] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc4a8a1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc4a8a1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc70b72, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.637] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xc70b72, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc70b72, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc70b72, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="4eccd106f69e31c1b12304e5463bb71d_03845cb8-7441-4a2f-8c0f-c90408af5778", cAlternateFileName="4ECCD1~1")) returned 1 [0107.638] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xc70b72, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc70b72, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc70b72, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="4eccd106f69e31c1b12304e5463bb71d_03845cb8-7441-4a2f-8c0f-c90408af5778", cAlternateFileName="4ECCD1~1")) returned 0 [0107.638] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0107.638] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc4a8a1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc4a8a1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc70b72, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650078, dwReserved1=0x3e000638, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0107.638] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0107.638] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd54314ca, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73796538, dwReserved1=0x657865, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 1 [0107.638] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\systemkeys\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd54314ca, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x39366636, dwReserved1=0x63313365, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0107.638] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd54314ca, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x39366636, dwReserved1=0x63313365, cFileName="..", cAlternateFileName="")) returned 1 [0107.638] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xd54314ca, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x39366636, dwReserved1=0x63313365, cFileName="1fd8a841971dc8f18facf1d9475e3f87_03845cb8-7441-4a2f-8c0f-c90408af5778", cAlternateFileName="1FD8A8~1")) returned 1 [0107.639] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xd54314ca, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x39366636, dwReserved1=0x63313365, cFileName="1fd8a841971dc8f18facf1d9475e3f87_03845cb8-7441-4a2f-8c0f-c90408af5778", cAlternateFileName="1FD8A8~1")) returned 0 [0107.639] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0107.639] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd54314ca, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73796538, dwReserved1=0x657865, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 0 [0107.639] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0107.639] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x32737965, dwReserved1=0x2d423033, cFileName="DataMart", cAlternateFileName="")) returned 1 [0107.639] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\*.*" (normalized: "c:\\users\\all users\\microsoft\\datamart\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31373931, dwReserved1=0x66386364, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0107.640] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31373931, dwReserved1=0x66386364, cFileName="..", cAlternateFileName="")) returned 1 [0107.640] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31373931, dwReserved1=0x66386364, cFileName="PaidWiFi", cAlternateFileName="")) returned 1 [0107.640] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\*.*" (normalized: "c:\\users\\all users\\microsoft\\datamart\\paidwifi\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x380063, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0107.640] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x380063, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.640] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x380063, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 0 [0107.640] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0107.640] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31373931, dwReserved1=0x66386364, cFileName="PaidWiFi", cAlternateFileName="")) returned 0 [0107.640] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0107.640] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x32737969, dwReserved1=0x2d423033, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0107.641] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31373931, dwReserved1=0x66386364, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0107.641] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31373931, dwReserved1=0x66386364, cFileName="..", cAlternateFileName="")) returned 1 [0107.641] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31373931, dwReserved1=0x66386364, cFileName="Device", cAlternateFileName="")) returned 1 [0107.641] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x380063, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0107.641] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x380063, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.641] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x358e05e, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x358e05e, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x380063, dwReserved1=0x3e000638, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0107.641] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x358e05e, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x358e05e, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0107.643] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x358e05e, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x358e05e, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="..", cAlternateFileName="")) returned 1 [0107.643] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x3e000638, cFileName="background.png", cAlternateFileName="")) returned 1 [0107.644] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.644] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.644] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83e0c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.644] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83e0c) returned 0x18 [0107.644] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0x20 [0107.645] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.645] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.645] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.648] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.649] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.650] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.650] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.650] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.650] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.650] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.650] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.651] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.651] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.651] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.651] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.651] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.651] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.651] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.652] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.652] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.652] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.652] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.652] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.652] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.653] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.653] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.653] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.653] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.653] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.653] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.653] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.654] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.654] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.654] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.654] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.654] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.654] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.655] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.655] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.655] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.655] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.655] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.655] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.655] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.656] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.656] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.656] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.656] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.656] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.656] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.657] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.657] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.657] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.657] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.657] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.657] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.657] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.658] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.658] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.658] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.658] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.658] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.658] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.658] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.659] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xad1, lpOverlapped=0x0) returned 1 [0107.659] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xad1, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xad1, lpOverlapped=0x0) returned 1 [0107.659] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.659] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.659] CloseHandle (hObject=0x1b0) returned 1 [0107.659] CloseHandle (hObject=0x1b4) returned 1 [0107.695] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.696] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.696] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="background.png", cAlternateFileName="")) returned 0x55e290 [0107.696] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="background.png", cAlternateFileName="")) returned 0 [0107.696] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0107.696] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0 [0107.697] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0x20 [0107.697] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0107.697] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x550000, dwReserved1=0x2000002, cFileName="device.png", cAlternateFileName="")) returned 1 [0107.700] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.701] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e81e68, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e81e68) returned 0x18 [0107.701] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0x20 [0107.702] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.702] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.703] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.705] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.706] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.707] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.707] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.707] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.707] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.707] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.708] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.708] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.708] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.708] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.708] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.708] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.709] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.709] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.709] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.709] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.714] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.714] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.715] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xdc8, lpOverlapped=0x0) returned 1 [0107.715] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xdc8, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xdc8, lpOverlapped=0x0) returned 1 [0107.715] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.715] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.715] CloseHandle (hObject=0x1b4) returned 1 [0107.715] CloseHandle (hObject=0x1b0) returned 1 [0107.717] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.717] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.718] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x550370, dwReserved1=0x11, cFileName="device.png", cAlternateFileName="")) returned 0x55e490 [0107.718] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x550370, dwReserved1=0x11, cFileName="device.png", cAlternateFileName="")) returned 0 [0107.718] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0107.718] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0 [0107.718] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0x20 [0107.718] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0107.719] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.719] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.723] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.723] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.723] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0x20 [0107.724] VirtualAlloc (lpAddress=0x1e84000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1e84000 [0107.724] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.725] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.725] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.733] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.735] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.735] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.735] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.735] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.736] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.736] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.736] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.736] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.736] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.736] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.737] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.737] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.737] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xc1, lpOverlapped=0x0) returned 1 [0107.737] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xc1, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xc1, lpOverlapped=0x0) returned 1 [0107.737] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.737] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.738] CloseHandle (hObject=0x1b0) returned 1 [0107.738] CloseHandle (hObject=0x1b4) returned 1 [0107.739] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.740] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.740] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x550370, dwReserved1=0x11, cFileName="overlay.png", cAlternateFileName="")) returned 0x55e710 [0107.740] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x550370, dwReserved1=0x11, cFileName="overlay.png", cAlternateFileName="")) returned 0 [0107.740] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0107.740] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0 [0107.740] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0x20 [0107.741] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0107.741] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.741] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.742] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.742] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.742] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0x20 [0107.743] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.743] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.743] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.745] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.747] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.747] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.747] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.747] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.747] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.748] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.748] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.748] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.748] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.748] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.748] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.749] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.749] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.749] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.749] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.749] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.749] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x9d3, lpOverlapped=0x0) returned 1 [0107.749] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x9d3, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x9d3, lpOverlapped=0x0) returned 1 [0107.750] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.750] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.750] CloseHandle (hObject=0x1b4) returned 1 [0107.750] CloseHandle (hObject=0x1b0) returned 1 [0107.752] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.752] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.752] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="superbar.png", cAlternateFileName="")) returned 0x55e650 [0107.753] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0107.753] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0107.753] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0 [0107.754] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0x20 [0107.754] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0107.754] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0107.754] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x358e05e, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x358e05e, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e702e72, dwReserved1=0x3e676e67, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0107.754] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x358e05e, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x358e05e, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0107.755] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x358e05e, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x358e05e, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0107.755] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="background.png", cAlternateFileName="")) returned 1 [0107.755] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.755] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.756] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.756] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.756] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.756] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.756] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0x20 [0107.756] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.757] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.760] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.763] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.765] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.765] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.765] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.765] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.766] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.766] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.766] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.766] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.766] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.766] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.767] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.767] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.767] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.767] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.767] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.767] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.768] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.768] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.768] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.768] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.768] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.768] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.771] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.771] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.772] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.772] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.772] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.772] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.772] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.772] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.773] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.773] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.773] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.773] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.773] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.774] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.774] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.774] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.774] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.774] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.774] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.774] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.775] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.775] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.775] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.775] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.775] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.775] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.776] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.776] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.776] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.776] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.776] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.776] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.777] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.777] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.777] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.777] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.777] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.777] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.777] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xad1, lpOverlapped=0x0) returned 1 [0107.778] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xad1, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xad1, lpOverlapped=0x0) returned 1 [0107.778] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.778] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.778] CloseHandle (hObject=0x1b0) returned 1 [0107.778] CloseHandle (hObject=0x1b4) returned 1 [0107.781] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.781] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.781] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="background.png", cAlternateFileName="")) returned 0x55e890 [0107.781] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="background.png", cAlternateFileName="")) returned 0 [0107.781] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0107.781] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0 [0107.782] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0x20 [0107.782] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0107.782] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0107.783] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.783] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.783] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.783] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.783] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0x20 [0107.783] VirtualAlloc (lpAddress=0x1e88000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1e88000 [0107.789] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.789] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.789] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.798] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.800] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.800] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.800] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.800] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.801] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.801] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.801] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.801] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.801] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.802] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.802] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.802] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.802] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xc1, lpOverlapped=0x0) returned 1 [0107.802] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xc1, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xc1, lpOverlapped=0x0) returned 1 [0107.802] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.802] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.802] CloseHandle (hObject=0x1b4) returned 1 [0107.802] CloseHandle (hObject=0x1b0) returned 1 [0107.803] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.804] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.804] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="watermark.png", cAlternateFileName="")) returned 0x55e690 [0107.804] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0107.804] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0107.804] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0 [0107.804] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0x20 [0107.804] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0107.804] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0107.805] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x358e05e, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x358e05e, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e702e72, dwReserved1=0x3e676e67, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0107.805] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0107.805] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x352d3731, dwReserved1=0x2d646161, cFileName="Task", cAlternateFileName="")) returned 1 [0107.805] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x702e6b72, dwReserved1=0x3e67676e, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0107.805] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x702e6b72, dwReserved1=0x3e67676e, cFileName="..", cAlternateFileName="")) returned 1 [0107.805] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x702e6b72, dwReserved1=0x3e67676e, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0107.805] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0107.807] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="..", cAlternateFileName="")) returned 1 [0107.807] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="en-US", cAlternateFileName="")) returned 1 [0107.807] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0107.807] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="..", cAlternateFileName="")) returned 1 [0107.808] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb0c2e2, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0x9eb0c2e2, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x9eb0c2e2, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0107.808] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb0c2e2, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0x9eb0c2e2, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x9eb0c2e2, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0107.808] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0107.808] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x6d782e65, dwReserved1=0x3400026c, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0107.808] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.808] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.809] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.809] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.809] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.809] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.809] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico")) returned 0x20 [0107.810] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.810] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.810] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.812] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.813] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.814] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.814] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.814] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.814] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.814] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.815] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.815] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.815] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.815] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.815] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.815] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.816] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.816] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.816] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.816] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.816] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.816] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.817] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.817] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.817] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.817] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.817] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.817] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.818] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xa3, lpOverlapped=0x0) returned 1 [0107.818] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xa3, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xa3, lpOverlapped=0x0) returned 1 [0107.818] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.818] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.818] CloseHandle (hObject=0x1b0) returned 1 [0107.818] CloseHandle (hObject=0x1b4) returned 1 [0107.820] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.820] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.820] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x550370, dwReserved1=0x11, cFileName="folder.ico", cAlternateFileName="")) returned 0x55e710 [0107.820] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x550370, dwReserved1=0x11, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0107.821] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0107.821] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico")) returned 0 [0107.821] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico")) returned 0x20 [0107.821] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0107.821] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.821] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.821] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.821] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.822] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.822] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico")) returned 0x20 [0107.824] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.825] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.825] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.827] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.829] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.829] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.829] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.829] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.829] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.829] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.830] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.830] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.830] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.830] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.830] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.830] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.831] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x2ee, lpOverlapped=0x0) returned 1 [0107.831] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x2ee, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x2ee, lpOverlapped=0x0) returned 1 [0107.831] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.831] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.831] CloseHandle (hObject=0x1b4) returned 1 [0107.831] CloseHandle (hObject=0x1b0) returned 1 [0107.834] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.834] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.834] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x550370, dwReserved1=0x11, cFileName="netfol.ico", cAlternateFileName="")) returned 0x55e490 [0107.834] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x550370, dwReserved1=0x11, cFileName="netfol.ico", cAlternateFileName="")) returned 0 [0107.834] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0107.835] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico")) returned 0 [0107.835] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico")) returned 0x20 [0107.835] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0107.835] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.835] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.835] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.835] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.835] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico")) returned 0x20 [0107.836] VirtualAlloc (lpAddress=0x1e8c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1e8c000 [0107.836] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.836] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.837] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.839] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.841] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.841] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.841] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.842] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.842] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.842] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.842] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.842] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.843] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.843] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.843] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.843] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.843] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.843] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.844] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.844] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.844] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.844] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.844] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.844] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.845] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.845] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.845] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.845] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.845] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.845] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.845] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.846] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.846] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.846] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.846] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.846] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.847] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.847] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.847] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.847] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.847] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.848] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.848] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x668, lpOverlapped=0x0) returned 1 [0107.848] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x668, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x668, lpOverlapped=0x0) returned 1 [0107.848] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.848] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.848] CloseHandle (hObject=0x1b0) returned 1 [0107.848] CloseHandle (hObject=0x1b4) returned 1 [0107.853] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.853] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.853] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x550370, dwReserved1=0x11, cFileName="pictures.ico", cAlternateFileName="")) returned 0x55e410 [0107.853] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x550370, dwReserved1=0x11, cFileName="pictures.ico", cAlternateFileName="")) returned 0 [0107.853] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0107.853] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico")) returned 0 [0107.854] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico")) returned 0x20 [0107.854] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0107.854] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x550000, dwReserved1=0x550284, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0107.855] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.855] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.855] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.855] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.855] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico")) returned 0x20 [0107.856] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.856] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.856] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.859] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.861] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.861] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.861] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.862] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.862] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.862] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.862] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.865] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.866] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.866] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.866] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.866] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.866] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.867] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.867] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.867] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.867] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.867] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.867] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.868] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.868] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.868] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.868] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xaa9, lpOverlapped=0x0) returned 1 [0107.868] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xaa9, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xaa9, lpOverlapped=0x0) returned 1 [0107.869] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.869] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.869] CloseHandle (hObject=0x1b4) returned 1 [0107.869] CloseHandle (hObject=0x1b0) returned 1 [0107.871] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.872] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.872] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x550370, dwReserved1=0x11, cFileName="ringtones.ico", cAlternateFileName="")) returned 0x55e7d0 [0107.872] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x550370, dwReserved1=0x11, cFileName="ringtones.ico", cAlternateFileName="")) returned 0 [0107.872] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0107.872] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico")) returned 0 [0107.872] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico")) returned 0x20 [0107.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0107.873] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.873] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.873] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.873] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.873] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico")) returned 0x20 [0107.873] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.873] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.874] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.876] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.877] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.878] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.878] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.878] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.902] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.903] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.903] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.903] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.903] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.903] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.903] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.904] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.904] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.904] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.904] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.904] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.904] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.905] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.905] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.905] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.905] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.905] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.905] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.906] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.906] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.906] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.906] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.906] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.906] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.907] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.907] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x850, lpOverlapped=0x0) returned 1 [0107.907] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x850, lpOverlapped=0x0) returned 1 [0107.907] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.907] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.907] CloseHandle (hObject=0x1b0) returned 1 [0107.907] CloseHandle (hObject=0x1b4) returned 1 [0107.910] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.910] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.911] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x550370, dwReserved1=0x11, cFileName="settings.ico", cAlternateFileName="")) returned 0x55e7d0 [0107.911] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x550370, dwReserved1=0x11, cFileName="settings.ico", cAlternateFileName="")) returned 0 [0107.911] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0107.911] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico")) returned 0 [0107.911] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico")) returned 0x20 [0107.911] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0107.912] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.912] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.912] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.912] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.912] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico")) returned 0x20 [0107.913] VirtualAlloc (lpAddress=0x1e90000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1e90000 [0107.914] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.914] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.914] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.919] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.921] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.921] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.921] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.921] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.922] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.922] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.922] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.922] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.922] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.922] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.923] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.923] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.923] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.923] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.923] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.924] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.924] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.924] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.924] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.924] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.925] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.925] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.928] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x4b, lpOverlapped=0x0) returned 1 [0107.928] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x4b, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x4b, lpOverlapped=0x0) returned 1 [0107.928] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.928] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.928] CloseHandle (hObject=0x1b4) returned 1 [0107.929] CloseHandle (hObject=0x1b0) returned 1 [0107.931] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.932] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.932] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x550340, dwReserved1=0x6, cFileName="sync.ico", cAlternateFileName="")) returned 0x55e390 [0107.932] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x550340, dwReserved1=0x6, cFileName="sync.ico", cAlternateFileName="")) returned 0 [0107.932] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0107.932] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico")) returned 0 [0107.932] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico")) returned 0x20 [0107.932] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2aff, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0107.933] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0107.933] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.933] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.933] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.933] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.934] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico")) returned 0x20 [0107.934] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.934] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.934] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.937] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.938] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.939] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.939] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.939] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.939] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.939] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.940] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.940] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.940] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.940] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.940] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.940] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.941] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.941] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.941] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.941] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.942] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.942] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.942] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.942] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.942] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.943] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.943] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.943] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.943] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.943] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.944] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.944] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.944] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.944] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.944] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.944] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.945] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.945] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.945] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.945] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.945] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.945] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.946] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.946] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.946] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.946] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.946] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.946] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.946] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.947] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.947] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.947] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.947] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.947] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.947] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.948] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.948] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x9f4, lpOverlapped=0x0) returned 1 [0107.948] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x9f4, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x9f4, lpOverlapped=0x0) returned 1 [0107.948] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.948] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.948] CloseHandle (hObject=0x1b0) returned 1 [0107.948] CloseHandle (hObject=0x1b4) returned 1 [0107.952] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.952] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.952] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x550340, dwReserved1=0x6, cFileName="wmp.ico", cAlternateFileName="")) returned 0x55e490 [0107.952] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x550340, dwReserved1=0x6, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0107.952] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0107.952] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico")) returned 0 [0107.952] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico")) returned 0x20 [0107.953] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0107.953] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0107.953] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x63696c6d, dwReserved1=0x3e676f6f, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0107.953] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0107.954] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0107.954] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="en-US", cAlternateFileName="")) returned 1 [0107.954] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0107.955] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="..", cAlternateFileName="")) returned 1 [0107.955] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f57a684, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0x9f57a684, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x9f57a684, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0107.955] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f57a684, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0x9f57a684, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x9f57a684, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x34000236, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0107.955] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0107.955] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x6d782e65, dwReserved1=0x200006c, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0107.956] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.956] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.956] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.956] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.956] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.956] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.956] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico")) returned 0x20 [0107.956] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.957] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.957] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.958] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.960] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.960] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.961] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.961] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.961] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.961] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.961] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.961] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.962] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.962] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.962] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.962] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.962] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.962] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.962] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.963] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.963] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.963] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.963] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.963] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.964] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.964] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.964] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.964] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.964] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xa3, lpOverlapped=0x0) returned 1 [0107.964] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xa3, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xa3, lpOverlapped=0x0) returned 1 [0107.965] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.965] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.965] CloseHandle (hObject=0x1b4) returned 1 [0107.965] CloseHandle (hObject=0x1b0) returned 1 [0107.966] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.966] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.967] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x550370, dwReserved1=0x11, cFileName="folder.ico", cAlternateFileName="")) returned 0x55e2d0 [0107.967] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x550370, dwReserved1=0x11, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0107.967] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0107.967] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico")) returned 0 [0107.967] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico")) returned 0x20 [0107.967] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0107.967] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.967] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.968] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.968] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.968] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico")) returned 0x20 [0107.968] VirtualAlloc (lpAddress=0x1e94000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1e94000 [0107.968] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.969] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.969] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.973] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.974] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.975] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.975] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.975] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.975] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.975] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.976] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.976] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.976] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.976] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.976] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.976] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.977] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.977] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.977] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.977] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.977] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.977] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.978] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.978] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.978] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.978] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.978] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.978] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.979] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.979] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.979] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x3c8, lpOverlapped=0x0) returned 1 [0107.979] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x3c8, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x3c8, lpOverlapped=0x0) returned 1 [0107.979] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.979] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.979] CloseHandle (hObject=0x1b0) returned 1 [0107.979] CloseHandle (hObject=0x1b4) returned 1 [0107.982] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.982] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.982] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="print_pref.ico", cAlternateFileName="")) returned 0x55e2d0 [0107.982] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="print_pref.ico", cAlternateFileName="")) returned 0 [0107.982] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0107.983] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico")) returned 0 [0107.983] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico")) returned 0x20 [0107.983] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0107.983] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.983] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.983] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.983] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.984] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico")) returned 0x20 [0107.984] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.985] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.985] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.987] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.988] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.988] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.989] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.989] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.989] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.989] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.989] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.989] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.990] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.990] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.990] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.990] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.990] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.990] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.991] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.991] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.991] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.991] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.991] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.991] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.992] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.992] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.992] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.992] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.992] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.992] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0107.993] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xbb8, lpOverlapped=0x0) returned 1 [0107.993] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xbb8, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xbb8, lpOverlapped=0x0) returned 1 [0107.993] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.993] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0107.993] CloseHandle (hObject=0x1b4) returned 1 [0107.993] CloseHandle (hObject=0x1b0) returned 1 [0107.995] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0107.995] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0107.996] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x550370, dwReserved1=0xf, cFileName="print_property.ico", cAlternateFileName="")) returned 0x55e8d0 [0107.996] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x550370, dwReserved1=0xf, cFileName="print_property.ico", cAlternateFileName="")) returned 0 [0107.996] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0107.996] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico")) returned 0 [0107.996] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico")) returned 0x20 [0107.996] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0107.997] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0107.997] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0107.997] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0107.997] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0107.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0107.997] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico")) returned 0x20 [0107.998] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0107.998] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0107.999] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.001] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.002] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.002] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.002] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.003] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.003] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.003] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.003] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.004] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.004] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.004] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.004] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.004] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.004] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.005] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.005] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.005] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.005] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.005] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.005] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.006] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.006] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.006] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.006] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.006] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.007] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xff5, lpOverlapped=0x0) returned 1 [0108.007] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xff5, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xff5, lpOverlapped=0x0) returned 1 [0108.007] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0108.007] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0108.007] CloseHandle (hObject=0x1b0) returned 1 [0108.007] CloseHandle (hObject=0x1b4) returned 1 [0108.009] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.010] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.010] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="print_queue.ico", cAlternateFileName="")) returned 0x55e710 [0108.010] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="print_queue.ico", cAlternateFileName="")) returned 0 [0108.010] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0108.010] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico")) returned 0 [0108.010] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico")) returned 0x20 [0108.010] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0108.011] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.011] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.011] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.011] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.011] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.011] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.011] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico")) returned 0x20 [0108.017] VirtualAlloc (lpAddress=0x1e98000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1e98000 [0108.017] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0108.017] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0108.018] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.019] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.021] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.021] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.021] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.022] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.022] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.022] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.022] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.022] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.022] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.023] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.023] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.023] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.023] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.023] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.023] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.023] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.024] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.024] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.024] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.024] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.024] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.024] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.025] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.025] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.025] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.025] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.025] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xc75, lpOverlapped=0x0) returned 1 [0108.025] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xc75, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xc75, lpOverlapped=0x0) returned 1 [0108.026] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0108.026] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0108.026] CloseHandle (hObject=0x1b4) returned 1 [0108.026] CloseHandle (hObject=0x1b0) returned 1 [0108.028] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.028] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.028] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x550340, dwReserved1=0x6, cFileName="scan_.ico", cAlternateFileName="")) returned 0x55e490 [0108.029] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x550340, dwReserved1=0x6, cFileName="scan_.ico", cAlternateFileName="")) returned 0 [0108.029] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0108.029] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico")) returned 0 [0108.029] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico")) returned 0x20 [0108.029] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0108.030] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.030] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.030] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.030] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.030] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.030] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.030] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico")) returned 0x20 [0108.031] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0108.031] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0108.031] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.033] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.036] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.037] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.037] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.037] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.037] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.037] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.038] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.038] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.038] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.038] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.038] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.039] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.039] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.039] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.039] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.039] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.039] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.040] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.040] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.040] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.040] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.040] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.041] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.041] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.041] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.041] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.041] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.041] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.042] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.042] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.042] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x654, lpOverlapped=0x0) returned 1 [0108.042] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x654, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x654, lpOverlapped=0x0) returned 1 [0108.042] ReadFile (in: hFile=0x1b0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0108.042] WriteFile (in: hFile=0x1b4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0108.042] CloseHandle (hObject=0x1b0) returned 1 [0108.043] CloseHandle (hObject=0x1b4) returned 1 [0108.045] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.045] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.046] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="scan_property.ico", cAlternateFileName="")) returned 0x55e210 [0108.046] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="scan_property.ico", cAlternateFileName="")) returned 0 [0108.046] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0108.046] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico")) returned 0 [0108.046] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico")) returned 0x20 [0108.046] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21344266, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x21344266, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0108.046] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.047] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.047] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.048] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.048] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico")) returned 0x20 [0108.048] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0108.049] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0108.049] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.051] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.056] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.056] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.056] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.057] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.057] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.057] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.058] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.058] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.059] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.059] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.059] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.060] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.060] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.060] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.060] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.060] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.061] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.061] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.061] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.061] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.062] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.062] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.062] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.062] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.063] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.063] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.063] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.063] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0108.063] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x8c2, lpOverlapped=0x0) returned 1 [0108.063] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x8c2, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x8c2, lpOverlapped=0x0) returned 1 [0108.063] ReadFile (in: hFile=0x1b4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0108.064] WriteFile (in: hFile=0x1b0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0108.064] CloseHandle (hObject=0x1b4) returned 1 [0108.064] CloseHandle (hObject=0x1b0) returned 1 [0108.067] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.067] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.068] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21344266, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x21344266, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="scan_settings.ico", cAlternateFileName="")) returned 0x55e7d0 [0108.068] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21344266, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x21344266, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="scan_settings.ico", cAlternateFileName="")) returned 0 [0108.068] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0108.068] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico")) returned 0 [0108.069] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico")) returned 0x20 [0108.069] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0108.070] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0108.070] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0108.070] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x63696c6d, dwReserved1=0x3e676f6f, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0108.070] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0108.070] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x352d3731, dwReserved1=0x2d646161, cFileName="Task", cAlternateFileName="")) returned 0 [0108.070] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0108.071] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x32737969, dwReserved1=0x2d423033, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0108.071] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*.*" (normalized: "c:\\users\\all users\\microsoft\\devicesync\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x662d6432, dwReserved1=0x2d323437, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0108.071] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x662d6432, dwReserved1=0x2d323437, cFileName="..", cAlternateFileName="")) returned 1 [0108.071] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x662d6432, dwReserved1=0x2d323437, cFileName="..", cAlternateFileName="")) returned 0 [0108.071] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0108.071] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd17b1a49, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd17b1a49, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x32737969, dwReserved1=0x2d423033, cFileName="Diagnosis", cAlternateFileName="DIAGNO~1")) returned 1 [0108.071] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd17b1a49, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd17b1a49, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x662d6432, dwReserved1=0x2d323437, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0108.072] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd17b1a49, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd17b1a49, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x662d6432, dwReserved1=0x2d323437, cFileName="..", cAlternateFileName="")) returned 1 [0108.072] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x662d6432, dwReserved1=0x2d323437, cFileName="AsimovUploader", cAlternateFileName="ASIMOV~1")) returned 1 [0108.072] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\asimovuploader\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e696c6d, dwReserved1=0x6000402, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0108.072] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e696c6d, dwReserved1=0x6000402, cFileName="..", cAlternateFileName="")) returned 1 [0108.072] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e696c6d, dwReserved1=0x6000402, cFileName="..", cAlternateFileName="")) returned 0 [0108.072] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0108.072] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe080ca95, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe080ca95, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x662d6432, dwReserved1=0x2d323437, cFileName="DownloadedScenarios", cAlternateFileName="DOWNLO~1")) returned 1 [0108.072] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedscenarios\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe080ca95, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe080ca95, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e696c6d, dwReserved1=0x6000402, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0108.075] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe080ca95, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe080ca95, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e696c6d, dwReserved1=0x6000402, cFileName="..", cAlternateFileName="")) returned 1 [0108.075] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xe010bd8d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe010bd8d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe010bd8d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x6e696c6d, dwReserved1=0x6000402, cFileName="WINDOWS.DIAGNOSTICS.xml", cAlternateFileName="WINDOW~1.XML")) returned 1 [0108.076] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xe042cf6a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe042cf6a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe042cf6a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x6f006e, dwReserved1=0x740073, cFileName="WINDOWS.PERFTRACKESCALATIONS.xml", cAlternateFileName="WINDOW~3.XML")) returned 1 [0108.077] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xe05d08a5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe05d08a5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe05d08a5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x720074, dwReserved1=0x630061, cFileName="WINDOWS.PERFTRACKPOINTDATA.xml", cAlternateFileName="WINDOW~4.XML")) returned 1 [0108.077] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xe0263207, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe0263207, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe0263207, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x720074, dwReserved1=0x630061, cFileName="WINDOWS.SIUF.xml", cAlternateFileName="WINDOW~2.XML")) returned 1 [0108.078] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35b42b5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972ca54f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x78002e, dwReserved1=0x6c006d, cFileName="Windows.Uif.static", cAlternateFileName="WINDOW~1.STA")) returned 1 [0108.079] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xe080ca95, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe080ca95, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe080ca95, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x740073, dwReserved1=0x740061, cFileName="WINDOWS.UIF.xml", cAlternateFileName="WICECA~1.XML")) returned 1 [0108.079] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xe080ca95, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe080ca95, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe080ca95, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x740073, dwReserved1=0x740061, cFileName="WINDOWS.UIF.xml", cAlternateFileName="WICECA~1.XML")) returned 0 [0108.080] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0108.081] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe1f25738, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe1f25738, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4649552e, dwReserved1=0x6c6d782e, cFileName="DownloadedSettings", cAlternateFileName="DOWNLO~2")) returned 1 [0108.081] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe1f25738, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe1f25738, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0108.083] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe1f25738, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe1f25738, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="..", cAlternateFileName="")) returned 1 [0108.083] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xdfc4722e, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xdfc4722e, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xdff8e649, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="cfc.flights.json", cAlternateFileName="CFCFLI~1.JSO")) returned 1 [0108.083] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.083] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.083] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.083] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.083] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.084] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\cfc.flights.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\cfc.flights.json")) returned 0x120 [0108.084] VirtualAlloc (lpAddress=0x1e9c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1e9c000 [0108.085] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\cfc.flights.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\cfc.flights.json"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0108.085] GetLastError () returned 0x5 [0108.085] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\cfc.flights.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\cfc.flights.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ac [0108.086] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\cfc.flights.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\cfc.flights.json"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\cfc.flights.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\cfc.flights.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.086] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\cfc.flights.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\cfc.flights.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.086] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\cfc.flights.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\cfc.flights.json"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xdfc4722e, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xdfc4722e, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xdff8e649, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="cfc.flights.json", cAlternateFileName="CFCFLI~1.JSO")) returned 0x55e310 [0108.086] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xdfc4722e, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xdfc4722e, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xdff8e649, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="cfc.flights.json", cAlternateFileName="CFCFLI~1.JSO")) returned 0 [0108.087] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0108.087] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\cfc.flights.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\cfc.flights.json")) returned 1 [0108.087] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\cfc.flights.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\cfc.flights.json")) returned 0xffffffff [0108.087] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x35b42b5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe0db65ac, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe1f25738, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x4a30b, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="telemetry.ASM-WindowsDefault.json", cAlternateFileName="TELEME~1.JSO")) returned 1 [0108.088] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.088] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.088] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.088] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.088] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json")) returned 0x120 [0108.088] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0108.088] GetLastError () returned 0x5 [0108.088] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b0 [0108.089] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.089] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.089] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x35b42b5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe0db65ac, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe1f25738, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x4a30b, dwReserved0=0x550340, dwReserved1=0x7, cFileName="telemetry.ASM-WindowsDefault.json", cAlternateFileName="TELEME~1.JSO")) returned 0x55e2d0 [0108.089] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x35b42b5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe0db65ac, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe1f25738, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x4a30b, dwReserved0=0x550340, dwReserved1=0x7, cFileName="telemetry.ASM-WindowsDefault.json", cAlternateFileName="TELEME~1.JSO")) returned 0 [0108.089] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0108.089] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json")) returned 1 [0108.090] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json")) returned 0xffffffff [0108.090] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35b42b5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972ca54f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="telemetry.ASM-WindowsDefault.json.bk", cAlternateFileName="TELEME~1.BK")) returned 1 [0108.090] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe0964002, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe0db65ac, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x14615, dwReserved0=0x2d006d, dwReserved1=0x690077, cFileName="utc.app.json", cAlternateFileName="UTCAPP~1.JSO")) returned 1 [0108.091] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.091] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.091] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.091] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.091] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.091] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.091] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json")) returned 0x120 [0108.091] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0108.091] GetLastError () returned 0x5 [0108.091] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b4 [0108.092] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.092] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.092] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe0964002, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe0db65ac, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x14615, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="utc.app.json", cAlternateFileName="UTCAPP~1.JSO")) returned 0x55e490 [0108.092] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe0964002, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe0db65ac, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x14615, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="utc.app.json", cAlternateFileName="UTCAPP~1.JSO")) returned 0 [0108.092] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0108.092] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json")) returned 1 [0108.092] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json")) returned 0xffffffff [0108.093] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972ca54f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x598, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="utc.app.json.bk", cAlternateFileName="UTCAPP~1.BK")) returned 1 [0108.093] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972ca54f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x598, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="utc.app.json.bk", cAlternateFileName="UTCAPP~1.BK")) returned 0 [0108.093] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0108.093] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f736a2e, dwReserved1=0x6b622e6e, cFileName="ETLLogs", cAlternateFileName="")) returned 1 [0108.093] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x62002e, dwReserved1=0x6b, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0108.094] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x62002e, dwReserved1=0x6b, cFileName="..", cAlternateFileName="")) returned 1 [0108.094] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36f2be13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x36f2be13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x62002e, dwReserved1=0x6b, cFileName="AutoLogger", cAlternateFileName="AUTOLO~1")) returned 1 [0108.094] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\autologger\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc088dfed, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xc088dfed, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x6000402, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0108.094] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc088dfed, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xc088dfed, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x6000402, cFileName="..", cAlternateFileName="")) returned 1 [0108.094] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xc088dfed, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xc088dfed, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x673f10ad, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x6000402, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0108.095] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xc088dfed, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xc088dfed, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x673f10ad, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x6000402, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 0 [0108.095] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0108.099] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d726567, dwReserved1=0x67616944, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 1 [0108.099] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\shutdownlogger\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x371b45ea, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x610069, dwReserved1=0x740067, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0108.099] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x371b45ea, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x610069, dwReserved1=0x740067, cFileName="..", cAlternateFileName="")) returned 1 [0108.099] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x371b45ea, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x610069, dwReserved1=0x740067, cFileName="..", cAlternateFileName="")) returned 0 [0108.099] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0108.099] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d726567, dwReserved1=0x67616944, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 0 [0108.099] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0108.099] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf380d4, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xcdf380d4, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3509fbde, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3000000, dwReserved0=0x676f4c6e, dwReserved1=0x6b726567, cFileName="events00.rbs", cAlternateFileName="")) returned 1 [0108.100] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf5e2a3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xcdf5e2a3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3509fbde, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc28f5c, dwReserved0=0x676f0000, dwReserved1=0x6b726567, cFileName="events01.rbs", cAlternateFileName="")) returned 1 [0108.100] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf5e2a3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xcdf5e2a3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3509fbde, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf5c28, dwReserved0=0x676f0000, dwReserved1=0x6b726567, cFileName="events10.rbs", cAlternateFileName="")) returned 1 [0108.101] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf5e2a3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xcdf5e2a3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3509fbde, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x2e147a, dwReserved0=0x676f0000, dwReserved1=0x6b726567, cFileName="events11.rbs", cAlternateFileName="")) returned 1 [0108.101] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676f0000, dwReserved1=0x6b726567, cFileName="LocalTraceStore", cAlternateFileName="LOCALT~1")) returned 1 [0108.101] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\localtracestore\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d726567, dwReserved1=0x67616944, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0108.101] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d726567, dwReserved1=0x67616944, cFileName="..", cAlternateFileName="")) returned 1 [0108.101] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d726567, dwReserved1=0x67616944, cFileName="..", cAlternateFileName="")) returned 0 [0108.101] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0108.101] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd17b1a49, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd17b1a49, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x36edfa80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676f0000, dwReserved1=0x6b726567, cFileName="parse.dat", cAlternateFileName="")) returned 1 [0108.102] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.102] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.102] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.102] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.102] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.102] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.102] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat")) returned 0x20 [0108.103] VirtualAlloc (lpAddress=0x1ea0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ea0000 [0108.103] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0108.103] GetLastError () returned 0x5 [0108.103] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a8 [0108.104] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.104] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.104] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd17b1a49, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd17b1a49, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x36edfa80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="parse.dat", cAlternateFileName="")) returned 0x55e490 [0108.105] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd17b1a49, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd17b1a49, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x36edfa80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="parse.dat", cAlternateFileName="")) returned 0 [0108.105] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0108.105] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat")) returned 1 [0108.105] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat")) returned 0xffffffff [0108.105] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Sideload", cAlternateFileName="")) returned 1 [0108.105] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\sideload\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0108.106] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0108.106] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0108.106] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0108.106] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Siufloc", cAlternateFileName="")) returned 1 [0108.106] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\siufloc\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0108.106] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0108.106] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0108.106] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0108.107] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="SoftLanding", cAlternateFileName="SOFTLA~1")) returned 1 [0108.107] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0108.107] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0108.107] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0108.107] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0108.107] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="SoftLandingStage", cAlternateFileName="SOFTLA~2")) returned 1 [0108.107] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlandingstage\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0108.107] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0108.107] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0108.107] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0108.107] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="SoftLandingStage", cAlternateFileName="SOFTLA~2")) returned 0 [0108.107] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0108.108] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676e6964, dwReserved1=0x67617453, cFileName="DRM", cAlternateFileName="")) returned 1 [0108.108] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*.*" (normalized: "c:\\users\\all users\\microsoft\\drm\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0108.108] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0108.108] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Server", cAlternateFileName="")) returned 1 [0108.108] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*.*" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000301, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0108.108] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000301, cFileName="..", cAlternateFileName="")) returned 1 [0108.108] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000301, cFileName="..", cAlternateFileName="")) returned 0 [0108.108] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0108.108] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Server", cAlternateFileName="")) returned 0 [0108.108] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0108.108] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676e6964, dwReserved1=0x67617453, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0108.108] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*.*" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0108.109] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0108.109] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35da50f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x35da50f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="INT", cAlternateFileName="")) returned 1 [0108.109] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\*.*" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35da50f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x35da50f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000301, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0108.109] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35da50f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x35da50f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000301, cFileName="..", cAlternateFileName="")) returned 1 [0108.109] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972ca54f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5ed8, dwReserved0=0x0, dwReserved1=0x2000301, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0108.109] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.109] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.112] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.112] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.112] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ppcrlconfig600.dll")) returned 0x20 [0108.112] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ppcrlconfig600.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0108.113] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0108.113] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.115] WriteFile (in: hFile=0x1c0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.117] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.117] WriteFile (in: hFile=0x1c0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.117] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.118] WriteFile (in: hFile=0x1c0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.118] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.118] WriteFile (in: hFile=0x1c0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.118] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.118] WriteFile (in: hFile=0x1c0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.119] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xed8, lpOverlapped=0x0) returned 1 [0108.119] WriteFile (in: hFile=0x1c0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xed8, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xed8, lpOverlapped=0x0) returned 1 [0108.119] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0108.119] WriteFile (in: hFile=0x1c0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0108.119] CloseHandle (hObject=0x1bc) returned 1 [0108.119] CloseHandle (hObject=0x1c0) returned 1 [0108.120] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ppcrlconfig600.dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.121] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.121] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ppcrlconfig600.dll"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972ca54f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5ed8, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0x55e590 [0108.121] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972ca54f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5ed8, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0 [0108.122] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0108.122] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ppcrlconfig600.dll")) returned 1 [0108.123] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ppcrlconfig600.dll")) returned 0xffffffff [0108.123] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972ca54f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x5ed8, dwReserved0=0x0, dwReserved1=0x2000301, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0 [0108.123] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0108.123] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5b9d2ab4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5b9d2ab4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="production", cAlternateFileName="PRODUC~1")) returned 1 [0108.123] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\*.*" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5b9d2ab4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5b9d2ab4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0108.124] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5b9d2ab4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5b9d2ab4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0108.124] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9940c797, ftLastWriteTime.dwHighDateTime=0x1d75217, nFileSizeHigh=0x0, nFileSizeLow=0x6988, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0108.124] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.124] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.124] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.124] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.124] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.124] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.124] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ppcrlconfig600.dll")) returned 0x20 [0108.125] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ppcrlconfig600.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0108.125] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0108.127] ReadFile (in: hFile=0x1c0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.129] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.131] ReadFile (in: hFile=0x1c0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.131] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.131] ReadFile (in: hFile=0x1c0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.131] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.131] ReadFile (in: hFile=0x1c0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.132] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.132] ReadFile (in: hFile=0x1c0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.132] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.132] ReadFile (in: hFile=0x1c0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.132] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.132] ReadFile (in: hFile=0x1c0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x988, lpOverlapped=0x0) returned 1 [0108.133] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x988, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x988, lpOverlapped=0x0) returned 1 [0108.133] ReadFile (in: hFile=0x1c0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0108.133] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0108.133] CloseHandle (hObject=0x1c0) returned 1 [0108.133] CloseHandle (hObject=0x1bc) returned 1 [0108.135] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ppcrlconfig600.dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.135] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.135] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ppcrlconfig600.dll"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9940c797, ftLastWriteTime.dwHighDateTime=0x1d75217, nFileSizeHigh=0x0, nFileSizeLow=0x6988, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0x55e890 [0108.135] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9940c797, ftLastWriteTime.dwHighDateTime=0x1d75217, nFileSizeHigh=0x0, nFileSizeLow=0x6988, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0 [0108.135] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0108.135] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ppcrlconfig600.dll")) returned 1 [0108.137] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ppcrlconfig600.dll")) returned 0xffffffff [0108.137] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b9d2ab4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5b9d2ab4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5b9d2ab4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="temp", cAlternateFileName="")) returned 1 [0108.137] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp\\*.*" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\temp\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b9d2ab4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5b9d2ab4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5b9d2ab4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0108.138] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b9d2ab4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5b9d2ab4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5b9d2ab4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0108.138] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b9d2ab4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5b9d2ab4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5b9d2ab4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 0 [0108.138] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0108.138] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b9d2ab4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5b9d2ab4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5b9d2ab4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="temp", cAlternateFileName="")) returned 0 [0108.138] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0108.138] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5b9d2ab4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5b9d2ab4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="production", cAlternateFileName="PRODUC~1")) returned 0 [0108.138] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0108.138] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676e6f69, dwReserved1=0x67617453, cFileName="MapData", cAlternateFileName="")) returned 1 [0108.138] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MapData\\*.*" (normalized: "c:\\users\\all users\\microsoft\\mapdata\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0108.138] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="..", cAlternateFileName="")) returned 1 [0108.138] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="..", cAlternateFileName="")) returned 0 [0108.139] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0108.139] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35da50f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x35da50f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676e6f69, dwReserved1=0x67617453, cFileName="MF", cAlternateFileName="")) returned 1 [0108.139] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*.*" (normalized: "c:\\users\\all users\\microsoft\\mf\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35da50f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x35da50f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0108.139] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35da50f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x35da50f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="..", cAlternateFileName="")) returned 1 [0108.139] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972ca54f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0108.139] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0108.140] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0108.140] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0108.140] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4c52472e, dwReserved1=0x67617453, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0108.140] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*.*" (normalized: "c:\\users\\all users\\microsoft\\netframework\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0108.140] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="..", cAlternateFileName="")) returned 1 [0108.140] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0108.140] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*.*" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0108.140] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x31000435, cFileName="..", cAlternateFileName="")) returned 1 [0108.141] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x31000435, cFileName="..", cAlternateFileName="")) returned 0 [0108.141] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0108.141] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0108.141] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0108.141] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53626d75, dwReserved1=0x65726f74, cFileName="Network", cAlternateFileName="")) returned 1 [0108.141] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*.*" (normalized: "c:\\users\\all users\\microsoft\\network\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0108.141] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="..", cAlternateFileName="")) returned 1 [0108.141] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0108.141] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*.*" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0108.141] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x31000435, cFileName="..", cAlternateFileName="")) returned 1 [0108.141] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x31000435, cFileName="..", cAlternateFileName="")) returned 0 [0108.141] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0108.142] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe06db82a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe06db82a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0108.142] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*.*" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe06db82a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe06db82a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0108.142] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe06db82a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe06db82a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x31000435, cFileName="..", cAlternateFileName="")) returned 1 [0108.142] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06db82a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe06db82a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x55147dc1, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x55a400, dwReserved1=0x31000435, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0108.142] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.142] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.142] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.142] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.142] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat")) returned 0x20 [0108.143] VirtualAlloc (lpAddress=0x1ea4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ea4000 [0108.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0108.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0108.143] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.178] WriteFile (in: hFile=0x1c0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.179] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.180] WriteFile (in: hFile=0x1c0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.180] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.180] WriteFile (in: hFile=0x1c0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.180] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.180] WriteFile (in: hFile=0x1c0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.180] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0108.180] WriteFile (in: hFile=0x1c0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0108.181] CloseHandle (hObject=0x1bc) returned 1 [0108.181] CloseHandle (hObject=0x1c0) returned 1 [0108.182] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.183] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.183] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06db82a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe06db82a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x55147dc1, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="qmgr0.dat", cAlternateFileName="")) returned 0x55e790 [0108.184] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06db82a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe06db82a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x55147dc1, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="qmgr0.dat", cAlternateFileName="")) returned 0 [0108.184] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0108.184] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat")) returned 0 [0108.184] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat")) returned 0x20 [0108.185] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06db82a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe06db82a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x5516dafa, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0108.185] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.185] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.185] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.185] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.185] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.185] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.186] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat")) returned 0x20 [0108.186] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0108.187] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0108.190] ReadFile (in: hFile=0x1c0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.192] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.194] ReadFile (in: hFile=0x1c0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.194] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.195] ReadFile (in: hFile=0x1c0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.195] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.195] ReadFile (in: hFile=0x1c0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.195] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0108.195] ReadFile (in: hFile=0x1c0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0108.195] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0108.195] CloseHandle (hObject=0x1c0) returned 1 [0108.195] CloseHandle (hObject=0x1bc) returned 1 [0108.197] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.197] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.197] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06db82a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe06db82a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x5516dafa, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="qmgr1.dat", cAlternateFileName="")) returned 0x55e790 [0108.197] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06db82a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe06db82a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x5516dafa, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="qmgr1.dat", cAlternateFileName="")) returned 0 [0108.198] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0108.198] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat")) returned 0 [0108.198] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat")) returned 0x20 [0108.198] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06db82a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe06db82a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x5516dafa, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 0 [0108.198] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0108.198] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe06db82a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe06db82a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0108.198] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0108.198] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xc92ad7bc, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xc92ad7bc, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73726564, dwReserved1=0x65726f74, cFileName="Office", cAlternateFileName="")) returned 1 [0108.198] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\*.*" (normalized: "c:\\users\\all users\\microsoft\\office\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xc92ad7bc, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xc92ad7bc, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x67697461, dwReserved1=0x2e303036, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0108.201] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xc92ad7bc, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xc92ad7bc, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x67697461, dwReserved1=0x2e303036, cFileName="..", cAlternateFileName="")) returned 1 [0108.201] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xbf2c43a8, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x67697461, dwReserved1=0x2e303036, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1 [0108.201] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.201] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.201] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.201] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.201] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\AssetLibrary.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico")) returned 0x20 [0108.203] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\AssetLibrary.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0108.203] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\AssetLibrary.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0108.204] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.206] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.208] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x536, lpOverlapped=0x0) returned 1 [0108.208] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x536, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x536, lpOverlapped=0x0) returned 1 [0108.208] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0108.208] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0108.208] CloseHandle (hObject=0x1b8) returned 1 [0108.208] CloseHandle (hObject=0x1bc) returned 1 [0108.209] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Office\\AssetLibrary.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Office\\AssetLibrary.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.210] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\AssetLibrary.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.210] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\AssetLibrary.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xbf2c43a8, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 0x55e390 [0108.210] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xbf2c43a8, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 0 [0108.210] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0108.210] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\AssetLibrary.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico")) returned 1 [0108.211] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\AssetLibrary.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico")) returned 0xffffffff [0108.212] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b54cf26, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b54cf26, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 1 [0108.212] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xc114009a, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x6b0063, dwReserved1=0x670061, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1 [0108.212] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.212] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.213] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.213] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.213] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.213] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.213] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\DocumentRepository.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico")) returned 0x20 [0108.217] VirtualAlloc (lpAddress=0x1ea8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ea8000 [0108.217] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\DocumentRepository.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0108.217] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\DocumentRepository.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0108.218] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.220] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.221] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.222] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.222] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.222] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.222] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.223] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.223] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.223] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.223] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.223] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.223] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x27e, lpOverlapped=0x0) returned 1 [0108.224] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x27e, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x27e, lpOverlapped=0x0) returned 1 [0108.224] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0108.224] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0108.224] CloseHandle (hObject=0x1bc) returned 1 [0108.224] CloseHandle (hObject=0x1b8) returned 1 [0108.226] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Office\\DocumentRepository.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Office\\DocumentRepository.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.226] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\DocumentRepository.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.226] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\DocumentRepository.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xc114009a, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 0x55e290 [0108.226] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xc114009a, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 0 [0108.227] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0108.227] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\DocumentRepository.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico")) returned 1 [0108.228] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\DocumentRepository.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico")) returned 0xffffffff [0108.228] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8eea4a6, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xa8eea4a6, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xa8eea4a6, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Heartbeat", cAlternateFileName="HEARTB~1")) returned 1 [0108.228] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\Heartbeat\\*.*" (normalized: "c:\\users\\all users\\microsoft\\office\\heartbeat\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8eea4a6, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xa8eea4a6, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xa8eea4a6, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0108.230] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8eea4a6, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xa8eea4a6, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xa8eea4a6, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0108.230] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8eea4a6, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xa8eea4a6, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xa8eea4a6, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0108.230] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0108.230] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xc92aff08, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1 [0108.230] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.230] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.230] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.230] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.230] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.230] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.230] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySharePoints.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico")) returned 0x20 [0108.326] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySharePoints.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0108.326] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySharePoints.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0108.326] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.329] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.331] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.331] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.331] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.332] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.332] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.332] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.332] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.332] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.332] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.333] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.333] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.333] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.333] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.333] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.333] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.333] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.334] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.334] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.334] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.334] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.334] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.334] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.335] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.335] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.335] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.335] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.335] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.335] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.336] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.336] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.336] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.336] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.336] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.336] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.337] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.337] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.337] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.337] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.337] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.337] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.338] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.338] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.338] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.338] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.338] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.338] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.338] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x3c8, lpOverlapped=0x0) returned 1 [0108.338] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x3c8, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x3c8, lpOverlapped=0x0) returned 1 [0108.339] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0108.339] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0108.339] CloseHandle (hObject=0x1b8) returned 1 [0108.339] CloseHandle (hObject=0x1bc) returned 1 [0108.342] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySharePoints.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySharePoints.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.345] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySharePoints.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.346] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySharePoints.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xc92aff08, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 0x55e2d0 [0108.346] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xc92aff08, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 0 [0108.346] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0108.346] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySharePoints.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico")) returned 1 [0108.348] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySharePoints.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico")) returned 0xffffffff [0108.348] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xb52d3978, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1 [0108.348] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.348] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.348] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.348] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.348] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.349] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico")) returned 0x20 [0108.349] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0108.349] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0108.349] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.490] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.491] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.577] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.578] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.578] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.578] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.579] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.579] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.579] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.579] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.579] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.580] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x27e, lpOverlapped=0x0) returned 1 [0108.580] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x27e, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x27e, lpOverlapped=0x0) returned 1 [0108.581] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0108.581] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0108.581] CloseHandle (hObject=0x1bc) returned 1 [0108.581] CloseHandle (hObject=0x1b8) returned 1 [0108.583] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.584] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.585] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xb52d3978, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="MySite.ico", cAlternateFileName="")) returned 0x55e710 [0108.585] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xb52d3978, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="MySite.ico", cAlternateFileName="")) returned 0 [0108.585] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0108.585] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico")) returned 1 [0108.587] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\MySite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico")) returned 0xffffffff [0108.587] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xb94a03dd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1 [0108.588] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.588] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.588] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.588] GetWindowTextA (in: hWnd=0x60240, lpString=0x1eab5d4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.588] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.588] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1eab5d4) returned 0x18 [0108.589] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointPortalSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico")) returned 0x20 [0108.593] VirtualAlloc (lpAddress=0x1eac000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1eac000 [0108.595] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointPortalSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0108.595] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointPortalSite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0108.596] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.599] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.601] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.601] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.602] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.602] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.602] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.602] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.602] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.603] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.603] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.603] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.603] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x27e, lpOverlapped=0x0) returned 1 [0108.603] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x27e, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x27e, lpOverlapped=0x0) returned 1 [0108.603] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0108.603] WriteFile (in: hFile=0x1bc, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0108.604] CloseHandle (hObject=0x1b8) returned 1 [0108.604] CloseHandle (hObject=0x1bc) returned 1 [0108.606] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointPortalSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointPortalSite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.607] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointPortalSite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.607] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointPortalSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xb94a03dd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 0x55e910 [0108.607] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xb94a03dd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 0 [0108.607] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0108.607] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointPortalSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico")) returned 1 [0108.609] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointPortalSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico")) returned 0xffffffff [0108.609] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xb94caf8f, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1 [0108.609] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0108.609] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0108.609] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0108.609] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0108.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0108.610] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointTeamSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico")) returned 0x20 [0108.611] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointTeamSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0108.611] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointTeamSite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0108.611] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.617] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.619] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.619] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.619] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.619] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.620] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.620] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.620] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.620] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.620] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.621] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0108.621] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x27e, lpOverlapped=0x0) returned 1 [0108.621] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x27e, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x27e, lpOverlapped=0x0) returned 1 [0108.621] ReadFile (in: hFile=0x1bc, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0108.621] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0108.621] CloseHandle (hObject=0x1bc) returned 1 [0108.621] CloseHandle (hObject=0x1b8) returned 1 [0108.623] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointTeamSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointTeamSite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0108.624] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointTeamSite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0108.624] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointTeamSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xb94caf8f, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 0x55e690 [0108.624] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xb94caf8f, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 0 [0108.624] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0108.624] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointTeamSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico")) returned 1 [0108.626] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\SharePointTeamSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico")) returned 0xffffffff [0108.626] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8294a900, ftCreationTime.dwHighDateTime=0x1d0ca66, ftLastAccessTime.dwLowDateTime=0xb94caf8f, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x8294a900, ftLastWriteTime.dwHighDateTime=0x1d0ca66, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 0 [0108.626] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0108.626] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54746e69, dwReserved1=0x536d6165, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1 [0108.626] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0108.631] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.631] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11be8600, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x11be8600, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x11be8600, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6815, dwReserved0=0x0, dwReserved1=0x0, cFileName="countrytable.xml", cAlternateFileName="")) returned 1 [0108.632] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78002e, dwReserved1=0x6c006d, cFileName="{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", cAlternateFileName="{18DCF~1")) returned 1 [0108.632] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0108.636] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x31000435, cFileName="..", cAlternateFileName="")) returned 1 [0108.636] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0f6b62d, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0f6b62d, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0f6b62d, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xe90, dwReserved0=0x0, dwReserved1=0x31000435, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0108.638] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eac9f1, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0eac9f1, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0eac9f1, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x73006e, dwReserved1=0x78002e, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0108.638] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 1 [0108.638] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0108.639] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.639] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0108.639] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0108.640] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="..", cAlternateFileName="")) returned 1 [0108.640] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e3a2a4, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e3a2a4, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0e60513, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x36000234, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0108.641] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e86782, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e86782, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0e86782, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0108.641] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e86782, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e86782, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0e86782, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 0 [0108.642] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0108.642] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e60513, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e60513, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0eac9f1, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0108.642] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e60513, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e60513, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0eac9f1, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0108.642] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0108.642] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 0 [0108.643] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0108.643] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{1e05dd5d-a022-46c5-963c-b20de341170f}", cAlternateFileName="{1E05D~1")) returned 1 [0108.643] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0108.646] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="..", cAlternateFileName="")) returned 1 [0108.646] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa10504bd, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa10504bd, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa10504bd, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x4ef, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0108.646] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa102a24e, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa102a24e, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa102a24e, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x73006e, dwReserved1=0x78002e, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0108.647] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 1 [0108.647] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0108.647] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="..", cAlternateFileName="")) returned 1 [0108.647] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime", cAlternateFileName="")) returned 1 [0108.648] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0108.648] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="..", cAlternateFileName="")) returned 1 [0108.648] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0fddd6c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0fddd6c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1003fe2, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0108.649] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1003fe2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1003fe2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1003fe2, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0108.650] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1003fe2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1003fe2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1003fe2, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 0 [0108.650] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0108.650] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1003fe2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1003fe2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa102a24e, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0108.651] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1003fe2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1003fe2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa102a24e, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0108.651] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0108.651] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 0 [0108.651] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0108.651] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{23cb517f-5073-4e96-a202-7fe6122a2271}", cAlternateFileName="{23CB5~1")) returned 1 [0108.651] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0108.655] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="..", cAlternateFileName="")) returned 1 [0108.655] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa15d3ecf, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa15d3ecf, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa15fa13e, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x159d, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0108.655] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1430407, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1430407, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1430407, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x73006e, dwReserved1=0x78002e, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0108.656] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 1 [0108.656] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0108.658] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="..", cAlternateFileName="")) returned 1 [0108.658] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime", cAlternateFileName="")) returned 1 [0108.658] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0108.659] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="..", cAlternateFileName="")) returned 1 [0108.659] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1397a49, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1397a49, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa13bdcbd, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0108.659] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa140a197, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa140a197, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa140a197, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0108.660] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa140a197, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa140a197, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa140a197, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 0 [0108.660] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0108.660] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa13e3f24, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa13e3f24, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa140a197, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0108.661] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa13e3f24, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa13e3f24, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa140a197, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0108.661] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0108.661] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 0 [0108.661] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0108.661] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", cAlternateFileName="{3742E~1")) returned 1 [0108.661] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0108.665] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="..", cAlternateFileName="")) returned 1 [0108.665] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2363c60, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa2363c60, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa2389ec8, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1988, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0108.665] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa21c0195, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa21c0195, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa21c0195, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x73006e, dwReserved1=0x78002e, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0108.667] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 1 [0108.667] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0108.667] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="..", cAlternateFileName="")) returned 1 [0108.668] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime", cAlternateFileName="")) returned 1 [0108.668] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0108.669] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="..", cAlternateFileName="")) returned 1 [0108.669] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa214da47, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa214da47, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa2173cb2, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xbd7, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0108.670] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2199f29, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa2199f29, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa2199f29, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0108.670] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa21c0195, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa21c0195, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa21c0195, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x905, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_2.provxml", cAlternateFileName="POWER_~3.PRO")) returned 1 [0108.671] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa21c0195, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa21c0195, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa21c0195, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x905, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_2.provxml", cAlternateFileName="POWER_~3.PRO")) returned 0 [0108.671] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0108.671] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2173cb2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa2173cb2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa21c0195, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0108.672] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2173cb2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa2173cb2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa21c0195, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0108.672] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0108.672] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 0 [0108.672] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0108.672] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{7a30a9be-737f-47a1-a541-6e7b0761ed19}", cAlternateFileName="{7A30A~1")) returned 1 [0108.672] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0108.691] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="..", cAlternateFileName="")) returned 1 [0108.691] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1c629f3, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1c629f3, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1c88c62, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1f35, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0108.691] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a2656d, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1a2656d, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a2656d, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x73006e, dwReserved1=0x78002e, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0108.692] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 1 [0108.692] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0108.694] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="..", cAlternateFileName="")) returned 1 [0108.694] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime", cAlternateFileName="")) returned 1 [0108.694] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0108.695] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="..", cAlternateFileName="")) returned 1 [0108.695] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa198dbb0, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa198dbb0, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa19b3e1c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xfcb, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0108.695] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19da08f, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa19da08f, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa19da08f, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0108.696] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a002fa, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1a002fa, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a002fa, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_2.provxml", cAlternateFileName="POWER_~3.PRO")) returned 1 [0108.697] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a002fa, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1a002fa, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a002fa, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_2.provxml", cAlternateFileName="POWER_~3.PRO")) returned 0 [0108.697] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0108.697] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19b3e1c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa19b3e1c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a2656d, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0108.697] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19b3e1c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa19b3e1c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a2656d, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0108.698] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0108.698] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 0 [0108.698] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0108.698] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{8fb7d64e-70fc-4f9d-89ee-d486817534df}", cAlternateFileName="{8FB7D~1")) returned 1 [0108.698] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0108.702] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="..", cAlternateFileName="")) returned 1 [0108.703] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa166c88f, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa166c88f, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1692b03, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0108.703] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa166c88f, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa166c88f, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa166c88f, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x73006e, dwReserved1=0x78002e, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0108.704] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 1 [0108.704] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0108.704] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="..", cAlternateFileName="")) returned 1 [0108.704] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime", cAlternateFileName="")) returned 1 [0108.704] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0108.706] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="..", cAlternateFileName="")) returned 1 [0108.706] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa16203b1, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa16203b1, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1646620, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0108.707] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa16203b1, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa16203b1, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1646620, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 0 [0108.707] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0108.707] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1646620, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1646620, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1646620, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0108.707] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1646620, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1646620, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1646620, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0108.708] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0108.708] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 0 [0108.708] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0108.708] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{99b095d8-5959-4820-bea7-7448c8427b4e}", cAlternateFileName="{99B09~1")) returned 1 [0108.708] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0108.711] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="..", cAlternateFileName="")) returned 1 [0108.711] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce2cc2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0ce2cc2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0ce2cc2, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0108.712] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0c7056c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0c7056c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0c7056c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x73006e, dwReserved1=0x78002e, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0108.712] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 1 [0108.712] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0108.713] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="..", cAlternateFileName="")) returned 1 [0108.713] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime", cAlternateFileName="")) returned 1 [0108.713] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0108.714] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="..", cAlternateFileName="")) returned 1 [0108.714] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0c2408e, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0c2408e, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0c4a301, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0108.714] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0c2408e, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0c2408e, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0c4a301, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 0 [0108.714] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0108.715] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0c7056c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0c7056c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0c7056c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0108.715] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0c7056c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0c7056c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0c7056c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0108.715] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0108.715] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 0 [0108.716] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0108.716] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{9aec5bda-1e87-46b3-bb96-1a01c606555e}", cAlternateFileName="{9AEC5~1")) returned 1 [0108.716] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0108.719] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="..", cAlternateFileName="")) returned 1 [0108.719] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1c88c62, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1c88c62, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1c88c62, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0108.719] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a2656d, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1a2656d, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a2656d, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x73006e, dwReserved1=0x78002e, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0108.720] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 1 [0108.720] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0108.721] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="..", cAlternateFileName="")) returned 1 [0108.721] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime", cAlternateFileName="")) returned 1 [0108.721] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0108.722] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="..", cAlternateFileName="")) returned 1 [0108.722] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19da08f, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa19da08f, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a002fa, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1bae, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0108.722] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19da08f, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa19da08f, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a002fa, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1bae, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 0 [0108.722] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0108.722] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a002fa, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1a002fa, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a002fa, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0108.723] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a002fa, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1a002fa, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a002fa, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0108.723] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0108.723] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 0 [0108.723] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0108.723] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", cAlternateFileName="{9DF6A~1")) returned 1 [0108.724] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0108.727] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="..", cAlternateFileName="")) returned 1 [0108.727] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa140a197, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa140a197, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa140a197, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xd1c, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0108.727] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa134b56b, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa134b56b, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa134b56b, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x73006e, dwReserved1=0x78002e, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0108.728] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 1 [0108.728] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0108.729] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="..", cAlternateFileName="")) returned 1 [0108.729] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime", cAlternateFileName="")) returned 1 [0108.729] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0108.730] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="..", cAlternateFileName="")) returned 1 [0108.730] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12d8e21, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa12d8e21, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa12ff08c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71a, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0108.730] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa13252fc, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa13252fc, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa13252fc, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0108.740] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa13252fc, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa13252fc, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa13252fc, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 0 [0108.740] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0108.741] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12ff08c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa12ff08c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa134b56b, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0108.741] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12ff08c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa12ff08c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa134b56b, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0108.741] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0108.742] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 0 [0108.742] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0108.742] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", cAlternateFileName="{B0B91~1")) returned 1 [0108.742] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0203.618] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="..", cAlternateFileName="")) returned 1 [0203.619] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d7b677, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0d7b677, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0da18e6, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x8a0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0203.622] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d2f19c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0d2f19c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0d2f19c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x73006e, dwReserved1=0x78002e, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0203.623] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 1 [0203.623] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0203.789] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="..", cAlternateFileName="")) returned 1 [0203.789] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime", cAlternateFileName="")) returned 1 [0203.789] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0203.789] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="..", cAlternateFileName="")) returned 1 [0203.790] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce2cc2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0ce2cc2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0d08f31, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0203.790] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce2cc2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0ce2cc2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0d08f31, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 0 [0203.790] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0203.791] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d08f31, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0d08f31, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0d2f19c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0203.791] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d08f31, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0d08f31, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0d2f19c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0203.791] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0203.791] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 0 [0203.791] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0203.791] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{c5dc3753-b6c8-4057-b396-bf13d769311c}", cAlternateFileName="{C5DC3~1")) returned 1 [0203.791] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0203.911] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="..", cAlternateFileName="")) returned 1 [0203.911] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebc2ab1, ftCreationTime.dwHighDateTime=0x1d112b1, ftLastAccessTime.dwLowDateTime=0xebc2ab1, ftLastAccessTime.dwHighDateTime=0x1d112b1, ftLastWriteTime.dwLowDateTime=0xebc2ab1, ftLastWriteTime.dwHighDateTime=0x1d112b1, nFileSizeHigh=0x0, nFileSizeLow=0x666, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0203.911] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9c845, ftCreationTime.dwHighDateTime=0x1d112b1, ftLastAccessTime.dwLowDateTime=0xeb9c845, ftLastAccessTime.dwHighDateTime=0x1d112b1, ftLastWriteTime.dwLowDateTime=0xeb9c845, ftLastWriteTime.dwHighDateTime=0x1d112b1, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x73006e, dwReserved1=0x78002e, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0203.912] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 1 [0203.912] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0203.912] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="..", cAlternateFileName="")) returned 1 [0203.913] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime", cAlternateFileName="")) returned 1 [0203.913] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0203.916] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="..", cAlternateFileName="")) returned 1 [0203.916] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb50367, ftCreationTime.dwHighDateTime=0x1d112b1, ftLastAccessTime.dwLowDateTime=0xeb50367, ftLastAccessTime.dwHighDateTime=0x1d112b1, ftLastWriteTime.dwLowDateTime=0xeb765cf, ftLastWriteTime.dwHighDateTime=0x1d112b1, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0203.917] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb50367, ftCreationTime.dwHighDateTime=0x1d112b1, ftLastAccessTime.dwLowDateTime=0xeb50367, ftLastAccessTime.dwHighDateTime=0x1d112b1, ftLastWriteTime.dwLowDateTime=0xeb765cf, ftLastWriteTime.dwHighDateTime=0x1d112b1, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 0 [0203.917] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0203.917] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9c845, ftCreationTime.dwHighDateTime=0x1d112b1, ftLastAccessTime.dwLowDateTime=0xeb9c845, ftLastAccessTime.dwHighDateTime=0x1d112b1, ftLastWriteTime.dwLowDateTime=0xeb9c845, ftLastWriteTime.dwHighDateTime=0x1d112b1, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0203.917] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9c845, ftCreationTime.dwHighDateTime=0x1d112b1, ftLastAccessTime.dwLowDateTime=0xeb9c845, ftLastAccessTime.dwHighDateTime=0x1d112b1, ftLastWriteTime.dwLowDateTime=0xeb9c845, ftLastWriteTime.dwHighDateTime=0x1d112b1, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0203.917] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0203.917] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 0 [0203.918] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0203.918] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{ee4aac98-c174-4941-82b1-d121e493e4fb}", cAlternateFileName="{EE4AA~1")) returned 1 [0203.918] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0203.919] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="..", cAlternateFileName="")) returned 1 [0203.919] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18f51ef, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa18f51ef, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa18f51ef, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71d, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0203.920] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18cef80, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa18cef80, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa18cef80, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x73006e, dwReserved1=0x78002e, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0203.920] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 1 [0203.920] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0203.921] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="..", cAlternateFileName="")) returned 1 [0203.921] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime", cAlternateFileName="")) returned 1 [0203.921] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0203.922] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="..", cAlternateFileName="")) returned 1 [0203.922] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1882aa2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1882aa2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa18a8d11, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0203.922] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1882aa2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1882aa2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa18a8d11, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 0 [0203.922] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0203.922] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18a8d11, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa18a8d11, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa18a8d11, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0203.923] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18a8d11, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa18a8d11, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa18a8d11, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0203.923] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0203.923] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 0 [0203.923] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0203.925] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{f11899f2-71ec-4621-9997-e17ae2f6eb26}", cAlternateFileName="{F1189~1")) returned 1 [0203.925] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0204.024] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="..", cAlternateFileName="")) returned 1 [0204.024] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0fddd6c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0fddd6c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0fddd6c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0204.025] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0f1f13f, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0f1f13f, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0f1f13f, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x73006e, dwReserved1=0x78002e, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0204.025] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 1 [0204.025] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0204.080] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="..", cAlternateFileName="")) returned 1 [0204.080] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime", cAlternateFileName="")) returned 1 [0204.081] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0204.081] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="..", cAlternateFileName="")) returned 1 [0204.081] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eac9f1, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0eac9f1, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0eac9f1, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0204.082] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed2c64, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0ed2c64, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0ef8ed0, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0204.082] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed2c64, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0ed2c64, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0ef8ed0, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 0 [0204.082] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0204.083] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed2c64, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0ed2c64, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0ef8ed0, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0204.083] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed2c64, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0ed2c64, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0ef8ed0, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0204.083] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0204.083] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 0 [0204.083] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0204.084] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 1 [0204.084] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0204.097] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="..", cAlternateFileName="")) returned 1 [0204.098] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa9d106f, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xaa9d106f, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xaa9d106f, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x6eb8, dwReserved0=0x6c6d782e, dwReserved1=0x2e0065, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0204.098] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9fd4d57, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9fd4d57, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9fd4d57, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x73006e, dwReserved1=0x78002e, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0204.099] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 1 [0204.099] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0204.100] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="..", cAlternateFileName="")) returned 1 [0204.100] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime", cAlternateFileName="")) returned 1 [0204.100] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0204.194] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="..", cAlternateFileName="")) returned 1 [0204.195] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e574f3, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9e574f3, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9e7d76e, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x19aa, dwReserved0=0x0, dwReserved1=0x32000634, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0204.195] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e7d76e, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9e7d76e, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9e7d76e, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x586, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0204.198] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9ec9c48, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9ec9c48, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9ec9c48, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1018, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_2.provxml", cAlternateFileName="POWER_~3.PRO")) returned 1 [0204.199] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9f16127, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9f16127, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9f16127, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1939, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_3.provxml", cAlternateFileName="POWER_~4.PRO")) returned 1 [0204.199] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9f62605, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9f62605, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9f62605, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1939, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_4.provxml", cAlternateFileName="PO21B6~1.PRO")) returned 1 [0204.200] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9f88875, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9f88875, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9f88875, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_5.provxml", cAlternateFileName="PO5EBD~1.PRO")) returned 1 [0204.200] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9faeae8, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9faeae8, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9faeae8, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x757, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_6.provxml", cAlternateFileName="PO805B~1.PRO")) returned 1 [0204.201] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9faeae8, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9faeae8, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9faeae8, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x93f, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_7.provxml", cAlternateFileName="POFE19~1.PRO")) returned 1 [0204.201] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9faeae8, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9faeae8, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9faeae8, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x93f, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="Power_7.provxml", cAlternateFileName="POFE19~1.PRO")) returned 0 [0204.201] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0204.203] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e7d76e, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9e7d76e, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9faeae8, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x5d3, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0204.203] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e7d76e, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9e7d76e, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9faeae8, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x5d3, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0204.203] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0204.203] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="Prov", cAlternateFileName="")) returned 0 [0204.203] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0204.204] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 0 [0204.204] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0204.204] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3840877a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3840877a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x392d6631, dwReserved1=0x2d633431, cFileName="Search", cAlternateFileName="")) returned 1 [0204.208] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3840877a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3840877a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0204.209] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3840877a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3840877a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0204.210] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3879c03d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="Data", cAlternateFileName="")) returned 1 [0204.210] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3879c03d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0204.210] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3879c03d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x3d000835, cFileName="..", cAlternateFileName="")) returned 1 [0204.210] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3879c03d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x3d000835, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1 [0204.210] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3879c03d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0204.212] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3879c03d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName="..", cAlternateFileName="")) returned 1 [0204.212] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x63dc6bf9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63dc6bf9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName="Windows", cAlternateFileName="")) returned 1 [0204.212] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x63dc6bf9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63dc6bf9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0204.219] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x63dc6bf9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63dc6bf9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.219] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3879c03d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config", cAlternateFileName="")) returned 1 [0204.219] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\config\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3879c03d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0204.219] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3879c03d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.221] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3879c03d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0204.221] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0204.221] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38834896, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x38834896, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63e1320b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0204.227] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0204.228] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0204.233] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0204.233] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0204.233] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0204.233] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0204.323] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.chk")) returned 0x2020 [0204.413] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.chk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c4 [0204.414] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0204.417] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.419] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.421] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.421] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.421] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0204.421] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0204.421] CloseHandle (hObject=0x1c4) returned 1 [0204.422] CloseHandle (hObject=0x1c8) returned 1 [0204.427] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.chk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0204.428] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0204.428] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.chk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38834896, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x38834896, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63e1320b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="edb.chk", cAlternateFileName="")) returned 0x55e590 [0204.428] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x38834896, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x38834896, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63e1320b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="edb.chk", cAlternateFileName="")) returned 0 [0204.428] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0204.429] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.chk")) returned 1 [0204.430] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.chk")) returned 0xffffffff [0204.430] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x387c2346, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a628188, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63e1320b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="edb.log", cAlternateFileName="")) returned 1 [0204.431] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0204.431] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0204.431] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0204.431] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0204.431] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0204.431] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0204.431] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.log")) returned 0x2020 [0204.432] VirtualAlloc (lpAddress=0x1eb0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1eb0000 [0204.432] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0204.433] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c4 [0204.433] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.437] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.439] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.445] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.446] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.446] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.446] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.446] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.446] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.447] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.447] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.447] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.447] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.447] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.447] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.448] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.448] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.448] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.448] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.448] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.448] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.449] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.449] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.449] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.449] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.449] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.449] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.450] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.450] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.450] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.450] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.451] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.451] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.451] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.451] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.451] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.452] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.452] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.452] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.452] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.452] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.452] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.453] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.453] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.453] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.453] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.453] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.453] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.453] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.454] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.454] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.455] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.455] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.455] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.455] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.455] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.456] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.456] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.456] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.456] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.456] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.456] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.456] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.457] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.457] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.458] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.458] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.458] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.458] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.458] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.458] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.459] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.459] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.459] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.459] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.459] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.459] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.460] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.460] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.460] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.460] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.460] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.460] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.460] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.461] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.461] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.461] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.461] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.461] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.461] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.462] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.462] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.462] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.462] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.462] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.462] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.463] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.468] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.468] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.468] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.469] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.469] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.469] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.469] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.469] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.469] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.473] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.473] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.473] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.473] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.473] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.473] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.474] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.474] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.474] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.474] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.474] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.475] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.475] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.475] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.475] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.475] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.475] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.476] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.476] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.476] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.476] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.476] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.476] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.476] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.478] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.478] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.478] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.478] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.478] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.478] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.478] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.479] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.479] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.479] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.479] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.479] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.479] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.480] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.480] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.480] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.480] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.480] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.480] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.480] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.481] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.481] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.481] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.481] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.481] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.481] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.481] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.482] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.482] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.482] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.482] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.483] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.483] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.483] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.483] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.483] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.483] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.484] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.484] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.484] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.484] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.484] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.484] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.485] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.485] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.485] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.485] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.488] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.488] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.488] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.488] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.488] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.488] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.489] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.489] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.489] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.489] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.489] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.489] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.490] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.490] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.490] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.490] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.490] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.490] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.491] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.491] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.491] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.491] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.491] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.491] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.491] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.492] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.492] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.492] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.492] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.492] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.493] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.493] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.493] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.494] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.494] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.494] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.494] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.494] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.494] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.494] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.495] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.495] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.495] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.495] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.495] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.495] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.496] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.496] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.525] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.526] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.526] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.526] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.526] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.527] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.527] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.527] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.527] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.527] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.528] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.528] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.528] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.528] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.528] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.529] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.529] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.529] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.529] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.529] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.530] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.530] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.530] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.530] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.531] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.531] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.531] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.531] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.531] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.532] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.532] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.532] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.532] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.533] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.534] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.534] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.534] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.534] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.534] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.534] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.534] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.535] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.535] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.535] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.535] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.535] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.535] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.536] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.536] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.536] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.536] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.536] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.536] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.537] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.537] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.537] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.537] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.537] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.537] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.538] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.538] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.538] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.538] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.538] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.560] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.560] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.561] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.561] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.561] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.561] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.561] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.561] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.562] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.562] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.562] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.562] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.562] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.562] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.563] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.563] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.563] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.563] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.564] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.564] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.564] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.564] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.565] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.565] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.565] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.565] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.565] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.567] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.567] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.567] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.568] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.568] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.568] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.568] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.568] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.568] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.569] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.569] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.569] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.569] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.569] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.570] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.570] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.570] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.570] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.570] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.571] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.571] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.571] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.571] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.571] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.571] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.572] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.572] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.572] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.572] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.572] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.572] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.573] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.573] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.574] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.574] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.574] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.575] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.575] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.575] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.575] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.575] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.575] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.576] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.576] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.576] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.576] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.576] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.576] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.577] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.577] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.577] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.577] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.577] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.577] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.578] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.578] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.578] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.578] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.578] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.578] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.579] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.579] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.594] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.594] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.595] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.595] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.595] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.595] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.596] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.596] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.597] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.597] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.597] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.597] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.597] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.598] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.598] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.598] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.598] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.598] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.598] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.599] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.599] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.599] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.599] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.599] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.600] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.600] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.600] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.600] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.600] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.600] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.601] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.601] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.601] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.601] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.601] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.602] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.603] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.603] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.603] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.603] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.603] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.603] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.604] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.604] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.604] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.604] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.604] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.604] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.604] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.605] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.605] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.605] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.605] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.605] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.605] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.606] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.606] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.606] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.606] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.606] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.606] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.607] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.607] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.607] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.607] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.607] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.607] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.607] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.608] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.608] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.608] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.608] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.608] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.608] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.609] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.609] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.609] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.609] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.609] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.609] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.610] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.610] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.610] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.615] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.616] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.616] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.616] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.616] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.616] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.616] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.617] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.617] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.617] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.617] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.617] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.617] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.617] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.618] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.618] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.619] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.619] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.620] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.620] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.620] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.620] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.620] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.621] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.621] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.621] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.621] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.621] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.621] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.622] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.622] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.622] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.622] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.622] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.622] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.623] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.623] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.628] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0204.628] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0204.628] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.log"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x387c2346, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a628188, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63e1320b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="edb.log", cAlternateFileName="")) returned 0x55e2d0 [0204.628] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x387c2346, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a628188, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63e1320b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="edb.log", cAlternateFileName="")) returned 0 [0204.628] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0204.629] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.log")) returned 1 [0204.647] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb.log")) returned 0xffffffff [0204.648] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x387c2346, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x387c2346, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a64e43f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0204.648] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0204.648] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0204.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0204.649] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0204.649] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0204.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0204.649] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00001.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00001.log")) returned 0x2020 [0204.650] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00001.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00001.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c4 [0204.650] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00001.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00001.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0204.651] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.663] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.664] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.796] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.796] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.796] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.796] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.797] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.797] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.797] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.797] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.797] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.797] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.798] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.798] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.798] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.799] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.799] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.799] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.799] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.799] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.799] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.800] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.800] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.800] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.800] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.800] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.800] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.801] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.801] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.801] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.801] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.801] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.801] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.801] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.802] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.802] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.802] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.802] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.802] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.802] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.803] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.803] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.803] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.803] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.803] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.803] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.804] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.804] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.804] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.804] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.804] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.804] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.804] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.805] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.805] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.805] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.805] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.805] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.805] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.806] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.806] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.806] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.806] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.806] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.954] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.956] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.956] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.956] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.956] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.956] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.956] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.957] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.957] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.957] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.957] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.957] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.957] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.958] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.958] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.958] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.958] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.958] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.958] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.958] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.959] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.959] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.959] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.959] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.959] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.959] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.959] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.960] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.960] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.961] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.961] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.961] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.961] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.972] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.972] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.972] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.972] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.973] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.973] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.973] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.973] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.973] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.973] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.974] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.974] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.974] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.974] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.974] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.974] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.975] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.975] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.975] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.975] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.975] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.975] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.975] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.976] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.976] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.976] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.976] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.976] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.976] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.976] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.977] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.977] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.978] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.978] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.978] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.978] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.978] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.978] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.979] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.979] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.979] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.979] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.979] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.979] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.979] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.980] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.980] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.980] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.980] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.980] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.980] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.980] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.981] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.981] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.981] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.981] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.981] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.981] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.982] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.982] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.982] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.982] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.983] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.983] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.983] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.983] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.983] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.983] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.984] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.984] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.984] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.984] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.984] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.984] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.985] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.985] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.985] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.986] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.986] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.986] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.986] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.986] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.987] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.987] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.987] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.987] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.987] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.988] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.988] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.988] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.988] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.988] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.988] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.989] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.989] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.989] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.989] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.989] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.989] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.990] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.990] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.990] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.990] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.990] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.990] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.990] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.991] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.991] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.991] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.991] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.991] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.991] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.992] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.992] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.992] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.992] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.992] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.992] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.992] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.993] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.993] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.993] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.993] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.993] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.993] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.994] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0204.994] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.122] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.123] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.123] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.123] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.123] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.123] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.123] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.124] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.124] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.124] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.124] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.124] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.124] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.124] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.125] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.125] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.125] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.125] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.125] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.125] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.125] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.126] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.126] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.127] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.127] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.127] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.127] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.128] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.128] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.128] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.128] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.128] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.128] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.130] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.130] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.130] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.130] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.130] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.130] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.130] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.131] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.131] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.131] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.131] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.131] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.131] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.131] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.132] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.132] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.132] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.132] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.132] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.132] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.133] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.133] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.133] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.133] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.133] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.133] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.133] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.134] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.134] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.134] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.134] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.135] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.135] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.135] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.135] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.135] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.135] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.136] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.136] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.136] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.136] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.136] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.136] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.136] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.137] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.137] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.137] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.137] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.137] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.137] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.138] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.138] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.138] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.138] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.138] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.138] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.139] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.139] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.139] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.139] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.139] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.139] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.139] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.140] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.140] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.140] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.140] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.140] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.141] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.141] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.141] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.141] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.141] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.141] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.142] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.142] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.142] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.142] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.142] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.142] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.143] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.143] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.143] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.143] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.143] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.143] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.144] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.144] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.144] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.144] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.144] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.144] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.145] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.145] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.145] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.152] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.152] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.152] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.153] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.153] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.153] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.153] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.153] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.153] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.154] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.154] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.154] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.154] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.154] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.154] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.154] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.155] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.155] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.155] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.155] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.155] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.155] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.156] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.156] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.156] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.156] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.156] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.156] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.157] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.157] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.157] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.158] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.158] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.159] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.159] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.159] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.159] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.159] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.159] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.160] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.160] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.160] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.160] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.160] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.160] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.161] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.161] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.161] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.161] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.161] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.161] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.161] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.162] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.162] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.162] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.162] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.162] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.162] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.163] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.163] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.163] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.163] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.163] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.163] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.333] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.333] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.334] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.334] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.334] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.334] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.334] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.334] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.335] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.335] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.335] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.335] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.335] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.335] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.335] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.336] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.336] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.336] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.336] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.336] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.336] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.337] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.337] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.337] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.337] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.337] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.337] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.337] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.338] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.338] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.338] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.338] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.338] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.339] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.339] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.339] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.339] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.339] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.339] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.339] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.340] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.340] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.340] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.340] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.340] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.340] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.341] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.341] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.341] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.341] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.341] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.342] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.342] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.342] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.342] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.342] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.342] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.343] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.343] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.343] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.343] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.343] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.344] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.344] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.344] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.344] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.344] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.344] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.345] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.345] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.345] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.346] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.346] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.346] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.346] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.346] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.346] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.347] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.347] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.347] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.347] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.351] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00001.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00001.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00001.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00001.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0205.352] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00001.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00001.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0205.352] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00001.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00001.log"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x387c2346, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x387c2346, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a64e43f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="edb00001.log", cAlternateFileName="")) returned 0x55e910 [0205.352] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x387c2346, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x387c2346, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a64e43f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="edb00001.log", cAlternateFileName="")) returned 0 [0205.352] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0205.352] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00001.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00001.log")) returned 1 [0205.362] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00001.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00001.log")) returned 0xffffffff [0205.362] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x387c2346, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x387e8567, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a7f1e79, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="edb00002.log", cAlternateFileName="")) returned 1 [0205.363] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0205.363] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0205.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0205.363] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0205.363] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0205.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0205.363] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00002.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00002.log")) returned 0x2020 [0205.364] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00002.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00002.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0205.364] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00002.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00002.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c4 [0205.365] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.372] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.377] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.378] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.379] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.379] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.379] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.379] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.380] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.380] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.380] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.380] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.381] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.381] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.381] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.381] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.381] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.382] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.382] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.382] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.382] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.382] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.383] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.383] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.383] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.383] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.384] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.384] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.384] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.384] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.385] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.385] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.385] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.385] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.386] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.386] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.386] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.386] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.386] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.387] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.387] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.387] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.387] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.387] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.388] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.388] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.390] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.390] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.390] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.390] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.390] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.391] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.391] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.391] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.391] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.391] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.392] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.392] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.392] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.392] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.392] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.393] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.393] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.393] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.393] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.393] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.394] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.394] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.394] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.394] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.394] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.394] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.395] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.395] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.395] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.395] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.395] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.395] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.396] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.396] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.396] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.396] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.396] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.397] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.397] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.397] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.397] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.397] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.397] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.397] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.398] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.398] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.398] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.401] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.401] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.401] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.401] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.402] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.402] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.402] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.402] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.402] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.403] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.403] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.403] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.403] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.403] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.403] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.404] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.404] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.404] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.404] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.404] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.404] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.405] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.405] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.405] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.405] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.405] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.405] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.406] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.406] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.406] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.406] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.406] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.406] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.406] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.407] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.407] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.407] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.408] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.409] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.409] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.409] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.409] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.409] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.409] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.409] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.410] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.410] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.410] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.410] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.410] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.410] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.411] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.411] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.411] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.411] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.411] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.411] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.412] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.412] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.412] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.412] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.412] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.412] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.413] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.414] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.415] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.415] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.416] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.416] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.416] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.416] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.416] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.416] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.417] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.417] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.417] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.417] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.417] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.417] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.418] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.418] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.418] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.418] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.418] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.418] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.419] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.419] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.419] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.419] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.419] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.419] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.420] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.420] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.420] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.420] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.420] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.420] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.421] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.421] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.421] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.421] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.421] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.422] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.422] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.422] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.422] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.422] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.423] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.423] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.423] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.424] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.424] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.424] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.424] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.424] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.424] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.425] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.425] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.425] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.425] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.425] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.425] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.426] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.426] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.426] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.426] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.426] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.427] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.427] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.427] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.429] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.429] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.429] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.429] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.429] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.430] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.430] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.430] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.430] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.430] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.431] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.431] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.431] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.431] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.431] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.431] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.431] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.432] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.432] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.432] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.432] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.432] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.432] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.433] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.433] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.433] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.433] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.433] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.433] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.434] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.434] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.434] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.434] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.434] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.434] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.435] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.435] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.436] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.436] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.436] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.436] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.436] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.437] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.437] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.437] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.437] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.437] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.437] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.438] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.438] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.438] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.438] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.441] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.441] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.441] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.441] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.442] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.442] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.442] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.442] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.442] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.442] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.443] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.443] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.445] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.445] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.445] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.445] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.445] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.446] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.446] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.446] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.446] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.446] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.447] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.447] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.447] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.447] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.447] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.447] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.448] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.448] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.448] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.448] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.448] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.449] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.449] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.449] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.449] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.449] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.449] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.450] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.450] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.450] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.450] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.450] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.450] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.451] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.451] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.451] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.451] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.451] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.451] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.452] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.452] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.452] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.452] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.452] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.452] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.453] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.453] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.453] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.453] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.453] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.453] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.454] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.454] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.454] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.454] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.455] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.455] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.455] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.455] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.455] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.455] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.456] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.456] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.456] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.457] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.458] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.458] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.458] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.458] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.458] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.459] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.459] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.459] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.459] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.459] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.460] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.460] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.460] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.460] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.460] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.461] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.461] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.461] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.461] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.461] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.462] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.462] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.462] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.462] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.462] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.463] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.463] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.463] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.463] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.463] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.464] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.464] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.464] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.464] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.465] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.465] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.466] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.466] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.466] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.466] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.467] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.467] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.467] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.467] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.468] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.468] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.468] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.468] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.469] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.469] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.469] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.469] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.469] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.469] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.471] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.471] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.471] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.471] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.471] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.472] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.472] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.472] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.472] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.472] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.473] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.473] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.474] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.474] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.474] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.474] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.474] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.474] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.475] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.475] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.475] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.475] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.475] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.475] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.475] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.476] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.476] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.476] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.476] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.476] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.476] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.477] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.477] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.477] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.477] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.477] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.477] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.477] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.478] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.478] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.478] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.478] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.478] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.478] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.479] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.479] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.479] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.479] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.479] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.479] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.480] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.480] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.480] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.480] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.480] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.480] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.480] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.481] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.481] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.481] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.481] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.481] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.481] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.482] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.482] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.482] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.482] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.482] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.482] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.483] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.483] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.484] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.485] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.485] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.485] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.485] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.486] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.486] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.486] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.486] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.486] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.487] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.487] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.487] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.487] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.487] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.487] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.487] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.488] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.488] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.488] ReadFile (in: hFile=0x1c8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.488] WriteFile (in: hFile=0x1c4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.493] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00002.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00002.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00002.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00002.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0205.494] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00002.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00002.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0205.494] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00002.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00002.log"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x387c2346, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x387e8567, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a7f1e79, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="edb00002.log", cAlternateFileName="")) returned 0x55e590 [0205.494] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x387c2346, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x387e8567, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a7f1e79, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="edb00002.log", cAlternateFileName="")) returned 0 [0205.494] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0205.494] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00002.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00002.log")) returned 1 [0205.505] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edb00002.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edb00002.log")) returned 0xffffffff [0205.505] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3880e634, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3880e634, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3880e634, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0205.505] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3880e634, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3880e634, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3880e634, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x72006a, dwReserved1=0x73, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0205.506] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x387c2346, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a7cbb36, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63e1320b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x72006a, dwReserved1=0x73, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0205.506] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0205.506] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0205.507] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0205.507] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0205.507] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0205.507] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0205.507] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edbtmp.log")) returned 0x2020 [0205.507] VirtualAlloc (lpAddress=0x1eb4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1eb4000 [0205.508] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edbtmp.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c4 [0205.508] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0205.509] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.548] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.550] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.577] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.577] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.578] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.578] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.578] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.578] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.578] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.578] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.579] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.579] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.603] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.604] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.604] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.604] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.604] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.605] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.605] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.605] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.605] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.605] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.606] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.606] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.606] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.606] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.607] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.607] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.607] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.607] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.608] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.609] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.609] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.609] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.609] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.610] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.610] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.610] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.611] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.611] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.611] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.611] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.612] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.612] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.612] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.612] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.612] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.613] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.613] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.613] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.613] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.614] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.614] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.614] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.614] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.614] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.615] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.615] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.615] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.615] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.615] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.616] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.616] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.616] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.616] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.616] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.617] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.617] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.617] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.617] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.617] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.618] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.618] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.618] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.618] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.619] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.619] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.619] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.619] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.619] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.619] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.620] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.620] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.620] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.620] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.621] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.621] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.621] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.621] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.621] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.621] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.622] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.622] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.622] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.622] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.623] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.820] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.821] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.821] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.821] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.821] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.821] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.822] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.822] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.822] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.822] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.823] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.823] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.823] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.823] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.823] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.824] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.824] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.824] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.824] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.825] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.825] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.825] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.825] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.825] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.826] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.826] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.826] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.826] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.826] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.827] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.827] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.827] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.827] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.828] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.829] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.829] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.830] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.830] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.830] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.830] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.830] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.831] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.831] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.831] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.831] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.831] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.832] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.832] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.832] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.832] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.832] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.833] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.833] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.833] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.833] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.833] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.834] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.834] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.834] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.834] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.835] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.835] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.835] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.837] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.837] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.838] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.838] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.838] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.838] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.839] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.839] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.839] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.839] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.839] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.840] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.840] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.840] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.840] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.840] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.841] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.841] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.841] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.841] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.841] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.842] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.842] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.842] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.842] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.842] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.843] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.843] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.843] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.843] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.843] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.844] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.844] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.844] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.844] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.845] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.845] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.845] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.845] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.845] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.846] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.846] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.848] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.848] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.848] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.848] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.849] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.849] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.849] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.849] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.850] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.850] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.850] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.850] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.850] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.851] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.851] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.851] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.851] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.852] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.852] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.855] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.855] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.855] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.856] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.856] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.856] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.856] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.856] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.857] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.857] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.857] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.857] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.857] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.858] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.858] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.858] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.858] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.858] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.859] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.859] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.859] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.859] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.859] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.860] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.860] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.860] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.861] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.861] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.861] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.861] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.861] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.862] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.862] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.862] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.862] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.862] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.863] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.864] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.864] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.864] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.864] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.865] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.865] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.865] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.865] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.865] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.865] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.866] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.866] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.866] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.866] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.867] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.867] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.867] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.867] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.867] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.868] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.868] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.868] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.868] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.868] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.869] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.869] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.869] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.871] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.871] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.872] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.872] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.872] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.872] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.873] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.873] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.873] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.873] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.873] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.874] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.874] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.874] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.874] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.875] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.875] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.875] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.875] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.875] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.876] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.876] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.876] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.877] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.877] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.877] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.877] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.878] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.878] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.878] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.878] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.878] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.879] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.879] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.879] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.879] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.879] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.880] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.880] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.880] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.880] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.880] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.881] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.881] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.881] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.881] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.882] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.882] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.882] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.882] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.882] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.883] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.883] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.883] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.883] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.883] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.884] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.884] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.884] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.884] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.884] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.885] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.885] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.885] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.886] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.887] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.887] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.887] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.887] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.888] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.888] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.888] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.888] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.888] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.889] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.889] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.889] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.889] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.889] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.890] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.890] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.890] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.890] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.890] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.891] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.891] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.891] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.891] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.891] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.895] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.896] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.896] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.896] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.896] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.896] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.897] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.897] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.897] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.897] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.897] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.898] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.899] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.899] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.899] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.899] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.900] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.900] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.900] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.900] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.900] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.901] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.901] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.901] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.901] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.901] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.902] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.902] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.902] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.902] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.903] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.903] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.903] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.903] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.904] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.904] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.904] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.904] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.904] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.907] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.908] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.908] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.908] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.908] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.908] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.909] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.909] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.909] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.909] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.909] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.910] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.910] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.910] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.910] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.910] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.911] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.911] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.911] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.911] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.911] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.912] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.912] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.912] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.912] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.913] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.913] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.913] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.913] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.913] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.914] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.914] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.914] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.914] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.915] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.915] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.915] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.915] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.916] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.916] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.916] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.916] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.916] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.917] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.917] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.917] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.917] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.918] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.918] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.918] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.918] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.919] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.919] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.919] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.919] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.919] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.920] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.920] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.920] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.920] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.921] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.921] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.921] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.921] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.922] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.922] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.922] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.922] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.922] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.923] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.923] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.924] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.924] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.924] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.924] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.925] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.925] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.925] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.925] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.925] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.926] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.926] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.926] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.926] ReadFile (in: hFile=0x1c4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.927] WriteFile (in: hFile=0x1c8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0205.933] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edbtmp.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0205.940] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0205.941] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edbtmp.log"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x387c2346, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a7cbb36, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63e1320b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="edbtmp.log", cAlternateFileName="")) returned 0x55e910 [0205.941] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x387c2346, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a7cbb36, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63e1320b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="edbtmp.log", cAlternateFileName="")) returned 0 [0205.941] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0205.941] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edbtmp.log")) returned 1 [0205.953] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\edbtmp.log")) returned 0xffffffff [0205.953] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="GatherLogs", cAlternateFileName="GATHER~1")) returned 1 [0205.954] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0205.958] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0205.958] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="SystemIndex", cAlternateFileName="SYSTEM~1")) returned 1 [0205.958] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\systemindex\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72b8c026, dwReserved1=0x35000431, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0205.963] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72b8c026, dwReserved1=0x35000431, cFileName="..", cAlternateFileName="")) returned 1 [0205.963] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63d081f8, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x72b8c026, dwReserved1=0x35000431, cFileName="SystemIndex.1.Crwl", cAlternateFileName="SYSTEM~1.CRW")) returned 1 [0205.964] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63d081f8, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x2e0031, dwReserved1=0x720063, cFileName="SystemIndex.1.gthr", cAlternateFileName="SYSTEM~1.GTH")) returned 1 [0205.965] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63d081f8, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x2e0031, dwReserved1=0x720063, cFileName="SystemIndex.1.gthr", cAlternateFileName="SYSTEM~1.GTH")) returned 0 [0205.965] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0205.965] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="SystemIndex", cAlternateFileName="SYSTEM~1")) returned 0 [0205.965] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0205.966] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x389fe671, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7865646e, dwReserved1=0x2000002, cFileName="Projects", cAlternateFileName="")) returned 1 [0205.966] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x389fe671, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7865646e, dwReserved1=0x672e312e, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0205.966] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x389fe671, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7865646e, dwReserved1=0x672e312e, cFileName="..", cAlternateFileName="")) returned 1 [0205.966] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7865646e, dwReserved1=0x672e312e, cFileName="SystemIndex", cAlternateFileName="SYSTEM~1")) returned 1 [0205.966] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0031, dwReserved1=0x35000431, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0205.966] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0031, dwReserved1=0x35000431, cFileName="..", cAlternateFileName="")) returned 1 [0205.967] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x389fe671, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0031, dwReserved1=0x35000431, cFileName="PropMap", cAlternateFileName="")) returned 1 [0205.967] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x389fe671, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0205.968] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x389fe671, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.969] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63e393f3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiPT0000.000", cAlternateFileName="")) returned 1 [0205.969] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x38a247c6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiPT0000.001", cAlternateFileName="")) returned 1 [0205.970] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x38a247c6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiPT0000.002", cAlternateFileName="")) returned 1 [0205.971] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x38a247c6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiPT0000.002", cAlternateFileName="")) returned 0 [0205.971] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0205.971] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30302e30, dwReserved1=0x35000432, cFileName="SecStore", cAlternateFileName="")) returned 1 [0205.971] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0205.974] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.974] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63ce200a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiST0000.000", cAlternateFileName="")) returned 1 [0205.975] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiST0000.001", cAlternateFileName="")) returned 1 [0205.975] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiST0000.002", cAlternateFileName="")) returned 1 [0205.976] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CiST0000.002", cAlternateFileName="")) returned 0 [0205.976] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0205.976] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30302e30, dwReserved1=0x35000432, cFileName="SecStore", cAlternateFileName="")) returned 0 [0205.976] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0205.976] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7865646e, dwReserved1=0x672e312e, cFileName="SystemIndex", cAlternateFileName="SYSTEM~1")) returned 0 [0205.976] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0205.976] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2220, ftCreationTime.dwLowDateTime=0x3885ad20, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3885ad20, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63dc6bf9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x810000, dwReserved0=0x7865646e, dwReserved1=0x2000002, cFileName="Windows.edb", cAlternateFileName="")) returned 1 [0205.977] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2220, ftCreationTime.dwLowDateTime=0x3885ad20, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3885ad20, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63dc6bf9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x810000, dwReserved0=0x7865646e, dwReserved1=0x2000002, cFileName="Windows.edb", cAlternateFileName="")) returned 0 [0205.977] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0205.977] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x63dc6bf9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63dc6bf9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3d000835, cFileName="Windows", cAlternateFileName="")) returned 0 [0205.977] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0205.978] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3847afbf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3847afbf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3847afbf, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x3d000835, cFileName="Temp", cAlternateFileName="")) returned 1 [0205.978] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3847afbf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3847afbf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6407587b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6264652e, dwReserved1=0x73726a2e, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0205.978] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3847afbf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3847afbf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6407587b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6264652e, dwReserved1=0x73726a2e, cFileName="..", cAlternateFileName="")) returned 1 [0205.978] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3847afbf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3847afbf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6407587b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6264652e, dwReserved1=0x73726a2e, cFileName="..", cAlternateFileName="")) returned 0 [0205.978] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0205.978] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3847afbf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3847afbf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3847afbf, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x3d000835, cFileName="Temp", cAlternateFileName="")) returned 0 [0205.978] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0205.979] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3879c03d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="Data", cAlternateFileName="")) returned 0 [0205.979] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0205.979] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbca7cf5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbca7cf5a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x392d6631, dwReserved1=0x2d633431, cFileName="SmsRouter", cAlternateFileName="SMSROU~1")) returned 1 [0205.979] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\*.*" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbca7cf5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbca7cf5a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e6f6974, dwReserved1=0x65726f73, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0205.979] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbca7cf5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbca7cf5a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e6f6974, dwReserved1=0x65726f73, cFileName="..", cAlternateFileName="")) returned 1 [0205.979] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcb3bc1a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e6f6974, dwReserved1=0x65726f73, cFileName="MessageStore", cAlternateFileName="MESSAG~1")) returned 1 [0205.979] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\*.*" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcb3bc1a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x39000831, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0205.982] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcb3bc1a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x39000831, cFileName="..", cAlternateFileName="")) returned 1 [0205.982] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac94d4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcac94d4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x500dbf59, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x6c6d782e, dwReserved1=0x39000831, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0205.988] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0205.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0205.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0205.989] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0205.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0205.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0205.989] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.chk")) returned 0x20 [0205.994] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.chk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1bc [0205.995] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.995] GetLastError () returned 0x5 [0205.995] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.chk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0205.996] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0xffffffff [0205.996] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.chk"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac94d4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcac94d4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x500dbf59, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="edb.chk", cAlternateFileName="")) returned 0x55e790 [0205.996] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac94d4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcac94d4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x500dbf59, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="edb.chk", cAlternateFileName="")) returned 0 [0205.996] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0205.996] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.chk")) returned 0 [0205.997] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.chk")) returned 0x20 [0205.997] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcaa32ae, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x500dbf59, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0205.997] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0205.997] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0205.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0205.998] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0205.998] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0205.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0205.998] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.log")) returned 0x20 [0205.998] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c0 [0205.998] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0205.999] GetLastError () returned 0x5 [0205.999] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0205.999] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0xffffffff [0205.999] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.log"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcaa32ae, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x500dbf59, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="edb.log", cAlternateFileName="")) returned 0x55e510 [0205.999] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcaa32ae, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x500dbf59, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="edb.log", cAlternateFileName="")) returned 0 [0205.999] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0205.999] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.log")) returned 0 [0206.000] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.log")) returned 0x20 [0206.000] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbca7cf5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0206.000] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0206.000] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.000] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0206.000] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0206.000] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.001] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0206.001] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00001.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb00001.log")) returned 0x20 [0206.001] VirtualAlloc (lpAddress=0x1eb8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1eb8000 [0206.002] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00001.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb00001.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c8 [0206.002] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00001.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb00001.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.003] GetLastError () returned 0x5 [0206.003] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00001.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb00001.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00001.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb00001.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0206.003] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00001.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb00001.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0xffffffff [0206.003] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00001.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb00001.log"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbca7cf5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="edb00001.log", cAlternateFileName="")) returned 0x55e590 [0206.003] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbca7cf5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="edb00001.log", cAlternateFileName="")) returned 0 [0206.003] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0206.004] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00001.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb00001.log")) returned 0 [0206.004] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00001.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb00001.log")) returned 0x20 [0206.004] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcaa32ae, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcaa32ae, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcaa32ae, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0206.005] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcaa32ae, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcaa32ae, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcaa32ae, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x72006a, dwReserved1=0x73, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0206.005] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcb3bc1a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x72006a, dwReserved1=0x73, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0206.006] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0206.006] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0206.006] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0206.006] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0206.006] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edbtmp.log")) returned 0x20 [0206.007] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edbtmp.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c4 [0206.007] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.007] GetLastError () returned 0x5 [0206.007] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edbtmp.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0206.007] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0xffffffff [0206.007] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edbtmp.log"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcb3bc1a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="edbtmp.log", cAlternateFileName="")) returned 0x55e310 [0206.008] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcb3bc1a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="edbtmp.log", cAlternateFileName="")) returned 0 [0206.008] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0206.008] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edbtmp.log")) returned 0 [0206.008] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edbtmp.log")) returned 0x20 [0206.008] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac94d4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcac94d4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5001d2cc, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.db", cAlternateFileName="SMSINT~1.DB")) returned 1 [0206.008] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0206.008] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.009] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0206.009] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0206.009] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.009] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0206.009] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db")) returned 0x20 [0206.009] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1cc [0206.009] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0206.010] GetLastError () returned 0x5 [0206.010] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0206.010] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0xffffffff [0206.010] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac94d4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcac94d4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5001d2cc, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="SmsInterceptStore.db", cAlternateFileName="SMSINT~1.DB")) returned 0x55e2d0 [0206.010] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac94d4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcac94d4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5001d2cc, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="SmsInterceptStore.db", cAlternateFileName="SMSINT~1.DB")) returned 0 [0206.010] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0206.011] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db")) returned 0 [0206.011] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db")) returned 0x20 [0206.011] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac94d4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcac94d4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5001d2cc, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.db", cAlternateFileName="SMSINT~1.DB")) returned 0 [0206.011] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0206.011] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcb3bc1a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e6f6974, dwReserved1=0x65726f73, cFileName="MessageStore", cAlternateFileName="MESSAG~1")) returned 0 [0206.011] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0206.011] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3d47fe2c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d47fe2c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x726f7453, dwReserved1=0x2d633465, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0206.011] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*.*" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3d47fe2c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d47fe2c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x70656372, dwReserved1=0x6f745374, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0206.012] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3d47fe2c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d47fe2c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x70656372, dwReserved1=0x6f745374, cFileName="..", cAlternateFileName="")) returned 1 [0206.012] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x93038, dwReserved0=0x70656372, dwReserved1=0x6f745374, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0206.012] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0206.012] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0206.012] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0206.012] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0206.012] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp")) returned 0x20 [0206.015] VirtualAlloc (lpAddress=0x1ebc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ebc000 [0206.015] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0206.016] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0206.017] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.037] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.039] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.041] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.041] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.042] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.042] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.043] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.043] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.043] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.043] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.043] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.044] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.044] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.044] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.044] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.045] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.045] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.050] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.050] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.050] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.051] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.051] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.051] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.052] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.052] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.052] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.052] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.052] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.053] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.053] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.053] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.054] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.054] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.054] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.054] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.054] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.055] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.055] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.055] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.055] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.055] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.056] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.056] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.056] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.056] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.057] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.057] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.057] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.057] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.057] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.058] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.058] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.058] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.058] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.058] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.059] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.059] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.059] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.059] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.059] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.059] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.060] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.060] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.060] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.060] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.061] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.061] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.061] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.061] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.061] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.062] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.062] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.062] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.062] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.062] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.063] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.063] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.063] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.065] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.065] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.065] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.065] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.066] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.066] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.066] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.066] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.066] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.067] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.067] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.067] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.067] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.067] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.068] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.068] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.068] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.068] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.095] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.096] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.096] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.096] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.096] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.097] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.097] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.097] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.097] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.097] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.098] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.098] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.098] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.098] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.098] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.099] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.099] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.099] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.099] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.099] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.100] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.100] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.100] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.100] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.100] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.101] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.101] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.101] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.101] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.101] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.102] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.102] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.102] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.103] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.103] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.104] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.104] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.104] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.104] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.105] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.105] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.105] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.105] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.105] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.106] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.106] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.106] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.106] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.106] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.107] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.107] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.107] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.107] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.107] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.108] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.108] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.108] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.108] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.108] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.109] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.109] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.110] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.110] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.110] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.112] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.112] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.113] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.113] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.113] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.113] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.113] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.114] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.114] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.114] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.114] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.114] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.115] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.115] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.115] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.115] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.115] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.116] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.116] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.116] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.116] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.116] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.117] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.117] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.117] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.117] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.117] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.118] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.118] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.118] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.118] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.118] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.119] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.119] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.119] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.119] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.119] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.120] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.120] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.120] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.120] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.120] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.121] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.121] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.121] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.121] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.121] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.122] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.122] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.122] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.122] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.122] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.123] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.123] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.123] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.123] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.124] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.124] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.124] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.124] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.125] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.125] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.126] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.126] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.127] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.127] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.127] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.127] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.127] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.128] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.128] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.128] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.128] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.129] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.129] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.129] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.129] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.129] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.130] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.130] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.130] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.130] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.130] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.131] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.131] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.131] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.131] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.131] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.132] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.132] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.132] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.132] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.132] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.133] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.133] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.133] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.133] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.135] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.135] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.135] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.135] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.135] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.136] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.136] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.136] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.136] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.136] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.137] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.137] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.137] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.137] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.137] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.138] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.138] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.138] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.138] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.138] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.139] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.139] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.139] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.139] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.139] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.140] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.140] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.148] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.148] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.148] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.148] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.148] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.149] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.149] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.149] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.149] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.150] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x38, lpOverlapped=0x0) returned 1 [0206.150] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x38, lpOverlapped=0x0) returned 1 [0206.150] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.150] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.150] CloseHandle (hObject=0x1b8) returned 1 [0206.150] CloseHandle (hObject=0x1d0) returned 1 [0206.217] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0206.219] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0206.219] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x93038, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="guest.bmp", cAlternateFileName="")) returned 0x55e510 [0206.219] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x93038, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="guest.bmp", cAlternateFileName="")) returned 0 [0206.219] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0206.220] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp")) returned 1 [0206.228] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp")) returned 0xffffffff [0206.228] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.png", cAlternateFileName="")) returned 1 [0206.229] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0206.229] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0206.229] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0206.229] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0206.229] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.png")) returned 0x20 [0206.230] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0206.230] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0206.231] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.323] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.325] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x518, lpOverlapped=0x0) returned 1 [0206.325] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x518, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x518, lpOverlapped=0x0) returned 1 [0206.325] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.325] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.325] CloseHandle (hObject=0x1d0) returned 1 [0206.325] CloseHandle (hObject=0x1b8) returned 1 [0206.328] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0206.328] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0206.329] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.png"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="guest.png", cAlternateFileName="")) returned 0x55e510 [0206.329] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="guest.png", cAlternateFileName="")) returned 0 [0206.329] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0206.329] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.png")) returned 1 [0206.333] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.png")) returned 0xffffffff [0206.333] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d47fe2c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d47fe2c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d47fe2c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RDhJ0CNFevzX.dat", cAlternateFileName="RDHJ0C~1.DAT")) returned 1 [0206.333] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0206.333] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.334] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0206.334] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0206.334] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.334] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0206.334] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\RDhJ0CNFevzX.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\rdhj0cnfevzx.dat")) returned 0x20 [0206.335] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\RDhJ0CNFevzX.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\rdhj0cnfevzx.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0206.335] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\RDhJ0CNFevzX.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\rdhj0cnfevzx.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0206.336] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.336] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.336] CloseHandle (hObject=0x1b8) returned 1 [0206.337] CloseHandle (hObject=0x1d0) returned 1 [0206.337] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\RDhJ0CNFevzX.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\rdhj0cnfevzx.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\RDhJ0CNFevzX.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\rdhj0cnfevzx.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0206.338] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\RDhJ0CNFevzX.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\rdhj0cnfevzx.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0206.338] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\RDhJ0CNFevzX.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\rdhj0cnfevzx.dat"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d47fe2c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d47fe2c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d47fe2c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="RDhJ0CNFevzX.dat", cAlternateFileName="RDHJ0C~1.DAT")) returned 0x55e290 [0206.338] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d47fe2c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d47fe2c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d47fe2c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="RDhJ0CNFevzX.dat", cAlternateFileName="RDHJ0C~1.DAT")) returned 0 [0206.338] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0206.339] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\RDhJ0CNFevzX.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\rdhj0cnfevzx.dat")) returned 1 [0206.339] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\RDhJ0CNFevzX.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\rdhj0cnfevzx.dat")) returned 0xffffffff [0206.339] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="user-192.png", cAlternateFileName="")) returned 1 [0206.340] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0206.340] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.340] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0206.340] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0206.340] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.340] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0206.340] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-192.png")) returned 0x20 [0206.340] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-192.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0206.341] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-192.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0206.341] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x967, lpOverlapped=0x0) returned 1 [0206.342] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x967, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x967, lpOverlapped=0x0) returned 1 [0206.343] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.343] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.344] CloseHandle (hObject=0x1d0) returned 1 [0206.344] CloseHandle (hObject=0x1b8) returned 1 [0206.345] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-192.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-192.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0206.346] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-192.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0206.346] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-192.png"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="user-192.png", cAlternateFileName="")) returned 0x55e8d0 [0206.346] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="user-192.png", cAlternateFileName="")) returned 0 [0206.346] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0206.347] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-192.png")) returned 1 [0206.348] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-192.png")) returned 0xffffffff [0206.348] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-32.png", cAlternateFileName="")) returned 1 [0206.349] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0206.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0206.349] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0206.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0206.349] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-32.png")) returned 0x20 [0206.351] VirtualAlloc (lpAddress=0x1ec0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ec0000 [0206.351] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-32.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0206.352] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-32.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0206.352] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x19f, lpOverlapped=0x0) returned 1 [0206.354] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x19f, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x19f, lpOverlapped=0x0) returned 1 [0206.355] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.355] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.355] CloseHandle (hObject=0x1b8) returned 1 [0206.355] CloseHandle (hObject=0x1d0) returned 1 [0206.358] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-32.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-32.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0206.359] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-32.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0206.359] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-32.png"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="user-32.png", cAlternateFileName="")) returned 0x55e790 [0206.359] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="user-32.png", cAlternateFileName="")) returned 0 [0206.359] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0206.359] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-32.png")) returned 1 [0206.361] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-32.png")) returned 0xffffffff [0206.361] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-40.png", cAlternateFileName="")) returned 1 [0206.362] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0206.362] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.362] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0206.362] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0206.362] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.362] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0206.362] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-40.png")) returned 0x20 [0206.363] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-40.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0206.363] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-40.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0206.364] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1b1, lpOverlapped=0x0) returned 1 [0206.366] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1b1, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1b1, lpOverlapped=0x0) returned 1 [0206.367] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.367] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.367] CloseHandle (hObject=0x1d0) returned 1 [0206.367] CloseHandle (hObject=0x1b8) returned 1 [0206.369] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-40.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-40.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0206.369] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-40.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0206.369] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-40.png"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1b1, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="user-40.png", cAlternateFileName="")) returned 0x55e890 [0206.370] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1b1, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="user-40.png", cAlternateFileName="")) returned 0 [0206.370] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0206.370] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-40.png")) returned 1 [0206.371] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-40.png")) returned 0xffffffff [0206.371] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-48.png", cAlternateFileName="")) returned 1 [0206.372] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0206.372] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0206.372] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0206.372] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0206.372] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-48.png")) returned 0x20 [0206.373] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-48.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0206.374] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0206.374] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1f5, lpOverlapped=0x0) returned 1 [0206.375] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1f5, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1f5, lpOverlapped=0x0) returned 1 [0206.378] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.378] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.378] CloseHandle (hObject=0x1b8) returned 1 [0206.378] CloseHandle (hObject=0x1d0) returned 1 [0206.380] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-48.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0206.380] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0206.380] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-48.png"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="user-48.png", cAlternateFileName="")) returned 0x55e890 [0206.380] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="user-48.png", cAlternateFileName="")) returned 0 [0206.381] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0206.381] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-48.png")) returned 1 [0206.382] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-48.png")) returned 0xffffffff [0206.382] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x93038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0206.382] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0206.382] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0206.383] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0206.383] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0206.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0206.383] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp")) returned 0x20 [0206.383] VirtualAlloc (lpAddress=0x1ec4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ec4000 [0206.384] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0206.384] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0206.385] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.387] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.389] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.390] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.390] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.390] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.391] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.391] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.391] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.392] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.393] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.393] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.393] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.393] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.393] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.393] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.394] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.394] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.394] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.394] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.395] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.395] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.395] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.395] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.395] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.395] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.396] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.396] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.396] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.397] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.401] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.401] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.401] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.402] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.402] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.402] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.402] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.402] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.403] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.403] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.403] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.403] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.404] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.404] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.404] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.404] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.404] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.405] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.405] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.405] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.405] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.405] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.406] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.406] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.406] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.406] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.407] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.407] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.477] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.477] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.477] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.477] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.477] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.478] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.478] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.478] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.478] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.479] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.479] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.479] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.479] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.479] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.480] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.480] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.480] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.480] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.481] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.481] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.481] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.481] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.481] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.482] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.482] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.482] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.482] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.482] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.483] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.483] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.483] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.483] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.483] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.484] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.484] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.486] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.486] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.486] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.486] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.486] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.487] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.487] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.487] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.487] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.487] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.488] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.488] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.488] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.488] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.488] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.489] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.489] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.489] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.489] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.489] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.489] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.490] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.490] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.491] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.491] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.491] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.491] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.491] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.492] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.492] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.492] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.492] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.492] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.493] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.493] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.493] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.493] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.495] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.495] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.495] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.495] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.495] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.496] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.496] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.496] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.496] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.496] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.497] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.497] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.497] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.497] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.497] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.497] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.498] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.498] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.498] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.498] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.498] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.499] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.499] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.499] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.499] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.499] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.500] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.502] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.503] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.503] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.503] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.503] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.504] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.504] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.504] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.504] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.504] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.505] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.505] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.505] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.505] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.505] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.506] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.506] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.506] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.506] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.506] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.507] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.507] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.507] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.507] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.507] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.508] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.508] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.508] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.508] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.508] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.508] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.509] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.509] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.509] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.509] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.509] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.510] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.510] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.510] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.510] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.511] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.511] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.511] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.511] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.511] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.512] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.512] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.512] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.512] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.512] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.512] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.513] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.513] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.513] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.513] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.513] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.514] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.514] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.514] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.514] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.514] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.515] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.515] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.515] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.543] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.544] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.544] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.544] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.545] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.546] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.546] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.546] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.546] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.546] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.547] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.547] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.547] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.547] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.547] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.548] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.548] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.548] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.549] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.549] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.549] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.549] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.549] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.550] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.550] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.550] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.550] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.551] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.551] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.551] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.551] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.551] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.552] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.552] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.552] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.552] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.552] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.554] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.554] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.554] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.554] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.554] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.555] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.555] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.555] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.555] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.555] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.556] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.556] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.556] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.556] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.556] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.557] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.557] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.557] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.557] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.557] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.558] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.558] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.558] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.558] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.558] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.559] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.559] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.559] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.559] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.560] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.560] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.560] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.560] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.560] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.561] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.561] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0206.561] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x38, lpOverlapped=0x0) returned 1 [0206.561] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x38, lpOverlapped=0x0) returned 1 [0206.561] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.561] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0206.561] CloseHandle (hObject=0x1d0) returned 1 [0206.562] CloseHandle (hObject=0x1b8) returned 1 [0207.876] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0207.877] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0207.877] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x93038, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="user.bmp", cAlternateFileName="")) returned 0x55e710 [0207.877] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x93038, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="user.bmp", cAlternateFileName="")) returned 0 [0207.878] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0207.878] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp")) returned 1 [0207.879] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp")) returned 0xffffffff [0207.883] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.png", cAlternateFileName="")) returned 1 [0207.888] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0207.888] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0207.900] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0207.900] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0207.900] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0207.900] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0207.900] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.png")) returned 0x20 [0207.901] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0207.901] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0207.902] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0207.903] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0207.905] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x518, lpOverlapped=0x0) returned 1 [0207.905] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x518, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x518, lpOverlapped=0x0) returned 1 [0207.905] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0207.905] WriteFile (in: hFile=0x1d0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0207.905] CloseHandle (hObject=0x1b8) returned 1 [0207.905] CloseHandle (hObject=0x1d0) returned 1 [0207.906] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0207.907] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0207.907] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.png"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="user.png", cAlternateFileName="")) returned 0x55e8d0 [0207.907] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="user.png", cAlternateFileName="")) returned 0 [0207.907] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0207.908] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.png")) returned 1 [0207.909] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.png")) returned 0xffffffff [0207.909] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360076a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.png", cAlternateFileName="")) returned 0 [0207.909] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0207.910] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676e7067, dwReserved1=0x61642e67, cFileName="Vault", cAlternateFileName="")) returned 1 [0207.910] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*.*" (normalized: "c:\\users\\all users\\microsoft\\vault\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0207.910] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.910] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC658CB4-9126-49BD-B877-31EEDAB3F204", cAlternateFileName="AC658C~1")) returned 1 [0207.910] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\*.*" (normalized: "c:\\users\\all users\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000831, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0207.911] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x39000831, cFileName="..", cAlternateFileName="")) returned 1 [0207.911] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x9e, dwReserved0=0x0, dwReserved1=0x39000831, cFileName="154E23D0-C644-4E6F-8CE6-5069272F999F.vsch", cAlternateFileName="154E23~1.VSC")) returned 1 [0207.912] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x2d0034, dwReserved1=0x650034, cFileName="2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch", cAlternateFileName="2F1A65~1.VSC")) returned 1 [0207.913] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x2d0031, dwReserved1=0x340034, cFileName="3CCD5499-87A8-4B10-A215-608888DD3B55.vsch", cAlternateFileName="3CCD54~1.VSC")) returned 1 [0207.913] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x2d0038, dwReserved1=0x620034, cFileName="Policy.vpol", cAlternateFileName="POLICY~1.VPO")) returned 1 [0207.914] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x2d0038, dwReserved1=0x620034, cFileName="Policy.vpol", cAlternateFileName="POLICY~1.VPO")) returned 0 [0207.914] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0207.914] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC658CB4-9126-49BD-B877-31EEDAB3F204", cAlternateFileName="AC658C~1")) returned 0 [0207.914] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0207.914] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31392d34, dwReserved1=0x342d3632, cFileName="WDF", cAlternateFileName="")) returned 1 [0207.915] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WDF\\*.*" (normalized: "c:\\users\\all users\\microsoft\\wdf\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6f7076, dwReserved1=0x342d3841, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0207.915] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6f7076, dwReserved1=0x342d3841, cFileName="..", cAlternateFileName="")) returned 1 [0207.915] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6f7076, dwReserved1=0x342d3841, cFileName="..", cAlternateFileName="")) returned 0 [0207.915] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0207.915] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x77d1fe08, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x77d1fe08, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31392d34, dwReserved1=0x342d3632, cFileName="Windows", cAlternateFileName="")) returned 1 [0207.915] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x77d1fe08, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x77d1fe08, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6f7076, dwReserved1=0x342d3841, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0207.916] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x77d1fe08, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x77d1fe08, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6f7076, dwReserved1=0x342d3841, cFileName="..", cAlternateFileName="")) returned 1 [0207.916] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe79dd565, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe79dd565, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6f7076, dwReserved1=0x342d3841, cFileName="AppRepository", cAlternateFileName="APPREP~1")) returned 1 [0207.916] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe79dd565, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe79dd565, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0038, dwReserved1=0x39000831, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0207.916] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe79dd565, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe79dd565, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0038, dwReserved1=0x39000831, cFileName="..", cAlternateFileName="")) returned 1 [0207.924] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0038, dwReserved1=0x39000831, cFileName="Families", cAlternateFileName="")) returned 1 [0207.924] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Families\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\families\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0207.924] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.924] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0207.925] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0207.925] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9308e2e0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9308e2e0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x930b443b, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x3ff1, dwReserved0=0x2d0038, dwReserved1=0x39000831, cFileName="Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI0C82~1.XML")) returned 1 [0207.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932f08f7, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x932f08f7, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x932f08f7, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x11b3, dwReserved0=0x750062, dwReserved1=0x6c0069, cFileName="Microsoft.3DBuilder_10.9.50.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI4EDB~1.XML")) returned 1 [0207.928] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4286e043, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4286e043, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4286e043, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x750062, dwReserved1=0x6c0069, cFileName="Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI34BC~1.XML")) returned 1 [0207.930] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f65da5c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5f65da5c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5f683cba, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x35be, dwReserved0=0x2e0064, dwReserved1=0x720062, cFileName="Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy.xml", cAlternateFileName="MID91D~1.XML")) returned 1 [0207.931] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f02817, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x93f02817, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x93f02817, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0xab8, dwReserved0=0x6f0063, dwReserved1=0x6e0075, cFileName="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe.xml", cAlternateFileName="MID251~1.XML")) returned 1 [0207.932] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93be1652, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x93be1652, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x93be1652, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x6b98, dwReserved0=0x630070, dwReserved1=0x6e006f, cFileName="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIB577~1.XML")) returned 1 [0207.933] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94b1464b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x94b1464b, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x94b1464b, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x65eb, dwReserved0=0x630070, dwReserved1=0x6e006f, cFileName="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI8EAA~1.XML")) returned 1 [0207.934] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94e5ba03, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x94e5ba03, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x94e5ba03, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2072, dwReserved0=0x67006e, dwReserved1=0x690066, cFileName="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MIE223~1.XML")) returned 1 [0207.935] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9583158c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9583158c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9583158c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x643a, dwReserved0=0x67006e, dwReserved1=0x690066, cFileName="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI61C2~1.XML")) returned 1 [0207.936] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95b788a3, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x95b788a3, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x95b9ebdf, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2092, dwReserved0=0x67006e, dwReserved1=0x65006e, cFileName="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MIA5ED~1.XML")) returned 1 [0207.937] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x965c0ae9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x965c0ae9, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x965c0ae9, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x650b, dwReserved0=0x67006e, dwReserved1=0x65006e, cFileName="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI06CF~1.XML")) returned 1 [0207.942] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96954432, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x96954432, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x96954432, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2088, dwReserved0=0x67006e, dwReserved1=0x700073, cFileName="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MI83E9~1.XML")) returned 1 [0207.943] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973c2934, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x973c2934, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x973c2934, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x6580, dwReserved0=0x67006e, dwReserved1=0x700073, cFileName="Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIF36F~1.XML")) returned 1 [0207.945] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9772fe7f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9772fe7f, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9772fe7f, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x67006e, dwReserved1=0x650077, cFileName="Microsoft.BingWeather_4.6.169.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MIBD78~1.XML")) returned 1 [0207.946] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427fb888, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x427fb888, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x427fb888, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x67006e, dwReserved1=0x650077, cFileName="Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy.xml", cAlternateFileName="MI18A5~1.XML")) returned 1 [0207.947] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98020bfe, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x98020bfe, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x98020bfe, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4306, dwReserved0=0x65006f, dwReserved1=0x72006e, cFileName="Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MID396~1.XML")) returned 1 [0207.948] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982f5893, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x982f5893, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x982f5893, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x276d, dwReserved0=0x6d006d, dwReserved1=0x700073, cFileName="Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI2880~1.XML")) returned 1 [0207.949] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98c7ee4f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x98c7ee4f, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x98c7ee4f, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x726b, dwReserved0=0x6d006d, dwReserved1=0x700073, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI9710~1.XML")) returned 1 [0207.950] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98fa00d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x98fa00d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x98fa00d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x6e006e, dwReserved1=0x630065, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI426C~1.XML")) returned 1 [0207.957] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99a345b0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x99a345b0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x99a345b0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x406d, dwReserved0=0x6e006e, dwReserved1=0x630065, cFileName="Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIF830~1.XML")) returned 1 [0207.958] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d09423, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x99d09423, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x99d09423, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0xf57, dwReserved0=0x730074, dwReserved1=0x610074, cFileName="Microsoft.Getstarted_2.3.7.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MID67D~1.XML")) returned 1 [0207.959] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60ecdc1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60ecdc1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60ef3d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x730074, dwReserved1=0x610074, cFileName="Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy.xml", cAlternateFileName="MI4AC2~1.XML")) returned 1 [0207.960] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b01c079, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9b01c079, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9b042244, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x41a5, dwReserved0=0x6b0063, dwReserved1=0x700061, cFileName="Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI6857~1.XML")) returned 1 [0207.961] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b389753, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9b389753, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9b389753, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0xabd6, dwReserved0=0x730073, dwReserved1=0x670061, cFileName="Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MIAA2E~1.XML")) returned 1 [0207.963] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x821b430e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x821b430e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8220059e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4045, dwReserved0=0x730073, dwReserved1=0x670061, cFileName="Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe.xml", cAlternateFileName="MI1189~1.XML")) returned 1 [0207.964] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd19a7fa, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xdd19a7fa, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xdd19a7fa, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x71bb, dwReserved0=0x720063, dwReserved1=0x73006f, cFileName="Microsoft.MicrosoftOfficeHub_17.6306.23501.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIF58C~1.XML")) returned 1 [0207.965] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd6e6ad, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xdcd6e6ad, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xdcdbab29, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x3c12, dwReserved0=0x720063, dwReserved1=0x73006f, cFileName="Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIFAD6~1.XML")) returned 1 [0207.966] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de0142d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9de0142d, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9de0142d, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x3fec, dwReserved0=0x720063, dwReserved1=0x73006f, cFileName="Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI867D~1.XML")) returned 1 [0207.967] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e0639ba, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e0639ba, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9e0639ba, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x1f85, dwReserved0=0x720063, dwReserved1=0x73006f, cFileName="Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI37BC~1.XML")) returned 1 [0207.969] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e97aa96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e97aa96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9e97aa96, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x48a, dwReserved0=0x720063, dwReserved1=0x73006f, cFileName="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI7CA0~1.XML")) returned 1 [0207.970] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ed3453c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9ed3453c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9ed3453c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x48a, dwReserved0=0x2e0074, dwReserved1=0x61006e, cFileName="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MIF965~1.XML")) returned 1 [0207.971] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b65490, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91b65490, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91b8b7c9, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4ad, dwReserved0=0x2e0074, dwReserved1=0x61006e, cFileName="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MICROS~4.XML")) returned 1 [0207.973] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917d1d54, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x917d1d54, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x917d1d54, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4ad, dwReserved0=0x2e0074, dwReserved1=0x61006e, cFileName="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MICROS~3.XML")) returned 1 [0207.974] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f07b901, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9f07b901, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9f07b901, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x2e0074, dwReserved1=0x61006e, cFileName="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI55DD~1.XML")) returned 1 [0207.975] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f3c2cd2, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9f3c2cd2, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9f3c2cd2, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x2e0074, dwReserved1=0x61006e, cFileName="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MI1148~1.XML")) returned 1 [0207.976] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9215b2b1, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9215b2b1, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9215b2b1, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4a7, dwReserved0=0x2e0074, dwReserved1=0x61006e, cFileName="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIBB3D~1.XML")) returned 1 [0207.978] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e6039e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91e6039e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91e866d7, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4a7, dwReserved0=0x2e0074, dwReserved1=0x61006e, cFileName="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MIACC6~1.XML")) returned 1 [0207.988] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1359e0d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa1359e0d, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa1359e0d, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x8f30, dwReserved0=0x2e0074, dwReserved1=0x61006e, cFileName="Microsoft.Office.OneNote_17.6131.10051.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI115E~1.XML")) returned 1 [0207.989] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1038cb2, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa1038cb2, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa1038cb2, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x3b9e, dwReserved0=0x690066, dwReserved1=0x650063, cFileName="Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI80C6~1.XML")) returned 1 [0207.991] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2c3c5dd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa2c3c5dd, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa2c3c5dd, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x7bb2, dwReserved0=0x690066, dwReserved1=0x650063, cFileName="Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI4B95~1.XML")) returned 1 [0207.992] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa291b5bf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa291b5bf, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa291b5bf, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2493, dwReserved0=0x690066, dwReserved1=0x650063, cFileName="Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI27BB~1.XML")) returned 1 [0207.993] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b5e2d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa37b5e2d, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa37dbd57, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2023, dwReserved0=0x690066, dwReserved1=0x650063, cFileName="Microsoft.People_10.0.2840.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI2874~1.XML")) returned 1 [0207.994] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa350720d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa350720d, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa350720d, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x40df, dwReserved0=0x70006f, dwReserved1=0x65006c, cFileName="Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIA62F~1.XML")) returned 1 [0207.995] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40f2f15, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa40f2f15, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa40f2f15, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x3cfb, dwReserved0=0x70006f, dwReserved1=0x65006c, cFileName="Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c.xml", cAlternateFileName="MIF0DA~1.XML")) returned 1 [0207.996] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa437b5d1, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa437b5d1, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa437b5d1, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0xdc0, dwReserved0=0x700079, dwReserved1=0x610065, cFileName="Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c.xml", cAlternateFileName="MI111F~1.XML")) returned 1 [0207.997] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91418169, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91418169, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91418169, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x700079, dwReserved1=0x610065, cFileName="Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MICROS~2.XML")) returned 1 [0207.998] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910f6f86, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x910f6f86, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x910f6f86, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x69006c, dwReserved1=0x730062, cFileName="Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0207.999] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x927c374f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x927c374f, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x927c374f, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4ea, dwReserved0=0x69006c, dwReserved1=0x730062, cFileName="Microsoft.VCLibs.140.00_14.0.22929.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI2A58~1.XML")) returned 1 [0208.000] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9247c3f8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9247c3f8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9247c3f8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4ea, dwReserved0=0x69006c, dwReserved1=0x730062, cFileName="Microsoft.VCLibs.140.00_14.0.22929.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MI4CBD~1.XML")) returned 1 [0208.003] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8287c26f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8287c26f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8287c26f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x69006c, dwReserved1=0x730062, cFileName="Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MIC33D~1.XML")) returned 1 [0208.004] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501b04e0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x501b04e0, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x501b04e0, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x28ea, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI1764~1.XML")) returned 1 [0208.006] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89496f81, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89496f81, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89496f81, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2097, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI99C2~1.XML")) returned 1 [0208.007] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ec157ae, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec157ae, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec3b857, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10bb1, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI3230~1.XML")) returned 1 [0208.008] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a3ca0f8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a3ca0f8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a3ca0f8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x8cb, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MIA4BD~1.XML")) returned 1 [0208.015] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa59fb976, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa59fb976, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa5a219cd, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-100_8wekyb3d8bbwe.xml", cAlternateFileName="MID69C~1.XML")) returned 1 [0208.016] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5726cb4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa5726cb4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa5726cb4, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0xc4f1, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI03D6~1.XML")) returned 1 [0208.018] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa53934cc, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa53934cc, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa53934cc, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4642, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIF109~1.XML")) returned 1 [0208.019] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b93f304, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8b93f304, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8b93f304, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy.xml", cAlternateFileName="MIBC22~1.XML")) returned 1 [0208.020] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56180cf1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x56180cf1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x56180cf1, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x36dc, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI61DE~1.XML")) returned 1 [0208.021] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6a85e80, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa6a85e80, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa6a85e80, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsAlarms_10.1510.12020.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI46B7~1.XML")) returned 1 [0208.023] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6764d6f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa6764d6f, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa6764d6f, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4761, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI591F~1.XML")) returned 1 [0208.024] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b98171, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x53b98171, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x53b98171, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsCalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe.xml", cAlternateFileName="MI0610~1.XML")) returned 1 [0208.025] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5390fa0a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5390fa0a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5390fa0a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MICE47~1.XML")) returned 1 [0208.027] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53660e92, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x53660e92, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x53686fce, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4608, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MID958~1.XML")) returned 1 [0208.028] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa861717c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa861717c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa861717c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x466a, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI9205~1.XML")) returned 1 [0208.029] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa889f9a2, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa889f9a2, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa889f9a2, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x1ed6, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsCamera_2015.1071.40.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI41D8~1.XML")) returned 1 [0208.030] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab4bb218, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xab4bb218, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xab4bb218, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0xffef, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIEC56~1.XML")) returned 1 [0208.031] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab0b5244, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xab0b5244, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xab0b5244, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x3cab, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI0C75~1.XML")) returned 1 [0208.035] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96bc34e1, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x96bc34e1, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x96bc34e1, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI6C44~1.XML")) returned 1 [0208.036] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac7819dc, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xac7819dc, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xac7819dc, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4717, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI8A58~1.XML")) returned 1 [0208.041] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacac8c8b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xacac8c8b, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xacac8c8b, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsMaps_4.1509.50911.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI98FE~1.XML")) returned 1 [0208.042] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae60dc65, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xae60dc65, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xae60dc65, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ab3, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI38B3~1.XML")) returned 1 [0208.044] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae35f1e1, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xae35f1e1, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xae38529a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x14e9, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI0471~1.XML")) returned 1 [0208.045] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf29220d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xaf29220d, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xaf29220d, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2154, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsSoundRecorder_10.1510.12110.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI5B27~1.XML")) returned 1 [0208.046] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefbd456, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xaefbd456, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xaefbd456, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x47ef, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIA050~1.XML")) returned 1 [0208.047] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0984a8d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb0984a8d, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb0984a8d, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsStore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe.xml", cAlternateFileName="MI04D8~1.XML")) returned 1 [0208.048] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb06aff80, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb06aff80, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb06d61f3, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x6e81, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIEDF7~1.XML")) returned 1 [0208.050] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb02f6461, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb02f6461, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb02f6461, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x6f57, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIB07A~1.XML")) returned 1 [0208.051] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b8c86e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb1b8c86e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb234c19b, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x321e, dwReserved0=0x64006e, dwReserved1=0x77006f, cFileName="Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI2305~1.XML")) returned 1 [0208.052] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2693619, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb2693619, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb2693619, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x556d, dwReserved0=0x78006f, dwReserved1=0x700061, cFileName="Microsoft.XboxApp_9.9.30030.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIFF53~1.XML")) returned 1 [0208.053] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9919c8f7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9919c8f7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9919c8f7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x8de, dwReserved0=0x78006f, dwReserved1=0x700061, cFileName="Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI0BF3~1.XML")) returned 1 [0208.054] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b28b1c3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9b28b1c3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9b28b1c3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0xba8, dwReserved0=0x78006f, dwReserved1=0x610067, cFileName="Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI4622~1.XML")) returned 1 [0208.056] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e9114b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb3e9114b, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb3e9114b, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x6a9a, dwReserved0=0x78006f, dwReserved1=0x640069, cFileName="Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI8783~1.XML")) returned 1 [0208.057] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4224808, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb4224808, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb4224808, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x46fc, dwReserved0=0x65006e, dwReserved1=0x75006d, cFileName="Microsoft.ZuneMusic_3.6.13251.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIA97B~1.XML")) returned 1 [0208.058] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb54eb188, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb54eb188, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb54eb188, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x6836, dwReserved0=0x65006e, dwReserved1=0x75006d, cFileName="Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIF26A~1.XML")) returned 1 [0208.059] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb585872b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb585872b, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb585872b, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2b04, dwReserved0=0x65006e, dwReserved1=0x690076, cFileName="Microsoft.ZuneVideo_3.6.13251.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIF1F0~1.XML")) returned 1 [0208.060] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xdedf14a6, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdedf14a6, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65006e, dwReserved1=0x690076, cFileName="Packages", cAlternateFileName="")) returned 1 [0208.060] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xdedf14a6, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdedf14a6, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0208.060] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xdedf14a6, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdedf14a6, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.066] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936d064c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x3feecd85, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x3feecd85, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_N")) returned 1 [0208.066] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.3dbuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936d064c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x3feecd85, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xbfbb36c0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0208.069] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936d064c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x3feecd85, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xbfbb36c0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.069] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe2e122, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3fe2e122, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x3ffab9e9, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.070] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe2e122, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3fe2e122, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x3ffab9e9, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.070] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0208.071] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936d064c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x4587ae53, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x4587ae53, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.3DBuilder_10.9.50.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI0085~1.0_X")) returned 1 [0208.071] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.3dbuilder_10.9.50.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936d064c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x4587ae53, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xbfbad53d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0208.076] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936d064c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x4587ae53, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xbfbad53d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.076] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbcba67, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3fbcba67, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x3fd23347, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.077] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbcba67, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3fbcba67, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x3fd23347, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.077] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0208.078] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54425cf6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5444bf1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5444bf1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MID6BE~1.0_N")) returned 1 [0208.078] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54425cf6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5444bf1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54910988, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0208.081] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54425cf6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5444bf1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54910988, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.081] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54910988, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54910988, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54910988, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x9c8, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0208.082] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5444bf1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5444bf1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5444bf1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x44c, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0208.083] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5444bf1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5444bf1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5444bf1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x44c, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0208.083] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0208.084] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6104b1f6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6104b1f6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6104b1f6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MIEBA3~1.0_N")) returned 1 [0208.084] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6104b1f6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6104b1f6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612f9da9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0208.087] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6104b1f6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6104b1f6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612f9da9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="..", cAlternateFileName="")) returned 1 [0208.087] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x612f9da9, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612f9da9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612f9da9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x6d0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0208.088] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6104b1f6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6104b1f6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6104b1f6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0208.089] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6104b1f6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6104b1f6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6104b1f6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0208.089] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0208.090] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x942e23d9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x376a5c6d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x376a5c6d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_N")) returned 1 [0208.090] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x942e23d9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x376a5c6d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc0f81d63, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0208.094] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x942e23d9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x376a5c6d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc0f81d63, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="..", cAlternateFileName="")) returned 1 [0208.094] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3343f37f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3343f37f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x335bca47, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.094] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3343f37f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3343f37f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x335bca47, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.095] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0208.096] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x942e23d9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x336ede09, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x336ede09, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~2.0_N")) returned 1 [0208.096] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x942e23d9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x336ede09, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc0f86b75, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0208.099] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x942e23d9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x336ede09, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc0f86b75, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.099] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x336554be, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x336554be, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x337868b1, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.100] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x336554be, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x336554be, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x337868b1, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.100] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0208.101] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95097c58, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x307d75bf, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x307d75bf, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~4.0_N")) returned 1 [0208.101] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingfinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95097c58, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x307d75bf, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc258bead, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0208.105] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95097c58, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x307d75bf, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc258bead, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.105] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307d75bf, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x307d75bf, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x307d75bf, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.106] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307d75bf, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x307d75bf, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x307d75bf, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.106] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0208.107] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x950bde7a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x30e65d2d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x30e65d2d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI0B51~1.0_X")) returned 1 [0208.107] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x950bde7a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x30e65d2d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc2587086, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0208.109] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x950bde7a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x30e65d2d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc2587086, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.109] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3078b0ac, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3078b0ac, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x307b1356, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.110] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3078b0ac, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3078b0ac, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x307b1356, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.110] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0208.111] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95ddaedf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x2e7353dc, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2e7353dc, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIADDF~1.0_N")) returned 1 [0208.111] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingnews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95ddaedf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x2e7353dc, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc3995fb4, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0208.120] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95ddaedf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x2e7353dc, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc3995fb4, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.120] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e7353dc, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2e7353dc, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2e7353dc, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x398, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.121] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e7353dc, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2e7353dc, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2e7353dc, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x398, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.121] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0208.122] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95ddaedf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x2ecb8a69, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2ecb8a69, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI13A6~1.0_X")) returned 1 [0208.122] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95ddaedf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x2ecb8a69, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc398d737, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0208.124] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95ddaedf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x2ecb8a69, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc398d737, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.124] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e70f04c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2e70f04c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2e7353dc, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.125] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e70f04c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2e70f04c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2e7353dc, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.125] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0208.127] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96bb6961, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x96bb6961, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x96bb6961, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI90D7~1.0_N")) returned 1 [0208.127] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingsports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96bb6961, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x96bb6961, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xc4c731b3, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0208.130] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96bb6961, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x96bb6961, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xc4c731b3, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.130] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26969b00, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x26969b00, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x26a02595, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.131] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26969b00, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x26969b00, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x26a02595, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.131] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0208.132] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96bb6961, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x96bb6961, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x96bb6961, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI689D~1.0_X")) returned 1 [0208.132] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96bb6961, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x96bb6961, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xc4c6e343, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0208.134] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96bb6961, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x96bb6961, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xc4c6e343, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.134] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x266dbcb9, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x266dbcb9, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x268d106f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.135] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x266dbcb9, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x266dbcb9, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x268d106f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.135] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0208.136] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9796c1ac, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9796c1ac, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9796c1ac, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIF7D7~1.0_N")) returned 1 [0208.136] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingweather_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9796c1ac, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9796c1ac, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xc5ef7148, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0208.139] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9796c1ac, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9796c1ac, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xc5ef7148, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.139] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c03a060, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1c03a060, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x1c03a060, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.139] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c03a060, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1c03a060, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x1c03a060, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.140] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0208.141] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97992404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x1eca1f3d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x1eca1f3d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingWeather_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI7AA9~1.0_X")) returned 1 [0208.141] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingweather_4.6.169.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97992404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x1eca1f3d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc5eee8f5, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0208.143] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97992404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x1eca1f3d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc5eee8f5, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.143] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bf2ef90, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1bf2ef90, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x1c013e4e, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.144] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bf2ef90, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1bf2ef90, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x1c013e4e, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.144] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0208.145] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4deabc79, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4dfdced7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4dfdced7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MIA351~1.0_N")) returned 1 [0208.145] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4deabc79, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4dfdced7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f172345, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0208.147] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4deabc79, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4dfdced7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f172345, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.147] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f172345, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0208.148] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dfdced7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4dfdced7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4dfdced7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0208.149] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dfdced7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4dfdced7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4dfdced7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0208.149] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0208.150] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x986af2f4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x986af2f4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x986af2f4, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICC3B~1.0_N")) returned 1 [0208.150] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.commsphone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x986af2f4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x986af2f4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xc747ed5d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0208.153] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x986af2f4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x986af2f4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xc747ed5d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="..", cAlternateFileName="")) returned 1 [0208.153] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x124a88fe, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x124a88fe, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x12698848, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.154] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x124a88fe, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x124a88fe, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x12698848, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.154] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0208.155] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x986af2f4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x986af2f4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x986af2f4, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIBB30~1.0_X")) returned 1 [0208.155] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x986af2f4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x986af2f4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xc7470255, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0208.160] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x986af2f4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x986af2f4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xc7470255, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.160] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12292aaa, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x12292aaa, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x12377625, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.160] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12292aaa, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x12292aaa, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x12377625, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.161] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0208.162] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x992e71ee, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x832177f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x832177f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI2247~1.0_N")) returned 1 [0208.162] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.connectivitystore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x992e71ee, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x832177f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc865cca7, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0208.181] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x992e71ee, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x832177f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc865cca7, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.181] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fb259, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x82fb259, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x83e0197, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.182] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fb259, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x82fb259, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x83e0197, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.182] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0208.183] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x992e71ee, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9d0eebc, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x9d0eebc, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIECF5~1.0_X")) returned 1 [0208.183] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x992e71ee, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9d0eebc, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc8656a8a, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0208.186] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x992e71ee, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9d0eebc, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xc8656a8a, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.186] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x813178f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x813178f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x823c65b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.187] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x813178f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x813178f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x823c65b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.187] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0208.188] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99f455a4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x99f455a4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x99f455a4, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIA544~1.0_N")) returned 1 [0208.191] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99f455a4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x99f455a4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xc98daa50, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0208.194] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99f455a4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x99f455a4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xc98daa50, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.194] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x127a421, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x127a421, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x127a421, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.195] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x127a421, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x127a421, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x127a421, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.195] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0208.196] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99f455a4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x99f455a4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x99f455a4, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.Getstarted_2.3.7.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI49B0~1.0_X")) returned 1 [0208.196] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.getstarted_2.3.7.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99f455a4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x99f455a4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xc98d5c7e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0208.202] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99f455a4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x99f455a4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xc98d5c7e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.202] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1149115, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1149115, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x12540fb, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.203] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1149115, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1149115, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x12540fb, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.203] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0208.204] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6193bee3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6193bee3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6193bee3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI747C~1.0_N")) returned 1 [0208.206] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6193bee3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6193bee3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6286f328, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0208.208] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6193bee3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6193bee3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6286f328, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.208] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6286f328, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6286f328, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6289529c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x8d4, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0208.209] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6193bee3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6193bee3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6193bee3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0208.210] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6193bee3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6193bee3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6193bee3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0208.210] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0208.211] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9b71ceca, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9b71ceca, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI1776~1.0_N")) returned 1 [0208.212] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9b71ceca, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xcaec27cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0208.214] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9b71ceca, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xcaec27cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="..", cAlternateFileName="")) returned 1 [0208.214] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf140f4b7, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xf140f4b7, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xf15408dc, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.215] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf140f4b7, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xf140f4b7, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xf15408dc, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.215] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0208.216] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcaec27cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcaec27cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI8EA6~1.0_X")) returned 1 [0208.216] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcaec27cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcaec27cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0208.217] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcaec27cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcaec27cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.217] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf113a5c2, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xf113a5c2, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xf126bc97, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.218] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf113a5c2, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xf113a5c2, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xf126bc97, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.218] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0208.220] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63139a5c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8891dbc3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8891dbc3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MI8763~1.0_N")) returned 1 [0208.220] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63139a5c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8891dbc3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8891dbc3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0208.221] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63139a5c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8891dbc3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8891dbc3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.221] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8891dbc3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8891dbc3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8891dbc3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0208.222] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c4d0be, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87c4d0be, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x87c4d0be, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0208.223] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c4d0be, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87c4d0be, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x87c4d0be, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0208.223] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0208.223] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x223cca2b, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x223cca2b, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.MicrosoftOfficeHub_17.6306.23501.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI80F4~1.0_X")) returned 1 [0208.223] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_17.6306.23501.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftofficehub_17.6306.23501.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x223cca2b, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0208.225] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x223cca2b, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="..", cAlternateFileName="")) returned 1 [0208.225] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x223cca2b, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="..", cAlternateFileName="")) returned 0 [0208.225] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0208.225] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x223cca2b, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x223cca2b, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MID688~1.0_N")) returned 1 [0208.225] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftofficehub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x223cca2b, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0208.226] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x223cca2b, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="..", cAlternateFileName="")) returned 1 [0208.226] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x223cca2b, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="..", cAlternateFileName="")) returned 0 [0208.226] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0208.226] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e54e85e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9e54e85e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIAB2E~1.0_N")) returned 1 [0208.226] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftsolitairecollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e54e85e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0208.229] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e54e85e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="..", cAlternateFileName="")) returned 1 [0208.229] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6d241, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67a6d241, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67b05aac, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.229] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6d241, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67a6d241, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67b05aac, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.230] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0208.231] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e54e85e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9e54e85e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIAFF4~1.0_X")) returned 1 [0208.231] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftsolitairecollection_3.3.9211.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e54e85e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0208.233] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e54e85e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.233] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6793bf99, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6793bf99, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x679d4966, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.234] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6793bf99, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6793bf99, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x679d4966, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.234] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0208.235] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9a0a96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e9a0a96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9e9a0a96, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI052E~1.0_X")) returned 1 [0208.235] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9a0a96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e9a0a96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0208.238] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9a0a96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e9a0a96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.238] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2074c40, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf2074c40, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf210d6e0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.238] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2074c40, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf2074c40, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf210d6e0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.238] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0208.239] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ed5a790, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9ed5a790, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9ed5a790, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI3AF7~1.0_X")) returned 1 [0208.240] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ed5a790, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9ed5a790, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0208.253] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ed5a790, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9ed5a790, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.253] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf21a60a1, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf21a60a1, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf223ea69, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.253] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf21a60a1, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf21a60a1, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf223ea69, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0208.253] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0208.255] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91bb1939, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91bb1939, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91bb1939, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~2.0_X")) returned 1 [0208.255] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91bb1939, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91bb1939, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5f7c8b5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0208.257] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91bb1939, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91bb1939, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5f7c8b5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0208.257] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.258] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f7c8b5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5f7c8b5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5f7c8b5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0208.259] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0208.260] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0208.260] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0208.261] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917f803f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x917f803f, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x917f803f, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_X")) returned 1 [0208.261] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917f803f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x917f803f, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5cf40ca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0208.263] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917f803f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x917f803f, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5cf40ca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="..", cAlternateFileName="")) returned 1 [0208.263] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0208.264] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cf40ca, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5cf40ca, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5cf40ca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x76006f, dwReserved1=0x720065, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0208.265] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0208.266] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x320030, dwReserved1=0x380035, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0208.266] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0208.653] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0208.654] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.668] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0208.668] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0208.668] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.669] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0208.669] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.0.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.0.db")) returned 0x20 [0208.670] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.0.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.0.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0208.670] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.0.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.0.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0208.672] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.675] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.677] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.677] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.678] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.678] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.678] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.678] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.678] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.679] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.679] CloseHandle (hObject=0x1b8) returned 1 [0208.679] CloseHandle (hObject=0x1d4) returned 1 [0208.682] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.0.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.0.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.0.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.0.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0208.683] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.0.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.0.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0208.683] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.0.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.0.db"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe30e2e96, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xe30e2e96, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe30e2e96, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="cversions.0.db", cAlternateFileName="CVERSI~2.DB")) returned 0x55e890 [0208.683] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe30e2e96, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xe30e2e96, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe30e2e96, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="cversions.0.db", cAlternateFileName="CVERSI~2.DB")) returned 0 [0208.683] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0208.684] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.0.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.0.db")) returned 1 [0208.685] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.0.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.0.db")) returned 0xffffffff [0208.686] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678c4cc7, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x678c4cc7, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x678c4cc7, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cversions.2.db", cAlternateFileName="CVERSI~1.DB")) returned 1 [0208.686] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0208.686] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.686] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0208.686] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0208.686] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.686] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0208.686] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.2.db")) returned 0x20 [0208.687] VirtualAlloc (lpAddress=0x1ec8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ec8000 [0208.687] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.2.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0208.688] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.2.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0208.689] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.690] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.692] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.692] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.692] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.693] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.693] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.693] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.694] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.694] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.694] CloseHandle (hObject=0x1d4) returned 1 [0208.694] CloseHandle (hObject=0x1b8) returned 1 [0208.696] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.2.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.2.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0208.697] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.2.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0208.697] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.2.db"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678c4cc7, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x678c4cc7, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x678c4cc7, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="cversions.2.db", cAlternateFileName="CVERSI~1.DB")) returned 0x55e490 [0208.697] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678c4cc7, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x678c4cc7, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x678c4cc7, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="cversions.2.db", cAlternateFileName="CVERSI~1.DB")) returned 0 [0208.697] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0208.697] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.2.db")) returned 0 [0208.697] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.2.db")) returned 0x20 [0208.698] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501fd302, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x501fd302, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x501fd302, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x0, cFileName="{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db", cAlternateFileName="{0FA68~1.DB")) returned 1 [0208.698] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0208.698] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.703] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0208.703] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0208.703] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.703] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0208.703] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{0fa68fff-8d1f-4fcc-b2fc-0c8384cf8d69}.2.ver0x0000000000000001.db")) returned 0x20 [0208.711] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{0fa68fff-8d1f-4fcc-b2fc-0c8384cf8d69}.2.ver0x0000000000000001.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0208.712] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{0fa68fff-8d1f-4fcc-b2fc-0c8384cf8d69}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0208.714] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x418, lpOverlapped=0x0) returned 1 [0208.716] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x418, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x418, lpOverlapped=0x0) returned 1 [0208.717] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.718] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.718] CloseHandle (hObject=0x1b8) returned 1 [0208.718] CloseHandle (hObject=0x1d4) returned 1 [0208.719] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{0fa68fff-8d1f-4fcc-b2fc-0c8384cf8d69}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{0fa68fff-8d1f-4fcc-b2fc-0c8384cf8d69}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0208.721] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{0fa68fff-8d1f-4fcc-b2fc-0c8384cf8d69}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0208.721] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{0fa68fff-8d1f-4fcc-b2fc-0c8384cf8d69}.2.ver0x0000000000000001.db"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501fd302, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x501fd302, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x501fd302, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db", cAlternateFileName="{0FA68~1.DB")) returned 0x55e710 [0208.721] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501fd302, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x501fd302, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x501fd302, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db", cAlternateFileName="{0FA68~1.DB")) returned 0 [0208.721] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0208.721] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{0fa68fff-8d1f-4fcc-b2fc-0c8384cf8d69}.2.ver0x0000000000000001.db")) returned 1 [0208.723] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{0fa68fff-8d1f-4fcc-b2fc-0c8384cf8d69}.2.ver0x0000000000000001.db")) returned 0xffffffff [0208.723] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cdd063c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x4cdd063c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x4cdd19ea, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="{28C2908A-A261-4BE8-AAA2-4843375011C5}.2.ver0x0000000000000001.db", cAlternateFileName="{28C29~1.DB")) returned 1 [0208.723] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0208.724] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0208.724] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0208.724] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0208.724] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{28C2908A-A261-4BE8-AAA2-4843375011C5}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{28c2908a-a261-4be8-aaa2-4843375011c5}.2.ver0x0000000000000001.db")) returned 0x20 [0208.724] VirtualAlloc (lpAddress=0x1ecc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ecc000 [0208.725] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{28C2908A-A261-4BE8-AAA2-4843375011C5}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{28c2908a-a261-4be8-aaa2-4843375011c5}.2.ver0x0000000000000001.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0208.725] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{28C2908A-A261-4BE8-AAA2-4843375011C5}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{28c2908a-a261-4be8-aaa2-4843375011c5}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0208.726] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x418, lpOverlapped=0x0) returned 1 [0208.727] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x418, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x418, lpOverlapped=0x0) returned 1 [0208.729] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.729] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.729] CloseHandle (hObject=0x1d4) returned 1 [0208.729] CloseHandle (hObject=0x1b8) returned 1 [0208.731] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{28C2908A-A261-4BE8-AAA2-4843375011C5}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{28c2908a-a261-4be8-aaa2-4843375011c5}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{28C2908A-A261-4BE8-AAA2-4843375011C5}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{28c2908a-a261-4be8-aaa2-4843375011c5}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0208.731] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{28C2908A-A261-4BE8-AAA2-4843375011C5}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{28c2908a-a261-4be8-aaa2-4843375011c5}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0208.731] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{28C2908A-A261-4BE8-AAA2-4843375011C5}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{28c2908a-a261-4be8-aaa2-4843375011c5}.2.ver0x0000000000000001.db"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cdd063c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x4cdd063c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x4cdd19ea, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{28C2908A-A261-4BE8-AAA2-4843375011C5}.2.ver0x0000000000000001.db", cAlternateFileName="{28C29~1.DB")) returned 0x55e710 [0208.732] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cdd063c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x4cdd063c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x4cdd19ea, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{28C2908A-A261-4BE8-AAA2-4843375011C5}.2.ver0x0000000000000001.db", cAlternateFileName="{28C29~1.DB")) returned 0 [0208.732] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0208.732] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{28C2908A-A261-4BE8-AAA2-4843375011C5}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{28c2908a-a261-4be8-aaa2-4843375011c5}.2.ver0x0000000000000001.db")) returned 0 [0208.732] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{28C2908A-A261-4BE8-AAA2-4843375011C5}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{28c2908a-a261-4be8-aaa2-4843375011c5}.2.ver0x0000000000000001.db")) returned 0x20 [0208.732] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd356933c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd356933c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd356933c, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="{376D4583-7D39-4B0C-A26B-8169803AD7C6}.2.ver0x0000000000000002.db", cAlternateFileName="{376D4~2.DB")) returned 1 [0208.733] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0208.733] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0208.733] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0208.733] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0208.733] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{376D4583-7D39-4B0C-A26B-8169803AD7C6}.2.ver0x0000000000000002.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{376d4583-7d39-4b0c-a26b-8169803ad7c6}.2.ver0x0000000000000002.db")) returned 0x20 [0208.734] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{376D4583-7D39-4B0C-A26B-8169803AD7C6}.2.ver0x0000000000000002.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{376d4583-7d39-4b0c-a26b-8169803ad7c6}.2.ver0x0000000000000002.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0208.734] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{376D4583-7D39-4B0C-A26B-8169803AD7C6}.2.ver0x0000000000000002.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{376d4583-7d39-4b0c-a26b-8169803ad7c6}.2.ver0x0000000000000002.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0208.735] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x4c0, lpOverlapped=0x0) returned 1 [0208.737] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x4c0, lpOverlapped=0x0) returned 1 [0208.742] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.742] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.742] CloseHandle (hObject=0x1b8) returned 1 [0208.742] CloseHandle (hObject=0x1d4) returned 1 [0208.744] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{376D4583-7D39-4B0C-A26B-8169803AD7C6}.2.ver0x0000000000000002.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{376d4583-7d39-4b0c-a26b-8169803ad7c6}.2.ver0x0000000000000002.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{376D4583-7D39-4B0C-A26B-8169803AD7C6}.2.ver0x0000000000000002.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{376d4583-7d39-4b0c-a26b-8169803ad7c6}.2.ver0x0000000000000002.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0208.745] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{376D4583-7D39-4B0C-A26B-8169803AD7C6}.2.ver0x0000000000000002.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{376d4583-7d39-4b0c-a26b-8169803ad7c6}.2.ver0x0000000000000002.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0208.745] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{376D4583-7D39-4B0C-A26B-8169803AD7C6}.2.ver0x0000000000000002.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{376d4583-7d39-4b0c-a26b-8169803ad7c6}.2.ver0x0000000000000002.db"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd356933c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd356933c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd356933c, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{376D4583-7D39-4B0C-A26B-8169803AD7C6}.2.ver0x0000000000000002.db", cAlternateFileName="{376D4~2.DB")) returned 0x55e890 [0208.745] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd356933c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd356933c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd356933c, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{376D4583-7D39-4B0C-A26B-8169803AD7C6}.2.ver0x0000000000000002.db", cAlternateFileName="{376D4~2.DB")) returned 0 [0208.745] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0208.745] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{376D4583-7D39-4B0C-A26B-8169803AD7C6}.2.ver0x0000000000000002.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{376d4583-7d39-4b0c-a26b-8169803ad7c6}.2.ver0x0000000000000002.db")) returned 0 [0208.745] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{376D4583-7D39-4B0C-A26B-8169803AD7C6}.2.ver0x0000000000000002.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{376d4583-7d39-4b0c-a26b-8169803ad7c6}.2.ver0x0000000000000002.db")) returned 0x20 [0208.746] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5021bbf2, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x5021bbf2, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5021bbf2, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db", cAlternateFileName="{3EC13~1.DB")) returned 1 [0208.746] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0208.746] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.746] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0208.746] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0208.746] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.746] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0208.746] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{3ec13d2a-c75f-4a0a-9855-0b415d40999c}.2.ver0x0000000000000001.db")) returned 0x20 [0208.747] VirtualAlloc (lpAddress=0x1ed0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ed0000 [0208.747] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{3ec13d2a-c75f-4a0a-9855-0b415d40999c}.2.ver0x0000000000000001.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0208.748] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{3ec13d2a-c75f-4a0a-9855-0b415d40999c}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0208.749] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x418, lpOverlapped=0x0) returned 1 [0208.752] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x418, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x418, lpOverlapped=0x0) returned 1 [0208.753] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.753] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.753] CloseHandle (hObject=0x1d4) returned 1 [0208.754] CloseHandle (hObject=0x1b8) returned 1 [0208.755] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{3ec13d2a-c75f-4a0a-9855-0b415d40999c}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{3ec13d2a-c75f-4a0a-9855-0b415d40999c}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0208.756] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{3ec13d2a-c75f-4a0a-9855-0b415d40999c}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0208.757] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{3ec13d2a-c75f-4a0a-9855-0b415d40999c}.2.ver0x0000000000000001.db"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5021bbf2, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x5021bbf2, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5021bbf2, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db", cAlternateFileName="{3EC13~1.DB")) returned 0x55e790 [0208.757] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5021bbf2, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x5021bbf2, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5021bbf2, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db", cAlternateFileName="{3EC13~1.DB")) returned 0 [0208.757] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0208.757] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{3ec13d2a-c75f-4a0a-9855-0b415d40999c}.2.ver0x0000000000000001.db")) returned 1 [0208.759] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{3ec13d2a-c75f-4a0a-9855-0b415d40999c}.2.ver0x0000000000000001.db")) returned 0xffffffff [0208.760] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501db0bf, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x501db0bf, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x501db0bf, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db", cAlternateFileName="{5C9E1~1.DB")) returned 1 [0208.760] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0208.760] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0208.760] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0208.760] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0208.761] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{5c9e180f-34bb-4f92-8676-68c88e410c2b}.2.ver0x0000000000000001.db")) returned 0x20 [0208.761] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{5c9e180f-34bb-4f92-8676-68c88e410c2b}.2.ver0x0000000000000001.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0208.762] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{5c9e180f-34bb-4f92-8676-68c88e410c2b}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0208.762] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x4c0, lpOverlapped=0x0) returned 1 [0208.767] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x4c0, lpOverlapped=0x0) returned 1 [0208.769] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.769] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.769] CloseHandle (hObject=0x1b8) returned 1 [0208.769] CloseHandle (hObject=0x1d4) returned 1 [0208.771] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{5c9e180f-34bb-4f92-8676-68c88e410c2b}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{5c9e180f-34bb-4f92-8676-68c88e410c2b}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0208.772] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{5c9e180f-34bb-4f92-8676-68c88e410c2b}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0208.772] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{5c9e180f-34bb-4f92-8676-68c88e410c2b}.2.ver0x0000000000000001.db"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501db0bf, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x501db0bf, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x501db0bf, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db", cAlternateFileName="{5C9E1~1.DB")) returned 0x55e750 [0208.773] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501db0bf, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x501db0bf, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x501db0bf, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db", cAlternateFileName="{5C9E1~1.DB")) returned 0 [0208.773] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0208.773] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{5c9e180f-34bb-4f92-8676-68c88e410c2b}.2.ver0x0000000000000001.db")) returned 1 [0208.776] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{5c9e180f-34bb-4f92-8676-68c88e410c2b}.2.ver0x0000000000000001.db")) returned 0xffffffff [0208.776] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3184088, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xe3184088, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe3185459, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x44268, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000009.db", cAlternateFileName="{6AF06~1.DB")) returned 1 [0208.776] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0208.776] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.788] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0208.788] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0208.788] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0208.788] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0208.788] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000009.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000009.db")) returned 0x20 [0208.788] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000009.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000009.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0208.789] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000009.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000009.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0208.789] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.792] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.794] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.795] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.796] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.797] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.797] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.797] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.797] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.797] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.797] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.798] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.798] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.798] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.799] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.799] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.799] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.799] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.799] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.800] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.800] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.800] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.800] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.800] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.800] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.801] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.801] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.801] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.801] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.802] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.804] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.804] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.804] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.804] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.805] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.805] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.805] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.805] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.806] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.806] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.806] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.806] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.807] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.807] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.807] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.807] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.807] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.807] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.808] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.808] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.808] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.808] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.808] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.809] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.809] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.809] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.809] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.809] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.809] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.810] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.810] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.810] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.810] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.810] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.810] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.810] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.811] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.811] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.811] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.811] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.811] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.811] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.812] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.812] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.812] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.812] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.812] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.813] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.813] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.813] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.813] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.836] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.836] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.836] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.836] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.836] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.837] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.837] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.837] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.837] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.837] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.837] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.838] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.838] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.838] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.838] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.838] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.839] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.839] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.839] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.839] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.839] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.840] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.840] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.840] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.840] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.840] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.840] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.841] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.841] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.841] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.841] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.841] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.841] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.842] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.842] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.842] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.842] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.842] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.842] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.843] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.843] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.843] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.843] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.843] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.843] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.844] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.844] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.844] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.844] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.845] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.845] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.846] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.846] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.846] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.846] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0208.846] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x268, lpOverlapped=0x0) returned 1 [0208.846] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x268, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x268, lpOverlapped=0x0) returned 1 [0208.847] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.847] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0208.847] CloseHandle (hObject=0x1d4) returned 1 [0208.847] CloseHandle (hObject=0x1b8) returned 1 [0209.633] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000009.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000009.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000009.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000009.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0209.634] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000009.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000009.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0209.634] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000009.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000009.db"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3184088, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xe3184088, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe3185459, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x44268, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000009.db", cAlternateFileName="{6AF06~1.DB")) returned 0x55e510 [0209.634] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3184088, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xe3184088, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe3185459, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x44268, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000009.db", cAlternateFileName="{6AF06~1.DB")) returned 0 [0209.634] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0209.634] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000009.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000009.db")) returned 1 [0209.635] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000009.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000009.db")) returned 0xffffffff [0209.635] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd356933c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd356933c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd356933c, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x447d0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db", cAlternateFileName="{6AF06~4.DB")) returned 1 [0209.635] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0209.635] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0209.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0209.636] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e7944c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0209.636] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0209.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e7944c) returned 0x18 [0209.636] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db")) returned 0x20 [0209.636] VirtualAlloc (lpAddress=0x1ed4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ed4000 [0209.636] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0209.636] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0209.637] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.638] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.639] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.639] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.640] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.640] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.640] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.640] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.641] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.641] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.641] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.641] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.641] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.642] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.642] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.642] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.642] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.642] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.642] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.643] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.643] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.643] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.643] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.643] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.643] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.644] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.644] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.644] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.644] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.644] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.644] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.645] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.645] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.645] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.645] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.645] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.645] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.646] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.646] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.646] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.646] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.646] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.646] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.647] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.647] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.647] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.647] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.647] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.647] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.648] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.648] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.648] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.648] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.648] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.649] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.649] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.649] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.649] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.649] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.649] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.650] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.650] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.650] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.650] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.650] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.650] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.651] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.651] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.651] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.651] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.651] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.651] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.652] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.652] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.652] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.652] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.653] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.653] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.653] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.653] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.653] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.654] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.654] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.654] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.654] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.654] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.654] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.673] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.674] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.674] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.674] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.674] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.674] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.674] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.675] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.675] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.675] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.675] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.675] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.675] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.676] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.676] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.676] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.676] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.676] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.676] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.677] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.677] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.677] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.677] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.677] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.678] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.678] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.678] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.678] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.678] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.678] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.679] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.679] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.679] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.679] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.679] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.679] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.679] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.680] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.680] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.680] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.680] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.680] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.681] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.682] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.682] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.683] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.683] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.683] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.683] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.684] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x7d0, lpOverlapped=0x0) returned 1 [0209.684] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x7d0, lpOverlapped=0x0) returned 1 [0209.684] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0209.684] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0209.684] CloseHandle (hObject=0x1b8) returned 1 [0209.684] CloseHandle (hObject=0x1d4) returned 1 [0209.716] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0209.716] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0209.716] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd356933c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd356933c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd356933c, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x447d0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db", cAlternateFileName="{6AF06~4.DB")) returned 0x55e650 [0209.716] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd356933c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd356933c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd356933c, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x447d0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db", cAlternateFileName="{6AF06~4.DB")) returned 0 [0209.717] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0209.717] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db")) returned 0 [0209.717] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db")) returned 0x20 [0209.717] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678eae1f, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x678eae1f, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x678eae1f, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x8dfa0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db", cAlternateFileName="{DDF57~1.DB")) returned 1 [0209.717] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0209.718] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0209.718] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0209.718] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0209.718] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0209.718] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0209.718] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db")) returned 0x20 [0209.718] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0209.719] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0209.720] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.721] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.723] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.723] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.724] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.724] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.724] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.724] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.724] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.725] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.725] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.725] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.725] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.725] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.725] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.726] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.726] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.726] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.726] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.726] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.726] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.727] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.727] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.727] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.727] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.727] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.727] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.728] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.728] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.728] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.728] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.728] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.729] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.729] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.729] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.729] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.730] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.731] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.731] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.731] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.731] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.731] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.731] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.732] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.732] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.732] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.732] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.732] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.733] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.733] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.733] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.733] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.734] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.734] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.734] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.734] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.734] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.735] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.735] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.735] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.735] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.735] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.735] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.736] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.736] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.736] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.736] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.736] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.736] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.737] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.737] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.737] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.737] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.737] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.738] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.738] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.738] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.738] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.738] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.738] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.739] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.739] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.739] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.739] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.739] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.739] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.740] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.740] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.740] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.740] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.740] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.741] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.741] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.741] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.741] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.741] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.742] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.742] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.742] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.742] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.743] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.743] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.743] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.743] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.743] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.743] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.744] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.744] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.744] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.744] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.744] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.745] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.745] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.745] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.745] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.745] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.745] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.746] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.746] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.748] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.748] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.748] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.748] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.750] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.751] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.751] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.751] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.751] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.751] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.752] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.753] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.753] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.754] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.754] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.754] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.754] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.754] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.755] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.755] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.755] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.755] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.755] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.755] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.756] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.756] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.756] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.756] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.756] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.756] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.757] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.757] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.757] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.757] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.757] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.757] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.758] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.758] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.832] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.832] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.832] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.832] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.833] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.833] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.834] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.834] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.834] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.834] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.834] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.834] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.835] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.835] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.835] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.835] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.835] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.836] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.836] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.836] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.836] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.836] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.837] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.837] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.837] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.837] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.837] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.838] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.838] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.838] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.838] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.839] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.839] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.839] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.839] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.840] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.840] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.840] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.840] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.840] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.841] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.841] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.841] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.841] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.841] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.842] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.842] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.842] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.845] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.846] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.846] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.846] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.846] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.847] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.847] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.847] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.847] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.847] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.848] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.848] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.848] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.848] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.849] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.849] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.849] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.849] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.849] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.850] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.850] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.851] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.851] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.851] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.851] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.851] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.852] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.852] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.852] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.852] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.852] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.853] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.853] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.853] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.853] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.853] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.854] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.854] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.854] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.854] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.855] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.855] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.855] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.855] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.855] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.856] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.856] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.856] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.856] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.857] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.857] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.857] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.859] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.860] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.860] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.860] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.861] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.861] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.861] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.861] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.861] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.862] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.862] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.862] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.862] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.863] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.863] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.863] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.863] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.863] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.863] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.864] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.864] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.864] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.864] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.865] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.865] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0209.865] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xfa0, lpOverlapped=0x0) returned 1 [0209.865] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xfa0, lpOverlapped=0x0) returned 1 [0209.866] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0209.866] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0209.866] CloseHandle (hObject=0x1d4) returned 1 [0209.866] CloseHandle (hObject=0x1b8) returned 1 [0210.310] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0210.311] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0210.311] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678eae1f, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x678eae1f, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x678eae1f, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x8dfa0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db", cAlternateFileName="{DDF57~1.DB")) returned 0x55e890 [0210.311] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678eae1f, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x678eae1f, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x678eae1f, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x8dfa0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db", cAlternateFileName="{DDF57~1.DB")) returned 0 [0210.311] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0210.313] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db")) returned 0 [0210.313] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db")) returned 0x20 [0210.313] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501794e7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x501794e7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x501794e7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db", cAlternateFileName="{E23B5~1.DB")) returned 1 [0210.314] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0210.314] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0210.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0210.314] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0210.314] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0210.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0210.315] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{e23b5da4-e3a9-461b-8050-8e471867b572}.2.ver0x0000000000000001.db")) returned 0x20 [0210.317] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{e23b5da4-e3a9-461b-8050-8e471867b572}.2.ver0x0000000000000001.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0210.318] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{e23b5da4-e3a9-461b-8050-8e471867b572}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0210.318] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x4c0, lpOverlapped=0x0) returned 1 [0210.321] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x4c0, lpOverlapped=0x0) returned 1 [0210.322] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0210.322] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0210.322] CloseHandle (hObject=0x1b8) returned 1 [0210.323] CloseHandle (hObject=0x1d4) returned 1 [0210.324] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{e23b5da4-e3a9-461b-8050-8e471867b572}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{e23b5da4-e3a9-461b-8050-8e471867b572}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0210.325] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{e23b5da4-e3a9-461b-8050-8e471867b572}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0210.325] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{e23b5da4-e3a9-461b-8050-8e471867b572}.2.ver0x0000000000000001.db"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501794e7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x501794e7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x501794e7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db", cAlternateFileName="{E23B5~1.DB")) returned 0x55e2d0 [0210.325] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501794e7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x501794e7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x501794e7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db", cAlternateFileName="{E23B5~1.DB")) returned 0 [0210.325] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0210.325] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{e23b5da4-e3a9-461b-8050-8e471867b572}.2.ver0x0000000000000001.db")) returned 1 [0210.327] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{e23b5da4-e3a9-461b-8050-8e471867b572}.2.ver0x0000000000000001.db")) returned 0xffffffff [0210.327] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501794e7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x501794e7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x501794e7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db", cAlternateFileName="{E23B5~1.DB")) returned 0 [0210.327] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0210.327] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x452d3441, dwReserved1=0x2d394133, cFileName="Cem", cAlternateFileName="")) returned 1 [0210.327] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Cem\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\cem\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0210.327] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0210.327] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0210.327] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0210.327] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1dd6b9c4, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x29d3c852, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x452d3441, dwReserved1=0x2d394133, cFileName="ClipSVC", cAlternateFileName="")) returned 1 [0210.327] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1dd6b9c4, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x29d3c852, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0210.328] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1dd6b9c4, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x29d3c852, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0210.329] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Archive", cAlternateFileName="")) returned 1 [0210.329] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Archive\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\archive\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd769d3c8, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0210.329] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd769d3c8, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0210.329] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd769d3c8, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x7014f3e7, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x7014f3e7, ftLastWriteTime.dwHighDateTime=0x1d7b059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="Apps", cAlternateFileName="")) returned 1 [0210.329] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\archive\\apps\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd769d3c8, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x7014f3e7, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x1dd88ec8, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0210.332] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd769d3c8, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x7014f3e7, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x1dd88ec8, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.333] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3f6cc, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6f3f6cc, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6f3f6cc, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xbaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="02305155-8ac1-1189-ff55-b7119a53887c.xml", cAlternateFileName="023051~1.XML")) returned 1 [0210.334] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd847909d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd847909d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe2377c05, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xaea, dwReserved0=0x2d0031, dwReserved1=0x310031, cFileName="08961e67-fd90-a888-a0c1-ffdc19a3386f.xml", cAlternateFileName="08961E~1.XML")) returned 1 [0210.335] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488111e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x488111e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x488111e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xbac, dwReserved0=0x2d0030, dwReserved1=0x380061, cFileName="0938f89a-6057-8194-1885-cd0129657e59.xml", cAlternateFileName="0938F8~1.XML")) returned 1 [0210.335] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda07c955, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xda07c955, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe38c6bf6, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa46, dwReserved0=0x2d0037, dwReserved1=0x310038, cFileName="0a8c1492-65ca-6a01-de25-0e183559d10d.xml", cAlternateFileName="0A8C14~1.XML")) returned 1 [0210.336] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd78b36fd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd78b36fd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe48dea83, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xad9, dwReserved0=0x2d0061, dwReserved1=0x610036, cFileName="0cb4ef12-226b-0a51-6930-2dbfb63f3e7d.xml", cAlternateFileName="0CB4EF~1.XML")) returned 1 [0210.337] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd12581b, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfd12581b, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfd197f35, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xba8, dwReserved0=0x2d0062, dwReserved1=0x610030, cFileName="13ba8772-845b-29a1-ae9e-fb2793ccf4ea.xml", cAlternateFileName="13BA87~1.XML")) returned 1 [0210.338] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99c8164, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd99c8164, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe56e08b6, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa4b, dwReserved0=0x2d0062, dwReserved1=0x390032, cFileName="1e225998-faa0-5fd4-4db7-5e7686ee3b47.xml", cAlternateFileName="1E2259~1.XML")) returned 1 [0210.338] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd92086d9, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd92086d9, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe679104a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x2d0030, dwReserved1=0x660035, cFileName="215f9712-9fca-a3f8-5b11-660eefc73b96.xml", cAlternateFileName="215F97~1.XML")) returned 1 [0210.354] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5694346, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe5694346, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe5694346, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbac, dwReserved0=0x2d0061, dwReserved1=0x330061, cFileName="2657f7c0-8294-58c3-f394-15fe18ba174a.xml", cAlternateFileName="2657F7~1.XML")) returned 1 [0210.355] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3e205, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3b3e205, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3b3e205, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xbae, dwReserved0=0x2d0034, dwReserved1=0x380035, cFileName="26c4a16e-17b6-f099-36a5-15dce3ab25ce.xml", cAlternateFileName="26C4A1~1.XML")) returned 1 [0210.356] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8ec13ae, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd8ec13ae, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe769de90, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xac3, dwReserved0=0x2d0036, dwReserved1=0x300066, cFileName="28748306-9f02-a5d7-6ded-4459fddadc31.xml", cAlternateFileName="287483~1.XML")) returned 1 [0210.357] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd769d3c8, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd769d3c8, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe849fa3b, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xace, dwReserved0=0x2d0032, dwReserved1=0x350061, cFileName="2a3adcd0-4ddc-f3d2-6bcb-f11f9cbc1e2c.xml", cAlternateFileName="2A3ADC~1.XML")) returned 1 [0210.358] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd836e068, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd836e068, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xec11f4e1, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa45, dwReserved0=0x2d0063, dwReserved1=0x330066, cFileName="2cb4947b-9a24-70fc-387f-98cfa7cd7461.xml", cAlternateFileName="2CB494~1.XML")) returned 1 [0210.359] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf96e6be6, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf96e6be6, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf9864309, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbaf, dwReserved0=0x2d0034, dwReserved1=0x300037, cFileName="336104cb-5aed-87bc-3de4-450944c51591.xml", cAlternateFileName="336104~1.XML")) returned 1 [0210.360] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa89d764, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfa89d764, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfa89d764, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbb2, dwReserved0=0x2d0064, dwReserved1=0x370038, cFileName="39df664f-5262-2b7a-364c-fb7387c64d94.xml", cAlternateFileName="39DF66~1.XML")) returned 1 [0210.361] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec03a6dc, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xec03a6dc, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xec03a6dc, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbab, dwReserved0=0x2d0032, dwReserved1=0x620032, cFileName="3d4098b6-679e-0d7e-f478-ee96ebcb42ff.xml", cAlternateFileName="3D4098~1.XML")) returned 1 [0210.362] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7f1ba75, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd7f1ba75, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xed40bea9, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa47, dwReserved0=0x2d0065, dwReserved1=0x640030, cFileName="4ad5b311-485b-15cc-97e9-9adb84427d7b.xml", cAlternateFileName="4AD5B3~1.XML")) returned 1 [0210.362] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7cdf85e, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd7cdf85e, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xee3b1718, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x2d0062, dwReserved1=0x350031, cFileName="5390be10-79b5-dc50-bb32-91842c76e607.xml", cAlternateFileName="5390BE~1.XML")) returned 1 [0210.363] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef24bbde, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xef24bbde, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xef24bbde, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbac, dwReserved0=0x2d0035, dwReserved1=0x630064, cFileName="54a30ac2-1ccf-60a8-6672-380af6008f3d.xml", cAlternateFileName="54A30A~1.XML")) returned 1 [0210.364] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7aa3498, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd7aa3498, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xef271f8f, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x2d0066, dwReserved1=0x300036, cFileName="59e31519-5400-7696-2a00-b5fca5ba8904.xml", cAlternateFileName="59E315~1.XML")) returned 1 [0210.365] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd87016ef, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd87016ef, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xa05f4723, ftLastWriteTime.dwHighDateTime=0x1d75217, nFileSizeHigh=0x0, nFileSizeLow=0xa46, dwReserved0=0x2d0030, dwReserved1=0x360037, cFileName="5b0a39aa-16e0-a938-f694-656664c7be15.xml", cAlternateFileName="5B0A39~1.XML")) returned 1 [0210.366] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe48b88b5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe48b88b5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe48b88b5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x2d0030, dwReserved1=0x390061, cFileName="5f3c8956-0358-1f87-eb47-697e265d6aa9.xml", cAlternateFileName="5F3C89~1.XML")) returned 1 [0210.367] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f6807f4, ftCreationTime.dwHighDateTime=0x1d75217, ftLastAccessTime.dwLowDateTime=0x9f6807f4, ftLastAccessTime.dwHighDateTime=0x1d75217, ftLastWriteTime.dwLowDateTime=0xa05ce57d, ftLastWriteTime.dwHighDateTime=0x1d75217, nFileSizeHigh=0x0, nFileSizeLow=0xbaa, dwReserved0=0x2d0038, dwReserved1=0x660031, cFileName="600364a7-e11c-efda-2c12-eac40e75f19a.xml", cAlternateFileName="600364~1.XML")) returned 1 [0210.369] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b7f58e, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf3b7f58e, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf3b7f58e, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbae, dwReserved0=0x2d0063, dwReserved1=0x660065, cFileName="61b5bd89-4cb0-db77-6622-cb63b5a58080.xml", cAlternateFileName="61B5BD~1.XML")) returned 1 [0210.370] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf07c0fab, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf07c0fab, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf07c0fab, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbaa, dwReserved0=0x2d0030, dwReserved1=0x620064, cFileName="666f6a0d-4805-a98c-a8ca-0e10bee9110d.xml", cAlternateFileName="666F6A~1.XML")) returned 1 [0210.371] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9385d1b, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd9385d1b, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf3cd69cc, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa52, dwReserved0=0x2d0035, dwReserved1=0x390061, cFileName="67447b0c-05cf-6740-5f7b-391ab440c42d.xml", cAlternateFileName="67447B~1.XML")) returned 1 [0210.372] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd984a9a6, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd984a9a6, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf5f1c6ed, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa7e, dwReserved0=0x2d0066, dwReserved1=0x370036, cFileName="71c8f37a-a7b9-aff0-6de0-9b276c089ad6.xml", cAlternateFileName="71C8F3~1.XML")) returned 1 [0210.373] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8584088, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd8584088, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8610365, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xacf, dwReserved0=0x2d0039, dwReserved1=0x660061, cFileName="7309084a-bb6f-20c3-ea54-aa108ceab1ae.xml", cAlternateFileName="730908~1.XML")) returned 1 [0210.374] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e5bb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x85e5bb2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8631f37, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xbac, dwReserved0=0x2d0066, dwReserved1=0x300032, cFileName="7646fa0f-b52c-71a8-3aed-950dd1668c09.xml", cAlternateFileName="7646FA~1.XML")) returned 1 [0210.375] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb4fbb1c, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfb4fbb1c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfb4fbb1c, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbbd, dwReserved0=0x2d0063, dwReserved1=0x310037, cFileName="7bbd8142-b10d-d230-1531-689c7f7ee77b.xml", cAlternateFileName="7BBD81~1.XML")) returned 1 [0210.376] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8b79f8a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd8b79f8a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf99e1ac4, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xadf, dwReserved0=0x2d0064, dwReserved1=0x320064, cFileName="8ce3d3dd-a4c7-6c38-5fde-1f9f5df98807.xml", cAlternateFileName="8CE3D3~1.XML")) returned 1 [0210.376] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8858e15, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd8858e15, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfa89d764, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xaed, dwReserved0=0x2d0037, dwReserved1=0x630036, cFileName="8e383e90-b2f9-7bf2-1d5b-4e47dcb2014e.xml", cAlternateFileName="8E383E~1.XML")) returned 1 [0210.377] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd89d6472, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd89d6472, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfb521d5c, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xb11, dwReserved0=0x2d0039, dwReserved1=0x620037, cFileName="9d3ad23c-c6b8-7fb5-e4ab-f5d0a66dcfbc.xml", cAlternateFileName="9D3AD2~1.XML")) returned 1 [0210.378] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7a5aaa, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfe7a5aaa, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfe88a7a7, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbad, dwReserved0=0x2d0038, dwReserved1=0x660037, cFileName="a2ddb8ff-965c-50c4-b641-7a276574f02d.xml", cAlternateFileName="A2DDB8~1.XML")) returned 1 [0210.379] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd88ec8, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x1dd88ec8, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x1dd88ec8, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0xbaf, dwReserved0=0x2d0063, dwReserved1=0x300035, cFileName="a3d566c4-2f7d-1e92-fe89-b9b792ff9a68.xml", cAlternateFileName="A3D566~1.XML")) returned 1 [0210.380] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5deb3e4, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf5deb3e4, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf5deb3e4, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbba, dwReserved0=0x2d0064, dwReserved1=0x650031, cFileName="a7e08b8b-ad4b-af00-ebcc-1aa29a833ce9.xml", cAlternateFileName="A7E08B~1.XML")) returned 1 [0210.381] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38b4f1, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xee38b4f1, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xee38b4f1, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xba8, dwReserved0=0x2d0062, dwReserved1=0x660061, cFileName="aa4e72b1-ad78-3f2c-e8ff-4733b8cdd4ac.xml", cAlternateFileName="AA4E72~1.XML")) returned 1 [0210.382] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c2a67b, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd9c2a67b, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfc133bf7, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xaf5, dwReserved0=0x2d0038, dwReserved1=0x660033, cFileName="ac116a72-b6b1-d558-23f6-10796e634d41.xml", cAlternateFileName="AC116A~1.XML")) returned 1 [0210.383] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9e66920, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd9e66920, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfd20a4d2, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa3b, dwReserved0=0x2d0031, dwReserved1=0x350064, cFileName="b34b197c-c0ed-bf12-c9bb-44e883c66a9d.xml", cAlternateFileName="B34B19~1.XML")) returned 1 [0210.384] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe765169a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe765169a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe765169a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xba7, dwReserved0=0x2d0064, dwReserved1=0x660062, cFileName="b86da26a-5ea0-b0b3-a958-dbd73e1b34c3.xml", cAlternateFileName="B86DA2~1.XML")) returned 1 [0210.385] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf85777ea, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf85777ea, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf85777ea, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbab, dwReserved0=0x2d0030, dwReserved1=0x300062, cFileName="ba2654d8-ef2f-4ec9-0f9b-fab2b324fd98.xml", cAlternateFileName="BA2654~1.XML")) returned 1 [0210.389] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ad316d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd9ad316d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xff1edc8e, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xad9, dwReserved0=0x2d0066, dwReserved1=0x650034, cFileName="babc0ea4-dabb-04f7-1017-a11af9b29344.xml", cAlternateFileName="BABC0E~1.XML")) returned 1 [0210.390] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd903ea6b, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd903ea6b, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x10ec6dd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xa41, dwReserved0=0x2d0062, dwReserved1=0x340030, cFileName="bbfbe8ad-1a35-a7f3-33bc-40912bf89dfb.xml", cAlternateFileName="BBFBE8~1.XML")) returned 1 [0210.391] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd954fa9c, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd954fa9c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x2bbec34, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xa60, dwReserved0=0x2d0035, dwReserved1=0x370061, cFileName="bcda97bb-bfd0-2a72-3c90-c8518f3d09ee.xml", cAlternateFileName="BCDA97~1.XML")) returned 1 [0210.392] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc133bf7, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfc133bf7, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfc133bf7, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbb5, dwReserved0=0x2d0030, dwReserved1=0x610032, cFileName="bdcba974-7e66-f9d7-2600-1b864478cfcf.xml", cAlternateFileName="BDCBA9~1.XML")) returned 1 [0210.393] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285167d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x285167d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x28ea187, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xbb2, dwReserved0=0x2d0036, dwReserved1=0x390066, cFileName="c94a6c18-d496-da1c-8a02-fc6976e0145e.xml", cAlternateFileName="C94A6C~1.XML")) returned 1 [0210.394] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57da5d7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x57da5d7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x584cc95, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xbac, dwReserved0=0x2d0036, dwReserved1=0x610064, cFileName="ce2b93c3-33d8-d88b-3c8a-9835916d800f.xml", cAlternateFileName="CE2B93~1.XML")) returned 1 [0210.395] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe679104a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe679104a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe679104a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbad, dwReserved0=0x2d0038, dwReserved1=0x380064, cFileName="d0102409-be7d-cccd-2977-b1525deaa1f1.xml", cAlternateFileName="D01024~1.XML")) returned 1 [0210.396] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5922b77b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5922b77b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x690c075, ftLastWriteTime.dwHighDateTime=0x1d7b056, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7, dwReserved0=0x2d0064, dwReserved1=0x630063, cFileName="d5b6d6fc-46c4-0efe-2970-ff3d0687c8ec.xml", cAlternateFileName="D5B6D6~1.XML")) returned 1 [0210.397] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3e5c27, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xed3e5c27, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xed3e5c27, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbab, dwReserved0=0x2d0034, dwReserved1=0x650030, cFileName="dc5bc54e-ee99-04c5-63a5-669bf0666354.xml", cAlternateFileName="DC5BC5~1.XML")) returned 1 [0210.398] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7014f3e7, ftCreationTime.dwHighDateTime=0x1d7b059, ftLastAccessTime.dwLowDateTime=0x7014f3e7, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x7015073f, ftLastWriteTime.dwHighDateTime=0x1d7b059, nFileSizeHigh=0x0, nFileSizeLow=0xbaf, dwReserved0=0x2d0039, dwReserved1=0x340030, cFileName="dd89cceb-d405-0dcd-251d-4881a2a0c461.xml", cAlternateFileName="DD89CC~1.XML")) returned 1 [0210.398] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd96cd24e, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd96cd24e, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3b643d6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xad8, dwReserved0=0x2d0035, dwReserved1=0x640030, cFileName="e2a686b1-b02a-b3e7-90cb-3fa0d708ce04.xml", cAlternateFileName="E2A686~1.XML")) returned 1 [0210.399] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe387a96f, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe387a96f, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe387a96f, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbaa, dwReserved0=0x2d0061, dwReserved1=0x330062, cFileName="e335baf1-18ab-73fe-e089-3fa0a6e71a35.xml", cAlternateFileName="E335BA~1.XML")) returned 1 [0210.400] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8d43bbc, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd8d43bbc, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x48cd751, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xad4, dwReserved0=0x2d0062, dwReserved1=0x330037, cFileName="e603fcd0-9cde-3f41-875c-5cc396d927ce.xml", cAlternateFileName="E603FC~1.XML")) returned 1 [0210.401] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ce9146, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd9ce9146, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x5a62e11, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xad7, dwReserved0=0x2d0065, dwReserved1=0x660033, cFileName="e64ffef1-e246-b632-595b-56076a3fa776.xml", cAlternateFileName="E64FFE~1.XML")) returned 1 [0210.402] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10c634f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x10c634f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x10c634f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x2d0036, dwReserved1=0x360062, cFileName="ecbc2601-0a67-4963-e594-43c65d6ec9a5.xml", cAlternateFileName="ECBC26~1.XML")) returned 1 [0210.403] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9fe40be, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd9fe40be, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x70244d7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xa46, dwReserved0=0x2d0037, dwReserved1=0x390034, cFileName="eee47229-947d-2ac7-e8a3-49bafee251d1.xml", cAlternateFileName="EEE472~1.XML")) returned 1 [0210.404] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe224692f, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe224692f, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe224692f, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbb2, dwReserved0=0x2d0064, dwReserved1=0x610032, cFileName="f008957b-e94f-9f17-be2e-851d4264d7ba.xml", cAlternateFileName="F00895~1.XML")) returned 1 [0210.405] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84533ea, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe84533ea, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe84533ea, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x2d0066, dwReserved1=0x660039, cFileName="f0e645a9-3fa2-f8bf-e437-5c63b531b2ba.xml", cAlternateFileName="F0E645~1.XML")) returned 1 [0210.405] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd81ca5e1, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd81ca5e1, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x8821f5f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x2d0032, dwReserved1=0x380066, cFileName="fc93b452-8a84-dede-3b7a-0fc9413c4592.xml", cAlternateFileName="FC93B4~1.XML")) returned 1 [0210.406] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd81ca5e1, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd81ca5e1, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x8821f5f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x2d0032, dwReserved1=0x380066, cFileName="fc93b452-8a84-dede-3b7a-0fc9413c4592.xml", cAlternateFileName="FC93B4~1.XML")) returned 0 [0210.406] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0210.408] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd769d3c8, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x7014f3e7, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x7014f3e7, ftLastWriteTime.dwHighDateTime=0x1d7b059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="Apps", cAlternateFileName="")) returned 0 [0210.408] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0210.408] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="GenuineTicket", cAlternateFileName="GENUIN~1")) returned 1 [0210.408] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\GenuineTicket\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\genuineticket\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61382d32, dwReserved1=0x642d3438, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0210.409] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61382d32, dwReserved1=0x642d3438, cFileName="..", cAlternateFileName="")) returned 1 [0210.409] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61382d32, dwReserved1=0x642d3438, cFileName="..", cAlternateFileName="")) returned 0 [0210.409] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0210.410] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Import", cAlternateFileName="")) returned 1 [0210.410] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Import\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\import\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61382d32, dwReserved1=0x642d3438, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0210.410] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61382d32, dwReserved1=0x642d3438, cFileName="..", cAlternateFileName="")) returned 1 [0210.410] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61382d32, dwReserved1=0x642d3438, cFileName="..", cAlternateFileName="")) returned 0 [0210.410] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0210.410] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xa9d016c5, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0xa9d016c5, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Install", cAlternateFileName="")) returned 1 [0210.410] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Install\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\install\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xa9d016c5, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0xd6d6028c, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61382d32, dwReserved1=0x642d3438, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0210.411] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xa9d016c5, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0xd6d6028c, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61382d32, dwReserved1=0x642d3438, cFileName="..", cAlternateFileName="")) returned 1 [0210.411] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9d016c5, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xda07c955, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xda07c955, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61382d32, dwReserved1=0x642d3438, cFileName="Apps", cAlternateFileName="")) returned 1 [0210.411] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Install\\Apps\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\install\\apps\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9d016c5, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xda07c955, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xda07c955, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0034, dwReserved1=0x650064, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0210.411] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9d016c5, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xda07c955, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xda07c955, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0034, dwReserved1=0x650064, cFileName="..", cAlternateFileName="")) returned 1 [0210.411] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9d016c5, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xda07c955, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xda07c955, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0034, dwReserved1=0x650064, cFileName="..", cAlternateFileName="")) returned 0 [0210.411] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0210.411] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6d6028c, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd6d6028c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd6d6028c, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61382d32, dwReserved1=0x642d3438, cFileName="Migration", cAlternateFileName="MIGRAT~1")) returned 1 [0210.412] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Install\\Migration\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\install\\migration\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6d6028c, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd6d6028c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd6d6028c, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0034, dwReserved1=0x650064, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0210.412] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6d6028c, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd6d6028c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd6d6028c, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0034, dwReserved1=0x650064, cFileName="..", cAlternateFileName="")) returned 1 [0210.412] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6d6028c, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd6d6028c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd6d6028c, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0034, dwReserved1=0x650064, cFileName="..", cAlternateFileName="")) returned 0 [0210.412] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0210.412] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6d6028c, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd6d6028c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd6d6028c, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61382d32, dwReserved1=0x642d3438, cFileName="Migration", cAlternateFileName="MIGRAT~1")) returned 0 [0210.412] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0210.412] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd51cf13f, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x1dd6b9c4, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x29d3054e, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x73332, dwReserved0=0x6e6f, dwReserved1=0x2000002, cFileName="tokens.dat", cAlternateFileName="")) returned 1 [0210.413] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0210.413] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0210.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0210.413] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0210.413] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0210.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0210.413] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\tokens.dat")) returned 0x2020 [0210.414] VirtualAlloc (lpAddress=0x1ed8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ed8000 [0210.414] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\tokens.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0210.414] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\tokens.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\tokens.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0210.416] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.418] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.420] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.421] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.421] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.422] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.422] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.422] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.422] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.423] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.423] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.423] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.423] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.424] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.424] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.424] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.424] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.424] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.425] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.425] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.425] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.425] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.425] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.426] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.426] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.426] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.426] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.426] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.427] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.430] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.431] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.431] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.431] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.431] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.431] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.432] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.432] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.432] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.432] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.434] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.434] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.434] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.434] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.435] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.435] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.435] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.435] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.435] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.436] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.436] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.436] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.436] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.437] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.437] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.437] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.437] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.437] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.438] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.438] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.438] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.438] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.438] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.439] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.439] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.439] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.439] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.439] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.440] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.440] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.440] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.440] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.441] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.441] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.441] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.441] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.441] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.442] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.442] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.442] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.442] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.442] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.443] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.443] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.443] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.443] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.443] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.444] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.444] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.444] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.444] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.444] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.445] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.445] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.445] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.447] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.447] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.447] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.447] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.448] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.448] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.450] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.450] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.450] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.450] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.451] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.451] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.452] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.452] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.453] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.453] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.453] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.453] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.454] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.454] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.454] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.455] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.455] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.455] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.455] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.456] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.456] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.456] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.457] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.457] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.457] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.458] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.458] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.459] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.459] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.460] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.469] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.470] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.470] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.471] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.471] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.471] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.471] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.471] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.472] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.472] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.472] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.472] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.472] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.472] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.473] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.473] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.473] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.473] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.473] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.473] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.474] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.474] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.474] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.474] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.474] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.474] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.475] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.479] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.479] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.479] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.479] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.479] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.480] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.480] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.480] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.480] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.480] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.480] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.480] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.481] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.481] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.481] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.481] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.481] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.481] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.482] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.482] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.482] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.482] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.482] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.483] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.483] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.483] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.483] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.483] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.483] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.483] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.484] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.484] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.484] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.484] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.484] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.484] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.485] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.485] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.485] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.485] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.485] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.486] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.486] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.486] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.486] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.486] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.487] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.487] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.487] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.487] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.487] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.488] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.488] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.488] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.488] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.488] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.488] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.489] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.489] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.489] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.489] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.489] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.489] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.490] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.491] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.491] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.491] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.491] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.491] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.492] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.492] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.492] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.492] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.492] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x332, lpOverlapped=0x0) returned 1 [0210.492] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x332, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x332, lpOverlapped=0x0) returned 1 [0210.493] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0210.493] WriteFile (in: hFile=0x1b8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0210.493] CloseHandle (hObject=0x1d4) returned 1 [0210.493] CloseHandle (hObject=0x1b8) returned 1 [0210.506] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\tokens.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\tokens.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\tokens.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0210.506] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\tokens.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\tokens.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0210.506] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\tokens.dat"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd51cf13f, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x1dd6b9c4, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x29d3054e, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x73332, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="tokens.dat", cAlternateFileName="")) returned 0x55e590 [0210.506] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd51cf13f, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x1dd6b9c4, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x29d3054e, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x73332, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0210.506] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0210.507] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\tokens.dat")) returned 1 [0210.511] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\tokens.dat")) returned 0xffffffff [0210.511] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd51cf13f, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x1dd6b9c4, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x29d3054e, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x73332, dwReserved0=0x6e6f, dwReserved1=0x2000002, cFileName="tokens.dat", cAlternateFileName="")) returned 0 [0210.511] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0210.511] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x3814c40d, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x3814c40d, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b746164, dwReserved1=0x2d397465, cFileName="DeviceMetadataCache", cAlternateFileName="DEVICE~2")) returned 1 [0210.511] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x3814c40d, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x3814c40d, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0210.515] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x3814c40d, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x3814c40d, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.515] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b35cf7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x38136400, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x3814149d, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0xaeb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="dmrc.idx", cAlternateFileName="")) returned 1 [0210.515] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0210.515] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0210.515] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0210.515] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0210.515] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0210.515] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0210.515] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrc.idx" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrc.idx")) returned 0x20 [0210.516] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrc.idx" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrc.idx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0210.517] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrc.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrc.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0210.517] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.519] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.522] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.523] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.523] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.523] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.524] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.524] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.524] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.524] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.524] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.524] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.525] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.525] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.525] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.525] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.526] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.526] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.526] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.526] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.527] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.527] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.527] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.527] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.527] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.527] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.528] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.528] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.528] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.528] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.529] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.529] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.530] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.531] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.531] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.531] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.531] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.531] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.531] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.532] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.532] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.532] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.532] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.532] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.532] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.533] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.533] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.533] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.533] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.533] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.534] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.534] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.534] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.534] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.534] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.534] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.535] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.535] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.535] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.535] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.536] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.536] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.536] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.536] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.536] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.536] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.537] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.537] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.537] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.537] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.537] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.537] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.538] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.538] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.538] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.538] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.538] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.539] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.539] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.539] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.539] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.539] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.539] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.540] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.540] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.540] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.540] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.540] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.540] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.541] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.541] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.541] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.541] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.542] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.543] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.543] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.543] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.543] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.543] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.543] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.544] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.544] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.544] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.544] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.544] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.544] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.545] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.545] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.545] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.545] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.545] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.545] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.546] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.546] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.546] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.546] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.546] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.546] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.547] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.547] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.547] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.547] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.547] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.547] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.547] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.548] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.548] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.548] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.548] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.548] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.549] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.549] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.550] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.550] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.550] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.550] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.550] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.550] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.550] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.551] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.551] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.551] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.551] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.551] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.551] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.552] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.552] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.552] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.552] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.552] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.552] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.552] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.553] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.553] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.553] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.553] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.553] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.560] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.561] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.561] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.561] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.561] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.561] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.562] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.562] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.562] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.562] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.562] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.563] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.563] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.563] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.563] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.563] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.564] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.564] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.564] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.565] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.565] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.565] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.565] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.566] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.566] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.566] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.566] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.566] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.567] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.567] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.567] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.567] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.567] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.568] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.568] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.568] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.568] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.568] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.569] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.569] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.569] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.569] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.570] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.570] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.570] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.570] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.570] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.571] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.571] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.571] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.571] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.571] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.571] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.572] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.572] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.572] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.572] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.572] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.572] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.573] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.573] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.573] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.573] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.573] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.575] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.576] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.576] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.576] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.576] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.576] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.577] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.577] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.577] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.577] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.577] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.578] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.578] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.578] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.578] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.578] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.579] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.579] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.579] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.579] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.579] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.580] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.580] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.580] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.580] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.580] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.581] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.581] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.581] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.581] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.581] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.582] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.582] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.582] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.582] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.582] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.583] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.584] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.584] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.584] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.584] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.584] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.584] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.585] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.585] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.585] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.585] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.585] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.586] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.586] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.586] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.586] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.586] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.587] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.587] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.587] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.587] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.587] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.587] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.588] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.588] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.588] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.588] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.588] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.589] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.589] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.589] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.589] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.590] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.590] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.590] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.590] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.590] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.591] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.591] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.591] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.591] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.592] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.592] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.592] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.592] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.592] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.592] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.593] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.593] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.593] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.593] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.593] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.594] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.611] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.611] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.611] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.611] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.612] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.612] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.612] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.612] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.612] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.613] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.613] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.613] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.613] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.614] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.614] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.614] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.615] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.615] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.615] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.615] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.615] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.616] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.616] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.616] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.616] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.616] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.617] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.617] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.617] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.617] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.617] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.618] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.618] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.618] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.618] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.618] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.619] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.619] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.619] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xb48, lpOverlapped=0x0) returned 1 [0210.619] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xb48, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xb48, lpOverlapped=0x0) returned 1 [0210.619] ReadFile (in: hFile=0x1b8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0210.619] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0210.619] CloseHandle (hObject=0x1b8) returned 1 [0210.620] CloseHandle (hObject=0x1d4) returned 1 [0210.724] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrc.idx" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrc.idx"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrc.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrc.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0210.725] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrc.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrc.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0210.725] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrc.idx" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrc.idx"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b35cf7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x38136400, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x3814149d, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0xaeb48, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="dmrc.idx", cAlternateFileName="")) returned 0x55e690 [0210.725] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b35cf7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x38136400, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x3814149d, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0xaeb48, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="dmrc.idx", cAlternateFileName="")) returned 0 [0210.725] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0210.725] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrc.idx" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrc.idx")) returned 1 [0210.733] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrc.idx" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrc.idx")) returned 0xffffffff [0210.734] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x625e35f4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="dmrccache", cAlternateFileName="DMRCCA~1")) returned 1 [0210.734] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrccache\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x625e35f4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0210.734] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x625e35f4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0210.734] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x625e35f4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0210.734] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\downloads\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrccache\\downloads\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x625e35f4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xaef07201, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0210.735] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x625e35f4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xaef07201, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0210.735] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x625e35f4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xaef07201, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0210.735] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0210.735] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x625e35f4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="downloads", cAlternateFileName="DOWNLO~1")) returned 0 [0210.735] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0210.735] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x625e35f4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="dmrccache", cAlternateFileName="DMRCCA~1")) returned 0 [0210.735] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0210.735] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b746568, dwReserved1=0x2d397465, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1 [0210.735] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x557364, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0210.737] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x557364, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0210.737] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36269c4, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36269c4, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x557364, dwReserved1=0x550284, cFileName="en-US", cAlternateFileName="")) returned 1 [0210.737] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36269c4, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36269c4, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0210.737] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36269c4, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36269c4, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0210.737] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1 [0210.738] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x2d0038, dwReserved1=0x640034, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1 [0210.739] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x2d0038, dwReserved1=0x640034, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 0 [0210.739] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0210.740] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36269c4, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36269c4, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x557364, dwReserved1=0x550284, cFileName="en-US", cAlternateFileName="")) returned 0 [0210.740] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0210.740] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b746568, dwReserved1=0x2d397465, cFileName="DRM", cAlternateFileName="")) returned 1 [0210.740] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34382d66, dwReserved1=0x342d3531, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0210.740] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34382d66, dwReserved1=0x342d3531, cFileName="..", cAlternateFileName="")) returned 1 [0210.740] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34382d66, dwReserved1=0x342d3531, cFileName="Cache", cAlternateFileName="")) returned 1 [0210.740] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\cache\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0035, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0210.741] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0035, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0210.741] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0035, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0210.741] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0210.741] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34382d66, dwReserved1=0x342d3531, cFileName="Cache", cAlternateFileName="")) returned 0 [0210.741] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0210.741] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b746568, dwReserved1=0x2d397465, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0210.741] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\gameexplorer\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34382d66, dwReserved1=0x342d3531, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0210.741] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34382d66, dwReserved1=0x342d3531, cFileName="..", cAlternateFileName="")) returned 1 [0210.741] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34382d66, dwReserved1=0x342d3531, cFileName="..", cAlternateFileName="")) returned 0 [0210.741] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0210.742] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x89384062, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b746568, dwReserved1=0x2d397465, cFileName="LfSvc", cAlternateFileName="")) returned 1 [0210.742] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x89384062, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34382d66, dwReserved1=0x342d3531, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0210.742] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x89384062, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34382d66, dwReserved1=0x342d3531, cFileName="..", cAlternateFileName="")) returned 1 [0210.742] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x89384062, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34382d66, dwReserved1=0x342d3531, cFileName="Cache", cAlternateFileName="")) returned 1 [0210.742] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Cache\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\cache\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x89384062, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0035, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0210.743] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x89384062, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0035, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0210.743] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x89384062, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0035, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0210.743] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0210.743] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd81e8c6c, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd9a58ff9, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34382d66, dwReserved1=0x342d3531, cFileName="Geofence", cAlternateFileName="")) returned 1 [0210.743] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Geofence\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\geofence\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd81e8c6c, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd9a58ff9, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0035, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0210.743] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd81e8c6c, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd9a58ff9, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0035, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0210.743] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xdb5ea022, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x668, dwReserved0=0x2d0035, dwReserved1=0x36000630, cFileName="GeofenceApplicationID.dat", cAlternateFileName="GEOFEN~1.DAT")) returned 1 [0210.743] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0210.744] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0210.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0210.744] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ed90d0, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0210.744] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0210.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ed90d0) returned 0x18 [0210.744] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\geofence\\geofenceapplicationid.dat")) returned 0x20 [0210.744] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\geofence\\geofenceapplicationid.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0210.745] GetLastError () returned 0x20 [0210.745] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\geofence\\geofenceapplicationid.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1b8 [0210.798] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\geofence\\geofenceapplicationid.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\geofence\\geofenceapplicationid.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0210.799] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\geofence\\geofenceapplicationid.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0210.799] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\geofence\\geofenceapplicationid.dat"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xdb5ea022, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x668, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="GeofenceApplicationID.dat", cAlternateFileName="GEOFEN~1.DAT")) returned 0x55e510 [0210.800] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xdb5ea022, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x668, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="GeofenceApplicationID.dat", cAlternateFileName="GEOFEN~1.DAT")) returned 0 [0210.800] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0210.800] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\geofence\\geofenceapplicationid.dat")) returned 1 [0210.800] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\geofence\\geofenceapplicationid.dat")) returned 0xffffffff [0210.800] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xdb5ea022, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x668, dwReserved0=0x2d0035, dwReserved1=0x36000630, cFileName="GeofenceApplicationID.dat", cAlternateFileName="GEOFEN~1.DAT")) returned 0 [0210.800] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0210.801] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd81e8c6c, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd9a58ff9, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34382d66, dwReserved1=0x342d3531, cFileName="Geofence", cAlternateFileName="")) returned 0 [0210.801] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0210.801] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b746565, dwReserved1=0x2d397465, cFileName="Parental Controls", cAlternateFileName="PARENT~1")) returned 1 [0210.801] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\parental controls\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x70704165, dwReserved1=0x6163696c, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0210.801] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x70704165, dwReserved1=0x6163696c, cFileName="..", cAlternateFileName="")) returned 1 [0210.801] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x70704165, dwReserved1=0x6163696c, cFileName="settings", cAlternateFileName="")) returned 1 [0210.801] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls\\settings\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\parental controls\\settings\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0210.801] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0210.802] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 0 [0210.802] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0210.802] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x70704165, dwReserved1=0x6163696c, cFileName="settings", cAlternateFileName="")) returned 0 [0210.802] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0210.802] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x70df061a, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x70df061a, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b746573, dwReserved1=0x2d397465, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1 [0210.802] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x70df061a, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x70ec73ad, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x70704165, dwReserved1=0x6163696c, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0210.804] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x70df061a, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x70ec73ad, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x70704165, dwReserved1=0x6163696c, cFileName="..", cAlternateFileName="")) returned 1 [0210.804] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6378b10e, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6378b10e, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x636a2ee1, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x4c42, dwReserved0=0x70704165, dwReserved1=0x6163696c, cFileName="energy-report-2021-02-17.xml", cAlternateFileName="ENERGY~2.XML")) returned 1 [0210.805] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70df061a, ftCreationTime.dwHighDateTime=0x1d7b05a, ftLastAccessTime.dwLowDateTime=0x70df061a, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x70d6c89f, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x3cdb, dwReserved0=0x2d0074, dwReserved1=0x300032, cFileName="energy-report-2021-09-23.xml", cAlternateFileName="ENERGY~3.XML")) returned 1 [0210.806] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6369e20c, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6369e20c, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x70d6c89f, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x3cdb, dwReserved0=0x2d0074, dwReserved1=0x300032, cFileName="energy-report-latest.xml", cAlternateFileName="ENERGY~1.XML")) returned 1 [0210.806] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6397363f, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6397363f, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x70ebeaf3, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x373f, dwReserved0=0x2d0074, dwReserved1=0x61006c, cFileName="energy-report.html", cAlternateFileName="ENERGY~1.HTM")) returned 1 [0210.807] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0210.807] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0210.807] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0210.807] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0210.807] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0210.807] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0210.807] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html")) returned 0x20 [0210.809] VirtualAlloc (lpAddress=0x1edc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1edc000 [0210.810] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0210.810] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0210.811] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.813] WriteFile (in: hFile=0x1d8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.815] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.815] WriteFile (in: hFile=0x1d8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.815] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.815] WriteFile (in: hFile=0x1d8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0210.816] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x73f, lpOverlapped=0x0) returned 1 [0210.816] WriteFile (in: hFile=0x1d8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x73f, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x73f, lpOverlapped=0x0) returned 1 [0210.816] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0210.816] WriteFile (in: hFile=0x1d8, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0210.816] CloseHandle (hObject=0x1d4) returned 1 [0210.816] CloseHandle (hObject=0x1d8) returned 1 [0210.818] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0210.818] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0210.819] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6397363f, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6397363f, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x70ebeaf3, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x373f, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="energy-report.html", cAlternateFileName="ENERGY~1.HTM")) returned 0x55e490 [0210.819] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6397363f, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6397363f, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x70ebeaf3, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x373f, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="energy-report.html", cAlternateFileName="ENERGY~1.HTM")) returned 0 [0210.819] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0210.819] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html")) returned 1 [0210.820] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html")) returned 0xffffffff [0210.821] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6397363f, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6397363f, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x70ebeaf3, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x373f, dwReserved0=0x2d0074, dwReserved1=0x61006c, cFileName="energy-report.html", cAlternateFileName="ENERGY~1.HTM")) returned 0 [0210.821] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0210.821] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f706572, dwReserved1=0x682e7472, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0210.821] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0210.821] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0210.821] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0210.821] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0210.821] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d02c647, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x3d02c647, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x3d02c647, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f706572, dwReserved1=0x682e7472, cFileName="SleepStudy", cAlternateFileName="SLEEPS~1")) returned 1 [0210.821] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\SleepStudy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sleepstudy\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d02c647, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x3d02c647, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x3d02c647, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0210.822] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d02c647, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x3d02c647, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x3d02c647, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0210.823] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d02c647, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x3d02c647, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x3d02c647, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0210.823] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0210.823] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f706572, dwReserved1=0x682e7472, cFileName="Sqm", cAlternateFileName="")) returned 1 [0210.823] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0210.824] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0210.824] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="Manifest", cAlternateFileName="")) returned 1 [0210.824] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\manifest\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0210.824] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0210.824] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0210.824] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0210.824] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="Sessions", cAlternateFileName="")) returned 1 [0210.825] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\sessions\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0210.825] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0210.825] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0210.825] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0210.825] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="Upload", cAlternateFileName="")) returned 1 [0210.825] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\upload\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0210.825] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0210.825] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0210.826] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0210.826] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="Upload", cAlternateFileName="")) returned 0 [0210.826] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0210.826] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3672e79, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3672e79, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f706573, dwReserved1=0x682e7472, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0210.826] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3672e79, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3672e79, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0210.826] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3672e79, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3672e79, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0210.826] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3672e79, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97362eb5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97362eb5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0210.827] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0210.827] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0210.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0210.827] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0210.827] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0210.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0210.827] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\desktop.ini")) returned 0x26 [0210.827] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0210.828] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0210.828] ReadFile (in: hFile=0x1d8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xae, lpOverlapped=0x0) returned 1 [0210.830] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xae, lpOverlapped=0x0) returned 1 [0210.831] ReadFile (in: hFile=0x1d8, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0210.831] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0210.831] CloseHandle (hObject=0x1d8) returned 1 [0210.831] CloseHandle (hObject=0x1d4) returned 1 [0210.833] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0210.833] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0210.833] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\desktop.ini"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3672e79, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97362eb5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97362eb5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e390 [0210.833] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3672e79, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97362eb5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97362eb5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0210.834] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0210.834] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\desktop.ini")) returned 1 [0210.835] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\desktop.ini")) returned 0xffffffff [0210.835] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xad820150, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad820150, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0210.835] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xad820150, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad820150, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0210.835] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xad820150, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad820150, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0210.836] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b339b5, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b387b4, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b3d5ed, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0x104, cFileName="Access 2016.lnk", cAlternateFileName="ACCESS~1.LNK")) returned 1 [0210.836] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0210.836] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0210.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0210.836] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0210.836] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0210.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0210.837] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Access 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\access 2016.lnk")) returned 0x20 [0210.837] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Access 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\access 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0210.837] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Access 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\access 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0210.838] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xa6c, lpOverlapped=0x0) returned 1 [0210.923] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xa6c, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xa6c, lpOverlapped=0x0) returned 1 [0210.925] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0210.925] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0210.925] CloseHandle (hObject=0x1d8) returned 1 [0210.925] CloseHandle (hObject=0x1dc) returned 1 [0210.934] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Access 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\access 2016.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Access 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\access 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.001] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Access 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\access 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.001] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Access 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\access 2016.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b339b5, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b387b4, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b3d5ed, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Access 2016.lnk", cAlternateFileName="ACCESS~1.LNK")) returned 0x55e590 [0211.002] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b339b5, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b387b4, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b3d5ed, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Access 2016.lnk", cAlternateFileName="ACCESS~1.LNK")) returned 0 [0211.002] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0211.002] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Access 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\access 2016.lnk")) returned 1 [0211.108] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Access 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\access 2016.lnk")) returned 0xffffffff [0211.108] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36990d0, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36990d0, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0211.108] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36990d0, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36990d0, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0211.108] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36990d0, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36990d0, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0211.108] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36990d0, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97362eb5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee05c71, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x104, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0211.115] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.115] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.116] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.116] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0211.116] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini")) returned 0x26 [0211.116] VirtualAlloc (lpAddress=0x1ee0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ee0000 [0211.124] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.125] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.183] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x172, lpOverlapped=0x0) returned 1 [0211.184] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x172, lpOverlapped=0x0) returned 1 [0211.185] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.185] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.185] CloseHandle (hObject=0x1d8) returned 1 [0211.185] CloseHandle (hObject=0x1e0) returned 1 [0211.188] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.190] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.190] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36990d0, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97362eb5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee05c71, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Desktop.ini", cAlternateFileName="")) returned 0x55e590 [0211.190] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36990d0, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97362eb5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee05c71, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Desktop.ini", cAlternateFileName="")) returned 0 [0211.190] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0211.190] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini")) returned 1 [0211.193] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini")) returned 0xffffffff [0211.193] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x193904c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x193904c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x193904c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Speech Recognition.lnk", cAlternateFileName="")) returned 1 [0211.194] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.194] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.194] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.194] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0211.194] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\speech recognition.lnk")) returned 0x20 [0211.195] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\speech recognition.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.195] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Speech Recognition.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\speech recognition.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.198] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x4dc, lpOverlapped=0x0) returned 1 [0211.199] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x4dc, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x4dc, lpOverlapped=0x0) returned 1 [0211.200] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.200] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.200] CloseHandle (hObject=0x1e0) returned 1 [0211.200] CloseHandle (hObject=0x1d8) returned 1 [0211.201] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\speech recognition.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Speech Recognition.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\speech recognition.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.202] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Speech Recognition.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\speech recognition.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.202] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\speech recognition.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x193904c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x193904c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x193904c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Speech Recognition.lnk", cAlternateFileName="")) returned 0x55e790 [0211.202] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x193904c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x193904c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x193904c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Speech Recognition.lnk", cAlternateFileName="")) returned 0 [0211.202] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0211.202] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\speech recognition.lnk")) returned 1 [0211.203] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\speech recognition.lnk")) returned 0xffffffff [0211.203] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x193904c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x193904c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x193904c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Speech Recognition.lnk", cAlternateFileName="")) returned 0 [0211.203] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0211.203] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7088bbcb, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x7088bbcb, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f636552, dwReserved1=0x74696e67, cFileName="Accessories", cAlternateFileName="ACCESS~2")) returned 1 [0211.203] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7088bbcb, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x7088bbcb, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0211.203] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7088bbcb, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x7088bbcb, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0211.203] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36990d0, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6c530990, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6c530990, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0211.203] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.203] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.204] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.204] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0211.204] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini")) returned 0x26 [0211.204] VirtualAlloc (lpAddress=0x1ee4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ee4000 [0211.206] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.207] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.209] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x5c0, lpOverlapped=0x0) returned 1 [0211.209] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x5c0, lpOverlapped=0x0) returned 1 [0211.210] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.210] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.210] CloseHandle (hObject=0x1d8) returned 1 [0211.210] CloseHandle (hObject=0x1e0) returned 1 [0211.215] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.218] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.218] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36990d0, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6c530990, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6c530990, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e710 [0211.218] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36990d0, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6c530990, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6c530990, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0211.218] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0211.218] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini")) returned 1 [0211.222] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini")) returned 0xffffffff [0211.222] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5851d393, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5851d393, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5851d393, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Math Input Panel.lnk", cAlternateFileName="")) returned 1 [0211.223] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.223] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.223] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.223] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.223] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.223] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0211.223] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk")) returned 0x20 [0211.223] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.223] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.226] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x49e, lpOverlapped=0x0) returned 1 [0211.228] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x49e, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x49e, lpOverlapped=0x0) returned 1 [0211.229] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.229] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.229] CloseHandle (hObject=0x1e0) returned 1 [0211.230] CloseHandle (hObject=0x1d8) returned 1 [0211.231] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.231] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.231] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5851d393, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5851d393, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5851d393, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Math Input Panel.lnk", cAlternateFileName="")) returned 0x55e890 [0211.232] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5851d393, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5851d393, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5851d393, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Math Input Panel.lnk", cAlternateFileName="")) returned 0 [0211.232] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0211.232] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk")) returned 1 [0211.232] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk")) returned 0xffffffff [0211.232] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245a1c9a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x245a1c9a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x245a1c9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="Paint.lnk", cAlternateFileName="")) returned 1 [0211.233] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.233] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.233] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.233] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.233] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.233] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0211.233] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk")) returned 0x20 [0211.233] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.234] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.234] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x45a, lpOverlapped=0x0) returned 1 [0211.236] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x45a, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x45a, lpOverlapped=0x0) returned 1 [0211.237] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.237] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.237] CloseHandle (hObject=0x1d8) returned 1 [0211.238] CloseHandle (hObject=0x1e0) returned 1 [0211.239] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.239] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.240] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245a1c9a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x245a1c9a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x245a1c9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Paint.lnk", cAlternateFileName="")) returned 0x55e410 [0211.240] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245a1c9a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x245a1c9a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x245a1c9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Paint.lnk", cAlternateFileName="")) returned 0 [0211.240] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0211.240] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk")) returned 1 [0211.240] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk")) returned 0xffffffff [0211.241] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26abc5ba, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x26abc5ba, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x26abc5ba, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="")) returned 1 [0211.241] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.241] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.241] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.241] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.241] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.241] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0211.242] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk")) returned 0x20 [0211.242] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.242] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.242] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x4bf, lpOverlapped=0x0) returned 1 [0211.245] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x4bf, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x4bf, lpOverlapped=0x0) returned 1 [0211.246] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.246] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.246] CloseHandle (hObject=0x1e0) returned 1 [0211.247] CloseHandle (hObject=0x1d8) returned 1 [0211.248] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.248] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.248] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26abc5ba, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x26abc5ba, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x26abc5ba, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="")) returned 0x55e890 [0211.249] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26abc5ba, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x26abc5ba, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x26abc5ba, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="")) returned 0 [0211.249] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0211.249] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk")) returned 1 [0211.249] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk")) returned 0xffffffff [0211.250] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da94b9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x37da94b9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x37da94b9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x46e, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Snipping Tool.lnk", cAlternateFileName="")) returned 1 [0211.250] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.250] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.250] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.250] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0211.251] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk")) returned 0x20 [0211.251] VirtualAlloc (lpAddress=0x1ee8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ee8000 [0211.252] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.252] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.252] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x46e, lpOverlapped=0x0) returned 1 [0211.256] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x46e, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x46e, lpOverlapped=0x0) returned 1 [0211.257] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.257] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.257] CloseHandle (hObject=0x1d8) returned 1 [0211.257] CloseHandle (hObject=0x1e0) returned 1 [0211.265] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.268] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.268] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da94b9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x37da94b9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x37da94b9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x46e, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Snipping Tool.lnk", cAlternateFileName="")) returned 0x55e190 [0211.268] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da94b9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x37da94b9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x37da94b9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x46e, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Snipping Tool.lnk", cAlternateFileName="")) returned 0 [0211.268] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0211.268] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk")) returned 1 [0211.271] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk")) returned 0xffffffff [0211.271] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15b8914e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x15b8914e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x15baf3a9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x448, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="Steps Recorder.lnk", cAlternateFileName="")) returned 1 [0211.272] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.272] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.272] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.272] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.272] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.272] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0211.272] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Steps Recorder.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\steps recorder.lnk")) returned 0x20 [0211.272] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Steps Recorder.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\steps recorder.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.273] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Steps Recorder.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\steps recorder.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.279] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x448, lpOverlapped=0x0) returned 1 [0211.280] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x448, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x448, lpOverlapped=0x0) returned 1 [0211.281] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.281] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.281] CloseHandle (hObject=0x1e0) returned 1 [0211.281] CloseHandle (hObject=0x1d8) returned 1 [0211.282] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Steps Recorder.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\steps recorder.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Steps Recorder.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\steps recorder.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.283] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Steps Recorder.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\steps recorder.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.283] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Steps Recorder.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\steps recorder.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15b8914e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x15b8914e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x15baf3a9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x448, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Steps Recorder.lnk", cAlternateFileName="")) returned 0x55e590 [0211.283] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15b8914e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x15b8914e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x15baf3a9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x448, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Steps Recorder.lnk", cAlternateFileName="")) returned 0 [0211.284] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0211.284] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Steps Recorder.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\steps recorder.lnk")) returned 1 [0211.284] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Steps Recorder.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\steps recorder.lnk")) returned 0xffffffff [0211.284] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da94b9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x37da94b9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x37da94b9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="Sticky Notes.lnk", cAlternateFileName="")) returned 1 [0211.284] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.284] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.284] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.285] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.285] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.285] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0211.285] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk")) returned 0x20 [0211.285] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.285] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.285] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x4a9, lpOverlapped=0x0) returned 1 [0211.287] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x4a9, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x4a9, lpOverlapped=0x0) returned 1 [0211.288] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.288] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.288] CloseHandle (hObject=0x1d8) returned 1 [0211.288] CloseHandle (hObject=0x1e0) returned 1 [0211.289] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.290] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.290] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da94b9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x37da94b9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x37da94b9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Sticky Notes.lnk", cAlternateFileName="")) returned 0x55e310 [0211.290] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37da94b9, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x37da94b9, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x37da94b9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Sticky Notes.lnk", cAlternateFileName="")) returned 0 [0211.290] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0211.290] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk")) returned 1 [0211.290] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk")) returned 0xffffffff [0211.290] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0211.291] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0211.291] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0211.291] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50379765, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x50379765, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x50379765, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="Character Map.lnk", cAlternateFileName="")) returned 1 [0211.291] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.291] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.291] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.291] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.291] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.291] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0211.292] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk")) returned 0x20 [0211.292] VirtualAlloc (lpAddress=0x1eec000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1eec000 [0211.292] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.292] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0211.293] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x45a, lpOverlapped=0x0) returned 1 [0211.294] WriteFile (in: hFile=0x1e4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x45a, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x45a, lpOverlapped=0x0) returned 1 [0211.295] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0211.295] WriteFile (in: hFile=0x1e4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0211.295] CloseHandle (hObject=0x1d8) returned 1 [0211.296] CloseHandle (hObject=0x1e4) returned 1 [0211.296] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.297] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.297] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50379765, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x50379765, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x50379765, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Character Map.lnk", cAlternateFileName="")) returned 0x55e510 [0211.297] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50379765, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x50379765, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x50379765, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Character Map.lnk", cAlternateFileName="")) returned 0 [0211.297] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0211.297] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk")) returned 1 [0211.298] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk")) returned 0xffffffff [0211.298] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee2becc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0211.298] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.298] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.299] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.299] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.299] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0211.300] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini")) returned 0x26 [0211.300] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0211.300] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.302] ReadFile (in: hFile=0x1e4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x55, lpOverlapped=0x0) returned 1 [0211.302] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x55, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x55, lpOverlapped=0x0) returned 1 [0211.303] ReadFile (in: hFile=0x1e4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0211.303] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0211.303] CloseHandle (hObject=0x1e4) returned 1 [0211.303] CloseHandle (hObject=0x1d8) returned 1 [0211.304] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.304] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.305] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee2becc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x550340, dwReserved1=0x6, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e310 [0211.305] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee2becc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x550340, dwReserved1=0x6, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0211.305] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0211.305] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini")) returned 1 [0211.306] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini")) returned 0xffffffff [0211.306] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee2becc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0211.306] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0211.306] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6ec61aae, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec61aae, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec61aae, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6c2e7061, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0211.306] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6ec61aae, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec61aae, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec61aae, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0211.306] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6ec61aae, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec61aae, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec61aae, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0211.306] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ec61aae, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ac017e6, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6c530990, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0xba, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0211.307] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.307] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.307] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.307] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.307] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.307] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0211.307] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini")) returned 0x26 [0211.307] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.307] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0211.308] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xba, lpOverlapped=0x0) returned 1 [0211.308] WriteFile (in: hFile=0x1e4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xba, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xba, lpOverlapped=0x0) returned 1 [0211.309] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0211.309] WriteFile (in: hFile=0x1e4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0211.309] CloseHandle (hObject=0x1d8) returned 1 [0211.309] CloseHandle (hObject=0x1e4) returned 1 [0211.310] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.310] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.311] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ec61aae, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ac017e6, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6c530990, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0xba, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="Desktop.ini", cAlternateFileName="")) returned 0x55e310 [0211.311] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ec61aae, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ac017e6, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6c530990, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0xba, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="Desktop.ini", cAlternateFileName="")) returned 0 [0211.311] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0211.311] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini")) returned 1 [0211.312] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini")) returned 0xffffffff [0211.312] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x585b5cfd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x585b5cfd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x585b5cfd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="Windows Journal.lnk", cAlternateFileName="")) returned 1 [0211.312] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.312] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.312] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.312] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.312] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.312] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0211.313] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk")) returned 0x20 [0211.313] VirtualAlloc (lpAddress=0x1ef0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ef0000 [0211.313] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0211.313] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.316] ReadFile (in: hFile=0x1e4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x484, lpOverlapped=0x0) returned 1 [0211.317] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x484, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x484, lpOverlapped=0x0) returned 1 [0211.318] ReadFile (in: hFile=0x1e4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0211.318] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0211.318] CloseHandle (hObject=0x1e4) returned 1 [0211.318] CloseHandle (hObject=0x1d8) returned 1 [0211.319] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.320] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.320] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x585b5cfd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x585b5cfd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x585b5cfd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Windows Journal.lnk", cAlternateFileName="")) returned 0x55e410 [0211.320] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x585b5cfd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x585b5cfd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x585b5cfd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Windows Journal.lnk", cAlternateFileName="")) returned 0 [0211.320] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0211.320] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk")) returned 1 [0211.320] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk")) returned 0xffffffff [0211.320] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x585b5cfd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x585b5cfd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x585b5cfd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="Windows Journal.lnk", cAlternateFileName="")) returned 0 [0211.320] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0211.321] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571e447b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x571e447b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x571e447b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x448, dwReserved0=0x756f4a20, dwReserved1=0x6c616e72, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="")) returned 1 [0211.321] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.321] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.321] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.321] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0211.321] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Fax and Scan.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows fax and scan.lnk")) returned 0x20 [0211.322] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Fax and Scan.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows fax and scan.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.322] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Fax and Scan.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows fax and scan.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.322] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x448, lpOverlapped=0x0) returned 1 [0211.325] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x448, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x448, lpOverlapped=0x0) returned 1 [0211.325] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.326] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.326] CloseHandle (hObject=0x1e0) returned 1 [0211.326] CloseHandle (hObject=0x1d8) returned 1 [0211.327] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Fax and Scan.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows fax and scan.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Fax and Scan.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows fax and scan.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.327] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Fax and Scan.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows fax and scan.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.327] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Fax and Scan.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows fax and scan.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571e447b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x571e447b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x571e447b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x448, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="")) returned 0x55e710 [0211.327] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571e447b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x571e447b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x571e447b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x448, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="")) returned 0 [0211.327] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0211.327] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Fax and Scan.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows fax and scan.lnk")) returned 1 [0211.328] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Fax and Scan.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows fax and scan.lnk")) returned 0xffffffff [0211.328] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34319950, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x34319950, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x34319950, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Windows Media Player.lnk", cAlternateFileName="")) returned 1 [0211.328] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.328] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.328] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.328] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.328] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.328] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0211.329] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Media Player.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows media player.lnk")) returned 0x20 [0211.329] VirtualAlloc (lpAddress=0x1ef4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ef4000 [0211.329] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Media Player.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows media player.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.329] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Media Player.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows media player.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.330] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x543, lpOverlapped=0x0) returned 1 [0211.332] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x543, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x543, lpOverlapped=0x0) returned 1 [0211.333] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.333] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.333] CloseHandle (hObject=0x1d8) returned 1 [0211.333] CloseHandle (hObject=0x1e0) returned 1 [0211.334] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Media Player.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows media player.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Media Player.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows media player.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.334] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Media Player.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows media player.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.334] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Media Player.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows media player.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34319950, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x34319950, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x34319950, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Windows Media Player.lnk", cAlternateFileName="")) returned 0x55e7d0 [0211.334] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34319950, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x34319950, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x34319950, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Windows Media Player.lnk", cAlternateFileName="")) returned 0 [0211.334] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0211.334] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Media Player.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows media player.lnk")) returned 1 [0211.335] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Media Player.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows media player.lnk")) returned 0xffffffff [0211.335] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2203aecd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2203aecd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2203aecd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 1 [0211.335] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.335] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.335] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.335] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0211.335] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk")) returned 0x20 [0211.336] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.336] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.336] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x482, lpOverlapped=0x0) returned 1 [0211.340] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x482, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x482, lpOverlapped=0x0) returned 1 [0211.341] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.341] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.342] CloseHandle (hObject=0x1e0) returned 1 [0211.342] CloseHandle (hObject=0x1d8) returned 1 [0211.344] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.346] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.346] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2203aecd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2203aecd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2203aecd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 0x55e310 [0211.346] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2203aecd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2203aecd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2203aecd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 0 [0211.346] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0211.346] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk")) returned 1 [0211.348] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk")) returned 0xffffffff [0211.348] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5835376d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5835376d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5835376d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="XPS Viewer.lnk", cAlternateFileName="")) returned 1 [0211.349] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.349] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0211.349] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\XPS Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\xps viewer.lnk")) returned 0x20 [0211.349] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\XPS Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\xps viewer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.350] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\XPS Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\xps viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.351] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x462, lpOverlapped=0x0) returned 1 [0211.352] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x462, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x462, lpOverlapped=0x0) returned 1 [0211.353] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.353] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.353] CloseHandle (hObject=0x1d8) returned 1 [0211.353] CloseHandle (hObject=0x1e0) returned 1 [0211.355] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\XPS Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\xps viewer.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\XPS Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\xps viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.355] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\XPS Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\xps viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.356] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\XPS Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\xps viewer.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5835376d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5835376d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5835376d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="XPS Viewer.lnk", cAlternateFileName="")) returned 0x55e310 [0211.356] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5835376d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5835376d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5835376d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="XPS Viewer.lnk", cAlternateFileName="")) returned 0 [0211.356] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0211.356] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\XPS Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\xps viewer.lnk")) returned 1 [0211.357] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\XPS Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\xps viewer.lnk")) returned 0xffffffff [0211.357] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5835376d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5835376d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5835376d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="XPS Viewer.lnk", cAlternateFileName="")) returned 0 [0211.357] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0211.357] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7088bbcb, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x7088bbcb, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e726577, dwReserved1=0x506b6e6c, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0211.357] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7088bbcb, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x7088bbcb, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0211.358] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7088bbcb, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x7088bbcb, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0211.358] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x165d136f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x165d136f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x165d136f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Component Services.lnk", cAlternateFileName="")) returned 1 [0211.358] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.358] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.359] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.359] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0211.359] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk")) returned 0x20 [0211.359] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.360] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.360] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x45c, lpOverlapped=0x0) returned 1 [0211.362] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x45c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x45c, lpOverlapped=0x0) returned 1 [0211.364] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.364] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.364] CloseHandle (hObject=0x1e0) returned 1 [0211.364] CloseHandle (hObject=0x1d8) returned 1 [0211.365] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.365] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.365] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x165d136f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x165d136f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x165d136f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Component Services.lnk", cAlternateFileName="")) returned 0x55e750 [0211.366] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x165d136f, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x165d136f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x165d136f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Component Services.lnk", cAlternateFileName="")) returned 0 [0211.366] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0211.366] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk")) returned 1 [0211.366] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk")) returned 0xffffffff [0211.366] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11bc23ad, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x11bc23ad, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x11bc23ad, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Computer Management.lnk", cAlternateFileName="")) returned 1 [0211.367] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.367] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.367] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.367] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0211.367] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk")) returned 0x20 [0211.367] VirtualAlloc (lpAddress=0x1ef8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1ef8000 [0211.368] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.368] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.368] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x48c, lpOverlapped=0x0) returned 1 [0211.371] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x48c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x48c, lpOverlapped=0x0) returned 1 [0211.372] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.372] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.372] CloseHandle (hObject=0x1d8) returned 1 [0211.373] CloseHandle (hObject=0x1e0) returned 1 [0211.373] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.374] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.374] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11bc23ad, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x11bc23ad, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x11bc23ad, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Computer Management.lnk", cAlternateFileName="")) returned 0x55e710 [0211.374] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11bc23ad, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x11bc23ad, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x11bc23ad, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Computer Management.lnk", cAlternateFileName="")) returned 0 [0211.374] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0211.374] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk")) returned 1 [0211.375] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk")) returned 0xffffffff [0211.375] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36bf32a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6c530990, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6c530990, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0xa26, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0211.375] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.375] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.375] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.375] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0211.375] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini")) returned 0x26 [0211.376] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.376] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.376] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa26, lpOverlapped=0x0) returned 1 [0211.377] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa26, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa26, lpOverlapped=0x0) returned 1 [0211.378] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.378] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.378] CloseHandle (hObject=0x1e0) returned 1 [0211.378] CloseHandle (hObject=0x1d8) returned 1 [0211.379] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.379] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.380] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36bf32a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6c530990, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6c530990, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0xa26, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e890 [0211.380] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36bf32a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6c530990, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6c530990, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0xa26, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0211.380] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0211.380] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini")) returned 1 [0211.381] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini")) returned 0xffffffff [0211.381] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13838470, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x13838470, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x13838470, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 1 [0211.381] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.381] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.381] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.382] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.382] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.382] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0211.382] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\dfrgui.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\dfrgui.lnk")) returned 0x20 [0211.410] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\dfrgui.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\dfrgui.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.410] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\dfrgui.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\dfrgui.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.410] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x486, lpOverlapped=0x0) returned 1 [0211.412] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x486, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x486, lpOverlapped=0x0) returned 1 [0211.413] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.413] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.413] CloseHandle (hObject=0x1d8) returned 1 [0211.413] CloseHandle (hObject=0x1e0) returned 1 [0211.414] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\dfrgui.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\dfrgui.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\dfrgui.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\dfrgui.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.415] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\dfrgui.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\dfrgui.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.416] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\dfrgui.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\dfrgui.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13838470, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x13838470, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x13838470, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 0x55e710 [0211.416] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13838470, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x13838470, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x13838470, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 0 [0211.416] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0211.416] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\dfrgui.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\dfrgui.lnk")) returned 1 [0211.417] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\dfrgui.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\dfrgui.lnk")) returned 0xffffffff [0211.417] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505b5aa3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x505b5aa3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x505b5aa3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="Disk Cleanup.lnk", cAlternateFileName="")) returned 1 [0211.418] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.418] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.418] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.418] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.419] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0211.419] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Disk Cleanup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\disk cleanup.lnk")) returned 0x20 [0211.419] VirtualAlloc (lpAddress=0x1efc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1efc000 [0211.420] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Disk Cleanup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\disk cleanup.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.420] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Disk Cleanup.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\disk cleanup.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.420] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x45c, lpOverlapped=0x0) returned 1 [0211.424] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x45c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x45c, lpOverlapped=0x0) returned 1 [0211.426] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.426] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.426] CloseHandle (hObject=0x1e0) returned 1 [0211.426] CloseHandle (hObject=0x1d8) returned 1 [0211.427] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Disk Cleanup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\disk cleanup.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Disk Cleanup.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\disk cleanup.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.428] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Disk Cleanup.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\disk cleanup.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.428] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Disk Cleanup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\disk cleanup.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505b5aa3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x505b5aa3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x505b5aa3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Disk Cleanup.lnk", cAlternateFileName="")) returned 0x55e710 [0211.428] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505b5aa3, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x505b5aa3, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x505b5aa3, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Disk Cleanup.lnk", cAlternateFileName="")) returned 0 [0211.429] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0211.429] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Disk Cleanup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\disk cleanup.lnk")) returned 1 [0211.429] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Disk Cleanup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\disk cleanup.lnk")) returned 0xffffffff [0211.429] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12bb3f15, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x12bb3f15, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x12bb3f15, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Event Viewer.lnk", cAlternateFileName="")) returned 1 [0211.430] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.430] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.430] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.430] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.430] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.430] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0211.430] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk")) returned 0x20 [0211.431] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.431] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.431] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x490, lpOverlapped=0x0) returned 1 [0211.433] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x490, lpOverlapped=0x0) returned 1 [0211.434] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.434] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.434] CloseHandle (hObject=0x1d8) returned 1 [0211.434] CloseHandle (hObject=0x1e0) returned 1 [0211.435] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.435] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.435] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12bb3f15, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x12bb3f15, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x12bb3f15, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Event Viewer.lnk", cAlternateFileName="")) returned 0x55e410 [0211.436] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12bb3f15, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x12bb3f15, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x12bb3f15, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Event Viewer.lnk", cAlternateFileName="")) returned 0 [0211.436] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0211.436] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk")) returned 1 [0211.436] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk")) returned 0xffffffff [0211.436] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16643a7b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x16643a7b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x16643a7b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="iSCSI Initiator.lnk", cAlternateFileName="")) returned 1 [0211.436] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.437] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.437] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.437] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0211.437] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk")) returned 0x20 [0211.437] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.437] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.438] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x478, lpOverlapped=0x0) returned 1 [0211.439] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x478, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x478, lpOverlapped=0x0) returned 1 [0211.440] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.440] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.440] CloseHandle (hObject=0x1e0) returned 1 [0211.441] CloseHandle (hObject=0x1d8) returned 1 [0211.441] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.442] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.442] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16643a7b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x16643a7b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x16643a7b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x550370, dwReserved1=0x11, cFileName="iSCSI Initiator.lnk", cAlternateFileName="")) returned 0x55e890 [0211.442] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16643a7b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x16643a7b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x16643a7b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x550370, dwReserved1=0x11, cFileName="iSCSI Initiator.lnk", cAlternateFileName="")) returned 0 [0211.442] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0211.442] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk")) returned 1 [0211.443] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk")) returned 0xffffffff [0211.443] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1375365d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1375365d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1375365d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="")) returned 1 [0211.443] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.443] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.443] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.443] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0211.443] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk")) returned 0x20 [0211.553] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.553] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.555] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x474, lpOverlapped=0x0) returned 1 [0211.557] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x474, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x474, lpOverlapped=0x0) returned 1 [0211.558] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.558] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.558] CloseHandle (hObject=0x1d8) returned 1 [0211.558] CloseHandle (hObject=0x1e0) returned 1 [0211.559] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.560] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.560] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1375365d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1375365d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1375365d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x550370, dwReserved1=0xf, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="")) returned 0x55e910 [0211.560] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1375365d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1375365d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1375365d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x550370, dwReserved1=0xf, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="")) returned 0 [0211.560] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0211.560] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk")) returned 1 [0211.560] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk")) returned 0xffffffff [0211.560] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb0d81e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bb0d81e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bb0d81e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="ODBC Data Sources (32-bit).lnk", cAlternateFileName="")) returned 1 [0211.561] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.561] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.561] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.561] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0211.561] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (32-bit).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (32-bit).lnk")) returned 0x20 [0211.561] VirtualAlloc (lpAddress=0x1f00000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f00000 [0211.562] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (32-bit).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (32-bit).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.562] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (32-bit).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (32-bit).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.562] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x474, lpOverlapped=0x0) returned 1 [0211.563] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x474, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x474, lpOverlapped=0x0) returned 1 [0211.565] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.565] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.565] CloseHandle (hObject=0x1e0) returned 1 [0211.565] CloseHandle (hObject=0x1d8) returned 1 [0211.566] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (32-bit).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (32-bit).lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (32-bit).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (32-bit).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.566] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (32-bit).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (32-bit).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.566] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (32-bit).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (32-bit).lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb0d81e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bb0d81e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bb0d81e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x550370, dwReserved1=0xe, cFileName="ODBC Data Sources (32-bit).lnk", cAlternateFileName="")) returned 0x55e510 [0211.567] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb0d81e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2bb0d81e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2bb0d81e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x550370, dwReserved1=0xe, cFileName="ODBC Data Sources (32-bit).lnk", cAlternateFileName="")) returned 0 [0211.567] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0211.567] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (32-bit).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (32-bit).lnk")) returned 1 [0211.567] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (32-bit).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (32-bit).lnk")) returned 0xffffffff [0211.567] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1931ddb6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1931ddb6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1931ddb6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ODBC Data Sources (64-bit).lnk", cAlternateFileName="")) returned 1 [0211.567] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.567] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.568] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.568] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.568] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.568] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0211.568] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (64-bit).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (64-bit).lnk")) returned 0x20 [0211.568] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (64-bit).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (64-bit).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.568] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (64-bit).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (64-bit).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.569] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x474, lpOverlapped=0x0) returned 1 [0211.570] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x474, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x474, lpOverlapped=0x0) returned 1 [0211.571] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.571] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.571] CloseHandle (hObject=0x1d8) returned 1 [0211.571] CloseHandle (hObject=0x1e0) returned 1 [0211.572] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (64-bit).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (64-bit).lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (64-bit).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (64-bit).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.572] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (64-bit).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (64-bit).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.573] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (64-bit).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (64-bit).lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1931ddb6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1931ddb6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1931ddb6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x550370, dwReserved1=0xe, cFileName="ODBC Data Sources (64-bit).lnk", cAlternateFileName="")) returned 0x55e310 [0211.573] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1931ddb6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1931ddb6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1931ddb6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x550370, dwReserved1=0xe, cFileName="ODBC Data Sources (64-bit).lnk", cAlternateFileName="")) returned 0 [0211.573] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0211.573] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (64-bit).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (64-bit).lnk")) returned 1 [0211.573] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\ODBC Data Sources (64-bit).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\odbc data sources (64-bit).lnk")) returned 0xffffffff [0211.573] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1425a437, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1425a437, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1425a437, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Performance Monitor.lnk", cAlternateFileName="")) returned 1 [0211.574] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.574] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.574] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.574] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0211.574] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk")) returned 0x20 [0211.574] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.574] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.575] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x450, lpOverlapped=0x0) returned 1 [0211.576] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x450, lpOverlapped=0x0) returned 1 [0211.577] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.577] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.577] CloseHandle (hObject=0x1e0) returned 1 [0211.577] CloseHandle (hObject=0x1d8) returned 1 [0211.578] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.579] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.579] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1425a437, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1425a437, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1425a437, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Performance Monitor.lnk", cAlternateFileName="")) returned 0x55e710 [0211.579] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1425a437, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1425a437, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1425a437, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Performance Monitor.lnk", cAlternateFileName="")) returned 0 [0211.579] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0211.579] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk")) returned 1 [0211.580] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk")) returned 0xffffffff [0211.580] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37cc46a2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x37cc46a2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x37cc46a2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Print Management.lnk", cAlternateFileName="")) returned 1 [0211.580] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.580] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.580] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.580] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0211.581] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk")) returned 0x20 [0211.581] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.581] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.582] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x45e, lpOverlapped=0x0) returned 1 [0211.583] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x45e, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x45e, lpOverlapped=0x0) returned 1 [0211.584] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.584] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.584] CloseHandle (hObject=0x1d8) returned 1 [0211.584] CloseHandle (hObject=0x1e0) returned 1 [0211.585] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.586] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.586] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37cc46a2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x37cc46a2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x37cc46a2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Print Management.lnk", cAlternateFileName="")) returned 0x55e710 [0211.586] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37cc46a2, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x37cc46a2, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x37cc46a2, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Print Management.lnk", cAlternateFileName="")) returned 0 [0211.586] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0211.586] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk")) returned 1 [0211.586] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk")) returned 0xffffffff [0211.586] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1425a437, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1425a437, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1425a437, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Resource Monitor.lnk", cAlternateFileName="")) returned 1 [0211.587] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.587] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.587] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.587] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.587] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.587] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0211.587] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Resource Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\resource monitor.lnk")) returned 0x20 [0211.592] VirtualAlloc (lpAddress=0x1f04000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f04000 [0211.592] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Resource Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\resource monitor.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.592] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Resource Monitor.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\resource monitor.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.593] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x454, lpOverlapped=0x0) returned 1 [0211.700] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x454, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x454, lpOverlapped=0x0) returned 1 [0211.701] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.701] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.701] CloseHandle (hObject=0x1e0) returned 1 [0211.701] CloseHandle (hObject=0x1d8) returned 1 [0211.703] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Resource Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\resource monitor.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Resource Monitor.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\resource monitor.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.706] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Resource Monitor.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\resource monitor.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.707] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Resource Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\resource monitor.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1425a437, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1425a437, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1425a437, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Resource Monitor.lnk", cAlternateFileName="")) returned 0x55e890 [0211.707] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1425a437, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1425a437, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1425a437, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Resource Monitor.lnk", cAlternateFileName="")) returned 0 [0211.707] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0211.707] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Resource Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\resource monitor.lnk")) returned 1 [0211.707] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Resource Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\resource monitor.lnk")) returned 0xffffffff [0211.708] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36c3a1d0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x36c3a1d0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x36c3a1d0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Security Configuration Management.lnk", cAlternateFileName="")) returned 1 [0211.708] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.708] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.708] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.708] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0211.709] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk")) returned 0x20 [0211.709] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.709] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.710] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x462, lpOverlapped=0x0) returned 1 [0211.711] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x462, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x462, lpOverlapped=0x0) returned 1 [0211.712] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.712] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.712] CloseHandle (hObject=0x1d8) returned 1 [0211.712] CloseHandle (hObject=0x1e0) returned 1 [0211.714] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.715] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.715] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36c3a1d0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x36c3a1d0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x36c3a1d0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x550370, dwReserved1=0xd, cFileName="Security Configuration Management.lnk", cAlternateFileName="")) returned 0x55e490 [0211.715] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36c3a1d0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x36c3a1d0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x36c3a1d0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x550370, dwReserved1=0xd, cFileName="Security Configuration Management.lnk", cAlternateFileName="")) returned 0 [0211.715] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0211.715] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk")) returned 1 [0211.716] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk")) returned 0xffffffff [0211.716] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12d0b438, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x12d0b438, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x12d0b438, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="services.lnk", cAlternateFileName="")) returned 1 [0211.716] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.716] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.716] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.717] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0211.717] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk")) returned 0x20 [0211.717] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.717] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.718] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x486, lpOverlapped=0x0) returned 1 [0211.719] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x486, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x486, lpOverlapped=0x0) returned 1 [0211.721] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.721] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.721] CloseHandle (hObject=0x1e0) returned 1 [0211.721] CloseHandle (hObject=0x1d8) returned 1 [0211.723] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.723] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.723] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12d0b438, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x12d0b438, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x12d0b438, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="services.lnk", cAlternateFileName="")) returned 0x55e490 [0211.723] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12d0b438, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x12d0b438, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x12d0b438, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="services.lnk", cAlternateFileName="")) returned 0 [0211.724] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0211.724] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk")) returned 1 [0211.724] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk")) returned 0xffffffff [0211.724] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142341dc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x142341dc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x142341dc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="System Configuration.lnk", cAlternateFileName="")) returned 1 [0211.725] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.725] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.725] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.725] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0211.725] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk")) returned 0x20 [0211.726] VirtualAlloc (lpAddress=0x1f08000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f08000 [0211.727] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.727] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.727] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x45c, lpOverlapped=0x0) returned 1 [0211.729] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x45c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x45c, lpOverlapped=0x0) returned 1 [0211.730] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.731] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.731] CloseHandle (hObject=0x1d8) returned 1 [0211.731] CloseHandle (hObject=0x1e0) returned 1 [0211.732] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.732] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.733] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142341dc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x142341dc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x142341dc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="System Configuration.lnk", cAlternateFileName="")) returned 0x55e410 [0211.733] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142341dc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x142341dc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x142341dc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="System Configuration.lnk", cAlternateFileName="")) returned 0 [0211.733] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0211.733] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk")) returned 1 [0211.733] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk")) returned 0xffffffff [0211.734] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14fe9a0b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x14fe9a0b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x14fe9a0b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="System Information.lnk", cAlternateFileName="")) returned 1 [0211.734] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.734] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.734] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.734] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0211.735] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Information.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system information.lnk")) returned 0x20 [0211.735] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Information.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system information.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.735] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Information.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system information.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.795] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x45a, lpOverlapped=0x0) returned 1 [0211.797] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x45a, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x45a, lpOverlapped=0x0) returned 1 [0211.799] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.799] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.799] CloseHandle (hObject=0x1e0) returned 1 [0211.799] CloseHandle (hObject=0x1d8) returned 1 [0211.800] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Information.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system information.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Information.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system information.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.801] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Information.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system information.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.801] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Information.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system information.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14fe9a0b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x14fe9a0b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x14fe9a0b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="System Information.lnk", cAlternateFileName="")) returned 0x55e210 [0211.801] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14fe9a0b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x14fe9a0b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x14fe9a0b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="System Information.lnk", cAlternateFileName="")) returned 0 [0211.801] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0211.802] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Information.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system information.lnk")) returned 1 [0211.802] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Information.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system information.lnk")) returned 0xffffffff [0211.802] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12bb3f15, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x12bb3f15, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x12bb3f15, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x46c, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Task Scheduler.lnk", cAlternateFileName="")) returned 1 [0211.803] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.803] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.803] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.803] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0211.803] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk")) returned 0x20 [0211.804] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.804] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.811] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x46c, lpOverlapped=0x0) returned 1 [0211.813] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x46c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x46c, lpOverlapped=0x0) returned 1 [0211.815] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.815] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.815] CloseHandle (hObject=0x1d8) returned 1 [0211.815] CloseHandle (hObject=0x1e0) returned 1 [0211.817] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.830] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.830] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12bb3f15, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x12bb3f15, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x12bb3f15, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x46c, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Task Scheduler.lnk", cAlternateFileName="")) returned 0x55e5d0 [0211.831] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12bb3f15, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x12bb3f15, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x12bb3f15, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x46c, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Task Scheduler.lnk", cAlternateFileName="")) returned 0 [0211.831] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0211.831] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk")) returned 1 [0211.831] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk")) returned 0xffffffff [0211.831] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b137854, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1b137854, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1b137854, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="")) returned 1 [0211.832] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.832] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.832] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.832] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0211.833] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk")) returned 0x20 [0211.833] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0211.833] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.834] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x484, lpOverlapped=0x0) returned 1 [0211.910] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x484, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x484, lpOverlapped=0x0) returned 1 [0211.911] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.911] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0211.911] CloseHandle (hObject=0x1e0) returned 1 [0211.911] CloseHandle (hObject=0x1d8) returned 1 [0211.913] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.913] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.913] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b137854, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1b137854, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1b137854, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x550370, dwReserved1=0xb, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="")) returned 0x55e590 [0211.914] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b137854, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1b137854, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1b137854, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x550370, dwReserved1=0xb, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="")) returned 0 [0211.914] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0211.914] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk")) returned 1 [0211.914] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk")) returned 0xffffffff [0211.914] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b137854, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1b137854, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1b137854, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="")) returned 0 [0211.914] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0211.915] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3672e79, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97362eb5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xd4a51c63, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x72694620, dwReserved1=0x6c617765, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0211.915] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.915] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.915] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.915] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.915] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.915] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0211.916] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.ini")) returned 0x6 [0211.916] VirtualAlloc (lpAddress=0x1f0c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f0c000 [0211.916] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.916] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.917] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x546, lpOverlapped=0x0) returned 1 [0211.918] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x546, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x546, lpOverlapped=0x0) returned 1 [0211.919] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0211.919] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0211.919] CloseHandle (hObject=0x1dc) returned 1 [0211.919] CloseHandle (hObject=0x1d8) returned 1 [0211.921] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.921] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.922] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.ini"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3672e79, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97362eb5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xd4a51c63, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e790 [0211.922] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3672e79, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97362eb5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xd4a51c63, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0211.922] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0211.922] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.ini")) returned 1 [0211.954] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.ini")) returned 0xffffffff [0211.954] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x23bf23db, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x23bf23db, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x23bf23db, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0211.954] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.954] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.954] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.969] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0211.969] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Desktop.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.lnk")) returned 0x25 [0211.970] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Desktop.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.970] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.971] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x355, lpOverlapped=0x0) returned 1 [0211.972] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x355, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x355, lpOverlapped=0x0) returned 1 [0211.973] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0211.973] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0211.973] CloseHandle (hObject=0x1d8) returned 1 [0211.974] CloseHandle (hObject=0x1dc) returned 1 [0211.975] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Desktop.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.975] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.975] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Desktop.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x23bf23db, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x23bf23db, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x23bf23db, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="Desktop.lnk", cAlternateFileName="")) returned 0x55e710 [0211.975] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x23bf23db, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x23bf23db, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x23bf23db, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="Desktop.lnk", cAlternateFileName="")) returned 0 [0211.975] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0211.976] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Desktop.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.lnk")) returned 0 [0211.976] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Desktop.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.lnk")) returned 0x25 [0211.976] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x503ebe79, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x503ebe79, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x503ebe79, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x895, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Devices Flow.lnk", cAlternateFileName="")) returned 1 [0211.976] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.976] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.976] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.976] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.976] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0211.977] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Devices Flow.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\devices flow.lnk")) returned 0x25 [0211.977] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Devices Flow.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\devices flow.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.977] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Devices Flow.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\devices flow.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.977] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x895, lpOverlapped=0x0) returned 1 [0211.979] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x895, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x895, lpOverlapped=0x0) returned 1 [0211.980] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0211.980] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0211.980] CloseHandle (hObject=0x1dc) returned 1 [0211.980] CloseHandle (hObject=0x1d8) returned 1 [0211.982] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Devices Flow.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\devices flow.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Devices Flow.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\devices flow.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0211.982] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Devices Flow.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\devices flow.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0211.982] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Devices Flow.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\devices flow.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x503ebe79, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x503ebe79, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x503ebe79, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x895, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Devices Flow.lnk", cAlternateFileName="")) returned 0x55e910 [0211.982] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x503ebe79, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x503ebe79, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x503ebe79, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x895, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Devices Flow.lnk", cAlternateFileName="")) returned 0 [0211.982] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0211.982] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Devices Flow.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\devices flow.lnk")) returned 0 [0211.983] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Devices Flow.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\devices flow.lnk")) returned 0x25 [0211.983] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a19a15, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a1c103, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a1d4f3, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa64, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Excel 2016.lnk", cAlternateFileName="EXCEL2~1.LNK")) returned 1 [0211.983] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0211.983] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0211.983] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0211.983] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0211.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0211.984] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Excel 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\excel 2016.lnk")) returned 0x20 [0211.985] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Excel 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\excel 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0211.985] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Excel 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\excel 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0211.985] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xa64, lpOverlapped=0x0) returned 1 [0211.997] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xa64, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xa64, lpOverlapped=0x0) returned 1 [0211.998] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0211.998] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0211.998] CloseHandle (hObject=0x1d8) returned 1 [0211.998] CloseHandle (hObject=0x1dc) returned 1 [0212.000] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Excel 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\excel 2016.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Excel 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\excel 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.000] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Excel 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\excel 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.000] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Excel 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\excel 2016.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a19a15, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a1c103, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a1d4f3, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa64, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="Excel 2016.lnk", cAlternateFileName="EXCEL2~1.LNK")) returned 0x55e310 [0212.000] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a19a15, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a1c103, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a1d4f3, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa64, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="Excel 2016.lnk", cAlternateFileName="EXCEL2~1.LNK")) returned 0 [0212.000] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0212.001] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Excel 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\excel 2016.lnk")) returned 1 [0212.020] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Excel 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\excel 2016.lnk")) returned 0xffffffff [0212.020] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x503ebe79, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x503ebe79, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x503ebe79, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x92d, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Immersive Control Panel.lnk", cAlternateFileName="")) returned 1 [0212.021] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.021] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.021] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.021] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.021] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.021] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0212.021] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Immersive Control Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\immersive control panel.lnk")) returned 0x25 [0212.022] VirtualAlloc (lpAddress=0x1f10000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f10000 [0212.022] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Immersive Control Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\immersive control panel.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.023] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Immersive Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\immersive control panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.023] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x92d, lpOverlapped=0x0) returned 1 [0212.024] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x92d, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x92d, lpOverlapped=0x0) returned 1 [0212.025] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.025] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.025] CloseHandle (hObject=0x1dc) returned 1 [0212.025] CloseHandle (hObject=0x1d8) returned 1 [0212.027] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Immersive Control Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\immersive control panel.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Immersive Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\immersive control panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.027] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Immersive Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\immersive control panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.028] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Immersive Control Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\immersive control panel.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x503ebe79, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x503ebe79, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x503ebe79, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x92d, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="Immersive Control Panel.lnk", cAlternateFileName="")) returned 0x55e410 [0212.028] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x503ebe79, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x503ebe79, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x503ebe79, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x92d, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="Immersive Control Panel.lnk", cAlternateFileName="")) returned 0 [0212.028] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0212.028] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Immersive Control Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\immersive control panel.lnk")) returned 0 [0212.028] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Immersive Control Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\immersive control panel.lnk")) returned 0x25 [0212.029] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad820150, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad951269, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="Java", cAlternateFileName="")) returned 1 [0212.029] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad820150, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad951269, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0212.030] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad820150, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad951269, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0212.030] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad951269, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad951269, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x830, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="About Java.lnk", cAlternateFileName="ABOUTJ~1.LNK")) returned 1 [0212.031] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.031] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.031] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.031] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0212.031] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk")) returned 0x20 [0212.032] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.032] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.032] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x830, lpOverlapped=0x0) returned 1 [0212.034] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x830, lpOverlapped=0x0) returned 1 [0212.035] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.035] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.035] CloseHandle (hObject=0x1dc) returned 1 [0212.036] CloseHandle (hObject=0x1e0) returned 1 [0212.037] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.037] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.037] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad951269, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad951269, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x830, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="About Java.lnk", cAlternateFileName="ABOUTJ~1.LNK")) returned 0x55e910 [0212.038] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad951269, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad951269, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x830, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="About Java.lnk", cAlternateFileName="ABOUTJ~1.LNK")) returned 0 [0212.038] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0212.038] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk")) returned 1 [0212.039] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk")) returned 0xffffffff [0212.039] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad951269, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad951269, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x842, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="Check For Updates.lnk", cAlternateFileName="CHECKF~1.LNK")) returned 1 [0212.039] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.039] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.039] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.039] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0212.040] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk")) returned 0x20 [0212.040] VirtualAlloc (lpAddress=0x1f14000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f14000 [0212.040] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.040] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.041] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x842, lpOverlapped=0x0) returned 1 [0212.045] WriteFile (in: hFile=0x1dc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x842, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x842, lpOverlapped=0x0) returned 1 [0212.046] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.046] WriteFile (in: hFile=0x1dc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.046] CloseHandle (hObject=0x1e0) returned 1 [0212.047] CloseHandle (hObject=0x1dc) returned 1 [0212.048] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.049] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.049] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad951269, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad951269, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x842, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Check For Updates.lnk", cAlternateFileName="CHECKF~1.LNK")) returned 0x55e890 [0212.049] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad951269, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad951269, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x842, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Check For Updates.lnk", cAlternateFileName="CHECKF~1.LNK")) returned 0 [0212.049] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0212.049] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk")) returned 1 [0212.050] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk")) returned 0xffffffff [0212.050] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad904d87, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad904d87, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x818, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Configure Java.lnk", cAlternateFileName="CONFIG~1.LNK")) returned 1 [0212.051] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.051] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.051] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.051] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.051] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.051] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0212.051] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk")) returned 0x20 [0212.051] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.052] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.052] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x818, lpOverlapped=0x0) returned 1 [0212.064] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x818, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x818, lpOverlapped=0x0) returned 1 [0212.065] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.065] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.065] CloseHandle (hObject=0x1dc) returned 1 [0212.065] CloseHandle (hObject=0x1e0) returned 1 [0212.067] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.067] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.067] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad904d87, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad904d87, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x818, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Configure Java.lnk", cAlternateFileName="CONFIG~1.LNK")) returned 0x55e310 [0212.067] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad904d87, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad904d87, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad951269, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x818, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Configure Java.lnk", cAlternateFileName="CONFIG~1.LNK")) returned 0 [0212.067] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0212.068] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk")) returned 1 [0212.069] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk")) returned 0xffffffff [0212.069] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8debab, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad8debab, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad8debab, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Get Help.url", cAlternateFileName="GETHEL~1.URL")) returned 1 [0212.069] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad892634, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad8b88b0, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x550000, dwReserved1=0x2000002, cFileName="Visit Java.com.url", cAlternateFileName="VISITJ~1.URL")) returned 1 [0212.070] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad892634, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad8b88b0, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x550000, dwReserved1=0x2000002, cFileName="Visit Java.com.url", cAlternateFileName="VISITJ~1.URL")) returned 0 [0212.070] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0212.070] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36e5585, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36e5585, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e617661, dwReserved1=0x2e6d6f63, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0212.070] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36e5585, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36e5585, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d006f, dwReserved1=0x75002e, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0212.070] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36e5585, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36e5585, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d006f, dwReserved1=0x75002e, cFileName="..", cAlternateFileName="")) returned 1 [0212.070] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36e5585, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97389110, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97389110, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x6d006f, dwReserved1=0x75002e, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0212.070] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.071] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.071] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.071] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0212.071] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini")) returned 0x26 [0212.073] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.073] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.073] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xaa, lpOverlapped=0x0) returned 1 [0212.074] WriteFile (in: hFile=0x1dc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xaa, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xaa, lpOverlapped=0x0) returned 1 [0212.075] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.075] WriteFile (in: hFile=0x1dc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.075] CloseHandle (hObject=0x1e0) returned 1 [0212.075] CloseHandle (hObject=0x1dc) returned 1 [0212.076] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.077] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.077] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36e5585, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97389110, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97389110, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Desktop.ini", cAlternateFileName="")) returned 0x55e890 [0212.077] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36e5585, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97389110, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97389110, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Desktop.ini", cAlternateFileName="")) returned 0 [0212.077] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0212.077] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini")) returned 1 [0212.078] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini")) returned 0xffffffff [0212.078] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36e5585, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97389110, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97389110, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x6d006f, dwReserved1=0x75002e, cFileName="Desktop.ini", cAlternateFileName="")) returned 0 [0212.078] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0212.078] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd4900e28, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b9dcf4, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b9dcf4, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x2e6d6f63, cFileName="Microsoft Office 2016 Tools", cAlternateFileName="MICROS~1")) returned 1 [0212.078] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd4900e28, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b9dcf4, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b9dcf4, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0212.079] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd4900e28, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b9dcf4, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b9dcf4, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0212.079] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b8b815, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b9b678, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b9c970, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa83, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Database Compare 2016.lnk", cAlternateFileName="DATABA~1.LNK")) returned 1 [0212.079] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.079] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.079] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.079] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.079] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0212.080] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Database Compare 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\database compare 2016.lnk")) returned 0x20 [0212.080] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Database Compare 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\database compare 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.080] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Database Compare 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\database compare 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.081] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa83, lpOverlapped=0x0) returned 1 [0212.082] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa83, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa83, lpOverlapped=0x0) returned 1 [0212.083] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.084] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.084] CloseHandle (hObject=0x1dc) returned 1 [0212.084] CloseHandle (hObject=0x1e0) returned 1 [0212.085] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Database Compare 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\database compare 2016.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Database Compare 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\database compare 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.085] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Database Compare 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\database compare 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.085] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Database Compare 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\database compare 2016.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b8b815, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b9b678, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b9c970, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa83, dwReserved0=0x550370, dwReserved1=0xe, cFileName="Database Compare 2016.lnk", cAlternateFileName="DATABA~1.LNK")) returned 0x55e310 [0212.086] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b8b815, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b9b678, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b9c970, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa83, dwReserved0=0x550370, dwReserved1=0xe, cFileName="Database Compare 2016.lnk", cAlternateFileName="DATABA~1.LNK")) returned 0 [0212.086] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0212.086] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Database Compare 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\database compare 2016.lnk")) returned 1 [0212.087] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Database Compare 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\database compare 2016.lnk")) returned 0xffffffff [0212.087] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xd494058c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd494058c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a7a0d5, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0212.087] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.087] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.087] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.087] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0212.088] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\desktop.ini")) returned 0x6 [0212.088] VirtualAlloc (lpAddress=0x1f18000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f18000 [0212.088] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.088] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.089] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1ee, lpOverlapped=0x0) returned 1 [0212.090] WriteFile (in: hFile=0x1dc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1ee, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1ee, lpOverlapped=0x0) returned 1 [0212.091] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.091] WriteFile (in: hFile=0x1dc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.091] CloseHandle (hObject=0x1e0) returned 1 [0212.091] CloseHandle (hObject=0x1dc) returned 1 [0212.092] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.093] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.093] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xd494058c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd494058c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a7a0d5, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x550370, dwReserved1=0x11, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e710 [0212.093] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xd494058c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd494058c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a7a0d5, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x550370, dwReserved1=0x11, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0212.093] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0212.093] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\desktop.ini")) returned 1 [0212.094] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\desktop.ini")) returned 0xffffffff [0212.094] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd49f1558, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a08889, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a08889, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa67, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Office 2016 Language Preferences.lnk", cAlternateFileName="OFFICE~2.LNK")) returned 1 [0212.094] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.095] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.095] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.095] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.095] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.095] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0212.095] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Language Preferences.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 language preferences.lnk")) returned 0x20 [0212.096] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Language Preferences.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 language preferences.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.096] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Language Preferences.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 language preferences.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.097] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa67, lpOverlapped=0x0) returned 1 [0212.098] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa67, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa67, lpOverlapped=0x0) returned 1 [0212.099] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.099] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.100] CloseHandle (hObject=0x1dc) returned 1 [0212.100] CloseHandle (hObject=0x1e0) returned 1 [0212.101] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Language Preferences.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 language preferences.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Language Preferences.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 language preferences.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.101] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Language Preferences.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 language preferences.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.101] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Language Preferences.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 language preferences.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd49f1558, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a08889, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a08889, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa67, dwReserved0=0x550370, dwReserved1=0xb, cFileName="Office 2016 Language Preferences.lnk", cAlternateFileName="OFFICE~2.LNK")) returned 0x55e1d0 [0212.101] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd49f1558, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a08889, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a08889, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa67, dwReserved0=0x550370, dwReserved1=0xb, cFileName="Office 2016 Language Preferences.lnk", cAlternateFileName="OFFICE~2.LNK")) returned 0 [0212.102] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0212.102] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Language Preferences.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 language preferences.lnk")) returned 1 [0212.103] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Language Preferences.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 language preferences.lnk")) returned 0xffffffff [0212.103] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd49b7f7a, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd49d67d5, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd49da2e0, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa6d, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Office 2016 Upload Center.lnk", cAlternateFileName="OFFICE~1.LNK")) returned 1 [0212.103] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.103] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.103] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.104] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.104] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0212.104] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Upload Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 upload center.lnk")) returned 0x20 [0212.104] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Upload Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 upload center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.104] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Upload Center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 upload center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.105] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa6d, lpOverlapped=0x0) returned 1 [0212.138] WriteFile (in: hFile=0x1dc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa6d, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa6d, lpOverlapped=0x0) returned 1 [0212.140] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.140] WriteFile (in: hFile=0x1dc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.140] CloseHandle (hObject=0x1e0) returned 1 [0212.140] CloseHandle (hObject=0x1dc) returned 1 [0212.142] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Upload Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 upload center.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Upload Center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 upload center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.146] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Upload Center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 upload center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.146] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Upload Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 upload center.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd49b7f7a, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd49d67d5, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd49da2e0, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa6d, dwReserved0=0x550370, dwReserved1=0xd, cFileName="Office 2016 Upload Center.lnk", cAlternateFileName="OFFICE~1.LNK")) returned 0x55e510 [0212.147] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd49b7f7a, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd49d67d5, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd49da2e0, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa6d, dwReserved0=0x550370, dwReserved1=0xd, cFileName="Office 2016 Upload Center.lnk", cAlternateFileName="OFFICE~1.LNK")) returned 0 [0212.147] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0212.147] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Upload Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 upload center.lnk")) returned 1 [0212.148] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Office 2016 Upload Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\office 2016 upload center.lnk")) returned 0xffffffff [0212.148] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a752b4, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a8c5fe, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a8c5fe, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa83, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype for Business Recording Manager.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 1 [0212.151] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.151] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.152] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.152] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0212.152] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Skype for Business Recording Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\skype for business recording manager.lnk")) returned 0x20 [0212.156] VirtualAlloc (lpAddress=0x1f1c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f1c000 [0212.156] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Skype for Business Recording Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\skype for business recording manager.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.157] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Skype for Business Recording Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\skype for business recording manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.157] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa83, lpOverlapped=0x0) returned 1 [0212.162] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa83, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa83, lpOverlapped=0x0) returned 1 [0212.163] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.163] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.163] CloseHandle (hObject=0x1dc) returned 1 [0212.164] CloseHandle (hObject=0x1e0) returned 1 [0212.165] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Skype for Business Recording Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\skype for business recording manager.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Skype for Business Recording Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\skype for business recording manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.165] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Skype for Business Recording Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\skype for business recording manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.165] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Skype for Business Recording Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\skype for business recording manager.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a752b4, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a8c5fe, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a8c5fe, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa83, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="Skype for Business Recording Manager.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 0x55e750 [0212.165] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a752b4, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a8c5fe, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a8c5fe, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa83, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="Skype for Business Recording Manager.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 0 [0212.165] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0212.166] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Skype for Business Recording Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\skype for business recording manager.lnk")) returned 1 [0212.167] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Skype for Business Recording Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\skype for business recording manager.lnk")) returned 0xffffffff [0212.167] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b58386, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b71ddd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b75849, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa83, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spreadsheet Compare 2016.lnk", cAlternateFileName="SPREAD~1.LNK")) returned 1 [0212.167] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.167] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.168] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.168] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0212.168] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Spreadsheet Compare 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\spreadsheet compare 2016.lnk")) returned 0x20 [0212.169] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Spreadsheet Compare 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\spreadsheet compare 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.169] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Spreadsheet Compare 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\spreadsheet compare 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.170] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa83, lpOverlapped=0x0) returned 1 [0212.172] WriteFile (in: hFile=0x1dc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa83, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa83, lpOverlapped=0x0) returned 1 [0212.173] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.173] WriteFile (in: hFile=0x1dc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.176] CloseHandle (hObject=0x1e0) returned 1 [0212.176] CloseHandle (hObject=0x1dc) returned 1 [0212.178] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Spreadsheet Compare 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\spreadsheet compare 2016.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Spreadsheet Compare 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\spreadsheet compare 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.179] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Spreadsheet Compare 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\spreadsheet compare 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.179] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Spreadsheet Compare 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\spreadsheet compare 2016.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b58386, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b71ddd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b75849, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa83, dwReserved0=0x550370, dwReserved1=0xd, cFileName="Spreadsheet Compare 2016.lnk", cAlternateFileName="SPREAD~1.LNK")) returned 0x55e310 [0212.179] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b58386, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b71ddd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b75849, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa83, dwReserved0=0x550370, dwReserved1=0xd, cFileName="Spreadsheet Compare 2016.lnk", cAlternateFileName="SPREAD~1.LNK")) returned 0 [0212.179] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0212.180] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Spreadsheet Compare 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\spreadsheet compare 2016.lnk")) returned 1 [0212.181] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Spreadsheet Compare 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\spreadsheet compare 2016.lnk")) returned 0xffffffff [0212.182] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4929273, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd496c493, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd496d81c, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xaff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry Dashboard for Office 2016.lnk", cAlternateFileName="TELEME~1.LNK")) returned 1 [0212.182] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.182] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.183] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.183] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.183] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.183] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0212.183] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Dashboard for Office 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry dashboard for office 2016.lnk")) returned 0x20 [0212.184] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Dashboard for Office 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry dashboard for office 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.184] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Dashboard for Office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry dashboard for office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.185] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xaff, lpOverlapped=0x0) returned 1 [0212.187] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xaff, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xaff, lpOverlapped=0x0) returned 1 [0212.188] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.188] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.188] CloseHandle (hObject=0x1dc) returned 1 [0212.188] CloseHandle (hObject=0x1e0) returned 1 [0212.190] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Dashboard for Office 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry dashboard for office 2016.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Dashboard for Office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry dashboard for office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.191] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Dashboard for Office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry dashboard for office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.191] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Dashboard for Office 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry dashboard for office 2016.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4929273, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd496c493, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd496d81c, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xaff, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="Telemetry Dashboard for Office 2016.lnk", cAlternateFileName="TELEME~1.LNK")) returned 0x55e310 [0212.191] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4929273, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd496c493, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd496d81c, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xaff, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="Telemetry Dashboard for Office 2016.lnk", cAlternateFileName="TELEME~1.LNK")) returned 0 [0212.191] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0212.191] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Dashboard for Office 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry dashboard for office 2016.lnk")) returned 1 [0212.192] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Dashboard for Office 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry dashboard for office 2016.lnk")) returned 0xffffffff [0212.192] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd497aed9, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd499d1d9, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd49a0c3d, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry Log for Office 2016.lnk", cAlternateFileName="TELEME~2.LNK")) returned 1 [0212.193] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.193] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0212.193] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Log for Office 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry log for office 2016.lnk")) returned 0x20 [0212.194] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Log for Office 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry log for office 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.194] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Log for Office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry log for office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.194] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xb05, lpOverlapped=0x0) returned 1 [0212.196] WriteFile (in: hFile=0x1dc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xb05, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xb05, lpOverlapped=0x0) returned 1 [0212.197] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.197] WriteFile (in: hFile=0x1dc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.197] CloseHandle (hObject=0x1e0) returned 1 [0212.197] CloseHandle (hObject=0x1dc) returned 1 [0212.199] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Log for Office 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry log for office 2016.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Log for Office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry log for office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.199] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Log for Office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry log for office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.200] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Log for Office 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry log for office 2016.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd497aed9, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd499d1d9, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd49a0c3d, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x550370, dwReserved1=0xc, cFileName="Telemetry Log for Office 2016.lnk", cAlternateFileName="TELEME~2.LNK")) returned 0x55e390 [0212.200] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd497aed9, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd499d1d9, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd49a0c3d, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x550370, dwReserved1=0xc, cFileName="Telemetry Log for Office 2016.lnk", cAlternateFileName="TELEME~2.LNK")) returned 0 [0212.200] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0212.200] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Log for Office 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry log for office 2016.lnk")) returned 1 [0212.201] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\Telemetry Log for Office 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\telemetry log for office 2016.lnk")) returned 0xffffffff [0212.201] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd497aed9, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd499d1d9, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd49a0c3d, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x0, dwReserved1=0x0, cFileName="Telemetry Log for Office 2016.lnk", cAlternateFileName="TELEME~2.LNK")) returned 0 [0212.201] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0212.201] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x1a440bee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1a440bee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1a440bee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x4c207972, dwReserved1=0x6620676f, cFileName="MiracastView.lnk", cAlternateFileName="")) returned 1 [0212.202] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.202] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.202] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.202] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0212.202] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\MiracastView.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\miracastview.lnk")) returned 0x25 [0212.203] VirtualAlloc (lpAddress=0x1f20000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f20000 [0212.203] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\MiracastView.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\miracastview.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.203] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\MiracastView.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\miracastview.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.204] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x8ab, lpOverlapped=0x0) returned 1 [0212.206] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x8ab, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x8ab, lpOverlapped=0x0) returned 1 [0212.207] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.207] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.207] CloseHandle (hObject=0x1d8) returned 1 [0212.207] CloseHandle (hObject=0x1dc) returned 1 [0212.208] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\MiracastView.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\miracastview.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\MiracastView.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\miracastview.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.209] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\MiracastView.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\miracastview.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.209] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\MiracastView.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\miracastview.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x1a440bee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1a440bee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1a440bee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="MiracastView.lnk", cAlternateFileName="")) returned 0x55e310 [0212.209] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x1a440bee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1a440bee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1a440bee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="MiracastView.lnk", cAlternateFileName="")) returned 0 [0212.209] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0212.209] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\MiracastView.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\miracastview.lnk")) returned 0 [0212.209] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\MiracastView.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\miracastview.lnk")) returned 0x25 [0212.209] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a2ab62, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a347ae, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a39591, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa72, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="OneDrive for Business.lnk", cAlternateFileName="ONEDRI~1.LNK")) returned 1 [0212.210] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.210] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.210] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.210] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0212.210] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive for Business.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onedrive for business.lnk")) returned 0x20 [0212.211] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive for Business.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onedrive for business.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.211] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive for Business.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onedrive for business.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.211] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xa72, lpOverlapped=0x0) returned 1 [0212.219] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xa72, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xa72, lpOverlapped=0x0) returned 1 [0212.221] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.221] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.221] CloseHandle (hObject=0x1dc) returned 1 [0212.221] CloseHandle (hObject=0x1d8) returned 1 [0212.223] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive for Business.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onedrive for business.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive for Business.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onedrive for business.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.223] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive for Business.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onedrive for business.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.223] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive for Business.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onedrive for business.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a2ab62, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a347ae, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a39591, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa72, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="OneDrive for Business.lnk", cAlternateFileName="ONEDRI~1.LNK")) returned 0x55e710 [0212.223] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a2ab62, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a347ae, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a39591, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa72, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="OneDrive for Business.lnk", cAlternateFileName="ONEDRI~1.LNK")) returned 0 [0212.223] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0212.224] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive for Business.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onedrive for business.lnk")) returned 1 [0212.225] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive for Business.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onedrive for business.lnk")) returned 0xffffffff [0212.225] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a9c3f5, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a9ead2, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a9fec4, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa64, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="OneNote 2016.lnk", cAlternateFileName="ONENOT~1.LNK")) returned 1 [0212.225] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.225] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.225] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.225] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.225] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.225] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0212.226] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneNote 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onenote 2016.lnk")) returned 0x20 [0212.226] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneNote 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onenote 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.226] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneNote 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onenote 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.227] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xa64, lpOverlapped=0x0) returned 1 [0212.228] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xa64, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xa64, lpOverlapped=0x0) returned 1 [0212.229] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.229] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.229] CloseHandle (hObject=0x1d8) returned 1 [0212.230] CloseHandle (hObject=0x1dc) returned 1 [0212.231] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneNote 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onenote 2016.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneNote 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onenote 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.231] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneNote 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onenote 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.231] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneNote 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onenote 2016.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a9c3f5, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a9ead2, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a9fec4, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa64, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="OneNote 2016.lnk", cAlternateFileName="ONENOT~1.LNK")) returned 0x55e410 [0212.232] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a9c3f5, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a9ead2, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a9fec4, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa64, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="OneNote 2016.lnk", cAlternateFileName="ONENOT~1.LNK")) returned 0 [0212.232] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0212.232] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneNote 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onenote 2016.lnk")) returned 1 [0212.233] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\OneNote 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\onenote 2016.lnk")) returned 0xffffffff [0212.233] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4aad524, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4ac349d, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4ac6f57, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Outlook 2016.lnk", cAlternateFileName="OUTLOO~1.LNK")) returned 1 [0212.234] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.234] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.234] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.234] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0212.234] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Outlook 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\outlook 2016.lnk")) returned 0x20 [0212.235] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Outlook 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\outlook 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.235] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Outlook 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\outlook 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.235] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xab5, lpOverlapped=0x0) returned 1 [0212.238] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xab5, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xab5, lpOverlapped=0x0) returned 1 [0212.239] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.239] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.239] CloseHandle (hObject=0x1dc) returned 1 [0212.239] CloseHandle (hObject=0x1d8) returned 1 [0212.240] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Outlook 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\outlook 2016.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Outlook 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\outlook 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.241] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Outlook 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\outlook 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.241] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Outlook 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\outlook 2016.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4aad524, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4ac349d, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4ac6f57, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Outlook 2016.lnk", cAlternateFileName="OUTLOO~1.LNK")) returned 0x55e710 [0212.241] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4aad524, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4ac349d, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4ac6f57, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Outlook 2016.lnk", cAlternateFileName="OUTLOO~1.LNK")) returned 0 [0212.241] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0212.241] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Outlook 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\outlook 2016.lnk")) returned 1 [0212.243] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Outlook 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\outlook 2016.lnk")) returned 0xffffffff [0212.243] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4adbc36, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4ae1d1a, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4ae5764, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa5e, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="PowerPoint 2016.lnk", cAlternateFileName="POWERP~1.LNK")) returned 1 [0212.243] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.243] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.243] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.243] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.244] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.244] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0212.244] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PowerPoint 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\powerpoint 2016.lnk")) returned 0x20 [0212.244] VirtualAlloc (lpAddress=0x1f24000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f24000 [0212.244] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PowerPoint 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\powerpoint 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.245] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PowerPoint 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\powerpoint 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.245] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xa5e, lpOverlapped=0x0) returned 1 [0212.247] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xa5e, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xa5e, lpOverlapped=0x0) returned 1 [0212.249] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.249] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.249] CloseHandle (hObject=0x1d8) returned 1 [0212.249] CloseHandle (hObject=0x1dc) returned 1 [0212.250] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PowerPoint 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\powerpoint 2016.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PowerPoint 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\powerpoint 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.251] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PowerPoint 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\powerpoint 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.251] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PowerPoint 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\powerpoint 2016.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4adbc36, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4ae1d1a, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4ae5764, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa5e, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="PowerPoint 2016.lnk", cAlternateFileName="POWERP~1.LNK")) returned 0x55e490 [0212.251] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4adbc36, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4ae1d1a, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4ae5764, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa5e, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="PowerPoint 2016.lnk", cAlternateFileName="POWERP~1.LNK")) returned 0 [0212.251] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0212.251] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PowerPoint 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\powerpoint 2016.lnk")) returned 1 [0212.253] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PowerPoint 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\powerpoint 2016.lnk")) returned 0xffffffff [0212.253] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x502baba5, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x502baba5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x502baba5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x897, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="PrintDialog.lnk", cAlternateFileName="")) returned 1 [0212.253] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.253] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.253] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.254] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.254] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.254] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0212.254] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PrintDialog.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\printdialog.lnk")) returned 0x25 [0212.254] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PrintDialog.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\printdialog.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.254] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PrintDialog.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\printdialog.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.255] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x897, lpOverlapped=0x0) returned 1 [0212.262] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x897, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x897, lpOverlapped=0x0) returned 1 [0212.264] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.264] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.264] CloseHandle (hObject=0x1dc) returned 1 [0212.264] CloseHandle (hObject=0x1d8) returned 1 [0212.265] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PrintDialog.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\printdialog.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PrintDialog.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\printdialog.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.266] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PrintDialog.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\printdialog.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.266] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PrintDialog.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\printdialog.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x502baba5, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x502baba5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x502baba5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x897, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="PrintDialog.lnk", cAlternateFileName="")) returned 0x55e910 [0212.266] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x502baba5, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x502baba5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x502baba5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x897, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="PrintDialog.lnk", cAlternateFileName="")) returned 0 [0212.266] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0212.266] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PrintDialog.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\printdialog.lnk")) returned 0 [0212.267] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\PrintDialog.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\printdialog.lnk")) returned 0x25 [0212.267] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4afb71b, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b01960, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b05345, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa50, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Publisher 2016.lnk", cAlternateFileName="PUBLIS~1.LNK")) returned 1 [0212.268] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.268] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.268] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.268] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.268] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.268] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0212.268] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Publisher 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\publisher 2016.lnk")) returned 0x20 [0212.269] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Publisher 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\publisher 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.269] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Publisher 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\publisher 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.270] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xa50, lpOverlapped=0x0) returned 1 [0212.273] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xa50, lpOverlapped=0x0) returned 1 [0212.274] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.274] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.275] CloseHandle (hObject=0x1d8) returned 1 [0212.275] CloseHandle (hObject=0x1dc) returned 1 [0212.276] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Publisher 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\publisher 2016.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Publisher 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\publisher 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.277] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Publisher 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\publisher 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.277] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Publisher 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\publisher 2016.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4afb71b, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b01960, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b05345, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa50, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Publisher 2016.lnk", cAlternateFileName="PUBLIS~1.LNK")) returned 0x55e1d0 [0212.277] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4afb71b, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b01960, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b05345, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa50, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Publisher 2016.lnk", cAlternateFileName="PUBLIS~1.LNK")) returned 0 [0212.277] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0212.277] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Publisher 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\publisher 2016.lnk")) returned 1 [0212.279] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Publisher 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\publisher 2016.lnk")) returned 0xffffffff [0212.279] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x2007da5a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2007da5a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2007da5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Search.lnk", cAlternateFileName="")) returned 1 [0212.279] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.279] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.279] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.279] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.280] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.280] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0212.280] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Search.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\search.lnk")) returned 0x25 [0212.280] VirtualAlloc (lpAddress=0x1f28000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f28000 [0212.281] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Search.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\search.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.281] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.281] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x634, lpOverlapped=0x0) returned 1 [0212.283] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x634, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x634, lpOverlapped=0x0) returned 1 [0212.285] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.285] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.285] CloseHandle (hObject=0x1dc) returned 1 [0212.285] CloseHandle (hObject=0x1d8) returned 1 [0212.287] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Search.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\search.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.287] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.287] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Search.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\search.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x2007da5a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2007da5a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2007da5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="Search.lnk", cAlternateFileName="")) returned 0x55e890 [0212.287] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x2007da5a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2007da5a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2007da5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="Search.lnk", cAlternateFileName="")) returned 0 [0212.287] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0212.288] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Search.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\search.lnk")) returned 0 [0212.288] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Search.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\search.lnk")) returned 0x25 [0212.288] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a4ce36, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a56a80, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a5b87b, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="Skype for Business 2016.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 1 [0212.288] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.288] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.289] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.289] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.289] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.289] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0212.289] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Skype for Business 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\skype for business 2016.lnk")) returned 0x20 [0212.289] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Skype for Business 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\skype for business 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.290] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Skype for Business 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\skype for business 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.290] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xa6c, lpOverlapped=0x0) returned 1 [0212.292] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xa6c, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xa6c, lpOverlapped=0x0) returned 1 [0212.293] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.293] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.294] CloseHandle (hObject=0x1d8) returned 1 [0212.294] CloseHandle (hObject=0x1dc) returned 1 [0212.295] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Skype for Business 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\skype for business 2016.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Skype for Business 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\skype for business 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.295] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Skype for Business 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\skype for business 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.295] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Skype for Business 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\skype for business 2016.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a4ce36, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a56a80, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a5b87b, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="Skype for Business 2016.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 0x55e390 [0212.296] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a4ce36, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4a56a80, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4a5b87b, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="Skype for Business 2016.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 0 [0212.296] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0212.296] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Skype for Business 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\skype for business 2016.lnk")) returned 1 [0212.297] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Skype for Business 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\skype for business 2016.lnk")) returned 0xffffffff [0212.297] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36e5585, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36e5585, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="StartUp", cAlternateFileName="")) returned 1 [0212.297] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36e5585, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36e5585, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0212.298] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36e5585, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36e5585, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0212.298] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36e5585, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97389110, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97389110, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0212.387] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.387] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.387] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.387] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0212.387] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini")) returned 0x26 [0212.388] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.388] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.389] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xae, lpOverlapped=0x0) returned 1 [0212.390] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xae, lpOverlapped=0x0) returned 1 [0212.391] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.391] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.391] CloseHandle (hObject=0x1d8) returned 1 [0212.391] CloseHandle (hObject=0x1e0) returned 1 [0212.395] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.396] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.396] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36e5585, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97389110, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97389110, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e310 [0212.396] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36e5585, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97389110, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97389110, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0212.396] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0212.396] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini")) returned 1 [0212.398] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini")) returned 0xffffffff [0212.398] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36e5585, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97389110, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97389110, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0212.398] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0212.398] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x370b7e7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x370b7e7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x2000002, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0212.398] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x370b7e7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x370b7e7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0212.398] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x370b7e7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x370b7e7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0212.399] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5039f9c4, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5039f9c4, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5039f9c4, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e3, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="Default Programs.lnk", cAlternateFileName="")) returned 1 [0212.399] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.399] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.399] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.399] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0212.400] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Programs.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\default programs.lnk")) returned 0x20 [0212.400] VirtualAlloc (lpAddress=0x1f2c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f2c000 [0212.400] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Programs.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\default programs.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.400] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Programs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\default programs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.405] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x4e3, lpOverlapped=0x0) returned 1 [0212.407] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x4e3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x4e3, lpOverlapped=0x0) returned 1 [0212.408] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.408] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.408] CloseHandle (hObject=0x1e0) returned 1 [0212.408] CloseHandle (hObject=0x1d8) returned 1 [0212.410] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Programs.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\default programs.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Programs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\default programs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.410] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Programs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\default programs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.410] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Programs.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\default programs.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5039f9c4, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5039f9c4, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5039f9c4, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e3, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Default Programs.lnk", cAlternateFileName="")) returned 0x55e310 [0212.411] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5039f9c4, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5039f9c4, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5039f9c4, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e3, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Default Programs.lnk", cAlternateFileName="")) returned 0 [0212.411] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0212.411] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Programs.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\default programs.lnk")) returned 1 [0212.411] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Programs.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\default programs.lnk")) returned 0xffffffff [0212.411] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36e5585, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x25c, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0212.412] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.412] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.412] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.412] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.412] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.412] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0212.412] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini")) returned 0x26 [0212.412] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.413] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.413] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x25c, lpOverlapped=0x0) returned 1 [0212.414] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x25c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x25c, lpOverlapped=0x0) returned 1 [0212.415] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.415] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.415] CloseHandle (hObject=0x1d8) returned 1 [0212.416] CloseHandle (hObject=0x1e0) returned 1 [0212.417] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.417] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.417] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36e5585, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x25c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Desktop.ini", cAlternateFileName="")) returned 0x55e590 [0212.417] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x36e5585, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x25c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Desktop.ini", cAlternateFileName="")) returned 0 [0212.417] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0212.418] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini")) returned 1 [0212.419] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini")) returned 0xffffffff [0212.419] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f772ff, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x14f772ff, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x14f772ff, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Task Manager.lnk", cAlternateFileName="")) returned 1 [0212.419] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.419] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.420] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.420] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0212.420] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Task Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\task manager.lnk")) returned 0x20 [0212.421] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Task Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\task manager.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.421] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Task Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\task manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.422] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x460, lpOverlapped=0x0) returned 1 [0212.424] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x460, lpOverlapped=0x0) returned 1 [0212.426] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.426] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.426] CloseHandle (hObject=0x1e0) returned 1 [0212.426] CloseHandle (hObject=0x1d8) returned 1 [0212.427] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Task Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\task manager.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Task Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\task manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.427] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Task Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\task manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.428] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Task Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\task manager.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f772ff, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x14f772ff, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x14f772ff, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Task Manager.lnk", cAlternateFileName="")) returned 0x55e710 [0212.428] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f772ff, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x14f772ff, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x14f772ff, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Task Manager.lnk", cAlternateFileName="")) returned 0 [0212.428] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0212.428] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Task Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\task manager.lnk")) returned 1 [0212.428] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Task Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\task manager.lnk")) returned 0xffffffff [0212.429] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2d621b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2d621b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2d621b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x422, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="Windows Defender.lnk", cAlternateFileName="")) returned 1 [0212.429] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.429] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.429] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.429] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.429] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.429] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0212.429] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk")) returned 0x20 [0212.430] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0212.430] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.430] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x422, lpOverlapped=0x0) returned 1 [0212.434] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x422, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x422, lpOverlapped=0x0) returned 1 [0212.435] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.435] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0212.435] CloseHandle (hObject=0x1d8) returned 1 [0212.435] CloseHandle (hObject=0x1e0) returned 1 [0212.436] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.437] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.437] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2d621b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2d621b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2d621b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x422, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Windows Defender.lnk", cAlternateFileName="")) returned 0x55e890 [0212.437] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2d621b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2d621b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2d621b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x422, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Windows Defender.lnk", cAlternateFileName="")) returned 0 [0212.437] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0212.438] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk")) returned 1 [0212.438] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk")) returned 0xffffffff [0212.438] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2d621b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2d621b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2d621b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x422, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="Windows Defender.lnk", cAlternateFileName="")) returned 0 [0212.438] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0212.438] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x66654420, dwReserved1=0x65646e65, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0212.439] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\tablet pc\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0212.439] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0212.439] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0212.439] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0212.439] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b1515d, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b1b326, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b1da26, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x66654420, dwReserved1=0x65646e65, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 1 [0212.440] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.440] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.440] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.440] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0212.440] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Word 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\word 2016.lnk")) returned 0x20 [0212.441] VirtualAlloc (lpAddress=0x1f30000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f30000 [0212.441] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Word 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\word 2016.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0212.441] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Word 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\word 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.442] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xa6c, lpOverlapped=0x0) returned 1 [0212.444] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xa6c, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xa6c, lpOverlapped=0x0) returned 1 [0212.445] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.445] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0212.445] CloseHandle (hObject=0x1dc) returned 1 [0212.445] CloseHandle (hObject=0x1e0) returned 1 [0212.446] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Word 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\word 2016.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Word 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\word 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.447] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Word 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\word 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.447] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Word 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\word 2016.lnk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b1515d, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b1b326, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b1da26, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 0x55e190 [0212.447] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b1515d, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b1b326, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b1da26, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 0 [0212.447] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0212.448] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Word 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\word 2016.lnk")) returned 1 [0212.449] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Word 2016.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\word 2016.lnk")) returned 0xffffffff [0212.449] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b1515d, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd4b1b326, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd4b1da26, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x66654420, dwReserved1=0x65646e65, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 0 [0212.449] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0212.449] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xad820150, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad820150, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 0 [0212.449] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0212.450] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e6973, dwReserved1=0x682e7472, cFileName="Start Menu Places", cAlternateFileName="STARTM~2")) returned 1 [0212.450] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c2e3631, dwReserved1=0x6e696b6e, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0212.450] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c2e3631, dwReserved1=0x6e696b6e, cFileName="..", cAlternateFileName="")) returned 1 [0212.450] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x6c2e3631, dwReserved1=0x6e696b6e, cFileName="01 - File Explorer.lnk", cAlternateFileName="")) returned 1 [0212.450] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.451] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.451] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.451] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0212.451] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\01 - File Explorer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\01 - file explorer.lnk")) returned 0x20 [0212.451] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\01 - File Explorer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\01 - file explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.452] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\01 - File Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\01 - file explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.452] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x493, lpOverlapped=0x0) returned 1 [0212.454] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x493, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x493, lpOverlapped=0x0) returned 1 [0212.456] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0212.456] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0212.456] CloseHandle (hObject=0x1d4) returned 1 [0212.456] CloseHandle (hObject=0x1e0) returned 1 [0212.459] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\01 - File Explorer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\01 - file explorer.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\01 - File Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\01 - file explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.459] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\01 - File Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\01 - file explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.459] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\01 - File Explorer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\01 - file explorer.lnk"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="01 - File Explorer.lnk", cAlternateFileName="")) returned 0x55e590 [0212.459] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="01 - File Explorer.lnk", cAlternateFileName="")) returned 0 [0212.460] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0212.460] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\01 - File Explorer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\01 - file explorer.lnk")) returned 1 [0212.460] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\01 - File Explorer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\01 - file explorer.lnk")) returned 0xffffffff [0212.460] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="03 - Documents.lnk", cAlternateFileName="")) returned 1 [0212.461] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.461] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.461] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.461] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0212.461] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\03 - Documents.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\03 - documents.lnk")) returned 0x20 [0212.461] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\03 - Documents.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\03 - documents.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.462] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\03 - Documents.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\03 - documents.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.462] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x151, lpOverlapped=0x0) returned 1 [0212.463] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x151, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x151, lpOverlapped=0x0) returned 1 [0212.464] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0212.464] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0212.464] CloseHandle (hObject=0x1e0) returned 1 [0212.465] CloseHandle (hObject=0x1d4) returned 1 [0212.466] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\03 - Documents.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\03 - documents.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\03 - Documents.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\03 - documents.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.466] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\03 - Documents.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\03 - documents.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.466] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\03 - Documents.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\03 - documents.lnk"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="03 - Documents.lnk", cAlternateFileName="")) returned 0x55e8d0 [0212.467] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="03 - Documents.lnk", cAlternateFileName="")) returned 0 [0212.467] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0212.467] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\03 - Documents.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\03 - documents.lnk")) returned 1 [0212.467] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\03 - Documents.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\03 - documents.lnk")) returned 0xffffffff [0212.467] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="04 - Downloads.lnk", cAlternateFileName="")) returned 1 [0212.468] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.468] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.468] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.468] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0212.468] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\04 - Downloads.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\04 - downloads.lnk")) returned 0x20 [0212.471] VirtualAlloc (lpAddress=0x1f34000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f34000 [0212.472] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\04 - Downloads.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\04 - downloads.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.472] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\04 - Downloads.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\04 - downloads.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.478] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x151, lpOverlapped=0x0) returned 1 [0212.479] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x151, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x151, lpOverlapped=0x0) returned 1 [0212.480] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0212.480] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0212.480] CloseHandle (hObject=0x1d4) returned 1 [0212.480] CloseHandle (hObject=0x1e0) returned 1 [0212.484] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\04 - Downloads.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\04 - downloads.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\04 - Downloads.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\04 - downloads.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.485] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\04 - Downloads.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\04 - downloads.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.485] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\04 - Downloads.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\04 - downloads.lnk"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="04 - Downloads.lnk", cAlternateFileName="")) returned 0x55e2d0 [0212.485] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="04 - Downloads.lnk", cAlternateFileName="")) returned 0 [0212.485] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0212.485] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\04 - Downloads.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\04 - downloads.lnk")) returned 1 [0212.562] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\04 - Downloads.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\04 - downloads.lnk")) returned 0xffffffff [0212.562] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="05 - Music.lnk", cAlternateFileName="")) returned 1 [0212.562] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.562] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.562] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.562] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.563] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0212.563] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\05 - Music.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\05 - music.lnk")) returned 0x20 [0212.563] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\05 - Music.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\05 - music.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.563] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\05 - Music.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\05 - music.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.569] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x149, lpOverlapped=0x0) returned 1 [0212.570] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x149, lpOverlapped=0x0) returned 1 [0212.571] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0212.571] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0212.571] CloseHandle (hObject=0x1e0) returned 1 [0212.571] CloseHandle (hObject=0x1d4) returned 1 [0212.574] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\05 - Music.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\05 - music.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\05 - Music.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\05 - music.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.574] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\05 - Music.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\05 - music.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.574] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\05 - Music.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\05 - music.lnk"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="05 - Music.lnk", cAlternateFileName="")) returned 0x55e410 [0212.574] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="05 - Music.lnk", cAlternateFileName="")) returned 0 [0212.574] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0212.575] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\05 - Music.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\05 - music.lnk")) returned 1 [0212.597] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\05 - Music.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\05 - music.lnk")) returned 0xffffffff [0212.597] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="06 - Pictures.lnk", cAlternateFileName="")) returned 1 [0212.597] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.597] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.598] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.598] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0212.598] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\06 - Pictures.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\06 - pictures.lnk")) returned 0x20 [0212.598] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\06 - Pictures.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\06 - pictures.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.599] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\06 - Pictures.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\06 - pictures.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.606] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x151, lpOverlapped=0x0) returned 1 [0212.607] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x151, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x151, lpOverlapped=0x0) returned 1 [0212.608] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0212.608] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0212.608] CloseHandle (hObject=0x1d4) returned 1 [0212.608] CloseHandle (hObject=0x1e0) returned 1 [0212.943] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\06 - Pictures.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\06 - pictures.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\06 - Pictures.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\06 - pictures.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.943] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\06 - Pictures.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\06 - pictures.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.944] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\06 - Pictures.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\06 - pictures.lnk"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="06 - Pictures.lnk", cAlternateFileName="")) returned 0x55e710 [0212.944] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="06 - Pictures.lnk", cAlternateFileName="")) returned 0 [0212.944] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0212.944] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\06 - Pictures.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\06 - pictures.lnk")) returned 1 [0212.944] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\06 - Pictures.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\06 - pictures.lnk")) returned 0xffffffff [0212.945] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2524c44b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2524c44b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="07 - Videos.lnk", cAlternateFileName="")) returned 1 [0212.945] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.945] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.945] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.945] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.945] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.945] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0212.945] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\07 - Videos.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\07 - videos.lnk")) returned 0x20 [0212.946] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\07 - Videos.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\07 - videos.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.946] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\07 - Videos.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\07 - videos.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.948] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x14d, lpOverlapped=0x0) returned 1 [0212.949] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x14d, lpOverlapped=0x0) returned 1 [0212.950] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0212.950] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0212.950] CloseHandle (hObject=0x1e0) returned 1 [0212.950] CloseHandle (hObject=0x1d4) returned 1 [0212.951] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\07 - Videos.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\07 - videos.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\07 - Videos.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\07 - videos.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.952] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\07 - Videos.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\07 - videos.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.952] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\07 - Videos.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\07 - videos.lnk"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2524c44b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2524c44b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="07 - Videos.lnk", cAlternateFileName="")) returned 0x55e690 [0212.952] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2524c44b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2524c44b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="07 - Videos.lnk", cAlternateFileName="")) returned 0 [0212.952] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0212.952] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\07 - Videos.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\07 - videos.lnk")) returned 1 [0212.953] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\07 - Videos.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\07 - videos.lnk")) returned 0xffffffff [0212.953] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="08 - Homegroup.lnk", cAlternateFileName="")) returned 1 [0212.953] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0212.953] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0212.954] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0212.954] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0212.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0212.954] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\08 - Homegroup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\08 - homegroup.lnk")) returned 0x20 [0212.954] VirtualAlloc (lpAddress=0x1f38000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f38000 [0212.966] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\08 - Homegroup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\08 - homegroup.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0212.966] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\08 - Homegroup.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\08 - homegroup.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0212.969] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x117, lpOverlapped=0x0) returned 1 [0212.971] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x117, lpOverlapped=0x0) returned 1 [0212.972] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0212.972] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0212.972] CloseHandle (hObject=0x1d4) returned 1 [0212.972] CloseHandle (hObject=0x1e0) returned 1 [0212.996] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\08 - Homegroup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\08 - homegroup.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\08 - Homegroup.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\08 - homegroup.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0212.996] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\08 - Homegroup.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\08 - homegroup.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0212.996] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\08 - Homegroup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\08 - homegroup.lnk"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="08 - Homegroup.lnk", cAlternateFileName="")) returned 0x55e910 [0212.997] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="08 - Homegroup.lnk", cAlternateFileName="")) returned 0 [0212.997] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0212.997] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\08 - Homegroup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\08 - homegroup.lnk")) returned 1 [0213.020] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\08 - Homegroup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\08 - homegroup.lnk")) returned 0xffffffff [0213.020] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="09 - Network.lnk", cAlternateFileName="")) returned 1 [0213.020] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0213.020] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0213.020] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0213.020] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0213.020] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0213.020] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0213.021] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\09 - Network.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\09 - network.lnk")) returned 0x20 [0213.021] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\09 - Network.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\09 - network.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0213.021] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\09 - Network.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\09 - network.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0213.079] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x113, lpOverlapped=0x0) returned 1 [0213.080] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x113, lpOverlapped=0x0) returned 1 [0213.081] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0213.081] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0213.081] CloseHandle (hObject=0x1e0) returned 1 [0213.081] CloseHandle (hObject=0x1d4) returned 1 [0213.087] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\09 - Network.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\09 - network.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\09 - Network.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\09 - network.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0213.087] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\09 - Network.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\09 - network.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0213.087] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\09 - Network.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\09 - network.lnk"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="09 - Network.lnk", cAlternateFileName="")) returned 0x55e910 [0213.087] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="09 - Network.lnk", cAlternateFileName="")) returned 0 [0213.087] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0213.088] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\09 - Network.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\09 - network.lnk")) returned 1 [0213.107] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\09 - Network.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\09 - network.lnk")) returned 0xffffffff [0213.107] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="10 - UserProfile.lnk", cAlternateFileName="")) returned 1 [0213.108] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0213.108] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0213.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0213.108] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0213.108] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0213.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0213.108] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\10 - UserProfile.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\10 - userprofile.lnk")) returned 0x20 [0213.108] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\10 - UserProfile.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\10 - userprofile.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0213.109] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\10 - UserProfile.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\10 - userprofile.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0213.112] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x141, lpOverlapped=0x0) returned 1 [0213.113] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x141, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x141, lpOverlapped=0x0) returned 1 [0213.114] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0213.114] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0213.114] CloseHandle (hObject=0x1d4) returned 1 [0213.114] CloseHandle (hObject=0x1e0) returned 1 [0213.121] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\10 - UserProfile.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\10 - userprofile.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\10 - UserProfile.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\10 - userprofile.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0213.122] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\10 - UserProfile.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\10 - userprofile.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0213.122] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\10 - UserProfile.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\10 - userprofile.lnk"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="10 - UserProfile.lnk", cAlternateFileName="")) returned 0x55e750 [0213.122] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="10 - UserProfile.lnk", cAlternateFileName="")) returned 0 [0213.122] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0213.122] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\10 - UserProfile.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\10 - userprofile.lnk")) returned 1 [0213.142] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\10 - UserProfile.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\10 - userprofile.lnk")) returned 0xffffffff [0213.142] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0213.143] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0213.143] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0213.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0213.143] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0213.143] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0213.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0213.143] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\desktop.ini")) returned 0x26 [0213.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0213.144] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0213.147] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x240, lpOverlapped=0x0) returned 1 [0213.148] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x240, lpOverlapped=0x0) returned 1 [0213.149] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0213.149] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0213.149] CloseHandle (hObject=0x1e0) returned 1 [0213.149] CloseHandle (hObject=0x1d4) returned 1 [0213.152] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0213.153] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0213.153] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\desktop.ini"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e590 [0213.154] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0213.154] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0213.154] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\desktop.ini")) returned 1 [0213.164] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\desktop.ini")) returned 0xffffffff [0213.164] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0213.164] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0213.164] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6c69666f, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0213.165] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\templates\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0213.165] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0213.165] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 0 [0213.165] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0213.165] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6c69666f, cFileName="WER", cAlternateFileName="")) returned 1 [0213.165] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0213.178] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0213.178] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1 [0213.178] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\reportarchive\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0213.178] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0213.178] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0213.178] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0213.179] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 1 [0213.179] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\reportqueue\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0213.179] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0213.179] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0213.179] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0213.179] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="Temp", cAlternateFileName="")) returned 1 [0213.179] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\Temp\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\temp\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0213.179] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0213.179] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0213.179] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0213.180] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="Temp", cAlternateFileName="")) returned 0 [0213.180] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0213.183] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc9e8f94, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xcc9e8f94, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65756575, dwReserved1=0x6c696576, cFileName="wfp", cAlternateFileName="")) returned 1 [0213.183] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\wfp\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\wfp\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc9e8f94, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xcc9e8f94, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0213.184] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc9e8f94, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xcc9e8f94, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0213.184] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xcc9e8f94, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xcc9e8f94, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe606b3e, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="wfpdiag.etl", cAlternateFileName="")) returned 1 [0213.184] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xcc9e8f94, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xcc9e8f94, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe606b3e, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="wfpdiag.etl", cAlternateFileName="")) returned 0 [0213.184] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0213.184] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc9e8f94, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xcc9e8f94, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65756575, dwReserved1=0x6c696576, cFileName="wfp", cAlternateFileName="")) returned 0 [0213.185] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0213.185] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35c3f417, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20757365, dwReserved1=0x63616c50, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0213.185] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35c3f417, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c74652e, dwReserved1=0x6c696576, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0213.187] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35c3f417, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c74652e, dwReserved1=0x6c696576, cFileName="..", cAlternateFileName="")) returned 1 [0213.187] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c74652e, dwReserved1=0x6c696576, cFileName="Clean Store", cAlternateFileName="CLEANS~1")) returned 1 [0213.187] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Clean Store\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\clean store\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0213.187] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0213.187] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0213.187] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0213.187] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c74652e, dwReserved1=0x6c696576, cFileName="Definition Updates", cAlternateFileName="DEFINI~1")) returned 1 [0213.187] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0213.187] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0213.188] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x36000630, cFileName="Backup", cAlternateFileName="")) returned 1 [0213.188] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\backup\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0213.190] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0213.190] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0213.190] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0213.190] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x36000630, cFileName="Default", cAlternateFileName="")) returned 1 [0213.191] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0213.192] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0213.192] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x122870, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="GapaEngine.dll", cAlternateFileName="")) returned 1 [0213.192] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0213.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0213.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0213.193] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0213.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0213.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0213.193] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\GapaEngine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\gapaengine.dll")) returned 0x20 [0213.194] VirtualAlloc (lpAddress=0x1f3c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f3c000 [0213.194] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\GapaEngine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\gapaengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0213.194] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\GapaEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\gapaengine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0213.195] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.196] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.198] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.199] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.199] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.199] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.200] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.200] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.200] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.200] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.200] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.201] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.201] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.201] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.201] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.201] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.201] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.202] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.202] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.202] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.202] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.202] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.203] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.203] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.203] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.203] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.203] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.203] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.204] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.204] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.204] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.206] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.206] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.206] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.207] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.207] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.207] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.207] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.207] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.207] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.208] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.208] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.208] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.208] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.208] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.209] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.209] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.209] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.209] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.209] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.209] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.210] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.210] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.210] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.210] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.210] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.211] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.211] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.211] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.211] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.211] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.212] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.212] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.212] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.212] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.212] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.213] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.213] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.213] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.213] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.213] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.213] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.214] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.214] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.214] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.214] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.214] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.214] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.215] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.215] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.215] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.215] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.215] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.216] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.216] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.216] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.216] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.216] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.216] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.217] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.217] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.217] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.217] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.218] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.218] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.219] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.219] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.219] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.219] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.220] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.220] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.220] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.238] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.238] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.238] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.238] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.239] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.239] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.239] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.239] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.239] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.239] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.240] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.240] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.240] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.240] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.240] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.241] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.241] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.241] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.241] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.241] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.241] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.242] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.242] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.242] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.242] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.242] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.242] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.242] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.243] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.244] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.244] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.244] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.244] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.244] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.244] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.245] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.245] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.245] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.245] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.245] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.246] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.246] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.246] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.246] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.246] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.247] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.247] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.247] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.247] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.247] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.247] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.248] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.248] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.248] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.248] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.249] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.249] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.249] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.251] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.251] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.251] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.251] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.251] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.252] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.252] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.252] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.252] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.252] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.252] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.253] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.253] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.253] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.253] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.253] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.253] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.253] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.254] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.254] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.254] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.254] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.254] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.254] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.255] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.255] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.255] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.255] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.255] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.255] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.256] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.256] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.256] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.256] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.256] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.256] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.257] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.257] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.257] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.257] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.257] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.258] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.258] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.258] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.258] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.258] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.258] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.259] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.259] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.259] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.259] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.259] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.259] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.259] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.260] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.260] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.260] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.260] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.260] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.260] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.261] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.261] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.262] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.262] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.262] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.262] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.263] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.263] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.263] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.263] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.263] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.264] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.264] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.264] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.264] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.264] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.264] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.265] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.265] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.265] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.265] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.265] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.265] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.266] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.266] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.266] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.266] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.266] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.266] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.267] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.267] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.269] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.269] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.269] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.269] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.270] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.270] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.270] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.271] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.271] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.271] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.271] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.271] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.271] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.272] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.272] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.272] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.272] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.272] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.273] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.273] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.273] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.273] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.273] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.273] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.274] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.274] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.274] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.274] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.274] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.274] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.275] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.275] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.275] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.275] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.281] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.281] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.282] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.282] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.282] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.282] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.282] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.283] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.283] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.284] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.284] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.284] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.284] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.284] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.284] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.285] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.285] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.285] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.285] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.285] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.285] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.285] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.286] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.286] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.286] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.286] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.286] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.286] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.287] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.287] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.287] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.287] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.287] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.287] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.287] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.288] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.288] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.288] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.288] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.288] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.288] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.289] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.289] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.289] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.289] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.289] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.289] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.290] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.290] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.290] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.290] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.290] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.290] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.291] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.291] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.291] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.291] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.291] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.291] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.292] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.292] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.292] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.292] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.292] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.294] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.294] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.294] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.295] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.295] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.295] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.295] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.295] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.296] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.296] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.296] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.296] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.296] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.297] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.297] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.297] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.297] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.297] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.298] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.298] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.298] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.298] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.299] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.299] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.299] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.299] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.299] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.299] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.300] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.300] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.300] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.300] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.300] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.300] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.301] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.301] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.301] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.302] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.302] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.302] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.302] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.303] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.303] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.303] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.303] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.303] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.304] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.304] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.304] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.304] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.304] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.305] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.305] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.305] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.305] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.305] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.305] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.306] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.306] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.306] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.306] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.306] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.306] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.307] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.307] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.307] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.308] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.308] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.308] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.308] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.308] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.308] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.309] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.309] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.310] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.311] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.311] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.311] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.311] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.311] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.311] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.312] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.312] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.312] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.312] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.312] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.313] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.313] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.313] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.313] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.313] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.314] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.314] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.314] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.315] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.315] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.315] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.315] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.315] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.315] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.315] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.316] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.316] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.316] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.316] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.316] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.317] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.317] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.317] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.317] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.317] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.317] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.318] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.318] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.318] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.318] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.318] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.319] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.319] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.319] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.319] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.319] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.319] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.319] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.320] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.320] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.320] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.320] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.430] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.431] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.431] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.431] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.431] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.432] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.432] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.432] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.432] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.432] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.432] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.433] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.433] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.433] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.433] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.433] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.434] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.434] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.434] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.434] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.434] WriteFile (in: hFile=0x1dc, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.463] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\GapaEngine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\gapaengine.dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\GapaEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\gapaengine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0213.463] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\GapaEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\gapaengine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0213.464] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\GapaEngine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\gapaengine.dll"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x122870, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="GapaEngine.dll", cAlternateFileName="")) returned 0x55e690 [0213.464] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x122870, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="GapaEngine.dll", cAlternateFileName="")) returned 0 [0213.464] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0213.464] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\GapaEngine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\gapaengine.dll")) returned 0 [0213.465] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\GapaEngine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\gapaengine.dll")) returned 0x20 [0213.468] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3226d0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe3226d0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe36eb85, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2060ab0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="MpAsBase.vdm", cAlternateFileName="")) returned 1 [0213.499] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0213.499] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0213.512] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0213.512] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0213.512] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0213.512] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0213.513] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\MpEngine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\mpengine.dll")) returned 0x20 [0213.513] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\MpEngine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\mpengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0213.513] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\MpEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\mpengine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0213.514] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.518] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.520] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.520] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.521] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.522] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.522] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.522] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.522] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.522] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.523] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.523] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.523] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.523] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.523] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.523] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.524] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.524] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.524] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.524] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.524] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.525] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.525] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.525] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.525] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.525] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.525] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.526] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.526] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.527] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.527] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.528] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.529] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.529] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.529] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.529] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.529] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.530] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.530] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.530] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.531] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.531] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.531] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.531] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.531] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.532] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.532] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.532] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.532] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.532] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.535] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.535] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.535] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.535] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.535] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.536] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.536] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.536] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.536] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.536] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.536] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.537] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.537] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.537] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.537] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.537] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.538] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.538] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.538] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.538] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.538] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.538] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.539] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.539] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.539] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.539] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.540] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.540] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.540] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.540] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.540] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.540] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.541] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.541] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.541] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.541] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.541] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.541] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.542] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.542] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.542] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.542] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.542] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.544] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.544] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.544] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.545] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.545] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.545] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.545] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.545] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.545] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.546] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.546] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.546] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.546] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.546] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.546] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.547] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.547] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.547] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.547] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.547] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.547] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.548] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.548] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.548] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.551] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.551] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.551] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.551] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.551] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.552] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.552] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.552] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.552] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.553] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.553] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.553] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.553] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.554] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.554] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.555] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.555] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.555] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.555] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.556] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.556] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.556] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.556] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.557] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.557] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.557] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.557] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.557] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.558] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.558] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.558] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.558] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.558] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.559] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.559] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.559] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.559] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.559] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.560] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.560] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.561] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.561] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.564] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.565] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.565] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.565] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.565] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.566] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.566] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.566] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.566] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.566] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.566] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.567] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.567] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.567] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.567] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.567] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.568] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.568] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.568] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.568] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.568] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.569] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.569] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.569] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.569] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.569] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.570] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.570] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.570] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.570] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.570] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.571] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.571] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.571] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.571] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.572] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.572] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.572] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.572] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.572] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.573] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.573] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.573] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.573] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.573] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.574] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.574] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.576] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.576] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.576] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.576] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.576] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.577] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.577] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.577] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.577] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.578] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.579] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.579] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.579] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.579] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.579] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.580] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.583] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.583] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.583] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.584] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.584] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.584] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.584] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.584] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.584] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.585] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.585] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.590] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.590] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.590] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.591] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.591] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.592] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.592] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.592] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.592] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.593] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.593] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.593] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.593] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.593] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.593] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.594] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.594] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.594] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.595] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.595] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.595] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.595] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.595] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.595] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.596] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.597] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.597] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.597] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.597] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.597] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.597] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.598] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.598] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.598] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.598] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.598] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.599] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.599] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.599] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.599] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.599] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.600] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.600] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.600] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.600] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.600] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.600] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.601] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.601] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.601] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.601] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.601] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.612] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.612] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.613] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.613] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.613] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.613] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.613] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.614] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.614] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.614] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.614] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.614] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.614] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.615] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.615] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.615] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.615] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.615] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.615] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.616] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.616] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.616] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.616] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.616] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.617] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.617] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.617] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.617] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.617] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.617] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.618] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.618] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.618] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.618] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.618] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.619] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.619] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.619] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.619] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.619] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.619] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.620] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.620] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.620] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.620] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.620] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.621] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.621] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.621] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.621] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.621] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.621] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.622] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.624] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.624] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.625] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.625] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.625] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.625] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.625] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.625] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.626] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.626] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.626] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.627] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.628] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.628] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.628] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.628] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.628] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.628] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.629] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.629] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.629] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.629] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.629] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.630] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.630] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.630] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.630] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.630] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.630] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.631] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.631] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.631] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.631] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.631] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.632] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.632] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.632] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.632] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.632] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.632] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.633] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.633] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.633] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.633] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.633] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.633] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.634] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.634] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.635] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.635] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.635] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.635] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.635] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.636] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.636] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.636] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.636] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.636] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.637] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.637] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.637] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.637] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.637] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.637] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.638] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.638] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.638] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.640] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.641] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.641] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.641] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.641] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.641] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.642] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.642] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.643] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.644] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.644] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.645] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.645] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.645] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.645] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.645] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.645] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.646] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.646] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.646] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.646] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.646] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.646] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.647] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.647] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.647] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.647] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.647] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.647] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.648] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.648] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.648] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.648] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.648] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.648] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.649] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.649] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.649] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.649] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.649] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.649] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.650] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.650] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.650] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.650] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.650] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.651] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.651] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.651] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.651] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.651] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.651] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.652] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.652] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.652] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.652] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.652] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.652] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.653] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.653] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.653] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.714] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.714] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.714] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.714] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.715] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.715] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.715] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.715] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.715] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.716] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.716] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.717] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.717] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.720] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.721] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.721] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.721] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.721] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.722] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.722] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.722] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.722] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.723] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.723] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.723] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.723] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.723] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.723] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.724] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.724] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.724] ReadFile (in: hFile=0x1dc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0213.724] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0214.638] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0214.792] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\MpEngine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\mpengine.dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\MpEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\mpengine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0214.805] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\MpEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\mpengine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0214.805] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\MpEngine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\mpengine.dll"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe3226d0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa8cc80, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="MpEngine.dll", cAlternateFileName="")) returned 0x55e710 [0214.805] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe3226d0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa8cc80, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="MpEngine.dll", cAlternateFileName="")) returned 0 [0214.806] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0214.806] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\MpEngine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\mpengine.dll")) returned 0 [0214.806] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\MpEngine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\mpengine.dll")) returned 0x20 [0214.806] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd1d10, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="NisBase.vdm", cAlternateFileName="")) returned 1 [0214.807] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd3aa0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="NisFull.vdm", cAlternateFileName="")) returned 1 [0214.807] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd3aa0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="NisFull.vdm", cAlternateFileName="")) returned 0 [0214.807] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0214.807] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d64762e, dwReserved1=0x366c6c6c, cFileName="NisBackup", cAlternateFileName="NISBAC~1")) returned 1 [0214.808] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\NisBackup\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\nisbackup\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0214.808] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0214.808] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0214.808] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0214.808] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d64762e, dwReserved1=0x366c6c6c, cFileName="Updates", cAlternateFileName="")) returned 1 [0214.808] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\updates\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0214.808] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0214.809] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0214.809] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0214.809] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d64762e, dwReserved1=0x366c6c6c, cFileName="Updates", cAlternateFileName="")) returned 0 [0214.809] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0214.809] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c747075, dwReserved1=0x6c696576, cFileName="Features", cAlternateFileName="")) returned 1 [0214.809] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Features\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\features\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d64762e, dwReserved1=0x366c6c6c, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0214.810] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d64762e, dwReserved1=0x366c6c6c, cFileName="..", cAlternateFileName="")) returned 1 [0214.810] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d64762e, dwReserved1=0x366c6c6c, cFileName="..", cAlternateFileName="")) returned 0 [0214.811] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0214.811] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c747075, dwReserved1=0x6c696576, cFileName="LocalCopy", cAlternateFileName="LOCALC~1")) returned 1 [0214.811] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\localcopy\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d64762e, dwReserved1=0x366c6c6c, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0214.811] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d64762e, dwReserved1=0x366c6c6c, cFileName="..", cAlternateFileName="")) returned 1 [0214.811] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d64762e, dwReserved1=0x366c6c6c, cFileName="..", cAlternateFileName="")) returned 0 [0214.811] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0214.811] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c747075, dwReserved1=0x6c696576, cFileName="Network Inspection System", cAlternateFileName="NETWOR~1")) returned 1 [0214.811] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\network inspection system\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d64762e, dwReserved1=0x366c6c6c, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0214.811] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d64762e, dwReserved1=0x366c6c6c, cFileName="..", cAlternateFileName="")) returned 1 [0214.811] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d64762e, dwReserved1=0x366c6c6c, cFileName="Support", cAlternateFileName="")) returned 1 [0214.811] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System\\Support\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\network inspection system\\support\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf926e663, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0214.812] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf926e663, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0214.812] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf926e663, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf926e663, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3ae0e073, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x64b7, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName="NisLog.txt", cAlternateFileName="")) returned 1 [0214.812] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf926e663, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf926e663, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3ae0e073, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x64b7, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName="NisLog.txt", cAlternateFileName="")) returned 0 [0214.812] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0214.812] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d64762e, dwReserved1=0x366c6c6c, cFileName="Support", cAlternateFileName="")) returned 0 [0214.812] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0214.813] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c747075, dwReserved1=0x6c696576, cFileName="Quarantine", cAlternateFileName="QUARAN~1")) returned 1 [0214.813] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\quarantine\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d747874, dwReserved1=0x366c6c6c, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0214.814] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d747874, dwReserved1=0x366c6c6c, cFileName="..", cAlternateFileName="")) returned 1 [0214.814] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d747874, dwReserved1=0x366c6c6c, cFileName="..", cAlternateFileName="")) returned 0 [0214.814] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0214.814] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c747075, dwReserved1=0x6c696576, cFileName="Scans", cAlternateFileName="")) returned 1 [0214.814] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d747874, dwReserved1=0x366c6c6c, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0214.816] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d747874, dwReserved1=0x366c6c6c, cFileName="..", cAlternateFileName="")) returned 1 [0214.817] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d747874, dwReserved1=0x366c6c6c, cFileName="CleanFileTelemetry", cAlternateFileName="CLEANF~1")) returned 1 [0214.817] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanFileTelemetry\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanfiletelemetry\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0214.817] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0214.817] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0214.817] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0214.817] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d747874, dwReserved1=0x366c6c6c, cFileName="CleanStore", cAlternateFileName="CLEANS~1")) returned 1 [0214.817] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0214.818] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0214.818] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName="Entries", cAlternateFileName="")) returned 1 [0214.818] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Entries\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\entries\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0214.819] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0214.819] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0214.819] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0214.819] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName="ResourceData", cAlternateFileName="RESOUR~1")) returned 1 [0214.819] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\ResourceData\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\resourcedata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0214.819] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0214.819] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0214.819] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0214.819] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName="Resources", cAlternateFileName="RESOUR~2")) returned 1 [0214.819] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Resources\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\resources\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0214.820] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0214.820] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0214.820] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0214.820] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName="Resources", cAlternateFileName="RESOUR~2")) returned 0 [0214.820] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0214.820] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd06b4edd, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74617365, dwReserved1=0x366c6c61, cFileName="History", cAlternateFileName="")) returned 1 [0214.820] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0214.822] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0214.822] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd06b4edd, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x36000630, cFileName="CacheManager", cAlternateFileName="CACHEM~1")) returned 1 [0214.822] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd06b4edd, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0214.823] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd06b4edd, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0214.823] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd06b4edd, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x4e000, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="MpScanCache-0.bin", cAlternateFileName="MPSCAN~1.BIN")) returned 1 [0214.824] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0214.824] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0214.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0214.824] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0214.824] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0214.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0214.824] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpScanCache-0.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpscancache-0.bin")) returned 0x20 [0214.824] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpScanCache-0.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpscancache-0.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0214.825] GetLastError () returned 0x5 [0214.825] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpScanCache-0.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpscancache-0.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1dc [0214.827] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpScanCache-0.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpscancache-0.bin"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpScanCache-0.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpscancache-0.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0214.827] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpScanCache-0.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpscancache-0.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0214.827] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpScanCache-0.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpscancache-0.bin"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd06b4edd, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x4e000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="MpScanCache-0.bin", cAlternateFileName="MPSCAN~1.BIN")) returned 0x55e590 [0214.827] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd06b4edd, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x4e000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="MpScanCache-0.bin", cAlternateFileName="MPSCAN~1.BIN")) returned 0 [0214.827] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0214.827] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpScanCache-0.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpscancache-0.bin")) returned 1 [0214.828] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpScanCache-0.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpscancache-0.bin")) returned 0xffffffff [0214.828] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd06b4edd, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x4e000, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="MpScanCache-0.bin", cAlternateFileName="MPSCAN~1.BIN")) returned 0 [0214.828] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0214.828] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65686361, dwReserved1=0x622e302d, cFileName="Mput", cAlternateFileName="")) returned 1 [0214.828] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0214.828] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0214.828] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="MputHistory", cAlternateFileName="MPUTHI~1")) returned 1 [0214.828] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0214.830] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0214.830] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="00", cAlternateFileName="")) returned 1 [0214.831] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\00\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\00\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0214.831] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.831] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="192", cAlternateFileName="")) returned 1 [0214.832] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="192", cAlternateFileName="")) returned 0 [0214.832] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0214.832] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="01", cAlternateFileName="")) returned 1 [0214.832] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\01\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\01\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0214.833] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.833] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="198", cAlternateFileName="")) returned 1 [0214.833] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="263", cAlternateFileName="")) returned 1 [0214.834] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="271", cAlternateFileName="")) returned 1 [0214.834] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="271", cAlternateFileName="")) returned 0 [0214.834] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0214.834] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="02", cAlternateFileName="")) returned 1 [0214.834] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\02\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\02\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0214.835] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.835] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="100015", cAlternateFileName="")) returned 1 [0214.836] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="109004", cAlternateFileName="")) returned 1 [0214.836] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="303", cAlternateFileName="")) returned 1 [0214.836] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="303", cAlternateFileName="")) returned 0 [0214.836] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0214.837] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="03", cAlternateFileName="")) returned 1 [0214.837] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\03\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\03\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0214.837] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.837] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="324", cAlternateFileName="")) returned 1 [0214.837] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="324", cAlternateFileName="")) returned 0 [0214.837] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0214.838] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="04", cAlternateFileName="")) returned 1 [0214.838] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\04\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\04\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0214.838] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.838] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="109005", cAlternateFileName="")) returned 1 [0214.839] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="259", cAlternateFileName="")) returned 1 [0214.839] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="261", cAlternateFileName="")) returned 1 [0214.840] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="261", cAlternateFileName="")) returned 0 [0214.840] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0214.840] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="05", cAlternateFileName="")) returned 1 [0214.840] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\05\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\05\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0214.890] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.890] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="191", cAlternateFileName="")) returned 1 [0214.890] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="199", cAlternateFileName="")) returned 1 [0214.891] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="317", cAlternateFileName="")) returned 1 [0214.891] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="317", cAlternateFileName="")) returned 0 [0214.891] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0214.891] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="07", cAlternateFileName="")) returned 1 [0214.891] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\07\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\07\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0214.892] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.892] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="273", cAlternateFileName="")) returned 1 [0214.893] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="273", cAlternateFileName="")) returned 0 [0214.893] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0214.893] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="09", cAlternateFileName="")) returned 1 [0214.893] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\09\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\09\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0214.894] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.894] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="287", cAlternateFileName="")) returned 1 [0214.894] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="287", cAlternateFileName="")) returned 0 [0214.894] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0214.894] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="10", cAlternateFileName="")) returned 1 [0214.894] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\10\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\10\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0214.895] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.895] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="197", cAlternateFileName="")) returned 1 [0214.895] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="267", cAlternateFileName="")) returned 1 [0214.895] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="286", cAlternateFileName="")) returned 1 [0214.896] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="286", cAlternateFileName="")) returned 0 [0214.896] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0214.896] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="11", cAlternateFileName="")) returned 1 [0214.896] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\11\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\11\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0214.896] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.896] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="200", cAlternateFileName="")) returned 1 [0214.897] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="200", cAlternateFileName="")) returned 0 [0214.897] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0214.897] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="12", cAlternateFileName="")) returned 1 [0214.897] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\12\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\12\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0214.898] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.898] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="194", cAlternateFileName="")) returned 1 [0214.898] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="194", cAlternateFileName="")) returned 0 [0214.898] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0214.898] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="13", cAlternateFileName="")) returned 1 [0214.898] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\13\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\13\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0214.899] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.899] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="278", cAlternateFileName="")) returned 1 [0214.900] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="278", cAlternateFileName="")) returned 0 [0214.900] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0214.900] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="14", cAlternateFileName="")) returned 1 [0214.900] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\14\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\14\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0214.901] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.901] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="9664", cAlternateFileName="")) returned 1 [0214.901] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="9664", cAlternateFileName="")) returned 0 [0214.901] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0214.901] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="15", cAlternateFileName="")) returned 1 [0214.901] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\15\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\15\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0214.902] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.902] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="196", cAlternateFileName="")) returned 1 [0214.902] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="262", cAlternateFileName="")) returned 1 [0214.903] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="288", cAlternateFileName="")) returned 1 [0214.903] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="288", cAlternateFileName="")) returned 0 [0214.904] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0214.904] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="17", cAlternateFileName="")) returned 1 [0214.904] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\17\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\17\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0214.904] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.904] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="109001", cAlternateFileName="")) returned 1 [0214.904] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="193", cAlternateFileName="")) returned 1 [0214.905] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="300", cAlternateFileName="")) returned 1 [0214.905] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="300", cAlternateFileName="")) returned 0 [0214.905] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0214.905] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="18", cAlternateFileName="")) returned 1 [0214.905] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\18\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\18\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0214.906] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.906] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="107001", cAlternateFileName="")) returned 1 [0214.906] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="107002", cAlternateFileName="")) returned 1 [0214.906] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="109002", cAlternateFileName="")) returned 1 [0214.907] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="195", cAlternateFileName="")) returned 1 [0214.907] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="195", cAlternateFileName="")) returned 0 [0214.907] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0214.908] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="19", cAlternateFileName="")) returned 1 [0214.908] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\19\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\19\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0214.908] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.908] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="15038", cAlternateFileName="")) returned 1 [0214.908] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="266", cAlternateFileName="")) returned 1 [0214.909] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="272", cAlternateFileName="")) returned 1 [0214.909] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="328", cAlternateFileName="")) returned 1 [0214.909] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="328", cAlternateFileName="")) returned 0 [0214.909] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0214.910] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="20", cAlternateFileName="")) returned 1 [0214.910] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\20\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\20\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0214.910] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.911] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="189", cAlternateFileName="")) returned 1 [0214.911] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="189", cAlternateFileName="")) returned 0 [0214.911] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0214.911] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="21", cAlternateFileName="")) returned 1 [0214.911] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\21\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\21\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0214.912] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.912] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="100017", cAlternateFileName="")) returned 1 [0214.912] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="260", cAlternateFileName="")) returned 1 [0214.913] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="260", cAlternateFileName="")) returned 0 [0214.913] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0214.913] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="22", cAlternateFileName="")) returned 1 [0214.913] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\22\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\22\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0214.914] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.914] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="100018", cAlternateFileName="")) returned 1 [0214.914] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="109003", cAlternateFileName="")) returned 1 [0214.915] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="109006", cAlternateFileName="")) returned 1 [0214.915] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="323", cAlternateFileName="")) returned 1 [0214.915] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="323", cAlternateFileName="")) returned 0 [0214.916] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0214.916] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x36000630, cFileName="22", cAlternateFileName="")) returned 0 [0214.916] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0214.916] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="MputHistory", cAlternateFileName="MPUTHI~1")) returned 0 [0214.916] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0214.916] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x622e302d, cFileName="RemCheck", cAlternateFileName="")) returned 1 [0214.916] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\RemCheck\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\remcheck\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0214.916] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0214.916] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0214.916] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0214.917] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x622e302d, cFileName="Results", cAlternateFileName="")) returned 1 [0214.917] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0214.917] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0214.917] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0214.918] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0214.918] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd06b4edd, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x622e302d, cFileName="Service", cAlternateFileName="")) returned 1 [0214.918] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0214.918] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0214.918] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x48, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="Unknown.Log", cAlternateFileName="")) returned 1 [0214.918] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0214.918] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0214.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0214.919] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0214.919] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0214.919] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0214.920] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log")) returned 0x20 [0214.920] VirtualAlloc (lpAddress=0x1f40000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f40000 [0214.921] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0214.921] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0214.921] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x48, lpOverlapped=0x0) returned 1 [0214.923] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x48, lpOverlapped=0x0) returned 1 [0214.924] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0214.924] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0214.924] CloseHandle (hObject=0x1d8) returned 1 [0214.924] CloseHandle (hObject=0x1e4) returned 1 [0214.926] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0214.926] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0214.926] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x48, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Unknown.Log", cAlternateFileName="")) returned 0x55e790 [0214.926] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x48, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Unknown.Log", cAlternateFileName="")) returned 0 [0214.927] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0214.927] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log")) returned 1 [0214.928] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log")) returned 0xffffffff [0214.928] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x48, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="Unknown.Log", cAlternateFileName="")) returned 0 [0214.928] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0214.928] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676f4c2e, dwReserved1=0x622e302d, cFileName="Store", cAlternateFileName="")) returned 1 [0214.928] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0214.931] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0214.931] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 0 [0214.931] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0214.931] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676f4c2e, dwReserved1=0x622e302d, cFileName="Store", cAlternateFileName="")) returned 0 [0214.931] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0214.931] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6567616b, dwReserved1=0x366c6c72, cFileName="MetaStore", cAlternateFileName="METAST~1")) returned 1 [0214.931] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676f4c2e, dwReserved1=0x622e302d, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0214.931] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676f4c2e, dwReserved1=0x622e302d, cFileName="..", cAlternateFileName="")) returned 1 [0214.932] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676f4c2e, dwReserved1=0x622e302d, cFileName="1", cAlternateFileName="")) returned 1 [0214.932] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\1\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\1\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0214.932] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0214.933] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 1 [0214.933] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0214.933] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0214.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0214.933] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0214.933] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0214.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0214.933] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\1\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\1\\0000000000000000.idx")) returned 0x20 [0214.934] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\1\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\1\\0000000000000000.idx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0214.934] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\1\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\1\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0214.935] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x50, lpOverlapped=0x0) returned 1 [0214.936] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x50, lpOverlapped=0x0) returned 1 [0214.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0214.937] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0214.937] CloseHandle (hObject=0x1e4) returned 1 [0214.937] CloseHandle (hObject=0x1d8) returned 1 [0214.943] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\1\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\1\\0000000000000000.idx"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\1\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\1\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0214.943] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\1\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\1\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0214.943] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\1\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\1\\0000000000000000.idx"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 0x55e910 [0214.944] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 0 [0214.944] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0214.944] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\1\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\1\\0000000000000000.idx")) returned 1 [0214.945] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\1\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\1\\0000000000000000.idx")) returned 0xffffffff [0214.945] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 0 [0214.945] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0214.945] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30303030, dwReserved1=0x30303030, cFileName="2", cAlternateFileName="")) returned 1 [0214.945] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\2\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\2\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0214.946] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0214.946] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 1 [0214.946] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0214.946] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0214.946] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0214.946] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0214.946] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0214.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0214.947] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\2\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\2\\0000000000000000.idx")) returned 0x20 [0214.947] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\2\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\2\\0000000000000000.idx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0214.947] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\2\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\2\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0214.948] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x50, lpOverlapped=0x0) returned 1 [0214.949] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x50, lpOverlapped=0x0) returned 1 [0214.951] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0214.951] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0214.951] CloseHandle (hObject=0x1d8) returned 1 [0214.951] CloseHandle (hObject=0x1e4) returned 1 [0214.955] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\2\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\2\\0000000000000000.idx"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\2\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\2\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0214.955] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\2\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\2\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0214.955] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\2\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\2\\0000000000000000.idx"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 0x55e390 [0214.955] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 0 [0214.955] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0214.956] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\2\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\2\\0000000000000000.idx")) returned 1 [0214.957] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\2\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\2\\0000000000000000.idx")) returned 0xffffffff [0214.957] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 0 [0214.957] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0214.957] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30303030, dwReserved1=0x30303030, cFileName="3", cAlternateFileName="")) returned 1 [0214.957] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\3\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\3\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0214.957] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0214.957] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 1 [0214.957] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0214.958] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0214.958] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0214.958] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0214.958] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0214.958] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0214.958] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\3\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\3\\0000000000000000.idx")) returned 0x20 [0214.958] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\3\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\3\\0000000000000000.idx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0214.958] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\3\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\3\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0214.959] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x50, lpOverlapped=0x0) returned 1 [0214.960] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x50, lpOverlapped=0x0) returned 1 [0214.961] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0214.961] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0214.961] CloseHandle (hObject=0x1e4) returned 1 [0214.961] CloseHandle (hObject=0x1d8) returned 1 [0214.962] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\3\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\3\\0000000000000000.idx"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\3\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\3\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0214.962] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\3\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\3\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0214.963] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\3\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\3\\0000000000000000.idx"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 0x55e610 [0214.963] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 0 [0214.963] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0214.963] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\3\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\3\\0000000000000000.idx")) returned 1 [0214.964] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\3\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\3\\0000000000000000.idx")) returned 0xffffffff [0214.964] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 0 [0214.964] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0214.964] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30303030, dwReserved1=0x30303030, cFileName="4", cAlternateFileName="")) returned 1 [0214.964] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\4\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\4\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0214.964] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0214.964] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 1 [0214.965] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0214.965] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0214.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0214.965] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0214.965] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0214.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0214.965] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\4\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\4\\0000000000000000.idx")) returned 0x20 [0214.982] VirtualAlloc (lpAddress=0x1f44000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f44000 [0214.983] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\4\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\4\\0000000000000000.idx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0214.983] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\4\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\4\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0214.983] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x50, lpOverlapped=0x0) returned 1 [0214.985] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x50, lpOverlapped=0x0) returned 1 [0214.986] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0214.986] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0214.986] CloseHandle (hObject=0x1d8) returned 1 [0214.986] CloseHandle (hObject=0x1e4) returned 1 [0214.991] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\4\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\4\\0000000000000000.idx"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\4\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\4\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0214.991] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\4\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\4\\0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0214.991] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\4\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\4\\0000000000000000.idx"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 0x55e190 [0214.991] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 0 [0214.991] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0214.992] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\4\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\4\\0000000000000000.idx")) returned 1 [0214.993] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\4\\0000000000000000.idx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\4\\0000000000000000.idx")) returned 0xffffffff [0214.993] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a50b7ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6520aed4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="0000000000000000.idx", cAlternateFileName="000000~1.IDX")) returned 0 [0214.993] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0214.993] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30303030, dwReserved1=0x30303030, cFileName="4", cAlternateFileName="")) returned 0 [0214.993] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0214.993] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa2b1a6, dwReserved0=0x6567616b, dwReserved1=0x366c6c72, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin", cAlternateFileName="MPCACH~1.BIN")) returned 1 [0214.993] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0214.993] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0214.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0214.993] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0214.993] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0214.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0214.994] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpcache-9899dbe4d8bb3d253eb4f285757bebaf1581b50f.bin")) returned 0x20 [0214.994] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpcache-9899dbe4d8bb3d253eb4f285757bebaf1581b50f.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0214.994] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpcache-9899dbe4d8bb3d253eb4f285757bebaf1581b50f.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0214.995] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0214.998] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0214.999] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.000] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.000] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.001] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.001] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.001] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.001] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.002] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.002] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.002] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.002] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.002] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.003] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.003] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.003] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.003] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.003] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.003] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.004] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.004] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.004] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.004] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.004] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.005] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.005] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.005] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.005] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.006] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.006] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.010] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.010] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.010] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.010] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.011] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.011] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.011] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.011] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.011] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.011] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.012] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.012] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.012] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.012] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.012] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.074] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.074] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.075] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.075] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.075] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.075] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.076] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.076] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.076] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.076] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.077] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.077] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.077] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.077] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.077] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.077] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.078] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.078] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.078] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.078] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.079] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.079] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.079] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.079] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.080] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.080] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.080] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.080] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.080] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.081] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.081] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.081] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.081] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.081] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.082] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.082] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.082] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.082] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.083] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.083] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.083] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.083] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.083] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.084] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.084] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.084] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.084] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.089] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.089] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.089] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.090] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.090] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.090] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.090] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.098] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.098] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.098] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.098] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.098] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.099] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.099] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.099] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.099] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.099] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.100] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.100] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.100] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.100] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.101] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.101] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.101] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.101] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.101] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.102] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.102] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.102] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.102] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.102] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.103] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.103] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.103] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.103] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.104] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.104] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.105] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.105] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.105] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.106] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.106] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.106] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.106] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.107] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.107] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.107] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.107] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.108] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.108] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.108] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.108] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.108] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.109] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.109] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.109] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.109] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.109] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.110] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.110] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.110] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.110] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.110] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.111] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.111] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.113] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.114] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.114] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.114] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.114] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.114] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.115] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.115] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.115] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.115] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.116] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.116] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.116] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.116] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.116] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.117] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.117] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.117] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.117] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.118] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.118] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.118] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.118] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.118] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.119] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.119] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.119] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.119] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.120] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.120] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.120] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.120] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.120] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.121] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.121] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.121] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.121] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.121] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.122] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.122] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.122] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.123] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.123] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.123] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.123] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.123] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.124] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.124] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.124] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.124] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.125] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.125] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.125] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.125] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.125] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.126] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.126] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.126] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.126] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.126] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.127] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.127] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.127] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.128] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.129] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.129] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.129] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.129] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.130] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.130] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.131] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.131] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.131] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.131] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.132] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.132] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.132] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.132] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.133] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.133] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.133] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.133] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.133] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.134] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.134] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.134] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.134] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.134] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.135] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.135] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.135] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.135] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.136] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.136] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.136] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.136] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.136] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.137] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.137] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.137] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.140] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.140] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.141] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.141] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.141] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.141] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.142] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.142] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.142] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.142] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.142] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.143] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.143] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.143] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.143] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.143] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.144] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.144] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.144] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.144] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.144] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.145] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.145] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.145] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.145] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.145] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.146] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.146] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.147] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.148] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.149] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.149] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.149] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.149] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.150] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.150] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.150] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.150] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.150] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.151] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.151] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.151] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.151] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.151] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.152] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.152] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.152] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.152] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.152] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.153] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.153] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.154] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.154] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.154] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.155] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.155] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.155] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.155] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.155] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.156] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.156] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.156] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.156] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.156] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.157] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.157] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.157] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.157] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.158] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.158] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.158] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.158] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.158] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.159] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.159] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.159] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.159] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.159] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.160] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.160] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.160] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.160] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.160] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.161] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.161] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.161] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.161] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.162] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.162] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.162] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.162] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.164] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.164] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.164] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.164] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.165] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.165] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.165] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.165] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.166] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.166] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.166] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.166] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.166] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.167] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.167] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.167] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.167] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.168] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.168] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.168] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.168] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.168] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.169] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.169] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.169] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.170] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.170] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.170] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.170] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.170] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.171] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.171] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.171] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.171] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.172] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.172] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.172] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.173] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.173] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.174] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.174] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.174] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.174] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.174] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.175] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.175] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.175] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.175] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.175] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.176] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.176] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.176] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.176] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.177] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.177] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.177] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.177] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.177] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.178] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.178] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.178] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.178] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.178] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.179] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.182] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.182] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.182] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.182] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.183] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.183] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.183] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.183] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.183] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.184] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.184] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.184] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.186] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.186] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.187] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.187] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.187] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.187] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.188] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.188] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.188] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.188] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.188] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.189] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.189] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.189] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.189] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.190] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.190] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.190] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.190] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.190] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.191] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.191] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.191] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.191] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.191] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.192] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.192] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.192] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.192] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.193] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.193] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.193] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.193] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.194] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.194] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.194] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.194] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.194] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.195] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.195] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.195] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.195] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.196] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.196] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.196] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.196] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.196] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.197] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.197] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.197] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.197] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.198] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.200] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.200] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.200] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.201] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.201] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.201] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.201] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.202] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.202] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.202] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.202] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.202] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.203] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.203] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.203] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.203] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.203] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.204] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.204] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.204] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0215.204] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.347] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.511] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpcache-9899dbe4d8bb3d253eb4f285757bebaf1581b50f.bin"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpcache-9899dbe4d8bb3d253eb4f285757bebaf1581b50f.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0216.512] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpcache-9899dbe4d8bb3d253eb4f285757bebaf1581b50f.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0216.521] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpcache-9899dbe4d8bb3d253eb4f285757bebaf1581b50f.bin"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa2b1a6, dwReserved0=0x550370, dwReserved1=0xf, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin", cAlternateFileName="MPCACH~1.BIN")) returned 0x55e8d0 [0216.522] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa2b1a6, dwReserved0=0x550370, dwReserved1=0xf, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin", cAlternateFileName="MPCACH~1.BIN")) returned 0 [0216.522] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0216.522] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpcache-9899dbe4d8bb3d253eb4f285757bebaf1581b50f.bin")) returned 1 [0216.527] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpcache-9899dbe4d8bb3d253eb4f285757bebaf1581b50f.bin")) returned 0xffffffff [0216.527] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf90caa0a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x18ea5e4, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.5B", cAlternateFileName="MPCACH~1.5B")) returned 1 [0216.529] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf89c9d40, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf89c9d40, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8ceae5e, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x6a1ab6c, dwReserved0=0x620064, dwReserved1=0x340065, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.67", cAlternateFileName="MPCACH~1.67")) returned 1 [0216.530] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xf8d374fb, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8d374fb, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8d83941, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x3b14000, dwReserved0=0x620064, dwReserved1=0x340065, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.79", cAlternateFileName="MPCACH~1.79")) returned 1 [0216.531] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xf8da9a4e, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8da9a4e, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8da9a4e, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x529000, dwReserved0=0x620064, dwReserved1=0x340065, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.7C", cAlternateFileName="MPCACH~1.7C")) returned 1 [0216.532] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8e8ea4a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8e8ea4a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8e8ea4a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x3cff18, dwReserved0=0x620064, dwReserved1=0x340065, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.7E", cAlternateFileName="MPCACH~1.7E")) returned 1 [0216.533] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8fe5e00, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8fe5e00, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf900c0a9, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xcfdc43, dwReserved0=0x620064, dwReserved1=0x340065, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.80", cAlternateFileName="MPCACH~1.80")) returned 1 [0216.533] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x1d7f38, dwReserved0=0x620064, dwReserved1=0x340065, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.83", cAlternateFileName="MPCACH~1.83")) returned 1 [0216.534] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf900c0a9, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf900c0a9, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf900c0a9, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x1a3a61, dwReserved0=0x620064, dwReserved1=0x340065, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.87", cAlternateFileName="MPCACH~1.87")) returned 1 [0216.535] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf90582ee, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf90582ee, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x358f2f, dwReserved0=0x620064, dwReserved1=0x340065, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.A0", cAlternateFileName="MPCACH~1.A0")) returned 1 [0216.536] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x5fff9, dwReserved0=0x620064, dwReserved1=0x340065, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.CB", cAlternateFileName="MPCACH~1.CB")) returned 1 [0216.537] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x441a1, dwReserved0=0x620064, dwReserved1=0x340065, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.CC", cAlternateFileName="MPCACH~1.CC")) returned 1 [0216.538] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x63bd6e5a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x70, dwReserved0=0x620064, dwReserved1=0x340065, cFileName="MpDiag.bin", cAlternateFileName="")) returned 1 [0216.539] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0216.539] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.541] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0216.541] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0216.541] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0216.542] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MpDiag.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpdiag.bin")) returned 0x20 [0216.542] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MpDiag.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpdiag.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.543] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MpDiag.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpdiag.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0216.543] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x70, lpOverlapped=0x0) returned 1 [0216.545] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x70, lpOverlapped=0x0) returned 1 [0216.546] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0216.546] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0216.546] CloseHandle (hObject=0x1e0) returned 1 [0216.546] CloseHandle (hObject=0x1d4) returned 1 [0216.551] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MpDiag.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpdiag.bin"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MpDiag.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpdiag.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0216.551] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MpDiag.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpdiag.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0216.552] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MpDiag.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpdiag.bin"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x63bd6e5a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x70, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="MpDiag.bin", cAlternateFileName="")) returned 0x55e650 [0216.552] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x63bd6e5a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x70, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="MpDiag.bin", cAlternateFileName="")) returned 0 [0216.552] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0216.552] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MpDiag.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpdiag.bin")) returned 1 [0216.553] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MpDiag.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\mpdiag.bin")) returned 0xffffffff [0216.554] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RtSigs", cAlternateFileName="")) returned 1 [0216.554] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\RtSigs\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\rtsigs\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0216.554] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0216.554] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="Data", cAlternateFileName="")) returned 1 [0216.554] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\RtSigs\\Data\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\rtsigs\\data\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x460034, dwReserved1=0x380032, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0216.555] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x460034, dwReserved1=0x380032, cFileName="..", cAlternateFileName="")) returned 1 [0216.555] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x460034, dwReserved1=0x380032, cFileName="..", cAlternateFileName="")) returned 0 [0216.555] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0216.555] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="Data", cAlternateFileName="")) returned 0 [0216.555] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0216.555] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RtSigs", cAlternateFileName="")) returned 0 [0216.555] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0216.556] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x82987280, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x82987280, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x396e6962, dwReserved1=0x45424439, cFileName="Support", cAlternateFileName="")) returned 1 [0216.556] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x82987280, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x82987280, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0216.564] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x82987280, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x82987280, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.564] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd04c5003, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd04c5003, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x8436108b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPDetection-02112021-121950.log", cAlternateFileName="MPDETE~1.LOG")) returned 1 [0216.565] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0216.565] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0216.565] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0216.565] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0216.565] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPDetection-02112021-121950.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpdetection-02112021-121950.log")) returned 0x20 [0216.566] VirtualAlloc (lpAddress=0x1f48000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f48000 [0216.566] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPDetection-02112021-121950.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpdetection-02112021-121950.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0216.567] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPDetection-02112021-121950.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpdetection-02112021-121950.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.567] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x144, lpOverlapped=0x0) returned 1 [0216.569] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x144, lpOverlapped=0x0) returned 1 [0216.571] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0216.571] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0216.571] CloseHandle (hObject=0x1d4) returned 1 [0216.571] CloseHandle (hObject=0x1e0) returned 1 [0216.572] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPDetection-02112021-121950.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpdetection-02112021-121950.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPDetection-02112021-121950.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpdetection-02112021-121950.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0216.573] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPDetection-02112021-121950.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpdetection-02112021-121950.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0216.573] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPDetection-02112021-121950.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpdetection-02112021-121950.log"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd04c5003, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd04c5003, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x8436108b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="MPDetection-02112021-121950.log", cAlternateFileName="MPDETE~1.LOG")) returned 0x55e8d0 [0216.574] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd04c5003, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd04c5003, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x8436108b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="MPDetection-02112021-121950.log", cAlternateFileName="MPDETE~1.LOG")) returned 0 [0216.574] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0216.574] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPDetection-02112021-121950.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpdetection-02112021-121950.log")) returned 1 [0216.575] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPDetection-02112021-121950.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpdetection-02112021-121950.log")) returned 0xffffffff [0216.576] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd04c5003, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd04c5003, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x8436108b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="MPLog-02112021-121950.log", cAlternateFileName="MPLOG-~1.LOG")) returned 1 [0216.576] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0216.576] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0216.576] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0216.576] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0216.577] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-02112021-121950.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-02112021-121950.log")) returned 0x20 [0216.577] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-02112021-121950.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-02112021-121950.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.578] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-02112021-121950.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-02112021-121950.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0216.578] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x682, lpOverlapped=0x0) returned 1 [0216.580] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x682, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x682, lpOverlapped=0x0) returned 1 [0216.581] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0216.581] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0216.581] CloseHandle (hObject=0x1e0) returned 1 [0216.582] CloseHandle (hObject=0x1d4) returned 1 [0216.583] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-02112021-121950.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-02112021-121950.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-02112021-121950.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-02112021-121950.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0216.584] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-02112021-121950.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-02112021-121950.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0216.584] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-02112021-121950.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-02112021-121950.log"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd04c5003, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd04c5003, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x8436108b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="MPLog-02112021-121950.log", cAlternateFileName="MPLOG-~1.LOG")) returned 0x55e410 [0216.584] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd04c5003, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd04c5003, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x8436108b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="MPLog-02112021-121950.log", cAlternateFileName="MPLOG-~1.LOG")) returned 0 [0216.584] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0216.584] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-02112021-121950.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-02112021-121950.log")) returned 1 [0216.586] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-02112021-121950.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-02112021-121950.log")) returned 0xffffffff [0216.586] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0583c11, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd0583c11, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x29ae9595, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="MpWppTracing-02112021-121950-00000003-ffffffff.bin", cAlternateFileName="MPWPPT~1.BIN")) returned 1 [0216.586] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0216.586] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.586] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0216.586] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0216.586] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.586] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0216.587] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-121950-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-121950-00000003-ffffffff.bin")) returned 0x2020 [0216.587] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-121950-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-121950-00000003-ffffffff.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0216.587] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-121950-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-121950-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.588] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.590] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.592] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.592] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.592] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.593] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.593] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.593] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.593] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.593] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.594] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.594] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.594] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.594] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.594] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.595] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.595] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.595] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.595] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0216.595] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0216.595] CloseHandle (hObject=0x1d4) returned 1 [0216.595] CloseHandle (hObject=0x1e0) returned 1 [0216.597] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-121950-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-121950-00000003-ffffffff.bin"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-121950-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-121950-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0216.598] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-121950-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-121950-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0216.598] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-121950-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-121950-00000003-ffffffff.bin"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0583c11, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd0583c11, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x29ae9595, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="MpWppTracing-02112021-121950-00000003-ffffffff.bin", cAlternateFileName="MPWPPT~1.BIN")) returned 0x55e650 [0216.598] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0583c11, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd0583c11, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x29ae9595, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="MpWppTracing-02112021-121950-00000003-ffffffff.bin", cAlternateFileName="MPWPPT~1.BIN")) returned 0 [0216.598] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0216.598] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-121950-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-121950-00000003-ffffffff.bin")) returned 1 [0216.600] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-121950-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-121950-00000003-ffffffff.bin")) returned 0xffffffff [0216.600] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34952889, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x34952889, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63bd6e5a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="MpWppTracing-02112021-122238-00000003-ffffffff.bin", cAlternateFileName="MPWPPT~2.BIN")) returned 1 [0216.600] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0216.600] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0216.600] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0216.600] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0216.600] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-122238-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-122238-00000003-ffffffff.bin")) returned 0x2020 [0216.609] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-122238-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-122238-00000003-ffffffff.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.610] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-122238-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-122238-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0216.610] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.613] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.614] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.615] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.615] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.615] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.615] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.615] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.616] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.616] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.616] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.616] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.616] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.616] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.617] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.617] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.617] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.617] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.617] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.617] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.618] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.618] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.618] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.618] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.618] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0216.618] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0216.618] CloseHandle (hObject=0x1e0) returned 1 [0216.618] CloseHandle (hObject=0x1d4) returned 1 [0216.621] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-122238-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-122238-00000003-ffffffff.bin"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-122238-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-122238-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0216.622] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-122238-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-122238-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0216.622] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-122238-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-122238-00000003-ffffffff.bin"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34952889, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x34952889, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63bd6e5a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="MpWppTracing-02112021-122238-00000003-ffffffff.bin", cAlternateFileName="MPWPPT~2.BIN")) returned 0x55e410 [0216.622] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34952889, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x34952889, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63bd6e5a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="MpWppTracing-02112021-122238-00000003-ffffffff.bin", cAlternateFileName="MPWPPT~2.BIN")) returned 0 [0216.622] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0216.623] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-122238-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-122238-00000003-ffffffff.bin")) returned 1 [0216.624] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-122238-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-122238-00000003-ffffffff.bin")) returned 0xffffffff [0216.624] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82987280, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x82987280, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8431498e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="MpWppTracing-02112021-124618-00000003-ffffffff.bin", cAlternateFileName="MPWPPT~3.BIN")) returned 1 [0216.624] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0216.624] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0216.625] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0216.625] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0216.625] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-124618-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-124618-00000003-ffffffff.bin")) returned 0x2020 [0216.625] VirtualAlloc (lpAddress=0x1f4c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f4c000 [0216.626] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-124618-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-124618-00000003-ffffffff.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0216.626] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-124618-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-124618-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.626] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.628] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.629] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0216.629] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0216.629] CloseHandle (hObject=0x1d4) returned 1 [0216.629] CloseHandle (hObject=0x1e0) returned 1 [0216.630] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-124618-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-124618-00000003-ffffffff.bin"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-124618-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-124618-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0216.631] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-124618-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-124618-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0216.631] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-124618-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-124618-00000003-ffffffff.bin"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82987280, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x82987280, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8431498e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="MpWppTracing-02112021-124618-00000003-ffffffff.bin", cAlternateFileName="MPWPPT~3.BIN")) returned 0x55e650 [0216.631] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82987280, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x82987280, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8431498e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="MpWppTracing-02112021-124618-00000003-ffffffff.bin", cAlternateFileName="MPWPPT~3.BIN")) returned 0 [0216.631] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0216.631] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-124618-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-124618-00000003-ffffffff.bin")) returned 1 [0216.633] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MpWppTracing-02112021-124618-00000003-ffffffff.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mpwpptracing-02112021-124618-00000003-ffffffff.bin")) returned 0xffffffff [0216.633] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82987280, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x82987280, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8431498e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="MpWppTracing-02112021-124618-00000003-ffffffff.bin", cAlternateFileName="MPWPPT~3.BIN")) returned 0 [0216.633] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0216.633] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x82987280, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x82987280, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x396e6962, dwReserved1=0x45424439, cFileName="Support", cAlternateFileName="")) returned 0 [0216.633] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0216.633] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73656e69, dwReserved1=0x74636570, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1 [0216.633] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Live\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows live\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e696361, dwReserved1=0x32302d67, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0216.633] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e696361, dwReserved1=0x32302d67, cFileName="..", cAlternateFileName="")) returned 1 [0216.634] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3731a3a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973af366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1231, dwReserved0=0x6e696361, dwReserved1=0x32302d67, cFileName="WLive48x48.png", cAlternateFileName="WLIVE4~1.PNG")) returned 1 [0216.635] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0216.635] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0216.635] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0216.635] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0216.635] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Live\\WLive48x48.png" (normalized: "c:\\users\\all users\\microsoft\\windows live\\wlive48x48.png")) returned 0x20 [0216.636] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Live\\WLive48x48.png" (normalized: "c:\\users\\all users\\microsoft\\windows live\\wlive48x48.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0216.636] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Live\\WLive48x48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows live\\wlive48x48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.636] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0216.638] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0216.640] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x231, lpOverlapped=0x0) returned 1 [0216.640] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x231, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x231, lpOverlapped=0x0) returned 1 [0216.640] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0216.640] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0216.640] CloseHandle (hObject=0x1d0) returned 1 [0216.640] CloseHandle (hObject=0x1e0) returned 1 [0216.646] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Live\\WLive48x48.png" (normalized: "c:\\users\\all users\\microsoft\\windows live\\wlive48x48.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Live\\WLive48x48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows live\\wlive48x48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0216.646] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Live\\WLive48x48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows live\\wlive48x48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0216.646] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Live\\WLive48x48.png" (normalized: "c:\\users\\all users\\microsoft\\windows live\\wlive48x48.png"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3731a3a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973af366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1231, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="WLive48x48.png", cAlternateFileName="WLIVE4~1.PNG")) returned 0x55e310 [0216.647] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3731a3a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973af366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1231, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="WLive48x48.png", cAlternateFileName="WLIVE4~1.PNG")) returned 0 [0216.647] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0216.647] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Live\\WLive48x48.png" (normalized: "c:\\users\\all users\\microsoft\\windows live\\wlive48x48.png")) returned 1 [0216.648] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Live\\WLive48x48.png" (normalized: "c:\\users\\all users\\microsoft\\windows live\\wlive48x48.png")) returned 0xffffffff [0216.648] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3731a3a, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973af366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1231, dwReserved0=0x6e696361, dwReserved1=0x32302d67, cFileName="WLive48x48.png", cAlternateFileName="WLIVE4~1.PNG")) returned 0 [0216.648] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0216.648] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e383478, dwReserved1=0x74676e70, cFileName="Windows NT", cAlternateFileName="WINDOW~3")) returned 1 [0216.648] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0216.650] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.650] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0216.650] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0216.652] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0216.652] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="ActivityLog", cAlternateFileName="ACTIVI~1")) returned 1 [0216.652] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0216.652] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0216.652] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0216.652] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0216.653] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1 [0216.653] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0216.653] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0216.653] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="en-US", cAlternateFileName="")) returned 1 [0216.653] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0216.654] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.654] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa476ffa8, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xa476ffa8, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xa476ffa8, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x28aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="confident.cov", cAlternateFileName="")) returned 1 [0216.655] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4796233, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xa4796233, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xa4796233, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a09, dwReserved0=0x76, dwReserved1=0x0, cFileName="fyi.cov", cAlternateFileName="")) returned 1 [0216.656] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa476ffa8, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xa476ffa8, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xa476ffa8, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x76, dwReserved1=0x0, cFileName="generic.cov", cAlternateFileName="")) returned 1 [0216.656] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4796233, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xa4796233, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xa4796233, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x76, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 1 [0216.656] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4796233, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xa4796233, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xa4796233, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x76, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 0 [0216.657] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0216.657] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="en-US", cAlternateFileName="")) returned 0 [0216.657] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0216.657] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="Inbox", cAlternateFileName="")) returned 1 [0216.657] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76766f63, dwReserved1=0x3600766f, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0216.657] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76766f63, dwReserved1=0x3600766f, cFileName="..", cAlternateFileName="")) returned 1 [0216.657] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76766f63, dwReserved1=0x3600766f, cFileName="..", cAlternateFileName="")) returned 0 [0216.657] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0216.657] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="Queue", cAlternateFileName="")) returned 1 [0216.658] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76766f63, dwReserved1=0x3600766f, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0216.658] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76766f63, dwReserved1=0x3600766f, cFileName="..", cAlternateFileName="")) returned 1 [0216.658] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76766f63, dwReserved1=0x3600766f, cFileName="..", cAlternateFileName="")) returned 0 [0216.658] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0216.658] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1 [0216.658] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76766f63, dwReserved1=0x3600766f, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0216.658] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76766f63, dwReserved1=0x3600766f, cFileName="..", cAlternateFileName="")) returned 1 [0216.658] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76766f63, dwReserved1=0x3600766f, cFileName="..", cAlternateFileName="")) returned 0 [0216.658] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0216.658] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1 [0216.659] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76766f63, dwReserved1=0x3600766f, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0216.659] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76766f63, dwReserved1=0x3600766f, cFileName="..", cAlternateFileName="")) returned 1 [0216.659] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76766f63, dwReserved1=0x3600766f, cFileName="en-US", cAlternateFileName="")) returned 1 [0216.659] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0216.660] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.660] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa476ffa8, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xa476ffa8, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xa476ffa8, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x76, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 1 [0216.660] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa476ffa8, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xa476ffa8, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xa476ffa8, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x76, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 0 [0216.660] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0216.660] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76766f63, dwReserved1=0x3600766f, cFileName="en-US", cAlternateFileName="")) returned 0 [0216.660] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0216.661] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 0 [0216.661] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0216.661] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f626e49, dwReserved1=0x67617078, cFileName="MSScan", cAlternateFileName="")) returned 1 [0216.661] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0216.661] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0216.661] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62dcb75e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x62dcb75e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x62dcb75e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0216.661] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0216.661] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.661] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0216.662] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0216.662] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.662] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0216.662] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg")) returned 0x20 [0216.663] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0216.663] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0216.663] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.665] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.667] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.669] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.669] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.669] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.669] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.670] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.670] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.670] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.670] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.670] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.671] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.671] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.672] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.672] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.672] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.672] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.672] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.672] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.673] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.673] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.673] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.673] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.673] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.673] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.674] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.674] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.674] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.675] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.675] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.675] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.676] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.677] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.677] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.677] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.677] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.677] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.678] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.678] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.678] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.678] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.678] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.679] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.679] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.679] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.679] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.679] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.680] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.680] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.680] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.680] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.680] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.680] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.681] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.681] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.681] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.681] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.681] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.681] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.682] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.682] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.682] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.682] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.682] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.682] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.683] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.683] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.683] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.683] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.683] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.683] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.684] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.684] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.684] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.684] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.684] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.685] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.685] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.685] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.685] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.685] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.686] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.686] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.686] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.686] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.686] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.686] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.687] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.687] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.687] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.687] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.687] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.690] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.690] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.691] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.691] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.691] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.691] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.691] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.692] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.692] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.692] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.692] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.692] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.693] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.693] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.693] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.693] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.693] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.694] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.694] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.694] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.694] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.694] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.694] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.695] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.695] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.695] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.695] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.695] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.696] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.696] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.696] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.696] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.696] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.697] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.697] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.697] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.697] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.698] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.698] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.698] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.699] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.699] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.699] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.699] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.699] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.700] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.700] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.701] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.701] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.701] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.702] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.702] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.702] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.702] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.702] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.703] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.703] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.703] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.703] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.703] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.703] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.704] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.704] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.704] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.705] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.705] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.706] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.706] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.706] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.706] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.706] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.707] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.707] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.707] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.707] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.707] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.707] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.708] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.708] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.708] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.708] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.708] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.708] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.709] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.709] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.709] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.709] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.709] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.709] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.710] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.710] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.710] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.710] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.710] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.710] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.711] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.711] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.711] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.711] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.711] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.712] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.712] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.712] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.712] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.712] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.713] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.713] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.713] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.713] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.713] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.713] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.714] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.714] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.714] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.714] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.714] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.715] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.715] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.715] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.715] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.715] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.715] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.716] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.716] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.716] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.717] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.717] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.717] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.717] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.717] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.717] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.718] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.718] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.718] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.718] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.718] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.719] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.719] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.719] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.719] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.719] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.720] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.720] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.720] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.720] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.720] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.720] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.721] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.721] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.721] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.721] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.721] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.721] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.722] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.722] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.722] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.722] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.722] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.722] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0216.723] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x148, lpOverlapped=0x0) returned 1 [0216.723] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x148, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x148, lpOverlapped=0x0) returned 1 [0216.723] ReadFile (in: hFile=0x1d0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0216.723] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0216.723] CloseHandle (hObject=0x1d0) returned 1 [0216.723] CloseHandle (hObject=0x1d4) returned 1 [0216.743] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0216.744] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0216.744] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62dcb75e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x62dcb75e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x62dcb75e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0x55e890 [0216.744] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62dcb75e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x62dcb75e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x62dcb75e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0 [0216.744] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0216.744] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg")) returned 0 [0216.745] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg")) returned 0x20 [0216.745] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62dcb75e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x62dcb75e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x62dcb75e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0 [0216.745] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0216.746] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3731a3a, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3731a3a, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f626e49, dwReserved1=0x67617078, cFileName="MSScan", cAlternateFileName="")) returned 0 [0216.746] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0216.746] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e383478, dwReserved1=0x74676e70, cFileName="WinMSIPC", cAlternateFileName="")) returned 1 [0216.746] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\*.*" (normalized: "c:\\users\\all users\\microsoft\\winmsipc\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x67706a2e, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0216.746] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x67706a2e, cFileName="..", cAlternateFileName="")) returned 1 [0216.746] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x67706a2e, cFileName="Server", cAlternateFileName="")) returned 1 [0216.746] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\Server\\*.*" (normalized: "c:\\users\\all users\\microsoft\\winmsipc\\server\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0216.748] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0216.748] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0216.748] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0216.748] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x67706a2e, cFileName="Server", cAlternateFileName="")) returned 0 [0216.748] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0216.749] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e383478, dwReserved1=0x74676e70, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0216.749] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*.*" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x67706a2e, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0216.749] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x67706a2e, cFileName="..", cAlternateFileName="")) returned 1 [0216.749] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x67706a2e, cFileName="DMProfiles", cAlternateFileName="DMPROF~1")) returned 1 [0216.749] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\DMProfiles\\*.*" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\dmprofiles\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0216.749] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0216.749] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0216.750] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0216.750] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x67706a2e, cFileName="Profiles", cAlternateFileName="")) returned 1 [0216.750] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*.*" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0216.750] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0216.750] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0216.750] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0216.750] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x67706a2e, cFileName="Profiles", cAlternateFileName="")) returned 0 [0216.750] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0216.751] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e736573, dwReserved1=0x74676e70, cFileName="XboxLive", cAlternateFileName="")) returned 1 [0216.751] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\*.*" (normalized: "c:\\users\\all users\\microsoft\\xboxlive\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x67706a2e, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0216.752] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x67706a2e, cFileName="..", cAlternateFileName="")) returned 1 [0216.752] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x67706a2e, cFileName="NSALCache", cAlternateFileName="NSALCA~1")) returned 1 [0216.752] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\NSALCache\\*.*" (normalized: "c:\\users\\all users\\microsoft\\xboxlive\\nsalcache\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0216.753] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0216.753] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 0 [0216.753] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0216.753] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x67706a2e, cFileName="NSALCache", cAlternateFileName="NSALCA~1")) returned 0 [0216.753] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0216.753] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e736573, dwReserved1=0x74676e70, cFileName="XboxLive", cAlternateFileName="")) returned 0 [0216.753] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0216.753] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x506a2e14, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xfd4aa69b, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xfd4aa69b, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76544e65, dwReserved1=0x65646e65, cFileName="Microsoft Help", cAlternateFileName="MICROS~3")) returned 1 [0216.753] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*.*" (normalized: "c:\\users\\all users\\microsoft help\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x506a2e14, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xfd4aa69b, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xfd4aa69b, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e736568, dwReserved1=0x74676e70, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0216.756] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x506a2e14, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xfd4aa69b, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xfd4aa69b, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e736568, dwReserved1=0x74676e70, cFileName="..", cAlternateFileName="")) returned 1 [0216.758] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x53a17a4e, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x53a17a4e, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x53abb353, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x2e736568, dwReserved1=0x74676e70, cFileName="MS.DATABASECOMPARE.16.1033.hxn", cAlternateFileName="MSDATA~1.HXN")) returned 1 [0216.759] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x54cb123d, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x54cb123d, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x54d3ec39, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x6d006f, dwReserved1=0x610070, cFileName="MS.EXCEL.16.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0216.759] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x5c587e17, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x5c587e17, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5cee92c4, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x300031, dwReserved1=0x330033, cFileName="MS.GRAPH.16.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0216.760] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x572bb221, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x572bb221, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5732d888, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x300031, dwReserved1=0x330033, cFileName="MS.GROOVE.16.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0216.761] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x58fe9daa, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x58fe9daa, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5943467f, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x31002e, dwReserved1=0x330030, cFileName="MS.LYNC.16.1033.hxn", cAlternateFileName="MSLYNC~1.HXN")) returned 1 [0216.761] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x58ff391c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x58ff391c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x594409e2, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x330030, dwReserved1=0x2e0033, cFileName="MS.LYNC_BASIC.16.1033.hxn", cAlternateFileName="MSLYNC~3.HXN")) returned 1 [0216.762] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x58feea63, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x58feea63, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5943a85a, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x2e0063, dwReserved1=0x360031, cFileName="MS.LYNC_ONLINE.16.1033.hxn", cAlternateFileName="MSLYNC~2.HXN")) returned 1 [0216.763] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x50b37f08, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b37f08, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50bcbaa5, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x65006e, dwReserved1=0x31002e, cFileName="MS.MSACCESS.16.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0216.764] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x5c595587, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x5c595587, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5cef69b7, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x360031, dwReserved1=0x31002e, cFileName="MS.MSOUC.16.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0216.764] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x63cb40e0, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x63cb40e0, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x63d40755, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x300031, dwReserved1=0x330033, cFileName="MS.MSPUB.16.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0216.765] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x523b1e39, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x523b1e39, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x52451c7e, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x300031, dwReserved1=0x330033, cFileName="MS.ONENOTE.16.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0216.765] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x60f38a13, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x60f38a13, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x6137f8c6, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x2e0036, dwReserved1=0x300031, cFileName="MS.OUTLOOK.16.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0216.766] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x627ceff1, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x627ceff1, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x628617bd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x2e0036, dwReserved1=0x300031, cFileName="MS.POWERPNT.16.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0216.767] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x5c58e036, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x5c58e036, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5cef0812, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x360031, dwReserved1=0x31002e, cFileName="MS.SETLANG.16.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0216.767] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x58ff9ac9, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x58ff9ac9, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x594457dd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x2e0036, dwReserved1=0x300031, cFileName="MS.SKYPEFB.16.1033.hxn", cAlternateFileName="MSSKYP~1.HXN")) returned 1 [0216.768] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x59004aaf, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x59004aaf, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x59452ec7, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x2e0036, dwReserved1=0x300031, cFileName="MS.SKYPEFB_BASIC.16.1033.hxn", cAlternateFileName="MSSKYP~3.HXN")) returned 1 [0216.769] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x58ffe82d, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x58ffe82d, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5944cd17, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x730061, dwReserved1=0x630069, cFileName="MS.SKYPEFB_ONLINE.16.1033.hxn", cAlternateFileName="MSSKYP~2.HXN")) returned 1 [0216.769] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x590098bc, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x590098bc, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x594aad1a, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x6c006e, dwReserved1=0x6e0069, cFileName="MS.SKYPEFB_ONLINEG.16.1033.hxn", cAlternateFileName="MSSKYP~4.HXN")) returned 1 [0216.770] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x53a1eec1, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x53a1eec1, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x53ac149f, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x1b4, dwReserved0=0x6c006e, dwReserved1=0x6e0069, cFileName="MS.SPREADSHEETCOMPARE.16.1033.hxn", cAlternateFileName="MSSPRE~1.HXN")) returned 1 [0216.771] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x6501dec7, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x6501dec7, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x650b07ef, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x740065, dwReserved1=0x6f0063, cFileName="MS.WINWORD.16.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0216.771] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x50b35838, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b35838, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x650b07ef, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x1876, dwReserved0=0x2e0036, dwReserved1=0x300031, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0216.772] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x50b35838, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b35838, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x650b07ef, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x1876, dwReserved0=0x2e0036, dwReserved1=0x300031, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0216.772] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0216.773] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b95643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87b95643, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6c7868, dwReserved1=0x312e3631, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0216.773] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\*.*" (normalized: "c:\\users\\all users\\microsoft onedrive\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b95643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87b95643, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x300031, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0216.780] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b95643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87b95643, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x300031, cFileName="..", cAlternateFileName="")) returned 1 [0216.780] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b95643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87b95643, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x300031, cFileName="setup", cAlternateFileName="")) returned 1 [0216.780] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\*.*" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b95643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0xb2476512, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0216.780] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b95643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0xb2476512, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e616353, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0216.780] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2476512, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb2476512, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2476512, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0x6e616353, dwReserved1=0x36000630, cFileName="refcount.ini", cAlternateFileName="")) returned 1 [0216.781] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0216.781] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0216.781] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0216.781] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0216.781] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\refcount.ini")) returned 0x20 [0216.783] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\refcount.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0216.783] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\refcount.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0216.784] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x19, lpOverlapped=0x0) returned 1 [0216.785] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x19, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x19, lpOverlapped=0x0) returned 1 [0216.787] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0216.787] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0216.787] CloseHandle (hObject=0x1e0) returned 1 [0216.787] CloseHandle (hObject=0x1d4) returned 1 [0216.788] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\refcount.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\refcount.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0216.789] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\refcount.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0216.789] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\refcount.ini"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2476512, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb2476512, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2476512, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="refcount.ini", cAlternateFileName="")) returned 0x55e410 [0216.789] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2476512, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb2476512, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2476512, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="refcount.ini", cAlternateFileName="")) returned 0 [0216.789] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0216.789] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\refcount.ini")) returned 1 [0216.790] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\refcount.ini")) returned 0xffffffff [0216.791] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2476512, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb2476512, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2476512, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0x6e616353, dwReserved1=0x36000630, cFileName="refcount.ini", cAlternateFileName="")) returned 0 [0216.791] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0216.791] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b95643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87b95643, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x300031, cFileName="setup", cAlternateFileName="")) returned 0 [0216.791] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0216.791] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6c7868, dwReserved1=0x312e3631, cFileName="Oracle", cAlternateFileName="")) returned 1 [0216.791] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Oracle\\*.*" (normalized: "c:\\users\\all users\\oracle\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e74, dwReserved1=0x300069, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0216.791] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e74, dwReserved1=0x300069, cFileName="..", cAlternateFileName="")) returned 1 [0216.792] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e74, dwReserved1=0x300069, cFileName="Java", cAlternateFileName="")) returned 1 [0216.792] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\*.*" (normalized: "c:\\users\\all users\\oracle\\java\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0216.792] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.792] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xab77de3d, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0216.792] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\*.*" (normalized: "c:\\users\\all users\\oracle\\java\\installcache_x64\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xab77de3d, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0216.792] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xab77de3d, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.793] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52d96b3, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa52d96b3, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa52d96b3, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 1 [0216.793] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52d96b3, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa52d96b3, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa52d96b3, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 0 [0216.793] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0216.793] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xab77de3d, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 0 [0216.793] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0216.793] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e74, dwReserved1=0x300069, cFileName="Java", cAlternateFileName="")) returned 0 [0216.794] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0216.794] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6be8870b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6be8870b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6c7868, dwReserved1=0x312e3631, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0216.794] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*.*" (normalized: "c:\\users\\all users\\package cache\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6be8870b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6be8870b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x68636163, dwReserved1=0x36785f65, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0216.808] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6be8870b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6be8870b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x68636163, dwReserved1=0x36785f65, cFileName="..", cAlternateFileName="")) returned 1 [0216.809] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x68636163, dwReserved1=0x36785f65, cFileName="{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", cAlternateFileName="{0FA68~1.285")) returned 1 [0216.809] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\*.*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61666567, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0216.811] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61666567, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0216.811] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61666567, dwReserved1=0x36000630, cFileName="packages", cAlternateFileName="")) returned 1 [0216.811] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0216.811] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.811] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x65089562, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x65089562, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0216.811] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\*.*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x65089562, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x65089562, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0216.812] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x65089562, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x65089562, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.812] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b027600, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x1b027600, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x1b027600, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x4f83ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0216.812] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0216.812] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0216.812] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0216.812] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0216.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0216.812] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 0x20 [0216.814] VirtualAlloc (lpAddress=0x1f50000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0216.814] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0216.814] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0216.817] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.819] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.821] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.821] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.822] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.822] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.822] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.822] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.822] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.823] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.823] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.823] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.823] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.823] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.824] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.824] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.824] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.825] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.825] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.825] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.825] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.825] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.826] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.826] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.826] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.826] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.827] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.827] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.827] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.831] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.832] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.832] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.832] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.832] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.832] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.833] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.833] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.833] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.833] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.833] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.833] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.834] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.834] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.834] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.834] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.834] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.835] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.835] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.835] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.835] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.835] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.835] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.836] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.836] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.836] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.836] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.836] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.836] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.837] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.837] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.837] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.837] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.837] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.837] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.838] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.838] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.838] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.838] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.838] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.839] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.839] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.839] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.839] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.839] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.840] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.840] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.840] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.840] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.840] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.840] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.860] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.861] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.861] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.861] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.861] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.861] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.862] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.862] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.862] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.862] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.862] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.862] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.863] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.863] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.864] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.864] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.864] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.865] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.865] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.865] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.865] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.865] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.866] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.866] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.866] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.866] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.866] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.866] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.867] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.867] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.867] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.867] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.867] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.868] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.868] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.868] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.868] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.868] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.868] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.869] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.869] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.869] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.869] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.869] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.870] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.870] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.870] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.870] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.870] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.871] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.872] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.872] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.872] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.873] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.873] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.873] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.873] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.873] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.874] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.874] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.874] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.874] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.874] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.875] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.875] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.875] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.875] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.875] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.876] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.876] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.876] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.876] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.876] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.877] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.877] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.877] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.877] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.881] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.881] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.882] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.882] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.882] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.882] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.882] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.883] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.883] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.883] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.883] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.883] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.884] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.884] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.884] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.884] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.884] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.884] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.885] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.885] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.885] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.885] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.885] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.886] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.886] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.886] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.887] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.887] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.887] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.887] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.887] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.889] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.889] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.890] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.890] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.890] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.890] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.890] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.890] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.891] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.891] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.891] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.891] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.892] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.892] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.892] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.892] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.892] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.892] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.893] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.893] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.893] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.893] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.893] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.894] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.894] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.894] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.894] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.896] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.896] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.896] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.896] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.896] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.897] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.897] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.897] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.897] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.898] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.898] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.898] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.898] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.898] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.899] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.899] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.899] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.899] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.899] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.900] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.900] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.900] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.900] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.900] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.901] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.901] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.901] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.901] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.901] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.902] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.902] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.902] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.902] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.902] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.902] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.903] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.903] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.905] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.905] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.905] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.905] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.905] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.906] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.906] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.906] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.906] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.906] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.907] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.907] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.907] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.907] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.907] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.908] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.908] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.908] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.908] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.908] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.909] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.909] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.909] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.909] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.909] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.910] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.910] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.912] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.912] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.912] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.913] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.913] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.913] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.914] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.914] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.914] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.914] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.914] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.915] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.915] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.915] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.915] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.915] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.916] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.916] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.916] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.916] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.916] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.917] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.917] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.917] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.917] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.917] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.918] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.918] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.918] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.918] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.918] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.919] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.919] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.919] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.919] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.920] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.920] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.920] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.920] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.920] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.921] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.921] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.921] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.921] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.921] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.922] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.922] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.922] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.922] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.922] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.923] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.923] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.923] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.923] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.923] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.924] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.924] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.924] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.924] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.924] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.925] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.925] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.925] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.925] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.930] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.930] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.931] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.931] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.931] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.931] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.931] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.932] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.932] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.932] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.932] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.932] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.932] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.933] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.933] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.933] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.933] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.934] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.934] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.934] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.934] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.934] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.935] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.935] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.935] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.935] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.936] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.936] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.936] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.936] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.938] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.938] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.938] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.939] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.939] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.939] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.939] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.940] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.941] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.941] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.941] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.941] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.941] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.941] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.942] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.942] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.942] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.942] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.942] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.942] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.943] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.943] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.943] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.943] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.943] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.944] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.944] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.944] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.944] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.944] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.945] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.945] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.945] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.945] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.946] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.947] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.947] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.948] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.948] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.948] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.948] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.948] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.948] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.949] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.949] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.949] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.949] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.949] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.950] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.950] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.950] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.950] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.950] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.951] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.951] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.951] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.951] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.951] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.952] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.952] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.952] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.952] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.952] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.952] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.953] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.953] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.953] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.953] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.953] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.953] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.954] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.954] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.954] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.954] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.955] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.955] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.955] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.955] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.955] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.956] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.956] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.956] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.956] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.956] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.957] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.957] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.957] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.957] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.957] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.958] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.958] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.958] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.958] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.958] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.959] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.959] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.959] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.959] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.960] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.961] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.961] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.962] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.962] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.962] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.962] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.963] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.963] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.963] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.963] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.963] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.963] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.964] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.964] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.964] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.964] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.964] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.965] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.965] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0216.965] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.332] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0217.333] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0217.333] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b027600, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x1b027600, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x1b027600, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x4f83ae, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="cab1.cab", cAlternateFileName="")) returned 0x55e610 [0217.333] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b027600, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x1b027600, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x1b027600, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x4f83ae, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="cab1.cab", cAlternateFileName="")) returned 0 [0217.333] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0217.333] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 1 [0217.343] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 0xffffffff [0217.343] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.344] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0217.344] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0217.344] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0217.344] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0217.344] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0217.344] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0217.344] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 0x20 [0217.345] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0217.346] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0217.346] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.348] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.349] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.351] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.352] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.352] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.353] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.353] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.353] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.353] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.353] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.353] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.354] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.354] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.354] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.354] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.354] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.354] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.355] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.355] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.355] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.355] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.355] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.356] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.356] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.356] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.356] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.356] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.357] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.357] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.357] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.357] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.357] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.358] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.358] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.358] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.358] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.358] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.359] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.359] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.359] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.359] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.359] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.359] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.360] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.360] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.360] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.360] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.360] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.360] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.361] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.361] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.361] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.361] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.361] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.361] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.362] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.362] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.362] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.362] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.363] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.363] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.363] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.363] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.363] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.364] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.364] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.364] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.364] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.365] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.365] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.365] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.365] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.365] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.366] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.366] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.366] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.366] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.366] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.366] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.367] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.367] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.367] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.367] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.367] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.367] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.368] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.368] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.368] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.368] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.368] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0217.368] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0217.368] CloseHandle (hObject=0x1e4) returned 1 [0217.368] CloseHandle (hObject=0x1d0) returned 1 [0217.376] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0217.377] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0217.377] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0x55e890 [0217.377] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0217.377] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0217.377] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 1 [0217.379] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 0xffffffff [0217.380] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be2ab00, ftCreationTime.dwHighDateTime=0x1d5c5bb, ftLastAccessTime.dwLowDateTime=0x4be2ab00, ftLastAccessTime.dwHighDateTime=0x1d5c5bb, ftLastWriteTime.dwLowDateTime=0x4be2ab00, ftLastWriteTime.dwHighDateTime=0x1d5c5bb, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0217.380] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0217.380] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x65089562, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x65089562, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0217.380] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0217.380] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61666567, dwReserved1=0x36000630, cFileName="packages", cAlternateFileName="")) returned 0 [0217.380] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0217.380] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496a9699, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fd5cd, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fd5cd, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x68636173, dwReserved1=0x36785f65, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0217.380] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*.*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496a9699, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fd5cd, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fd5cd, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0217.382] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496a9699, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fd5cd, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fd5cd, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="..", cAlternateFileName="")) returned 1 [0217.382] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fe967, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="packages", cAlternateFileName="")) returned 1 [0217.382] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fe967, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0217.382] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fe967, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName="..", cAlternateFileName="")) returned 1 [0217.382] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0217.382] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*.*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0217.383] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="..", cAlternateFileName="")) returned 1 [0217.383] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x36000630, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.383] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0217.383] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0217.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0217.384] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0217.384] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0217.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0217.384] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 0x20 [0217.385] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0217.385] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0217.387] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.392] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.394] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.399] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.400] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.401] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.401] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.401] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.401] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.401] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.402] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.402] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.402] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.402] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.403] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.403] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.403] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.403] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.404] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.404] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.404] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.404] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.404] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.405] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.405] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.405] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.405] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.405] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.406] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.406] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.407] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.407] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.407] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.407] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.407] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.408] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.408] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.408] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.408] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.408] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.409] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.409] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.409] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.409] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.409] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.410] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.410] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.410] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.410] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.410] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.411] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.411] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.411] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.411] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.411] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.412] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.412] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.412] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.412] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.414] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.414] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.415] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.415] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.415] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.415] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.415] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.416] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.416] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.416] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.416] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.417] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.417] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.417] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.417] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.417] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.418] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.418] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.418] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.418] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.418] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.419] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.419] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.420] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.420] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.420] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.420] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.420] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.421] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.421] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.421] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.421] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.421] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.422] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.424] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.424] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.424] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.424] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.424] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.425] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.425] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.425] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.425] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.426] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.426] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.426] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.426] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.426] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.427] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.427] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.427] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.427] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.427] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.428] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.428] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.428] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.428] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.428] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.429] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.429] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.429] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.429] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.429] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.430] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.430] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.430] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.430] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.431] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.431] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.431] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.431] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.432] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.433] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.433] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.433] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.433] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.433] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.434] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.434] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.434] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.434] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.435] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.435] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.435] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.435] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.435] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.436] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.436] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.436] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.436] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.436] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.437] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.437] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.437] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.437] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.437] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.438] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.438] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.438] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.439] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.439] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.439] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.439] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.440] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.440] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.440] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.440] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.440] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.441] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.441] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.441] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.441] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.441] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.442] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.442] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.442] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.442] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.443] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.443] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.443] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.443] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.443] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.444] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.444] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.444] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.444] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.444] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.445] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.445] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.447] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.447] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.447] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.447] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.448] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.448] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.448] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.448] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.448] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.449] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.449] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.449] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.449] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.449] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.450] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.450] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.451] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.451] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.451] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.451] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.451] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.452] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.452] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.452] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.452] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.452] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.453] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.453] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.453] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.453] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.453] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.454] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.454] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.458] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.459] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.459] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.459] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.459] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.459] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.460] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.460] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.460] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.460] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.460] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.461] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.461] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.461] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.461] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.462] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.462] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.462] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.462] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.462] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.463] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.463] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.463] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.463] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.463] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.464] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.464] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.464] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.464] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.465] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.465] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.465] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.465] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.465] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.465] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.468] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.468] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.469] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.469] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.469] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.470] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.470] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.470] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.470] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.470] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.471] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.471] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.471] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.471] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.471] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.472] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.472] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.472] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.472] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.472] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.473] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.473] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.473] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.473] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.473] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.474] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.474] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.474] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.474] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.476] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.477] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.477] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.477] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.477] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.478] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.478] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.478] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.478] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.478] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.479] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.479] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.479] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.479] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.479] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.480] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.480] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.480] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.480] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.480] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.481] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.481] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.481] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.482] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.482] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.482] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.482] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.483] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.483] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.483] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.483] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.483] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.484] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.484] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.484] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.484] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.484] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.485] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.485] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.485] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.485] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.486] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.486] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.486] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.486] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.486] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.487] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.487] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.487] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.487] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.487] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.488] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.488] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.488] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.488] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.488] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.489] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.489] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.490] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.490] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.490] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.492] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.493] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.493] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.494] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.494] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.494] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.494] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.494] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.495] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.495] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.495] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.495] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.495] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.496] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.496] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.496] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.496] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.496] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.497] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.497] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.497] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.498] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.498] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.498] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.498] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.498] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.499] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.499] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.499] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.499] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.499] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.500] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.500] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.500] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.500] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.500] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.501] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.502] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.502] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.502] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.503] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.503] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.504] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.504] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.504] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.504] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.504] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.505] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.505] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.506] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.506] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.506] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.506] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.506] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.507] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.507] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.507] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.507] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.509] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.510] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.510] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.510] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.511] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.511] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.511] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.511] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.511] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.512] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.512] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.513] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.513] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.513] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.514] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.514] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.515] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.515] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.515] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.515] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.515] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.516] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.516] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.516] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.516] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.516] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.517] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.517] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.517] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.517] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.518] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.518] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.518] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.518] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.519] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.519] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.519] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.519] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.519] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.520] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.520] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.520] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.520] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.520] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.521] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.521] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.521] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.521] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.521] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.522] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.522] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.523] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.523] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.524] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.524] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.524] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.524] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.525] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.525] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.525] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.525] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.525] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x6be, lpOverlapped=0x0) returned 1 [0217.526] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x6be, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x6be, lpOverlapped=0x0) returned 1 [0217.526] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0217.526] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0217.526] CloseHandle (hObject=0x1d0) returned 1 [0217.526] CloseHandle (hObject=0x1e4) returned 1 [0217.586] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0217.587] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0217.587] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x550370, dwReserved1=0xb, cFileName="cab1.cab", cAlternateFileName="")) returned 0x55e590 [0217.587] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x550370, dwReserved1=0xb, cFileName="cab1.cab", cAlternateFileName="")) returned 0 [0217.587] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0217.588] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 1 [0217.599] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 0xffffffff [0217.599] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0217.599] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0217.599] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0217.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0217.600] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0217.600] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0217.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0217.600] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 0x20 [0217.600] VirtualAlloc (lpAddress=0x1f54000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f54000 [0217.601] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0217.601] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0217.602] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.606] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.609] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.609] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.610] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.610] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.610] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.611] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.611] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.611] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.611] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.611] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.612] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.612] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.612] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.612] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.612] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.613] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.613] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.613] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.613] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.614] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.615] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.615] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.615] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.615] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.616] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.616] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.616] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.616] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.617] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.617] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.617] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.617] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.617] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.617] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.618] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.618] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.618] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.618] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.618] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.619] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.619] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.619] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.619] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.619] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.620] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.620] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.620] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.620] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.621] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.621] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.621] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.621] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.621] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.622] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.622] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.622] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.622] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.623] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.623] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.623] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.623] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.623] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.624] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.624] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.624] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.624] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.624] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.625] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.625] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0217.625] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0217.625] CloseHandle (hObject=0x1e4) returned 1 [0217.625] CloseHandle (hObject=0x1d0) returned 1 [0217.630] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0217.631] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0217.631] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x5503c4, dwReserved1=0x1c, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0x55e210 [0217.631] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x5503c4, dwReserved1=0x1c, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0217.632] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0217.632] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 1 [0217.634] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 0xffffffff [0217.634] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b40d00, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc0b40d00, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc0b40d00, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0217.634] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0217.634] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0217.635] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0217.635] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fe967, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="packages", cAlternateFileName="")) returned 0 [0217.635] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0217.635] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x68636173, dwReserved1=0x36785f65, cFileName="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", cAlternateFileName="{2BC3B~1.285")) returned 1 [0217.635] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\*.*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0217.635] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="..", cAlternateFileName="")) returned 1 [0217.635] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="packages", cAlternateFileName="")) returned 1 [0217.635] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x6d696e69, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0217.636] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x6d696e69, cFileName="..", cAlternateFileName="")) returned 1 [0217.636] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x6d696e69, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0217.636] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\*.*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0217.636] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.636] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb21afe00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xb21afe00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xb21afe00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x14de75, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0217.636] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0217.636] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0217.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0217.637] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0217.637] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0217.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0217.637] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 0x20 [0217.637] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0217.638] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0217.640] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.645] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.647] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.647] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.648] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.649] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.649] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.650] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.650] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.650] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.650] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.650] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.651] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.651] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.652] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.652] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.652] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.652] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.652] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.653] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.653] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.653] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.653] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.653] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.656] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.656] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.657] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.657] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.658] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.658] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.658] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.659] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.659] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.659] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.659] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.659] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.660] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.660] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.660] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.660] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.660] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.661] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.661] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.661] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.661] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.661] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.662] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.662] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.662] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.662] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.663] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.663] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.663] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.663] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.663] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.664] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.664] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.664] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.664] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.664] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.665] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.665] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.665] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.665] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.666] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.666] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.666] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.666] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.666] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.667] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.667] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.667] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.667] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.667] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.668] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.668] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.668] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.668] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.668] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.669] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.669] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.669] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.670] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.670] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.670] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.671] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.672] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.672] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.672] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.672] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.672] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.673] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.673] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.673] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.673] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.673] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.674] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.674] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.674] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.674] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.674] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.675] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.675] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.675] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.675] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.675] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.676] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.676] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.676] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.676] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.676] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.677] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.677] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.677] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.677] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.677] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.678] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.678] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.678] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.678] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.679] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.679] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.680] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.680] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.680] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.680] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.681] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.681] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.681] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.681] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.682] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.682] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.682] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.682] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.682] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.683] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.683] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.683] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.683] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.683] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.684] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.684] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.684] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.684] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.687] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.687] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.687] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.687] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.687] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.690] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.690] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.690] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.691] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.691] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.691] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.691] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.692] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.692] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.692] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.692] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.692] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.693] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.693] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.693] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.693] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.693] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.694] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.694] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.694] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.694] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.694] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.695] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.695] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.695] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.695] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.695] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.696] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.696] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.696] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.696] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.696] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.697] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.697] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.697] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.697] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.697] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.698] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.698] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.699] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.699] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.699] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.699] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.699] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.700] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.700] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.700] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.701] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.701] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.701] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.701] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.701] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.702] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.702] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.702] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.702] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.702] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.703] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.703] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.703] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.703] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.704] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.704] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.704] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.706] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.707] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.707] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.707] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.707] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.708] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.708] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.708] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.708] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.708] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.709] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.709] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.709] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.709] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.709] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.710] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.710] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.710] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.710] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.710] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.711] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.711] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.711] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.711] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.711] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.712] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.712] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.712] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.712] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.713] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.713] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.713] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.713] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.713] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.714] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.714] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.714] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.715] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.715] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.715] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.716] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.716] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.716] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.716] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.717] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.717] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.717] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.717] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.717] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.718] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.718] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.718] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.718] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.719] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.719] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.719] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.720] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.720] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.721] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.723] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.723] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.723] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.724] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.724] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.724] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.724] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.724] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.725] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.725] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.725] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.725] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.725] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.726] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.726] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.726] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.726] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.726] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.727] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.727] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.727] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.727] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.727] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.728] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.728] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.728] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.728] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.728] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.729] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.729] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.729] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.729] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.729] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.730] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.730] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.730] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.730] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.731] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.731] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.731] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.734] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.734] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.734] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.734] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.734] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.735] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.735] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.735] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.735] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.736] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.736] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.736] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.736] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.736] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.737] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.737] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.737] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.737] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.737] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.738] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.738] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.738] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.738] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.738] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.740] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.740] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.740] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.741] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.741] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.741] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.741] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.741] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.742] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.742] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.742] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.742] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.742] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.743] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.743] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.743] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.743] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.744] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.744] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.744] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.744] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.744] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.745] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.745] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.745] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.745] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.745] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.746] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.746] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.746] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.746] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.746] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.747] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.752] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.752] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.752] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.752] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.791] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.791] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.792] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.792] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.792] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.792] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.792] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.793] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.793] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.793] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.793] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.793] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.794] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.805] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.806] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.806] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.806] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.806] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.806] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.807] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.807] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.807] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.807] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.807] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.808] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.808] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.808] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.808] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.808] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.809] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.809] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.809] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.810] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.810] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.810] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.810] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.811] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.811] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.811] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.811] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.811] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.812] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.812] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.812] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.812] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.812] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.813] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.813] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.813] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.813] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.813] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.814] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.814] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.814] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.814] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.814] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.815] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.815] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.815] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.815] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.816] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.816] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.816] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.816] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.817] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.817] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.817] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.817] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.817] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.818] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.818] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.818] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.818] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.818] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.819] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.819] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.819] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.819] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.819] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.820] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.820] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.820] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.820] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.820] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.821] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.821] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.821] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.821] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.822] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.822] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.822] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.822] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.822] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.823] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.823] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.826] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.826] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.827] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.827] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.828] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.828] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.829] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.829] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.830] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.830] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.830] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.831] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.831] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.832] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.832] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.833] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0217.833] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.130] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0218.131] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0218.131] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb21afe00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xb21afe00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xb21afe00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x14de75, dwReserved0=0x550370, dwReserved1=0xb, cFileName="cab1.cab", cAlternateFileName="")) returned 0x55e7d0 [0218.132] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb21afe00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xb21afe00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xb21afe00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x14de75, dwReserved0=0x550370, dwReserved1=0xb, cFileName="cab1.cab", cAlternateFileName="")) returned 0 [0218.132] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0218.132] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 1 [0218.136] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 0xffffffff [0218.136] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec849b00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xec849b00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xec849b00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0218.141] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0218.141] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0218.141] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0218.141] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0218.141] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0218.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0218.142] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 0x20 [0218.142] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0218.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0218.143] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.145] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.146] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.147] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.147] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.147] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.147] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.147] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.148] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.149] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.149] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.149] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.149] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.149] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.150] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.150] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.150] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.150] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.150] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.150] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.151] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.151] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.151] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.151] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.151] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.152] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.152] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.152] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.152] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.152] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.153] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.153] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.153] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.153] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.153] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.153] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.153] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.154] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.154] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.154] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.154] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.155] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.155] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.155] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.155] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.155] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.155] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.156] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.156] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.156] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.156] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.156] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.156] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.157] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.157] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.157] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.157] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.157] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.157] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.158] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.158] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.158] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.158] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.158] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.158] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.159] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.159] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.159] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.159] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.159] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.159] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.160] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.160] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.160] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.160] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.160] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.160] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.160] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.161] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.161] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.161] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.161] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.161] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.162] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.162] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.162] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.162] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.162] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.162] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.163] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.163] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.163] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.163] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.163] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.163] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0218.163] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0218.163] CloseHandle (hObject=0x1e4) returned 1 [0218.164] CloseHandle (hObject=0x1d0) returned 1 [0218.180] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0218.187] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0218.187] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec849b00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xec849b00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xec849b00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x5503c4, dwReserved1=0x1c, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0x55e750 [0218.187] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec849b00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xec849b00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xec849b00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x5503c4, dwReserved1=0x1c, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0218.187] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0218.188] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 1 [0218.190] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 0xffffffff [0218.190] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec849b00, ftCreationTime.dwHighDateTime=0x1d5c5ba, ftLastAccessTime.dwLowDateTime=0xec849b00, ftLastAccessTime.dwHighDateTime=0x1d5c5ba, ftLastWriteTime.dwLowDateTime=0xec849b00, ftLastWriteTime.dwHighDateTime=0x1d5c5ba, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0218.190] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0218.190] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x6d696e69, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0218.190] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0218.190] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="packages", cAlternateFileName="")) returned 0 [0218.190] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0218.191] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x387f5bb4, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x68636173, dwReserved1=0x36785f65, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0218.191] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*.*" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x387f5bb4, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0218.191] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x387f5bb4, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="..", cAlternateFileName="")) returned 1 [0218.191] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x9d5870d9, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0218.191] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x34a1fdf0, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0218.192] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x34a1fdf0, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0218.192] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0218.192] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fce5b7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38785f74, dwReserved1=0x78652e36, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0218.192] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*.*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fce5b7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0218.193] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fce5b7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName="..", cAlternateFileName="")) returned 1 [0218.193] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName="packages", cAlternateFileName="")) returned 1 [0218.193] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0218.193] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0218.193] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x45016665, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x45016665, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x2b00042f, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0218.193] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*.*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x45016665, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x45016665, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0218.194] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x45016665, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x45016665, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0218.194] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18637300, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0x18637300, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0x18637300, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0218.194] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0218.194] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0218.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0218.194] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0218.194] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0218.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0218.194] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 0x20 [0218.195] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0218.195] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0218.197] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.199] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.201] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.201] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.201] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.202] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.202] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.202] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.202] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.202] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.203] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.203] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.203] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.203] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.203] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.203] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.204] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.204] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.204] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.204] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.204] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.204] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.205] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.205] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.205] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.205] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.205] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.206] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.206] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.206] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.207] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.208] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.209] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.209] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.209] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.209] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.209] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.209] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.210] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.210] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.210] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.210] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.210] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.210] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.211] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.211] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.211] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.211] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.211] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.211] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.212] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.212] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.212] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.212] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.212] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.212] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.213] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.213] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.213] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.213] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.213] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.213] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.214] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.214] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.214] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.214] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.214] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.214] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.215] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.215] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.215] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.215] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.215] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.216] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.216] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.216] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.217] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.217] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.217] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.217] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.217] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.218] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.218] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.219] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.219] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.219] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.219] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.220] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.220] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.220] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.221] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.222] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.222] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.222] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.223] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.223] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.223] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.223] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.223] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.224] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.224] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.224] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.224] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.225] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.225] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.225] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.225] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.225] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.226] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.226] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.226] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.226] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.226] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.226] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.227] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.227] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.227] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.227] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.227] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.227] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.228] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.228] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.228] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.228] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.228] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.228] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.229] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.229] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.230] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.230] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.230] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.230] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.230] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.230] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.231] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.231] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.231] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.231] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.235] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.235] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.235] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.235] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.235] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.235] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.236] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.236] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.236] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.236] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.236] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.237] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.237] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.237] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.237] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.237] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.239] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.240] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.240] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.240] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.240] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.240] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.241] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.241] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.241] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.241] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.241] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.241] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.242] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.242] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.242] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.242] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.242] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.243] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.243] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.243] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.243] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.243] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.243] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.244] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.244] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.244] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.244] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.244] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.244] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.245] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.245] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.245] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.245] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.245] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.245] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.246] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.246] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.246] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.246] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.246] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.247] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.247] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.247] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.247] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.248] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.248] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.248] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.248] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.248] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.248] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.249] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.249] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.249] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.249] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.249] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.250] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.250] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.250] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.250] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.250] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.250] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.251] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.251] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.251] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.252] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.252] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.252] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.252] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.253] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.253] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.253] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.253] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.253] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.254] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.254] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.254] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.254] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.254] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.254] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.255] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.255] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.255] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.255] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.255] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.256] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.256] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.256] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.256] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.256] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.256] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.257] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.257] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.257] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.257] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.257] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.257] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.258] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.258] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.258] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.258] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.258] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.259] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.259] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.260] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.260] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.260] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.260] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.260] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.260] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.261] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.261] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.261] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.261] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.262] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.262] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.262] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.262] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.262] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.263] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.263] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.263] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.263] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.264] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.264] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.264] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.264] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.264] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.265] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.265] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.265] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.266] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.267] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.267] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.267] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.268] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.268] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.268] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.268] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.268] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.268] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.269] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.269] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.269] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.269] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.269] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.269] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.270] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.270] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.270] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.270] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.270] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.270] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.271] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.271] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.271] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.271] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.271] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.271] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.271] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.272] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.272] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.272] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.272] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.272] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.272] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.273] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.273] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.273] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.273] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.273] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.273] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.274] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.274] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.274] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.274] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.274] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.275] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.275] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.275] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.275] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.275] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.275] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.275] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.276] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.276] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.276] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.276] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.276] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.276] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.277] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.277] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.277] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.281] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.281] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.281] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.281] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.281] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.282] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.282] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.282] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.282] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.282] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.283] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.283] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.283] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.283] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.283] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.284] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.284] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.284] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.284] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.284] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.284] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.285] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.285] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.285] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.285] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.285] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.285] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.286] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.286] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.286] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.286] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.286] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.286] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.287] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.287] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.287] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.287] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.288] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.288] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.288] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.288] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.289] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.289] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.289] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.289] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.289] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.289] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.290] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.290] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.290] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.290] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.290] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.290] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.291] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.291] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.291] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.291] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.291] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.291] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.292] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.292] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.292] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.292] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.292] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.293] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.293] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.293] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.295] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.295] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.295] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.295] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.296] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.296] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.296] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.296] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.296] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.297] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.297] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.297] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.297] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.297] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.297] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.298] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.298] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.298] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.299] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.299] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.299] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.299] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.299] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.300] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.300] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.300] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.300] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.300] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.300] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.301] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.301] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.301] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.301] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.301] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.301] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.302] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.302] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.302] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.302] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.302] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.302] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.303] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.303] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.303] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.303] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.303] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.303] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.304] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.304] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.304] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.304] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.304] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.305] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.305] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.305] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.305] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.305] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.305] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.306] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.306] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.306] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.306] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.307] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.307] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.308] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.308] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.308] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.308] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.308] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.308] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.309] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.309] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.309] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.309] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.310] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.310] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.310] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.310] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.310] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.311] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.311] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.311] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.707] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0218.708] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0218.708] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18637300, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0x18637300, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0x18637300, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="cab1.cab", cAlternateFileName="")) returned 0x55e690 [0218.708] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18637300, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0x18637300, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0x18637300, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="cab1.cab", cAlternateFileName="")) returned 0 [0218.708] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0218.708] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 1 [0218.716] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 0xffffffff [0218.716] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb35c4d00, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb35c4d00, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb35c4d00, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0218.717] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0218.717] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0218.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0218.717] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0218.717] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0218.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0218.717] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 0x20 [0218.722] VirtualAlloc (lpAddress=0x1f58000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f58000 [0218.723] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0218.723] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0218.723] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.725] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.726] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.729] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.730] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.730] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.730] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.730] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.731] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.731] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.731] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.731] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.731] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.732] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.732] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.732] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.732] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.732] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.732] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.733] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.733] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.733] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.733] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.733] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.733] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.733] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.734] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.734] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.734] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.734] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.734] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.735] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.735] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.735] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.735] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.735] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.735] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.736] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.736] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.736] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.736] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.736] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.736] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.736] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.737] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.737] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.737] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.737] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.737] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.737] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.738] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.738] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.738] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.738] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.738] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.738] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.739] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.739] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.739] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.739] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.739] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.739] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.740] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.740] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.740] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.740] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.740] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.740] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.741] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.741] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.741] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.741] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.741] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.741] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.742] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0218.742] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0218.742] CloseHandle (hObject=0x1e4) returned 1 [0218.742] CloseHandle (hObject=0x1d0) returned 1 [0218.746] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0218.746] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0218.746] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb35c4d00, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb35c4d00, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb35c4d00, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0x55e490 [0218.746] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb35c4d00, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb35c4d00, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb35c4d00, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0218.747] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0218.747] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 1 [0218.749] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 0xffffffff [0218.749] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb35c4d00, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb35c4d00, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb35c4d00, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0218.749] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0218.749] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x45016665, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x45016665, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x2b00042f, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0218.749] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0218.749] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName="packages", cAlternateFileName="")) returned 0 [0218.749] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0218.749] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c893534, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38785f73, dwReserved1=0x78652e36, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0218.749] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*.*" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c893534, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0218.749] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c893534, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="..", cAlternateFileName="")) returned 1 [0218.749] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c893534, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xa7a1fb75, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0218.750] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c86d4cb, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4ae0cc20, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0218.750] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c86d4cb, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4ae0cc20, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0218.750] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0218.750] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x64df9047, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x36785f74, dwReserved1=0x78652e34, cFileName="{65e650ff-30be-469d-b63a-418d71ea1765}", cAlternateFileName="{65E65~1")) returned 1 [0218.751] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*.*" (normalized: "c:\\users\\all users\\package cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x64df9047, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0218.751] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x64df9047, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName="..", cAlternateFileName="")) returned 1 [0218.751] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xaba9e611, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0218.751] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x625ed0ab, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x9e2e8, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0218.752] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x625ed0ab, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x9e2e8, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0218.752] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0218.752] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69df918b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x782e7473, dwReserved1=0x652e3638, cFileName="{6913e92a-b64e-41c9-a5e6-cef39207fe89}", cAlternateFileName="{6913E~1")) returned 1 [0218.752] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*.*" (normalized: "c:\\users\\all users\\package cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69df918b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x780065, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0218.752] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69df918b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x780065, cFileName="..", cAlternateFileName="")) returned 1 [0218.752] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xad482581, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x2e0036, dwReserved1=0x780065, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0218.753] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x672872b5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x9e218, dwReserved0=0x2e0036, dwReserved1=0x780065, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0218.753] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x672872b5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x9e218, dwReserved0=0x2e0036, dwReserved1=0x780065, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0218.753] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0218.753] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec09f7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x782e7473, dwReserved1=0x652e3436, cFileName="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", cAlternateFileName="{7D0B7~1.285")) returned 1 [0218.753] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\*.*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec09f7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0034, dwReserved1=0x780065, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0218.754] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec09f7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0034, dwReserved1=0x780065, cFileName="..", cAlternateFileName="")) returned 1 [0218.754] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0034, dwReserved1=0x780065, cFileName="packages", cAlternateFileName="")) returned 1 [0218.754] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0218.754] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0218.754] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ef0491, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ef0491, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x2b00042f, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0218.754] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\*.*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ef0491, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ef0491, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0218.755] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ef0491, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ef0491, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.755] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5b500, ftCreationTime.dwHighDateTime=0x1d5c5bd, ftLastAccessTime.dwLowDateTime=0x4f5b500, ftLastAccessTime.dwHighDateTime=0x1d5c5bd, ftLastWriteTime.dwLowDateTime=0x4f5b500, ftLastWriteTime.dwHighDateTime=0x1d5c5bd, nFileSizeHigh=0x0, nFileSizeLow=0x55f0fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0218.755] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0218.755] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0218.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0218.755] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0218.755] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0218.756] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0218.756] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 0x20 [0218.756] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0218.757] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0218.761] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.764] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.766] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.781] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.783] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.783] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.783] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.783] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.783] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.784] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.784] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.784] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.784] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.785] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.785] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.785] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.785] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.785] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.786] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.786] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.786] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.786] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.787] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.787] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.787] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.787] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.788] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.788] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.788] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.790] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.791] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.791] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.791] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.791] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.792] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.792] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.792] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.792] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.804] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.804] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.805] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.805] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.805] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.805] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.806] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.806] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.806] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.806] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.806] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.807] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.807] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.807] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.807] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.808] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.808] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.808] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.809] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.809] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.809] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.809] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.809] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.810] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.810] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.810] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.810] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.811] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.811] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.811] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.811] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.811] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.812] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.812] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.812] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.812] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.813] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.813] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.813] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.813] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.813] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.814] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.814] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.814] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.814] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.814] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.815] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.815] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.815] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.815] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.816] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.816] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.816] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.816] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.816] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.818] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.818] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.818] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.820] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.820] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.821] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.821] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.821] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.821] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.822] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.822] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.822] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.822] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.823] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.823] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.823] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.823] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.823] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.824] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.824] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.824] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.824] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.825] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.825] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.825] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.825] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.825] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.826] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.826] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.826] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.826] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.827] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.827] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.827] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.827] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.827] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.828] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.829] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.829] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.829] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.829] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.830] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.830] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.830] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.830] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.831] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.831] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.831] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.831] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.831] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.832] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.832] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.832] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.832] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.833] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.833] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.833] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.833] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.833] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.834] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.834] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.834] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.834] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.834] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.840] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.840] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.841] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.841] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.841] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.841] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.841] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.842] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.842] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.842] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.842] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.842] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.843] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.843] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.843] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.843] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.843] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.844] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.844] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.844] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.844] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.844] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.844] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.845] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.845] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.845] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.845] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.845] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.845] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.845] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.846] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.846] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.846] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.846] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.846] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.846] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.847] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.847] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.847] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.847] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.847] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.847] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.848] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.848] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.848] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.848] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.848] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.849] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.849] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.849] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.849] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.849] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.849] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.850] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.850] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.850] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.850] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.850] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.850] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.851] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.851] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.851] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.851] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.851] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.852] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.852] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.853] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.853] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.853] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.853] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.853] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.854] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.854] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.854] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.854] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.854] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.854] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.855] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.855] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.855] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.855] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.855] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.855] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.856] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.856] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.856] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.856] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.856] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.856] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.857] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.857] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.857] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.857] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.857] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.857] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.858] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.858] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.858] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.858] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.858] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.858] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.859] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.859] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.860] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.860] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.860] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.860] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.860] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.860] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.860] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.861] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.861] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.861] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.861] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.861] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.861] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.862] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.862] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.862] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.862] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.862] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.862] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.863] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.863] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.863] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.863] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.863] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.863] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.864] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.864] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.864] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.865] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.865] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.866] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.867] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.867] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.867] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.867] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.867] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.867] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.868] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.868] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.868] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.868] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.868] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.868] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.868] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.869] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.869] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.869] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.869] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.869] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.869] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.870] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.870] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.870] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.870] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.870] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.871] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.871] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.871] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.871] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.871] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.871] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.872] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.872] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.872] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.872] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.872] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.872] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.873] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.873] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.873] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.873] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.873] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.873] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.874] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.874] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.874] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.874] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.874] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.875] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.875] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.875] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.875] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.875] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.875] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.876] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.876] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.876] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.876] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.876] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.878] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.878] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.878] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.879] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.879] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.879] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.879] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.879] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.879] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.880] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.880] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.880] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.880] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.880] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.880] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.881] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.881] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.881] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.882] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.882] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.882] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.882] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.882] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.882] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.883] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.883] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.883] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.883] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.883] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.883] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.884] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.884] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.884] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.884] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.885] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.885] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.885] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.885] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.886] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.886] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.920] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.920] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.920] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.921] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.921] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.921] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.921] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.921] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.921] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.922] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.922] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.922] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.922] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.922] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.922] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.923] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.923] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.923] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.923] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.923] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.925] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.925] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.925] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.926] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.926] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.926] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.926] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.926] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.927] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.927] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.927] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.927] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.927] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.927] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.927] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.928] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.928] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.928] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.928] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.928] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.928] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.929] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.929] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.929] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.929] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.929] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.929] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.930] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.930] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.930] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.930] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.930] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.930] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.931] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.931] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.931] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.931] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.931] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.931] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.932] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.932] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.932] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.932] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.932] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.932] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.933] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.933] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.934] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.934] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.934] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.934] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.934] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.935] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.935] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.935] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.935] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.935] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.935] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.936] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.936] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.936] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.936] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.936] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.936] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.937] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.938] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.938] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.938] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.938] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.938] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.939] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.939] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.939] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.939] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.939] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.939] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.940] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.940] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.940] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.940] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.940] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.940] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.941] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.941] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0218.941] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.479] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0219.481] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0219.481] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5b500, ftCreationTime.dwHighDateTime=0x1d5c5bd, ftLastAccessTime.dwLowDateTime=0x4f5b500, ftLastAccessTime.dwHighDateTime=0x1d5c5bd, ftLastWriteTime.dwLowDateTime=0x4f5b500, ftLastWriteTime.dwHighDateTime=0x1d5c5bd, nFileSizeHigh=0x0, nFileSizeLow=0x55f0fd, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="cab1.cab", cAlternateFileName="")) returned 0x55e7d0 [0219.481] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5b500, ftCreationTime.dwHighDateTime=0x1d5c5bd, ftLastAccessTime.dwLowDateTime=0x4f5b500, ftLastAccessTime.dwHighDateTime=0x1d5c5bd, ftLastWriteTime.dwLowDateTime=0x4f5b500, ftLastWriteTime.dwHighDateTime=0x1d5c5bd, nFileSizeHigh=0x0, nFileSizeLow=0x55f0fd, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="cab1.cab", cAlternateFileName="")) returned 0 [0219.481] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0219.481] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 1 [0219.487] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 0xffffffff [0219.487] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54d47c00, ftCreationTime.dwHighDateTime=0x1d5c5bd, ftLastAccessTime.dwLowDateTime=0x54d47c00, ftLastAccessTime.dwHighDateTime=0x1d5c5bd, ftLastWriteTime.dwLowDateTime=0x54d47c00, ftLastWriteTime.dwHighDateTime=0x1d5c5bd, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0219.488] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0219.488] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0219.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0219.488] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0219.488] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0219.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0219.488] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 0x20 [0219.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0219.492] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0219.492] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.494] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.496] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.497] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.498] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.498] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.498] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.498] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.499] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.499] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.499] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.499] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.499] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.500] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.500] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.500] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.500] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.500] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.501] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.501] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.501] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.501] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.501] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.502] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.502] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.502] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.502] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.502] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.503] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.503] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.503] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.503] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.504] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.504] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.504] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.504] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.504] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.505] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.505] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.505] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.505] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.505] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.506] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.506] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.506] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.506] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.506] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.507] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.507] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.507] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.507] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.507] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.508] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.508] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.508] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.508] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.508] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.508] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.509] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.509] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.509] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.509] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.510] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.510] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.510] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.510] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.510] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.510] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.511] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.511] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.511] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.512] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.512] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.512] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.512] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.512] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.513] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.513] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.513] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.513] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.513] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.514] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.514] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.514] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.514] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.514] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.515] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.515] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.515] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.515] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.515] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0219.515] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0219.515] CloseHandle (hObject=0x1e4) returned 1 [0219.516] CloseHandle (hObject=0x1d0) returned 1 [0219.521] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0219.522] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0219.522] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54d47c00, ftCreationTime.dwHighDateTime=0x1d5c5bd, ftLastAccessTime.dwLowDateTime=0x54d47c00, ftLastAccessTime.dwHighDateTime=0x1d5c5bd, ftLastWriteTime.dwLowDateTime=0x54d47c00, ftLastWriteTime.dwHighDateTime=0x1d5c5bd, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0x55e490 [0219.522] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54d47c00, ftCreationTime.dwHighDateTime=0x1d5c5bd, ftLastAccessTime.dwLowDateTime=0x54d47c00, ftLastAccessTime.dwHighDateTime=0x1d5c5bd, ftLastWriteTime.dwLowDateTime=0x54d47c00, ftLastWriteTime.dwHighDateTime=0x1d5c5bd, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0219.522] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0219.523] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 1 [0219.525] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 0xffffffff [0219.525] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54d47c00, ftCreationTime.dwHighDateTime=0x1d5c5bd, ftLastAccessTime.dwLowDateTime=0x54d47c00, ftLastAccessTime.dwHighDateTime=0x1d5c5bd, ftLastWriteTime.dwLowDateTime=0x54d47c00, ftLastWriteTime.dwHighDateTime=0x1d5c5bd, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0219.525] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0219.526] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ef0491, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ef0491, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x2b00042f, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0219.526] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0219.526] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0034, dwReserved1=0x780065, cFileName="packages", cAlternateFileName="")) returned 0 [0219.526] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0219.526] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c938406, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x782e7473, dwReserved1=0x652e3436, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0219.526] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*.*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c938406, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0219.526] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c938406, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="..", cAlternateFileName="")) returned 1 [0219.526] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="packages", cAlternateFileName="")) returned 1 [0219.527] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0219.532] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName="..", cAlternateFileName="")) returned 1 [0219.532] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9a8a2e, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9a8a2e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0219.532] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*.*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9a8a2e, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9a8a2e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0219.532] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9a8a2e, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9a8a2e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0219.532] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec82c300, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xec82c300, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xec82c300, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0219.532] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0219.532] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0219.532] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0219.532] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0219.532] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0219.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0219.533] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 0x20 [0219.533] VirtualAlloc (lpAddress=0x1f5c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f5c000 [0219.534] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0219.534] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0219.538] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.541] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.543] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.543] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.544] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.544] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.544] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.545] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.545] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.545] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.545] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.545] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.546] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.546] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.546] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.546] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.546] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.547] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.547] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.547] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.547] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.547] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.548] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.548] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.548] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.548] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.548] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.549] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.549] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.549] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.549] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.550] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.551] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.552] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.552] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.552] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.552] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.552] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.553] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.553] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.553] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.553] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.553] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.554] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.554] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.554] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.554] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.554] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.555] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.555] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.555] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.556] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.556] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.556] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.556] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.556] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.557] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.557] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.557] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.557] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.557] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.558] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.558] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.559] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.559] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.559] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.559] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.559] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.560] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.560] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.560] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.560] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.560] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.561] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.561] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.561] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.561] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.561] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.562] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.562] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.562] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.562] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.562] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.563] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.563] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.563] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.563] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.563] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.564] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.564] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.564] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.566] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.566] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.567] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.567] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.568] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.568] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.569] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.569] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.569] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.570] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.570] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.571] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.571] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.571] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.572] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.572] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.573] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.573] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.573] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.577] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.577] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.577] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.578] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.578] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.579] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.579] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.579] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.580] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.580] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.581] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.581] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.581] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.582] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.582] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.582] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.583] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.585] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.585] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.586] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.586] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.586] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.587] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.587] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.587] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.588] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.588] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.589] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.589] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.590] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.590] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.590] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.591] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.591] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.592] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.592] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.592] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.593] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.593] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.593] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.594] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.594] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.594] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.594] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.594] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.595] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.595] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.595] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.595] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.595] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.596] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.596] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.596] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.596] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.596] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.597] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.597] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.597] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.598] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.599] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.599] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.600] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.600] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.600] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.601] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.601] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.602] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.602] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.602] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.603] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.603] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.603] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.603] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.603] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.604] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.604] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.604] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.604] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.604] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.605] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.605] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.605] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.605] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.606] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.607] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.607] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.607] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.607] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.608] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.608] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.608] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.608] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.608] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.609] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.609] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.609] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.609] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.609] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.610] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.610] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.610] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.610] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.610] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.611] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.611] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.611] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.611] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.611] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.612] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.612] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.612] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.615] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.615] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.615] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.616] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.616] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.616] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.616] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.617] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.617] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.617] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.617] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.617] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.618] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.618] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.618] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.618] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.618] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.619] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.619] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.619] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.619] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.619] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.620] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.620] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.620] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.620] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.621] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.621] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.621] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.621] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.622] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.622] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.622] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.622] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.622] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.623] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.623] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.623] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.623] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.624] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.624] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.624] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.624] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.624] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.625] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.625] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.625] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.625] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.625] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.626] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.626] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.626] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.626] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.627] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.627] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.627] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.627] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.627] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.628] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.628] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.628] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.628] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.628] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.629] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.629] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.630] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.630] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.631] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.631] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.631] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.631] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.632] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.632] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.632] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.632] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.632] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.633] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.633] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.633] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.633] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.633] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.634] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.634] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.634] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.634] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.635] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.635] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.635] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.635] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.635] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.636] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.636] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.636] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.637] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.637] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.637] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.637] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.637] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.637] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.638] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.638] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.639] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.639] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.639] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.640] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.640] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.640] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.640] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.640] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.641] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.641] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.641] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.641] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.641] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.642] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.642] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.642] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.642] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.642] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.643] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.643] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.643] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.643] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.643] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.644] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.644] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.644] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.644] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.645] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.646] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.647] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.647] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.647] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.647] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.647] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.648] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.648] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.648] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.648] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.648] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.649] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.649] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.650] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.650] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.650] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.650] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.650] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.651] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.651] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.654] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.655] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.655] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.655] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.655] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.655] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.656] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.656] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.656] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.656] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.656] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.657] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.657] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.658] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.658] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.658] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.658] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.658] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.659] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.659] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.659] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.659] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.659] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.660] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.660] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.660] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.660] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.660] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.661] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.661] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.661] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.661] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.661] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.662] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.662] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.663] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.663] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.663] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.664] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.664] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.664] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.664] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.665] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.665] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.665] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.665] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.665] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.666] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.666] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.666] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.666] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.666] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.666] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.667] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0219.667] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.295] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0220.299] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0220.299] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec82c300, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xec82c300, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xec82c300, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="cab1.cab", cAlternateFileName="")) returned 0x55e5d0 [0220.299] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec82c300, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xec82c300, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xec82c300, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="cab1.cab", cAlternateFileName="")) returned 0 [0220.299] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0220.300] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 1 [0220.304] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab")) returned 0xffffffff [0220.304] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea206900, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xea206900, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xea206900, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0220.307] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0220.308] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0220.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0220.308] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0220.308] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0220.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0220.308] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 0x20 [0220.319] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0220.320] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0220.320] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.323] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.325] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.325] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.326] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.326] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.326] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.326] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.326] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.327] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.327] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.327] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.327] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.327] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.327] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.328] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.328] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.328] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.328] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.328] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.329] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.329] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.329] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.329] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.329] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.329] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.330] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.330] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.330] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.330] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.330] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.330] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.331] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.331] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.331] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.331] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.331] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.332] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.332] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.332] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.332] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.332] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.332] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.333] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.333] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.333] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.333] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.333] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.333] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.334] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.334] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.334] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.334] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.334] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.334] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.335] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.335] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.335] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.335] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.335] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.335] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.336] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.336] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.336] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.336] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.336] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.337] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.337] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.337] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.337] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.337] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0220.337] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0220.337] CloseHandle (hObject=0x1e4) returned 1 [0220.337] CloseHandle (hObject=0x1d0) returned 1 [0220.343] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0220.343] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0220.344] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea206900, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xea206900, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xea206900, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0x55e750 [0220.344] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea206900, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xea206900, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xea206900, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0220.344] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0220.344] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 1 [0220.346] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi")) returned 0xffffffff [0220.346] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea206900, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xea206900, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xea206900, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0220.346] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0220.347] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9a8a2e, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9a8a2e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0220.347] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0220.347] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="packages", cAlternateFileName="")) returned 0 [0220.347] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0220.347] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8dfa73, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x782e7473, dwReserved1=0x652e3436, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0220.347] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*.*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8dfa73, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0220.348] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8dfa73, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="..", cAlternateFileName="")) returned 1 [0220.348] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="packages", cAlternateFileName="")) returned 1 [0220.348] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0220.348] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName="..", cAlternateFileName="")) returned 1 [0220.348] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9371b3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9371b3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0220.348] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*.*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9371b3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9371b3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0220.348] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9371b3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9371b3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0220.348] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb519600, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xeb519600, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xeb519600, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0220.349] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0220.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0220.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0220.349] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0220.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0220.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0220.349] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 0x20 [0220.350] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0220.350] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0220.353] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.356] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.358] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.359] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.359] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.359] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.359] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.359] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.360] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.360] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.360] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.360] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.361] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.361] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.362] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.362] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.362] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.362] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.362] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.363] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.363] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.363] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.363] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.363] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.363] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.364] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.364] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.364] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.364] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.364] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.366] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.366] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.366] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.366] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.367] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.367] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.367] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.367] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.367] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.368] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.368] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.368] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.368] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.368] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.368] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.369] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.369] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.369] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.369] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.369] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.370] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.370] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.370] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.370] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.370] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.371] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.371] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.371] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.371] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.371] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.371] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.372] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.372] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.372] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.372] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.372] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.373] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.373] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.373] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.373] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.373] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.373] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.374] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.374] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.374] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.374] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.374] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.375] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.375] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.375] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.375] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.375] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.375] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.376] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.376] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.376] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.376] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.376] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.376] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.377] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.377] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.377] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.377] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.378] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.379] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.379] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.379] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.379] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.379] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.380] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.380] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.380] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.380] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.380] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.381] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.381] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.381] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.381] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.381] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.381] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.382] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.382] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.382] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.382] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.382] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.383] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.383] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.383] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.383] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.383] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.383] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.384] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.384] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.384] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.384] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.384] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.385] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.385] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.385] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.385] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.386] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.386] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.387] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.388] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.389] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.389] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.389] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.389] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.390] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.390] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.391] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.391] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.392] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.392] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.392] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.392] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.393] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.393] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.394] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.394] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.395] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.395] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.395] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.399] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.399] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.399] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.400] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.400] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.402] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.402] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.402] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.402] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.403] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.403] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.403] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.403] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.404] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.404] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.404] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.404] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.404] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.405] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.405] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.405] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.405] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.405] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.405] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.406] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.406] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.406] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.406] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.406] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.407] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.407] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.407] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.407] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.407] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.407] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.408] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.408] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.408] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.408] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.408] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.409] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.410] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.410] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.410] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.410] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.410] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.411] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.411] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.411] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.411] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.411] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.411] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.412] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.412] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.412] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.412] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.412] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.412] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.412] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.413] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.413] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.413] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.413] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.413] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.413] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.414] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.414] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.414] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.415] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.415] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.415] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.416] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.416] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.416] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.416] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.416] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.416] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.417] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.417] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.417] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.417] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.417] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.417] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.418] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.418] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.418] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.418] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.418] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.418] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.419] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.419] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.419] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.419] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.419] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.419] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.420] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.420] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.420] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.420] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.420] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.421] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.421] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.421] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.421] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.422] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.423] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.423] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.423] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.423] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.423] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.423] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.424] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.424] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.424] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.424] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.424] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.424] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.425] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.425] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.425] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.425] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.426] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.426] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.426] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.426] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.426] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.426] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.427] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.427] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.427] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.427] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.427] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.428] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.429] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.430] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.430] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.430] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.430] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.431] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.431] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.431] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.431] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.432] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.432] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.432] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.432] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.432] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.433] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.433] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.433] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.433] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.434] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.434] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.434] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.434] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.434] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.434] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.435] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.435] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.435] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.435] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.435] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.436] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.436] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.436] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.436] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.436] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.437] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.437] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.437] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.437] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.437] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.438] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.438] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.438] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.438] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.438] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.439] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.439] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.439] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.439] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.440] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.440] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.440] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.440] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.440] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.444] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.445] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.445] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.445] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.445] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.445] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.446] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.446] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.446] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.446] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.447] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.448] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.448] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.448] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.448] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.448] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.449] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.449] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.449] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.449] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.449] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.449] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.450] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.450] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.450] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.450] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.450] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.450] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.451] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.451] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.451] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.451] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.451] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.451] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.452] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.452] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.452] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.452] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.452] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.453] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.453] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.453] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.453] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.453] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.453] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.454] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.454] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.455] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.455] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.455] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.455] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.455] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.455] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.456] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.456] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.456] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.457] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.458] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.458] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.458] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.458] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.458] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.458] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.459] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.459] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.459] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.459] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.459] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.460] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.460] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.460] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.460] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.460] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.461] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.462] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.462] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.462] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.462] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.462] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.463] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.463] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.463] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.463] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.463] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.464] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.464] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.464] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.464] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.464] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.465] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.465] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.465] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.465] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.465] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.465] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.466] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.466] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.466] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.466] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.466] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.467] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.467] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.467] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.467] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.467] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.467] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.468] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.468] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.468] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.468] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.468] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.469] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.469] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.469] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.469] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.469] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.469] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.470] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.470] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.470] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.470] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.470] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.470] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.471] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.471] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.471] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.471] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.471] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.471] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.471] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.472] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.472] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.472] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.472] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.472] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.473] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.473] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.473] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.473] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.473] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.474] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.474] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.474] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.474] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.474] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.475] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.475] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.475] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.475] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.475] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.475] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.476] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.476] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.476] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.476] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.476] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.476] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.477] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.477] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.480] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0220.481] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0220.481] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb519600, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xeb519600, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xeb519600, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x550370, dwReserved1=0xb, cFileName="cab1.cab", cAlternateFileName="")) returned 0x55e2d0 [0220.481] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb519600, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xeb519600, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xeb519600, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x550370, dwReserved1=0xb, cFileName="cab1.cab", cAlternateFileName="")) returned 0 [0220.481] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0220.481] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 1 [0220.521] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 0xffffffff [0220.521] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea206900, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xea206900, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xea206900, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0220.521] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0220.521] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0220.522] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0220.522] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0220.522] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0220.522] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0220.522] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 0x20 [0220.523] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0220.523] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0220.524] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.526] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.528] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.529] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.529] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.529] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.530] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.530] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.530] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.530] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.531] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.531] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.531] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.531] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.531] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.532] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.532] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.532] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.532] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.532] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.533] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.533] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.533] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.533] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.534] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.534] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.534] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.534] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.535] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.535] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.535] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.535] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.536] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.536] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.536] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.536] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.537] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.537] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.537] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.537] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.537] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.538] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.538] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.538] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.538] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.538] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.539] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.539] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.539] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.539] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.540] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.540] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.540] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.540] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.540] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.541] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.541] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.541] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.541] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.541] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.542] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.542] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.542] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.542] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.543] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.543] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.543] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.543] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.543] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.544] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.544] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0220.544] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0220.544] CloseHandle (hObject=0x1e4) returned 1 [0220.544] CloseHandle (hObject=0x1d0) returned 1 [0220.549] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0220.550] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0220.550] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea206900, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xea206900, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xea206900, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0x55e710 [0220.550] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea206900, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xea206900, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xea206900, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0220.551] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0220.551] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 1 [0220.553] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 0xffffffff [0220.553] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea206900, ftCreationTime.dwHighDateTime=0x1cf3e1d, ftLastAccessTime.dwLowDateTime=0xea206900, ftLastAccessTime.dwHighDateTime=0x1cf3e1d, ftLastWriteTime.dwLowDateTime=0xea206900, ftLastWriteTime.dwHighDateTime=0x1cf3e1d, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0220.553] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0220.554] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9371b3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9371b3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0220.554] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0220.554] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="packages", cAlternateFileName="")) returned 0 [0220.554] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0220.554] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c0dea, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x782e7473, dwReserved1=0x652e3436, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0220.554] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*.*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c0dea, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0220.558] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c0dea, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="..", cAlternateFileName="")) returned 1 [0220.558] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="packages", cAlternateFileName="")) returned 1 [0220.558] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x6d696e69, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0220.559] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x6d696e69, cFileName="..", cAlternateFileName="")) returned 1 [0220.559] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388e9a80, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388e9a80, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x6d696e69, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0220.559] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*.*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388e9a80, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388e9a80, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0220.559] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388e9a80, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388e9a80, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0220.559] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa960e00, ftCreationTime.dwHighDateTime=0x1ced524, ftLastAccessTime.dwLowDateTime=0xfa960e00, ftLastAccessTime.dwHighDateTime=0x1ced524, ftLastWriteTime.dwLowDateTime=0xfa960e00, ftLastWriteTime.dwHighDateTime=0x1ced524, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0220.559] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0220.559] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0220.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0220.560] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0220.560] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0220.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0220.560] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 0x20 [0220.560] VirtualAlloc (lpAddress=0x1f60000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f60000 [0220.561] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0220.561] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0220.564] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.569] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.569] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.570] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.571] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.571] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.572] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.572] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.573] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.573] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.573] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.574] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.574] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.575] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.575] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.577] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.578] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.578] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.579] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.579] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.580] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.580] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.580] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.581] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.581] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.582] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.582] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.582] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.582] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.582] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.583] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.583] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.584] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.584] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.584] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.585] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.585] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.586] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.586] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.587] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.587] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.587] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.588] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.588] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.589] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.589] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.590] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.590] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.590] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.591] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.606] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.606] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.607] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.607] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.607] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.608] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.608] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.608] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.608] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.609] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.609] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.609] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.609] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.609] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.610] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.610] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.610] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.610] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.611] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.611] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.611] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.611] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.611] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.612] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.612] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.612] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.612] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.619] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.619] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.619] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.619] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.620] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.620] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.620] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.620] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.620] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.621] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.622] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.622] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.622] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.623] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.623] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.623] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.623] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.623] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.624] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.624] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.624] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.624] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.624] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.625] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.625] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.625] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.625] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.625] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.626] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.626] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.626] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.626] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.627] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.627] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.627] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.627] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.627] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.630] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.630] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.630] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.630] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.631] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.631] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.631] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.631] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.632] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.632] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.632] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.632] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.632] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.633] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.633] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.633] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.633] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.633] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.634] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.634] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.634] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.634] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.634] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.635] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.635] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.635] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.635] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.636] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.636] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.636] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.636] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.636] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.637] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.637] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.637] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.637] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.637] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.638] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.638] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.638] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.638] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.638] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.639] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.639] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.639] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.639] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.639] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.640] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.640] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.640] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.640] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.640] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.641] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.641] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.641] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.641] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.641] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.642] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.642] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.642] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.642] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.643] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.643] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.643] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.644] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.645] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.645] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.645] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.645] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.646] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.646] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.646] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.646] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.647] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.647] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.647] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.647] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.647] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.648] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.648] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.648] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.648] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.648] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.649] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.649] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.650] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.650] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.650] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.650] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.650] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.651] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.651] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.652] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.652] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.652] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.652] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.653] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.654] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.654] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.654] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.654] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.654] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.655] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.655] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.655] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.655] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.655] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.656] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.656] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.656] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.656] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.657] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.657] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.658] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.658] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.658] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.658] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.658] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.659] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.659] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.666] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.666] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.666] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.666] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.666] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.667] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.667] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.667] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.667] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.668] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.668] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.668] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.668] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.668] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.669] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.669] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.669] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.669] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.669] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.670] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.670] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.670] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.670] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.671] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.671] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.671] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.671] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.671] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.672] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.672] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.672] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.672] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.672] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.673] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.673] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.673] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.673] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.674] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.674] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.674] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.674] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.674] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.675] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.675] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.675] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.676] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.676] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.676] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.676] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.677] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.677] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.677] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.677] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.677] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.678] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.678] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.678] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.678] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.678] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.679] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.679] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.679] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.679] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.679] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.680] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.681] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.681] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.682] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.682] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.682] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.682] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.682] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.683] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.683] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.683] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.683] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.683] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.684] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.684] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.684] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.684] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.684] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.685] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.685] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.685] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.685] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.685] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.686] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.686] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.686] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.686] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.687] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.687] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.687] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.687] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.687] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.687] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.688] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.688] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.688] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.688] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.689] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.690] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.690] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.690] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.690] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.690] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.691] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.691] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.692] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.692] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.692] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.692] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.692] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.693] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.693] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.693] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.693] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.693] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.694] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.694] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.694] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.694] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.695] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.695] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.695] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.695] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.695] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.696] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.698] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.698] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.698] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.698] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.699] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.699] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.699] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.699] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.700] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.700] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.700] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.700] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.700] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.701] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.701] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.701] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.701] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.701] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.702] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.702] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.702] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.702] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.703] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.703] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.703] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.703] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.703] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.704] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.704] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.704] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.704] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.704] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.705] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.705] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.705] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.705] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.706] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.706] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.706] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.710] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.710] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.711] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.711] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.711] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.711] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.712] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.712] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.712] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.713] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.713] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.713] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.713] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.714] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.714] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.714] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.714] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.714] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.715] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.715] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.715] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.715] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.715] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.716] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.716] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.717] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.718] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.718] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.718] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.718] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.718] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.719] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.719] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.719] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.720] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.720] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.721] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.721] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.721] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0220.721] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.344] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0221.345] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0221.346] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa960e00, ftCreationTime.dwHighDateTime=0x1ced524, ftLastAccessTime.dwLowDateTime=0xfa960e00, ftLastAccessTime.dwHighDateTime=0x1ced524, ftLastWriteTime.dwLowDateTime=0xfa960e00, ftLastWriteTime.dwHighDateTime=0x1ced524, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="cab1.cab", cAlternateFileName="")) returned 0x55e610 [0221.346] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa960e00, ftCreationTime.dwHighDateTime=0x1ced524, ftLastAccessTime.dwLowDateTime=0xfa960e00, ftLastAccessTime.dwHighDateTime=0x1ced524, ftLastWriteTime.dwLowDateTime=0xfa960e00, ftLastWriteTime.dwHighDateTime=0x1ced524, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="cab1.cab", cAlternateFileName="")) returned 0 [0221.346] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0221.346] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 1 [0221.361] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 0xffffffff [0221.368] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8210100, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb8210100, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb8210100, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0221.372] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0221.372] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0221.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0221.376] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0221.376] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0221.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0221.376] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 0x20 [0221.377] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0221.377] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0221.378] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.382] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.384] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.386] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.386] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.386] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.386] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.386] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.387] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.387] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.387] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.387] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.388] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.388] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.388] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.388] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.388] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.389] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.389] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.389] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.389] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.389] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.390] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.390] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.390] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.390] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.391] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.391] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.391] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.391] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.392] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.392] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.392] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.392] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.392] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.393] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.393] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.393] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.393] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.394] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.394] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.394] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.395] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.395] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.395] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.395] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.395] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.396] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.396] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.396] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.396] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.396] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.397] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.397] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.397] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.397] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.398] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.398] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.398] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.398] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.398] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.399] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.399] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.399] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.399] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.399] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.400] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.400] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.400] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.400] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.400] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.401] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.402] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.402] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.402] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0221.402] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0221.402] CloseHandle (hObject=0x1e4) returned 1 [0221.402] CloseHandle (hObject=0x1d0) returned 1 [0221.408] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0221.408] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0221.408] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8210100, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb8210100, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb8210100, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0x55e290 [0221.409] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8210100, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb8210100, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb8210100, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0221.409] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0221.409] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 1 [0221.417] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 0xffffffff [0221.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8210100, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb8210100, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb8210100, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0221.417] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0221.417] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388e9a80, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388e9a80, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x6d696e69, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0221.417] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0221.418] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="packages", cAlternateFileName="")) returned 0 [0221.418] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0221.418] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388682fc, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x3888e6f3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x782e7473, dwReserved1=0x652e3436, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0221.418] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*.*" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388682fc, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x3888e6f3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0221.419] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388682fc, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x3888e6f3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="..", cAlternateFileName="")) returned 1 [0221.419] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x3888e6f3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="packages", cAlternateFileName="")) returned 1 [0221.419] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x3888e6f3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0221.420] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x3888e6f3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName="..", cAlternateFileName="")) returned 1 [0221.420] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388bfa11, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388bfa11, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0221.420] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*.*" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388bfa11, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388bfa11, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0221.421] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388bfa11, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388bfa11, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0221.421] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf833b400, ftCreationTime.dwHighDateTime=0x1ced524, ftLastAccessTime.dwLowDateTime=0xf833b400, ftLastAccessTime.dwHighDateTime=0x1ced524, ftLastWriteTime.dwLowDateTime=0xf833b400, ftLastWriteTime.dwHighDateTime=0x1ced524, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0221.421] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0221.421] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0221.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0221.421] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0221.421] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0221.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0221.421] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 0x20 [0221.422] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0221.422] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0221.430] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.434] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.436] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.436] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.437] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.437] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.438] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.438] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.438] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.438] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.439] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.439] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.439] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.439] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.439] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.440] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.440] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.440] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.440] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.441] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.441] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.441] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.442] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.442] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.442] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.442] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.442] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.443] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.443] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.444] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.444] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.444] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.446] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.446] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.446] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.447] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.447] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.447] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.447] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.448] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.448] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.448] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.448] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.448] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.449] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.449] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.449] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.449] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.450] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.450] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.450] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.450] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.450] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.451] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.451] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.451] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.452] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.452] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.452] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.452] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.452] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.453] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.453] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.453] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.453] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.453] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.454] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.454] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.454] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.454] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.455] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.455] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.455] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.455] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.455] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.456] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.456] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.456] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.456] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.457] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.457] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.457] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.457] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.457] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.458] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.458] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.458] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.458] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.458] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.459] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.459] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.459] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.459] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.465] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.466] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.466] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.466] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.466] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.467] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.467] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.467] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.467] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.467] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.468] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.468] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.468] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.468] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.468] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.469] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.469] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.469] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.469] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.469] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.470] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.470] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.470] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.470] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.470] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.471] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.471] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.471] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.471] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.471] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.471] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.472] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.472] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.473] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.473] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.473] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.473] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.474] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.474] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.475] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.475] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.475] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.475] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.475] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.476] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.476] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.476] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.476] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.476] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.476] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.477] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.477] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.477] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.477] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.477] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.477] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.478] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.478] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.478] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.478] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.478] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.479] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.479] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.479] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.480] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.482] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.483] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.483] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.483] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.483] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.483] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.484] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.484] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.484] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.484] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.484] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.485] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.485] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.485] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.485] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.486] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.486] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.486] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.486] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.486] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.487] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.487] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.487] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.487] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.488] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.488] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.488] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.488] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.488] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.489] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.489] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.490] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.490] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.490] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.490] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.491] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.491] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.491] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.491] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.491] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.492] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.492] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.492] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.492] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.492] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.492] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.493] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.493] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.493] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.493] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.493] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.494] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.494] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.494] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.494] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.494] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.495] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.495] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.495] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.495] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.497] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.497] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.498] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.498] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.498] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.499] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.499] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.499] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.499] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.499] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.500] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.500] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.500] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.500] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.500] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.501] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.501] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.501] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.501] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.501] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.502] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.502] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.502] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.502] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.502] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.503] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.503] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.507] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.507] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.508] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.508] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.508] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.508] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.508] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.509] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.509] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.510] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.510] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.511] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.511] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.511] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.511] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.511] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.512] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.512] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.512] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.513] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.513] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.513] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.513] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.513] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.514] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.514] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.514] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.515] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.515] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.515] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.516] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.517] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.518] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.518] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.518] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.518] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.519] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.519] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.519] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.519] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.519] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.520] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.520] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.520] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.520] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.520] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.521] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.521] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.521] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.521] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.521] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.521] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.522] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.522] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.522] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.523] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.523] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.523] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.524] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.524] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.524] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.524] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.524] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.525] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.525] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.525] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.525] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.525] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.526] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.526] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.526] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.526] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.526] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.527] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.527] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.527] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.527] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.527] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.528] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.528] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.528] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.528] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.528] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.529] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.529] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.529] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.530] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.530] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.530] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.530] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.530] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.531] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.531] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.531] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.532] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.532] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.532] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.533] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.533] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.533] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.534] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.534] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.535] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.535] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.535] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.535] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.535] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.536] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.536] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.536] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.536] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.536] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.537] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.537] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.537] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.537] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.538] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.538] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.538] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.539] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.539] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.539] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.539] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.539] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x9b1, lpOverlapped=0x0) returned 1 [0221.539] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x9b1, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x9b1, lpOverlapped=0x0) returned 1 [0221.540] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0221.540] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0221.540] CloseHandle (hObject=0x1d0) returned 1 [0221.540] CloseHandle (hObject=0x1e4) returned 1 [0221.570] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0221.570] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0221.571] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf833b400, ftCreationTime.dwHighDateTime=0x1ced524, ftLastAccessTime.dwLowDateTime=0xf833b400, ftLastAccessTime.dwHighDateTime=0x1ced524, ftLastWriteTime.dwLowDateTime=0xf833b400, ftLastWriteTime.dwHighDateTime=0x1ced524, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x550370, dwReserved1=0xb, cFileName="cab1.cab", cAlternateFileName="")) returned 0x55e8d0 [0221.571] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf833b400, ftCreationTime.dwHighDateTime=0x1ced524, ftLastAccessTime.dwLowDateTime=0xf833b400, ftLastAccessTime.dwHighDateTime=0x1ced524, ftLastWriteTime.dwLowDateTime=0xf833b400, ftLastWriteTime.dwHighDateTime=0x1ced524, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x550370, dwReserved1=0xb, cFileName="cab1.cab", cAlternateFileName="")) returned 0 [0221.571] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0221.571] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 1 [0221.580] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab")) returned 0xffffffff [0221.580] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8210100, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb8210100, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb8210100, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0221.581] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0221.581] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0221.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0221.582] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0221.582] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0221.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0221.582] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 0x20 [0221.582] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0221.583] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0221.583] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.586] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.589] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.589] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.591] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.591] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.591] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.591] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.591] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.592] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.592] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.592] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.592] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.592] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.593] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.593] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.593] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.593] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.593] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.594] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.594] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.594] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.594] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.594] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.595] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.595] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.595] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.595] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.596] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.599] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.599] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.599] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.600] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.600] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.600] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.600] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.600] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.601] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.601] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.601] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.601] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.601] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.602] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.602] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.602] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.602] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.602] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.603] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.603] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.603] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.603] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.603] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.604] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.604] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.604] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.604] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.604] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.604] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.605] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.605] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.605] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.605] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.605] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.606] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.606] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.606] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.606] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.606] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.607] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.607] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.607] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.607] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.607] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.607] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.608] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0221.608] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0221.608] CloseHandle (hObject=0x1e4) returned 1 [0221.608] CloseHandle (hObject=0x1d0) returned 1 [0221.613] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0221.614] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0221.614] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8210100, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb8210100, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb8210100, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x5503c4, dwReserved1=0x1c, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0x55e310 [0221.614] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8210100, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb8210100, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb8210100, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x5503c4, dwReserved1=0x1c, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0221.614] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0221.615] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 1 [0221.617] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi")) returned 0xffffffff [0221.617] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8210100, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xb8210100, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xb8210100, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0221.617] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0221.617] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388bfa11, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388bfa11, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41656d69, dwReserved1=0x74696464, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0221.617] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0221.618] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x3888e6f3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x69746964, cFileName="packages", cAlternateFileName="")) returned 0 [0221.618] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0221.618] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f2d0b1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f2d0b1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f2d0b1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x782e7473, dwReserved1=0x652e3436, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0221.618] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*.*" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f2d0b1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f2d0b1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f2d0b1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0221.618] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f2d0b1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f2d0b1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f2d0b1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="..", cAlternateFileName="")) returned 1 [0221.618] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44f2d0b1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f2d0b1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xa0211772, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0221.619] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44f2d0b1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f2d0b1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x39d18a7e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0221.620] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44f2d0b1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f2d0b1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x39d18a7e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0221.620] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0221.620] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f79386, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f9f6d5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x36785f74, dwReserved1=0x78652e34, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0221.620] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*.*" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f79386, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f9f6d5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0221.620] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f79386, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f9f6d5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName="..", cAlternateFileName="")) returned 1 [0221.620] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f9f6d5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName="packages", cAlternateFileName="")) returned 1 [0221.620] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f9f6d5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0221.621] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f9f6d5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0221.621] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fcd23d, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fcd23d, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x2b00042f, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0221.621] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*.*" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fcd23d, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fcd23d, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0221.621] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fcd23d, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fcd23d, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0221.621] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681d000, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0x681d000, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0x681d000, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0221.621] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0221.621] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0221.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0221.622] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0221.622] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0221.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0221.622] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 0x20 [0221.622] VirtualAlloc (lpAddress=0x1f64000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f64000 [0221.623] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0221.623] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0221.626] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.628] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.630] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.631] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.632] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.632] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.632] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.632] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.633] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.633] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.633] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.633] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.634] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.634] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.634] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.634] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.634] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.635] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.635] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.635] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.635] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.636] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.636] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.636] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.636] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.636] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.637] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.637] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.637] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.641] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.641] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.641] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.642] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.642] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.642] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.642] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.642] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.643] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.643] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.643] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.643] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.643] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.644] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.644] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.645] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.645] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.645] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.645] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.645] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.646] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.646] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.646] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.646] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.646] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.647] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.647] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.647] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.647] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.647] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.648] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.648] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.648] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.648] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.649] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.649] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.650] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.650] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.650] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.650] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.650] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.651] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.651] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.652] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.652] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.652] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.652] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.653] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.653] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.653] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.653] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.653] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.654] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.654] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.654] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.654] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.654] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.655] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.656] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.656] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.657] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.657] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.658] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.658] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.658] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.658] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.659] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.659] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.659] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.659] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.659] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.660] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.660] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.660] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.660] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.660] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.661] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.661] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.661] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.661] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.662] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.662] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.662] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.662] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.662] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.662] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.663] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.663] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.663] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.663] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.664] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.664] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.665] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.665] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.665] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.665] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.666] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.666] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.666] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.666] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.667] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.667] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.667] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.667] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.667] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.668] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.668] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.668] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.668] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.668] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.669] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.669] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.669] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.669] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.670] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.670] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.670] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.670] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.671] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.671] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.673] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.674] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.674] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.674] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.674] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.675] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.675] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.684] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.685] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.685] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.685] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.685] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.686] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.686] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.686] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.686] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.686] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.687] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.687] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.687] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.687] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.687] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.688] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.688] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.688] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.688] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.688] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.689] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.689] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.689] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.689] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.689] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.690] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.690] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.690] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.690] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.693] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.694] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.694] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.694] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.694] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.694] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.695] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.695] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.695] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.695] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.696] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.696] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.696] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.696] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.696] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.697] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.697] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.697] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.697] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.697] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.698] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.698] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.698] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.698] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.698] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.699] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.699] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.700] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.701] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.701] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.701] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.701] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.702] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.702] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.702] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.702] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.702] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.703] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.703] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.703] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.703] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.703] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.704] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.704] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.704] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.704] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.705] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.705] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.705] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.705] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.705] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.706] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.706] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.706] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.707] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.707] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.707] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.707] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.708] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.708] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.708] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.708] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.708] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.709] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.710] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.710] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.710] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.710] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.711] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.711] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.711] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.711] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.711] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.712] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.712] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.712] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.712] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.712] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.713] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.713] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.713] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.713] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.713] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.714] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.714] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.714] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.714] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.714] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.715] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.715] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.715] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.716] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.716] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.718] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.718] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.718] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.719] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.719] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.719] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.720] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.720] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.721] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.721] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.721] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.721] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.722] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.722] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.722] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.723] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.723] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.723] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.723] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.723] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.724] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.724] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.724] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.724] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.724] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.725] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.725] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.725] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.725] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.725] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.726] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.726] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.726] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.726] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.727] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.727] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.727] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.727] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.727] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.728] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.728] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.728] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.728] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.729] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.729] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.729] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.729] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.729] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.730] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.730] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.730] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.730] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.731] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.731] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.731] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.731] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.731] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.734] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.734] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.734] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.734] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.734] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.735] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.735] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.735] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.735] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.736] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.736] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.736] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.736] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.737] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.737] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.737] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.737] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.738] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.738] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.738] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.738] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.739] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.739] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.739] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.739] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.740] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.740] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.740] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.740] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.740] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.741] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.741] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.741] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.741] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.741] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.742] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.742] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.743] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.743] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.743] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.744] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.744] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.744] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.744] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.744] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0221.745] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xb25, lpOverlapped=0x0) returned 1 [0221.745] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xb25, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xb25, lpOverlapped=0x0) returned 1 [0221.745] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0221.745] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0221.745] CloseHandle (hObject=0x1d0) returned 1 [0221.745] CloseHandle (hObject=0x1e4) returned 1 [0222.090] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0222.091] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0222.091] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681d000, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0x681d000, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0x681d000, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x550370, dwReserved1=0xb, cFileName="cab1.cab", cAlternateFileName="")) returned 0x55e910 [0222.091] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681d000, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0x681d000, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0x681d000, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x550370, dwReserved1=0xb, cFileName="cab1.cab", cAlternateFileName="")) returned 0 [0222.091] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0222.091] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 1 [0222.092] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 0xffffffff [0222.092] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca02a400, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xca02a400, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xca02a400, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0222.092] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0222.092] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0222.093] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0222.093] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0222.094] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0222.094] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0222.094] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 0x20 [0222.094] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0222.094] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0222.095] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.097] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.099] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.099] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.100] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.100] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.100] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.100] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.100] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.101] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.101] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.101] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.101] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.101] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.101] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.102] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.102] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.102] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.102] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.102] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.103] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.103] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.103] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.103] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.103] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.103] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.104] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.104] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.104] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.104] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.105] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.105] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.105] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.105] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.105] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.105] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.106] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.106] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.106] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.106] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.106] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.107] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.107] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.107] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.107] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.107] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.107] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.108] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.108] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.108] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.108] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.108] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.108] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.109] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.109] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.109] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.109] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.109] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.110] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.110] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.110] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.110] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.110] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.110] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.111] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.111] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.111] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.111] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.111] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.112] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.112] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.112] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.112] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.113] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.113] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0222.113] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0222.113] CloseHandle (hObject=0x1e4) returned 1 [0222.113] CloseHandle (hObject=0x1d0) returned 1 [0222.117] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0222.118] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0222.118] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca02a400, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xca02a400, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xca02a400, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0x55e210 [0222.118] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca02a400, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xca02a400, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xca02a400, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0222.118] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0222.118] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 1 [0222.120] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 0xffffffff [0222.120] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca02a400, ftCreationTime.dwHighDateTime=0x1ced525, ftLastAccessTime.dwLowDateTime=0xca02a400, ftLastAccessTime.dwHighDateTime=0x1ced525, ftLastWriteTime.dwLowDateTime=0xca02a400, ftLastWriteTime.dwHighDateTime=0x1ced525, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0222.120] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0222.121] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fcd23d, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fcd23d, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x2b00042f, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0222.121] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0222.121] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f9f6d5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName="packages", cAlternateFileName="")) returned 0 [0222.121] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0222.121] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4965d4d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4965d4d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4965d4d1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x36785f73, dwReserved1=0x78652e34, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0222.121] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*.*" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4965d4d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4965d4d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4965d4d1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0222.122] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4965d4d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4965d4d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4965d4d1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="..", cAlternateFileName="")) returned 1 [0222.122] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4965d4d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4965d4d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xa4f13e84, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0222.122] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4965d4d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4965d4d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x462e9abd, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0222.123] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4965d4d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4965d4d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x462e9abd, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0222.123] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0222.123] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ea95f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69eaf8db, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38785f74, dwReserved1=0x78652e36, cFileName="{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508", cAlternateFileName="{EEA66~1.285")) returned 1 [0222.123] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\*.*" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ea95f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69eaf8db, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0222.123] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ea95f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69eaf8db, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName="..", cAlternateFileName="")) returned 1 [0222.123] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69eaf8db, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName="packages", cAlternateFileName="")) returned 1 [0222.124] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69eaf8db, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0222.124] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69eaf8db, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0222.124] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ebf6f7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ebf6f7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x2b00042f, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0222.124] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\*.*" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ebf6f7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ebf6f7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0222.124] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ebf6f7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ebf6f7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.124] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9153a800, ftCreationTime.dwHighDateTime=0x1d5c5bc, ftLastAccessTime.dwLowDateTime=0x9153a800, ftLastAccessTime.dwHighDateTime=0x1d5c5bc, ftLastWriteTime.dwLowDateTime=0x9153a800, ftLastWriteTime.dwHighDateTime=0x1d5c5bc, nFileSizeHigh=0x0, nFileSizeLow=0x1704ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0222.124] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0222.125] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0222.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0222.125] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0222.125] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0222.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0222.125] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 0x20 [0222.126] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0222.126] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0222.133] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.135] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.137] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.138] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.138] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.138] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.139] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.139] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.139] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.139] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.139] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.140] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.140] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.140] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.140] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.140] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.140] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.141] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.141] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.141] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.141] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.141] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.142] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.142] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.142] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.142] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.142] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.143] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.143] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.144] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.146] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.146] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.146] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.147] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.147] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.147] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.147] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.147] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.147] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.148] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.148] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.148] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.148] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.148] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.149] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.149] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.149] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.149] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.149] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.150] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.150] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.150] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.150] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.150] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.151] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.151] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.151] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.151] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.151] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.151] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.152] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.152] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.152] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.152] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.152] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.153] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.153] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.153] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.153] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.154] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.154] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.154] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.154] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.154] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.154] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.154] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.155] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.155] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.155] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.155] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.155] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.155] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.156] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.156] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.156] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.156] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.156] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.156] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.157] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.157] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.157] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.157] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.157] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.158] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.159] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.159] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.159] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.159] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.160] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.160] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.160] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.160] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.160] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.161] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.161] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.161] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.161] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.161] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.162] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.162] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.162] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.162] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.162] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.162] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.163] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.163] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.163] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.163] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.163] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.163] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.164] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.164] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.164] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.164] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.164] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.164] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.164] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.165] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.165] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.165] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.166] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.166] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.166] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.166] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.166] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.167] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.167] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.167] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.167] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.167] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.167] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.168] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.168] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.168] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.168] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.168] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.168] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.168] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.169] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.169] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.169] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.169] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.169] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.169] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.170] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.170] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.170] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.178] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.178] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.179] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.179] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.179] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.179] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.179] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.180] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.180] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.180] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.180] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.180] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.180] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.181] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.181] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.181] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.181] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.181] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.181] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.182] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.182] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.182] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.182] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.182] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.182] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.183] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.183] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.183] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.183] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.183] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.184] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.184] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.184] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.184] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.184] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.185] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.185] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.185] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.185] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.185] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.186] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.186] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.186] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.186] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.186] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.187] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.187] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.187] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.187] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.187] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.187] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.188] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.188] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.188] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.188] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.188] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.189] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.189] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.189] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.189] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.189] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.190] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.190] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.190] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.192] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.192] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.192] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.193] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.193] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.193] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.193] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.193] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.194] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.194] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.194] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.194] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.194] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.195] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.195] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.195] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.195] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.195] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.195] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.196] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.196] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.196] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.196] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.196] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.197] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.197] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.197] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.197] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.197] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.198] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.198] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.198] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.198] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.198] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.198] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.199] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.199] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.200] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.200] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.200] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.200] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.200] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.200] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.201] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.201] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.201] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.201] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.201] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.202] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.202] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.202] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.202] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.202] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.202] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.203] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.203] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.203] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.203] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.203] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.204] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.204] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.204] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.204] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.204] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.205] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.207] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.207] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.207] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.208] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.208] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.208] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.208] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.208] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.209] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.209] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.209] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.209] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.209] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.209] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.210] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.210] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.210] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.210] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.210] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.211] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.211] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.211] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.211] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.211] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.212] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.212] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.212] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.212] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.212] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.212] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.213] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.213] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.213] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.213] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.213] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.214] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.214] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.214] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.214] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.214] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.215] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.215] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.215] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.215] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.215] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.215] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.215] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.216] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.216] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.216] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.216] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.216] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.217] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.217] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.217] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.217] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.217] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.217] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.218] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.218] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.218] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.226] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.227] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.227] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.227] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.227] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.227] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.228] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.228] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.228] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.228] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.228] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.228] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.229] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.229] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.229] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.229] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.229] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.229] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.230] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.230] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.230] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.230] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.230] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.231] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.231] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.231] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.231] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.231] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.231] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.232] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.232] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.232] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.232] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.232] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.232] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.233] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.233] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.234] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.234] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.235] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.235] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.235] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.235] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.235] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.235] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.236] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.236] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.236] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.236] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.236] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.236] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.237] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.237] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.237] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.237] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.237] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.273] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.274] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.274] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.274] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.274] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.274] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.275] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.275] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.275] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.277] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.277] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.277] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.277] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.278] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.278] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.278] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.278] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.278] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.278] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.279] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.279] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.279] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.279] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.279] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.279] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.280] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.280] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.280] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.280] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.280] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.280] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.281] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.281] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.281] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.281] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.281] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.281] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.282] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.282] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.282] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.282] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.282] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.282] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.283] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.283] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.283] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.283] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.283] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.283] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.284] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.284] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.284] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.284] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.285] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.285] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.285] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.285] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.285] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.285] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.286] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.286] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.286] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.286] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.286] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.286] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.287] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.287] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.287] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.287] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.287] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.288] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.288] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.288] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.289] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.289] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.290] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.290] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.290] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.290] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.290] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.290] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.291] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.291] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.291] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.291] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.291] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.292] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.292] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.292] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.292] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.292] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.292] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.293] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.339] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0222.340] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0222.340] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9153a800, ftCreationTime.dwHighDateTime=0x1d5c5bc, ftLastAccessTime.dwLowDateTime=0x9153a800, ftLastAccessTime.dwHighDateTime=0x1d5c5bc, ftLastWriteTime.dwLowDateTime=0x9153a800, ftLastWriteTime.dwHighDateTime=0x1d5c5bc, nFileSizeHigh=0x0, nFileSizeLow=0x1704ac, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="cab1.cab", cAlternateFileName="")) returned 0x55e390 [0222.340] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9153a800, ftCreationTime.dwHighDateTime=0x1d5c5bc, ftLastAccessTime.dwLowDateTime=0x9153a800, ftLastAccessTime.dwHighDateTime=0x1d5c5bc, ftLastWriteTime.dwLowDateTime=0x9153a800, ftLastWriteTime.dwHighDateTime=0x1d5c5bc, nFileSizeHigh=0x0, nFileSizeLow=0x1704ac, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="cab1.cab", cAlternateFileName="")) returned 0 [0222.340] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0222.340] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 1 [0222.345] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\cab1.cab")) returned 0xffffffff [0222.345] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbbd4500, ftCreationTime.dwHighDateTime=0x1d5c5bc, ftLastAccessTime.dwLowDateTime=0xcbbd4500, ftLastAccessTime.dwHighDateTime=0x1d5c5bc, ftLastWriteTime.dwLowDateTime=0xcbbd4500, ftLastWriteTime.dwHighDateTime=0x1d5c5bc, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0222.345] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0222.346] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0222.346] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0222.346] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0222.346] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0222.346] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0222.346] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 0x20 [0222.346] VirtualAlloc (lpAddress=0x1f68000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f68000 [0222.402] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0222.402] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0222.402] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.404] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.406] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.407] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.407] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.407] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.408] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.408] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.408] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.408] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.409] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.409] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.409] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.410] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.410] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.410] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.410] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.410] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.410] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.411] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.411] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.411] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.411] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.411] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.412] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.412] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.412] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.412] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.412] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.412] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.413] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.413] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.413] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.413] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.413] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.413] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.414] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.414] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.414] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.414] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.414] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.414] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.415] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.415] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.415] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.415] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.415] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.415] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.416] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.416] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.416] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.416] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.416] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.416] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.417] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.417] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.417] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.417] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.417] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.417] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.418] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.418] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.418] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.418] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.418] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.418] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.419] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.419] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.419] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.419] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.419] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.419] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.419] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.420] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.420] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.420] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.420] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.420] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.421] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.421] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.421] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.421] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.421] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.421] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.421] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.422] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.422] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.422] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.422] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.422] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.422] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.423] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.423] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.423] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.423] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0222.423] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0222.423] CloseHandle (hObject=0x1e4) returned 1 [0222.423] CloseHandle (hObject=0x1d0) returned 1 [0222.429] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0222.430] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0222.430] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbbd4500, ftCreationTime.dwHighDateTime=0x1d5c5bc, ftLastAccessTime.dwLowDateTime=0xcbbd4500, ftLastAccessTime.dwHighDateTime=0x1d5c5bc, ftLastWriteTime.dwLowDateTime=0xcbbd4500, ftLastWriteTime.dwHighDateTime=0x1d5c5bc, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0x55e750 [0222.446] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbbd4500, ftCreationTime.dwHighDateTime=0x1d5c5bc, ftLastAccessTime.dwLowDateTime=0xcbbd4500, ftLastAccessTime.dwHighDateTime=0x1d5c5bc, ftLastWriteTime.dwLowDateTime=0xcbbd4500, ftLastWriteTime.dwHighDateTime=0x1d5c5bc, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0222.446] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0222.447] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 1 [0222.452] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi")) returned 0xffffffff [0222.452] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbbd4500, ftCreationTime.dwHighDateTime=0x1d5c5bc, ftLastAccessTime.dwLowDateTime=0xcbbd4500, ftLastAccessTime.dwHighDateTime=0x1d5c5bc, ftLastWriteTime.dwLowDateTime=0xcbbd4500, ftLastWriteTime.dwHighDateTime=0x1d5c5bc, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0222.453] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0222.453] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ebf6f7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ebf6f7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x2b00042f, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0222.453] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0222.453] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69eaf8db, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65002e, dwReserved1=0x650078, cFileName="packages", cAlternateFileName="")) returned 0 [0222.453] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0222.453] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38785f73, dwReserved1=0x78652e36, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0222.453] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*.*" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0222.454] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="..", cAlternateFileName="")) returned 1 [0222.454] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="packages", cAlternateFileName="")) returned 1 [0222.454] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x6d696e69, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0222.455] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x6d696e69, cFileName="..", cAlternateFileName="")) returned 1 [0222.455] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49751224, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49751224, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x6d696e69, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0222.455] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*.*" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49751224, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49751224, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0222.456] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49751224, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49751224, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0222.456] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3166700, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc3166700, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc3166700, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0222.456] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0222.456] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0222.463] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0222.463] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0222.463] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0222.464] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0222.464] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 0x20 [0222.465] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0222.465] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0222.468] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.471] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.474] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.475] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.475] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.476] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.476] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.476] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.477] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.477] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.477] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.477] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.478] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.478] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.478] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.478] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.479] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.479] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.479] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.479] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.480] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.480] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.480] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.481] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.481] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.481] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.481] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.482] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.482] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.486] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.486] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.486] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.486] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.487] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.487] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.487] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.488] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.488] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.489] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.489] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.490] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.490] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.490] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.491] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.491] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.491] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.492] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.492] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.492] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.492] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.493] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.493] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.493] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.493] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.494] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.494] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.494] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.494] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.495] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.495] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.495] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.495] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.496] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.496] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.496] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.497] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.497] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.497] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.497] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.498] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.498] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.498] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.499] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.499] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.499] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.499] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.500] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.500] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.500] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.500] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.501] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.501] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.501] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.502] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.502] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.502] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.503] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.505] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.506] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.508] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.508] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.508] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.509] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.509] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.509] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.509] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.510] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.510] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.511] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.511] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.511] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.511] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.512] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.512] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.512] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.513] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.513] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.513] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.513] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.514] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.514] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.515] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.515] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.515] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.515] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.516] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.516] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.516] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.516] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.518] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.518] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.518] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.518] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.519] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.519] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.520] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.520] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.520] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.520] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.521] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.521] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.521] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.521] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.522] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.522] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.523] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.523] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.523] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.524] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.524] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.524] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.524] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.527] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.527] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.527] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.528] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.528] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.528] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.528] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.529] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.529] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.529] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.530] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.530] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.530] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.530] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.530] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.531] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.531] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.532] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.532] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.532] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.533] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.533] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.534] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.534] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.535] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.535] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.535] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.535] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.535] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.536] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.536] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.536] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.536] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.536] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.537] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.537] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.537] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.537] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.538] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.538] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.538] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.539] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.539] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.539] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.539] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.540] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.540] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.540] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.540] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.541] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.541] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.544] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.544] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.544] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.544] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.544] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.545] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.545] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.545] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.545] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.546] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.546] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.546] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.546] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.547] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.547] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.547] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.547] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.547] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.548] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.548] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.548] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.548] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.549] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.549] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.549] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.549] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.550] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.550] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.550] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.551] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.551] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.551] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.551] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.552] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.552] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.552] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.552] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.554] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.554] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.554] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.554] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.554] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.555] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.555] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.556] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.556] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.556] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.556] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.557] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.557] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.557] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.557] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.557] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.558] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.558] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.558] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.558] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.559] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.559] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.559] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.559] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.559] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.560] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.560] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.562] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.562] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.562] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.562] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.562] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.562] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.563] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.563] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.563] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.563] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.563] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.563] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.564] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.564] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.564] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.565] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.566] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.566] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.566] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.566] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.566] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.566] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.567] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.567] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.567] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.568] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.568] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.568] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.569] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.569] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.569] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.570] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.570] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.570] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.570] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.571] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.571] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.571] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.572] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.572] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.572] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.573] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.575] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.575] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.576] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.576] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.576] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.577] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.577] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.578] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.578] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.578] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.579] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.579] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.579] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.580] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.580] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.580] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.581] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.581] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.586] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.586] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.586] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.587] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.587] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.587] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.588] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.588] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.588] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.589] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.589] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.589] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.590] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.590] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.591] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.591] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.592] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.592] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.592] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.593] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.593] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.593] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.594] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.594] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.594] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.594] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.594] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.594] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.596] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.596] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.596] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.596] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.597] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.597] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.597] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.597] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.598] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.598] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.598] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.598] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.598] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.598] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.599] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.599] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.599] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.600] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.600] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.600] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.601] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.601] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.601] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.602] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.602] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.602] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.603] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.603] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.603] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.603] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.604] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.604] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.605] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.605] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.605] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.605] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.605] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.606] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.606] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.606] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.606] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.606] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.606] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.607] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.607] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.607] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.607] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.607] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.607] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.608] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.608] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.910] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0222.914] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0222.914] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3166700, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc3166700, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc3166700, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="cab1.cab", cAlternateFileName="")) returned 0x55e710 [0222.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3166700, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xc3166700, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xc3166700, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="cab1.cab", cAlternateFileName="")) returned 0 [0222.914] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0222.915] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 1 [0222.922] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab")) returned 0xffffffff [0222.922] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf82e000, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xbf82e000, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xbf82e000, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0222.922] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0222.923] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0222.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0222.923] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0222.923] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0222.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0222.923] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 0x20 [0222.923] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0222.924] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0222.924] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.928] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.929] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.930] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.930] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.931] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.931] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.931] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.931] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.931] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.932] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.932] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.932] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.933] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.933] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.933] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.934] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.934] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.934] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.934] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.934] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.934] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.935] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.935] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.935] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.935] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.935] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.936] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.936] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.936] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.936] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.936] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.937] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.937] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.937] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.938] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.938] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.938] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.938] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.938] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.939] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.939] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.939] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.939] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.939] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.939] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.940] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.940] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.940] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.940] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.940] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.941] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.941] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.941] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.941] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.942] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.942] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.942] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.942] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.942] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.943] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0222.943] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0222.943] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0222.943] CloseHandle (hObject=0x1e4) returned 1 [0222.943] CloseHandle (hObject=0x1d0) returned 1 [0222.948] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0222.949] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0222.949] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf82e000, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xbf82e000, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xbf82e000, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0x55e710 [0222.949] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf82e000, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xbf82e000, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xbf82e000, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0222.949] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0222.949] DeleteFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 1 [0222.952] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi")) returned 0xffffffff [0222.952] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf82e000, ftCreationTime.dwHighDateTime=0x1cf3e1e, ftLastAccessTime.dwLowDateTime=0xbf82e000, ftLastAccessTime.dwHighDateTime=0x1cf3e1e, ftLastWriteTime.dwLowDateTime=0xbf82e000, ftLastWriteTime.dwHighDateTime=0x1cf3e1e, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0222.952] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0222.952] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49751224, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49751224, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4d656d69, dwReserved1=0x6d696e69, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0222.952] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0222.952] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694d656d, dwReserved1=0x756d696e, cFileName="packages", cAlternateFileName="")) returned 0 [0222.952] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0222.957] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38785f73, dwReserved1=0x78652e36, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0222.958] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0222.958] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc2dd99f, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xbc2dd99f, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x412d3232, dwReserved1=0x2d374532, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0222.958] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\*.*" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc2dd99f, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xbc2dd99f, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38785f73, dwReserved1=0x78652e36, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0222.961] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc2dd99f, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xbc2dd99f, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38785f73, dwReserved1=0x78652e36, cFileName="..", cAlternateFileName="")) returned 1 [0222.961] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda99800, ftCreationTime.dwHighDateTime=0x1d0cb68, ftLastAccessTime.dwLowDateTime=0xbc2dd99f, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xda99800, ftLastWriteTime.dwHighDateTime=0x1d0cb68, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x38785f73, dwReserved1=0x78652e36, cFileName="regid.1991-06.com.microsoft Microsoft Office Professional Plus 2016.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 1 [0222.962] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ac00f7d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3ac00f7d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3ac00f7d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e6, dwReserved0=0x2e0036, dwReserved1=0x6f0063, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="")) returned 1 [0222.963] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ac00f7d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3ac00f7d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3ac00f7d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e6, dwReserved0=0x2e0036, dwReserved1=0x6f0063, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="")) returned 0 [0222.963] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0222.964] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d313939, dwReserved1=0x632e3630, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0222.964] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\*.*" (normalized: "c:\\users\\all users\\softwaredistribution\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xc06c451e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x6f0063, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0222.964] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xc06c451e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x6f0063, cFileName="..", cAlternateFileName="")) returned 1 [0222.964] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06c451e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xc06c451e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xc06c451e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x6f0063, cFileName="PostRebootEventCache.V2", cAlternateFileName="POSTRE~1.V2")) returned 1 [0222.964] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\PostRebootEventCache.V2\\*.*" (normalized: "c:\\users\\all users\\softwaredistribution\\postrebooteventcache.v2\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06c451e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xc06c451e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xc06c451e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0222.965] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06c451e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xc06c451e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xc06c451e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0222.965] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06c451e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xc06c451e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xc06c451e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 0 [0222.965] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0222.965] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06c451e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xc06c451e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xc06c451e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x6f0063, cFileName="PostRebootEventCache.V2", cAlternateFileName="POSTRE~1.V2")) returned 0 [0222.965] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0222.965] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x746e6576, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0222.965] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*.*" (normalized: "c:\\users\\all users\\start menu\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06c451e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xc06c451e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xc06c451e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x6f0063, cFileName="PostRebootEventCache.V2", cAlternateFileName="PèU")) returned 0xffffffff [0222.966] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x746e6576, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0222.966] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Templates\\*.*" (normalized: "c:\\users\\all users\\templates\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06c451e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xc06c451e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xc06c451e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x6f0063, cFileName="PostRebootEventCache.V2", cAlternateFileName="PèU")) returned 0xffffffff [0222.966] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf99491c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf99491c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x746e6576, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1 [0222.966] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\*.*" (normalized: "c:\\users\\all users\\usoprivate\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf99491c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf99491c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x6f0063, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0222.966] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf99491c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf99491c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x6f0063, cFileName="..", cAlternateFileName="")) returned 1 [0222.966] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xdee19836, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdee19836, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x6f0063, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1 [0222.966] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\*.*" (normalized: "c:\\users\\all users\\usoprivate\\updatestore\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xdee19836, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdee19836, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0222.967] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xdee19836, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdee19836, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6441656d, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0222.967] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xde59b25a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdeda7085, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x6441656d, dwReserved1=0x2b00042f, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 1 [0222.967] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xde59b25a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdeda7085, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x6441656d, dwReserved1=0x2b00042f, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 0 [0222.967] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0222.968] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xdee19836, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdee19836, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0036, dwReserved1=0x6f0063, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 0 [0222.968] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0222.968] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf97592c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65726f74, dwReserved1=0x746e6576, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1 [0222.968] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\USOShared\\*.*" (normalized: "c:\\users\\all users\\usoshared\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf97592c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65726f74, dwReserved1=0x35623135, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0222.968] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf97592c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65726f74, dwReserved1=0x35623135, cFileName="..", cAlternateFileName="")) returned 1 [0222.968] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x79047f5b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x79047f5b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65726f74, dwReserved1=0x35623135, cFileName="Logs", cAlternateFileName="")) returned 1 [0222.968] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\*.*" (normalized: "c:\\users\\all users\\usoshared\\logs\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x79047f5b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x79047f5b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x620031, dwReserved1=0x310035, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0222.969] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x79047f5b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x79047f5b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x620031, dwReserved1=0x310035, cFileName="..", cAlternateFileName="")) returned 1 [0222.969] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x79047f5b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x1d9f0f9b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x620031, dwReserved1=0x310035, cFileName="UpdateSessionOrchestration.001.etl", cAlternateFileName="UP2DAF~1.ETL")) returned 1 [0222.970] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x8c08b661, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb412100a, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateSessionOrchestration.002.etl", cAlternateFileName="UP3884~1.ETL")) returned 1 [0222.970] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xb4f89421, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xeca50022, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateSessionOrchestration.003.etl", cAlternateFileName="UP8247~1.ETL")) returned 1 [0222.971] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x60797ea1, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x8857baf6, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateSessionOrchestration.004.etl", cAlternateFileName="UPD2FC~1.ETL")) returned 1 [0222.972] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x615d8964, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x88859575, ftLastWriteTime.dwHighDateTime=0x1d8596d, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateSessionOrchestration.005.etl", cAlternateFileName="UPB784~1.ETL")) returned 1 [0222.975] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x3a5fe900, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x6178db96, ftLastWriteTime.dwHighDateTime=0x1d7b059, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateSessionOrchestration.006.etl", cAlternateFileName="UP7D55~1.ETL")) returned 1 [0222.976] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf801cbae, ftLastAccessTime.dwHighDateTime=0x1d75217, ftLastWriteTime.dwLowDateTime=0x1f56df07, ftLastWriteTime.dwHighDateTime=0x1d75218, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateSessionOrchestration.007.etl", cAlternateFileName="UP52FC~1.ETL")) returned 1 [0222.976] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf98df460, ftLastAccessTime.dwHighDateTime=0x1d705ef, ftLastWriteTime.dwLowDateTime=0x22721e58, ftLastWriteTime.dwHighDateTime=0x1d705f0, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateSessionOrchestration.008.etl", cAlternateFileName="UPA721~1.ETL")) returned 1 [0222.977] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x6fb852ed, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xa05d916a, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateSessionOrchestration.009.etl", cAlternateFileName="UPFC55~1.ETL")) returned 1 [0222.977] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x46a3d34f, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6df6574e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateSessionOrchestration.010.etl", cAlternateFileName="UPB13B~1.ETL")) returned 1 [0222.978] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x95f9994e, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x95f9994e, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateSessionOrchestration.011.etl", cAlternateFileName="UP076F~1.ETL")) returned 1 [0222.979] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x9ee92c6a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0xc6371102, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateSessionOrchestration.012.etl", cAlternateFileName="UPEBF6~1.ETL")) returned 1 [0222.979] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe7e7af85, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe7e7af85, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateSessionOrchestration.013.etl", cAlternateFileName="UPDATE~4.ETL")) returned 1 [0222.980] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x4e8a793e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e8a793e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateSessionOrchestration.014.etl", cAlternateFileName="UPDATE~2.ETL")) returned 1 [0222.981] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x1d9a4c7e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateSessionOrchestration.015.etl", cAlternateFileName="UPDATE~1.ETL")) returned 1 [0222.981] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b0d97d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xa689893c, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xac9249a5, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x6f006e, dwReserved1=0x630072, cFileName="UpdateUx.001.etl", cAlternateFileName="UP654C~1.ETL")) returned 1 [0222.982] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b0d97d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe7b0d97d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xa690be1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x65002e, dwReserved1=0x6c0074, cFileName="UpdateUx.002.etl", cAlternateFileName="UPDATE~3.ETL")) returned 1 [0222.982] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b0d97d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe7b0d97d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xa690be1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x65002e, dwReserved1=0x6c0074, cFileName="UpdateUx.002.etl", cAlternateFileName="UPDATE~3.ETL")) returned 0 [0222.982] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0222.983] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x79047f5b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x79047f5b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65726f74, dwReserved1=0x35623135, cFileName="Logs", cAlternateFileName="")) returned 0 [0222.983] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0222.984] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf97592c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65726f74, dwReserved1=0x746e6576, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 0 [0222.984] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0222.984] FindNextFileA (in: hFindFile=0x55e3d0, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73656465, dwReserved1=0x62697274, cFileName="Default", cAlternateFileName="")) returned 1 [0222.984] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\*.*" (normalized: "c:\\users\\default\\*.*"), lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65726f74, dwReserved1=0x746e6576, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0222.986] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65726f74, dwReserved1=0x746e6576, cFileName="..", cAlternateFileName="")) returned 1 [0222.987] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65726f74, dwReserved1=0x746e6576, cFileName="AppData", cAlternateFileName="")) returned 1 [0222.987] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\*.*" (normalized: "c:\\users\\default\\appdata\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30302e78, dwReserved1=0x74652e32, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0222.987] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30302e78, dwReserved1=0x74652e32, cFileName="..", cAlternateFileName="")) returned 1 [0222.988] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30302e78, dwReserved1=0x74652e32, cFileName="Local", cAlternateFileName="")) returned 1 [0222.988] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0222.989] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.989] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0222.989] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\application data\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x550000, ftCreationTime.dwHighDateTime=0x56ddf0, ftLastAccessTime.dwLowDateTime=0xfffffffe, ftLastAccessTime.dwHighDateTime=0x201, ftLastWriteTime.dwLowDateTime=0x48, ftLastWriteTime.dwHighDateTime=0xc0002, nFileSizeHigh=0x56ddf8, nFileSizeLow=0x56ddf0, dwReserved0=0x555814, dwReserved1=0x201, cFileName="\x01", cAlternateFileName="\x90äU")) returned 0xffffffff [0222.990] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0222.990] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\history\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x550000, ftCreationTime.dwHighDateTime=0x56ddf0, ftLastAccessTime.dwLowDateTime=0xfffffffe, ftLastAccessTime.dwHighDateTime=0x201, ftLastWriteTime.dwLowDateTime=0x48, ftLastWriteTime.dwHighDateTime=0xc0002, nFileSizeHigh=0x56ddf8, nFileSizeLow=0x56ddf0, dwReserved0=0x555814, dwReserved1=0x201, cFileName="\x01", cAlternateFileName="\x90äU")) returned 0xffffffff [0222.990] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0222.990] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0222.990] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.990] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0222.990] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0222.991] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0222.991] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0222.991] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0222.991] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.991] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.991] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0222.991] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 0 [0222.991] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0222.991] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61746144, dwReserved1=0x726f7453, cFileName="Windows", cAlternateFileName="")) returned 1 [0222.991] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0222.993] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="..", cAlternateFileName="")) returned 1 [0222.993] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0222.993] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\gameexplorer\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0222.994] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.994] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.994] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0222.994] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="History", cAlternateFileName="")) returned 1 [0222.994] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0222.995] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.995] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.995] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0222.995] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0222.995] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCache\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\inetcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0222.995] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.995] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.995] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0222.995] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0222.996] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\inetcookies\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0222.996] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.996] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.996] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0222.996] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3757c8c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3757c8c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2b00042f, cFileName="Shell", cAlternateFileName="")) returned 1 [0222.996] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Shell\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\shell\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3757c8c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3757c8c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e850 [0222.996] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3757c8c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3757c8c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.996] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3757c8c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18778, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultLayouts.xml", cAlternateFileName="DEFAUL~1.XML")) returned 1 [0222.997] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3757c8c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18778, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultLayouts.xml", cAlternateFileName="DEFAUL~1.XML")) returned 0 [0222.997] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0222.997] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2e737475, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0222.997] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3757c8c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18778, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultLayouts.xml", cAlternateFileName="\x10âU")) returned 0xffffffff [0222.997] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2e737475, cFileName="WinX", cAlternateFileName="")) returned 1 [0222.997] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730074, dwReserved1=0x78002e, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0222.998] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730074, dwReserved1=0x78002e, cFileName="..", cAlternateFileName="")) returned 1 [0222.998] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf686326, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730074, dwReserved1=0x78002e, cFileName="Group1", cAlternateFileName="")) returned 1 [0222.998] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf686326, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0222.998] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf686326, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.999] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 - Desktop.lnk", cAlternateFileName="")) returned 1 [0222.999] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0222.999] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0222.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0222.999] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0222.999] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0222.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0222.999] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk")) returned 0x20 [0223.000] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.000] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.001] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0223.002] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x455, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0223.003] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.003] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.003] CloseHandle (hObject=0x1d8) returned 1 [0223.003] CloseHandle (hObject=0x1e8) returned 1 [0223.004] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.005] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.005] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="1 - Desktop.lnk", cAlternateFileName="")) returned 0x55e790 [0223.005] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="1 - Desktop.lnk", cAlternateFileName="")) returned 0 [0223.006] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0223.006] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk")) returned 1 [0223.006] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk")) returned 0xffffffff [0223.006] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf686326, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee78381, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.007] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.007] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.007] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.007] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0223.007] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini")) returned 0x26 [0223.007] VirtualAlloc (lpAddress=0x1f6c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x1f6c000 [0223.008] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.008] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.010] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x51, lpOverlapped=0x0) returned 1 [0223.013] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x51, lpOverlapped=0x0) returned 1 [0223.014] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.014] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.014] CloseHandle (hObject=0x1e8) returned 1 [0223.014] CloseHandle (hObject=0x1d8) returned 1 [0223.015] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.016] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.016] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf686326, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee78381, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e390 [0223.016] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf686326, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee78381, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.016] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0223.016] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini")) returned 1 [0223.017] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini")) returned 0xffffffff [0223.018] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf686326, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee78381, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.018] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0223.018] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6b6e6c2e, cFileName="Group2", cAlternateFileName="")) returned 1 [0223.018] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0223.020] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.020] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="1 - Run.lnk", cAlternateFileName="")) returned 1 [0223.021] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.021] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.021] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.021] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.021] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.021] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0223.021] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk")) returned 0x20 [0223.022] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.022] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.023] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0223.025] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x455, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0223.026] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.026] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.026] CloseHandle (hObject=0x1d8) returned 1 [0223.026] CloseHandle (hObject=0x1e8) returned 1 [0223.027] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.028] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.028] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="1 - Run.lnk", cAlternateFileName="")) returned 0x55e710 [0223.028] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="1 - Run.lnk", cAlternateFileName="")) returned 0 [0223.028] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0223.028] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk")) returned 1 [0223.028] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk")) returned 0xffffffff [0223.028] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="2 - Search.lnk", cAlternateFileName="")) returned 1 [0223.029] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.029] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.043] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.043] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.043] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.043] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0223.043] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk")) returned 0x20 [0223.044] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.044] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.045] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0223.046] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x455, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0223.047] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.048] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.048] CloseHandle (hObject=0x1e8) returned 1 [0223.048] CloseHandle (hObject=0x1d8) returned 1 [0223.049] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.049] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.050] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="2 - Search.lnk", cAlternateFileName="")) returned 0x55e590 [0223.050] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="2 - Search.lnk", cAlternateFileName="")) returned 0 [0223.050] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0223.051] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk")) returned 1 [0223.052] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk")) returned 0xffffffff [0223.052] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="3 - Windows Explorer.lnk", cAlternateFileName="")) returned 1 [0223.052] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.052] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.052] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.052] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0223.052] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk")) returned 0x20 [0223.053] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.053] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.054] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0223.055] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x455, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0223.056] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.056] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.057] CloseHandle (hObject=0x1d8) returned 1 [0223.057] CloseHandle (hObject=0x1e8) returned 1 [0223.058] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.058] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.058] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="3 - Windows Explorer.lnk", cAlternateFileName="")) returned 0x55e590 [0223.058] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="3 - Windows Explorer.lnk", cAlternateFileName="")) returned 0 [0223.058] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0223.058] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk")) returned 1 [0223.059] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk")) returned 0xffffffff [0223.059] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="4 - Control Panel.lnk", cAlternateFileName="")) returned 1 [0223.059] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.059] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.059] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.059] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0223.060] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk")) returned 0x20 [0223.060] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x1) returned 0x650000 [0223.060] VirtualAlloc (lpAddress=0x650000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x650000 [0223.061] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.061] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.061] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0223.063] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0223.064] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.064] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.064] CloseHandle (hObject=0x1e8) returned 1 [0223.064] CloseHandle (hObject=0x1d8) returned 1 [0223.065] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.065] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.066] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="4 - Control Panel.lnk", cAlternateFileName="")) returned 0x55e390 [0223.066] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="4 - Control Panel.lnk", cAlternateFileName="")) returned 0 [0223.066] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0223.066] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk")) returned 1 [0223.066] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk")) returned 0xffffffff [0223.066] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="5 - Task Manager.lnk", cAlternateFileName="")) returned 1 [0223.067] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.067] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.067] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.067] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.067] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.067] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0223.067] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk")) returned 0x20 [0223.067] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.068] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.068] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3fd, lpOverlapped=0x0) returned 1 [0223.069] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3fd, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3fd, lpOverlapped=0x0) returned 1 [0223.071] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.071] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.071] CloseHandle (hObject=0x1d8) returned 1 [0223.071] CloseHandle (hObject=0x1e8) returned 1 [0223.072] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.072] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.072] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="5 - Task Manager.lnk", cAlternateFileName="")) returned 0x55e250 [0223.072] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="5 - Task Manager.lnk", cAlternateFileName="")) returned 0 [0223.073] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0223.073] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk")) returned 1 [0223.073] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk")) returned 0xffffffff [0223.073] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.073] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.073] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.074] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.074] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.074] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.074] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0223.074] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini")) returned 0x26 [0223.074] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.074] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.075] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x14c, lpOverlapped=0x0) returned 1 [0223.076] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x14c, lpOverlapped=0x0) returned 1 [0223.077] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.077] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.077] CloseHandle (hObject=0x1e8) returned 1 [0223.078] CloseHandle (hObject=0x1d8) returned 1 [0223.079] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.079] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.080] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e250 [0223.080] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.080] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0223.080] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini")) returned 1 [0223.083] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini")) returned 0xffffffff [0223.083] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.083] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0223.083] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6567616e, cFileName="Group3", cAlternateFileName="")) returned 1 [0223.084] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0223.091] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.091] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="01 - Command Prompt.lnk", cAlternateFileName="")) returned 1 [0223.091] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.091] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.091] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.091] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.091] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.092] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0223.092] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk")) returned 0x20 [0223.092] VirtualAlloc (lpAddress=0x654000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x654000 [0223.093] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.093] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.094] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0223.095] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0223.096] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.096] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.096] CloseHandle (hObject=0x1d8) returned 1 [0223.096] CloseHandle (hObject=0x1e8) returned 1 [0223.097] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.098] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.098] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="01 - Command Prompt.lnk", cAlternateFileName="")) returned 0x55e750 [0223.098] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="01 - Command Prompt.lnk", cAlternateFileName="")) returned 0 [0223.098] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0223.098] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk")) returned 1 [0223.099] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk")) returned 0xffffffff [0223.099] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="01a - Windows PowerShell.lnk", cAlternateFileName="")) returned 1 [0223.099] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.099] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.100] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.100] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.100] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.100] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0223.100] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk")) returned 0x20 [0223.100] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.100] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.101] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x467, lpOverlapped=0x0) returned 1 [0223.102] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x467, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x467, lpOverlapped=0x0) returned 1 [0223.103] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.103] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.103] CloseHandle (hObject=0x1e8) returned 1 [0223.104] CloseHandle (hObject=0x1d8) returned 1 [0223.105] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.105] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.105] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="01a - Windows PowerShell.lnk", cAlternateFileName="")) returned 0x55e390 [0223.105] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="01a - Windows PowerShell.lnk", cAlternateFileName="")) returned 0 [0223.105] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0223.105] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk")) returned 1 [0223.106] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk")) returned 0xffffffff [0223.106] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="02 - Command Prompt.lnk", cAlternateFileName="")) returned 1 [0223.106] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.106] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.106] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.106] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0223.106] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk")) returned 0x20 [0223.107] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.107] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.107] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x423, lpOverlapped=0x0) returned 1 [0223.109] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x423, lpOverlapped=0x0) returned 1 [0223.110] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.110] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.110] CloseHandle (hObject=0x1d8) returned 1 [0223.110] CloseHandle (hObject=0x1e8) returned 1 [0223.111] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.111] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.111] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="02 - Command Prompt.lnk", cAlternateFileName="")) returned 0x55e250 [0223.111] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="02 - Command Prompt.lnk", cAlternateFileName="")) returned 0 [0223.111] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0223.112] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk")) returned 1 [0223.112] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk")) returned 0xffffffff [0223.112] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="02a - Windows PowerShell.lnk", cAlternateFileName="")) returned 1 [0223.112] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.112] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.113] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.113] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0223.113] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk")) returned 0x20 [0223.113] VirtualAlloc (lpAddress=0x658000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x658000 [0223.113] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.114] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.114] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x493, lpOverlapped=0x0) returned 1 [0223.115] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x493, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x493, lpOverlapped=0x0) returned 1 [0223.117] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.117] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.117] CloseHandle (hObject=0x1e8) returned 1 [0223.117] CloseHandle (hObject=0x1d8) returned 1 [0223.123] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.123] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.123] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="02a - Windows PowerShell.lnk", cAlternateFileName="")) returned 0x55e7d0 [0223.123] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="02a - Windows PowerShell.lnk", cAlternateFileName="")) returned 0 [0223.124] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0223.124] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk")) returned 1 [0223.124] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk")) returned 0xffffffff [0223.124] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="03 - Computer Management.lnk", cAlternateFileName="")) returned 1 [0223.125] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.125] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.125] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.125] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0223.125] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk")) returned 0x20 [0223.129] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.129] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.130] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0223.131] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0223.132] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.132] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.132] CloseHandle (hObject=0x1d8) returned 1 [0223.133] CloseHandle (hObject=0x1e8) returned 1 [0223.134] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.134] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.135] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="03 - Computer Management.lnk", cAlternateFileName="")) returned 0x55e590 [0223.135] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="03 - Computer Management.lnk", cAlternateFileName="")) returned 0 [0223.135] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0223.135] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk")) returned 1 [0223.135] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk")) returned 0xffffffff [0223.135] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="04 - Disk Management.lnk", cAlternateFileName="")) returned 1 [0223.136] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.136] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.136] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.136] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0223.136] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk")) returned 0x20 [0223.136] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.137] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.137] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0223.139] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0223.140] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.140] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.140] CloseHandle (hObject=0x1e8) returned 1 [0223.140] CloseHandle (hObject=0x1d8) returned 1 [0223.141] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.141] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.141] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="04 - Disk Management.lnk", cAlternateFileName="")) returned 0x55e390 [0223.141] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="04 - Disk Management.lnk", cAlternateFileName="")) returned 0 [0223.141] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0223.142] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk")) returned 1 [0223.142] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk")) returned 0xffffffff [0223.142] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="04-1 - Network Connections.lnk", cAlternateFileName="")) returned 1 [0223.142] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.142] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.142] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f6a72c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.142] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f6a72c) returned 0x18 [0223.143] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk")) returned 0x20 [0223.143] VirtualAlloc (lpAddress=0x65c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x65c000 [0223.143] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.143] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.144] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x449, lpOverlapped=0x0) returned 1 [0223.146] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x449, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x449, lpOverlapped=0x0) returned 1 [0223.147] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.147] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.147] CloseHandle (hObject=0x1d8) returned 1 [0223.147] CloseHandle (hObject=0x1e8) returned 1 [0223.148] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.148] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.148] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="04-1 - Network Connections.lnk", cAlternateFileName="")) returned 0x55e890 [0223.149] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="04-1 - Network Connections.lnk", cAlternateFileName="")) returned 0 [0223.149] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0223.149] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk")) returned 1 [0223.149] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk")) returned 0xffffffff [0223.149] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="05 - Device Manager.lnk", cAlternateFileName="")) returned 1 [0223.149] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.150] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.150] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.150] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.150] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.150] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0223.150] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk")) returned 0x20 [0223.150] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.150] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.151] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x433, lpOverlapped=0x0) returned 1 [0223.152] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x433, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x433, lpOverlapped=0x0) returned 1 [0223.153] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.153] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.153] CloseHandle (hObject=0x1e8) returned 1 [0223.154] CloseHandle (hObject=0x1d8) returned 1 [0223.155] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.155] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.155] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="05 - Device Manager.lnk", cAlternateFileName="")) returned 0x55e290 [0223.156] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="05 - Device Manager.lnk", cAlternateFileName="")) returned 0 [0223.156] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0223.156] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk")) returned 1 [0223.156] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk")) returned 0xffffffff [0223.156] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="06 - System.lnk", cAlternateFileName="")) returned 1 [0223.157] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.157] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.157] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f6a72c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.157] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f6a72c) returned 0x18 [0223.158] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk")) returned 0x20 [0223.159] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.159] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.160] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x425, lpOverlapped=0x0) returned 1 [0223.162] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x425, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x425, lpOverlapped=0x0) returned 1 [0223.163] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.163] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.163] CloseHandle (hObject=0x1d8) returned 1 [0223.163] CloseHandle (hObject=0x1e8) returned 1 [0223.164] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.165] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.165] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="06 - System.lnk", cAlternateFileName="")) returned 0x55e410 [0223.165] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="06 - System.lnk", cAlternateFileName="")) returned 0 [0223.165] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0223.165] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk")) returned 1 [0223.165] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk")) returned 0xffffffff [0223.165] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="07 - Event Viewer.lnk", cAlternateFileName="")) returned 1 [0223.166] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.166] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.166] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.166] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0223.166] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk")) returned 0x20 [0223.166] VirtualAlloc (lpAddress=0x660000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x660000 [0223.167] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.167] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.167] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0223.171] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0223.172] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.172] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.172] CloseHandle (hObject=0x1e8) returned 1 [0223.172] CloseHandle (hObject=0x1d8) returned 1 [0223.173] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.174] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.174] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="07 - Event Viewer.lnk", cAlternateFileName="")) returned 0x55e250 [0223.174] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="07 - Event Viewer.lnk", cAlternateFileName="")) returned 0 [0223.174] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0223.174] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk")) returned 1 [0223.174] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk")) returned 0xffffffff [0223.174] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="08 - Power Options.lnk", cAlternateFileName="")) returned 1 [0223.175] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.177] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.177] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.177] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0223.177] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk")) returned 0x20 [0223.178] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.178] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.179] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x431, lpOverlapped=0x0) returned 1 [0223.181] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x431, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x431, lpOverlapped=0x0) returned 1 [0223.182] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.182] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.182] CloseHandle (hObject=0x1d8) returned 1 [0223.182] CloseHandle (hObject=0x1e8) returned 1 [0223.183] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.184] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.184] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="08 - Power Options.lnk", cAlternateFileName="")) returned 0x55e410 [0223.184] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="08 - Power Options.lnk", cAlternateFileName="")) returned 0 [0223.184] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0223.184] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk")) returned 1 [0223.185] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk")) returned 0xffffffff [0223.185] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="09 - Mobility Center.lnk", cAlternateFileName="")) returned 1 [0223.185] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.185] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.185] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.185] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.185] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.185] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0223.185] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk")) returned 0x20 [0223.186] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.186] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.186] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0223.189] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0223.190] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.190] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.190] CloseHandle (hObject=0x1e8) returned 1 [0223.190] CloseHandle (hObject=0x1d8) returned 1 [0223.192] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.192] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.192] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="09 - Mobility Center.lnk", cAlternateFileName="")) returned 0x55e250 [0223.192] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="09 - Mobility Center.lnk", cAlternateFileName="")) returned 0 [0223.192] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0223.192] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk")) returned 1 [0223.193] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk")) returned 0xffffffff [0223.193] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="10 - Programs and Features.lnk", cAlternateFileName="")) returned 1 [0223.193] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.193] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0223.194] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk")) returned 0x20 [0223.194] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.195] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.195] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x43f, lpOverlapped=0x0) returned 1 [0223.197] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x43f, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x43f, lpOverlapped=0x0) returned 1 [0223.198] ReadFile (in: hFile=0x1d8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.198] WriteFile (in: hFile=0x1e8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.198] CloseHandle (hObject=0x1d8) returned 1 [0223.198] CloseHandle (hObject=0x1e8) returned 1 [0223.199] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.199] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.199] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="10 - Programs and Features.lnk", cAlternateFileName="")) returned 0x55e590 [0223.200] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="10 - Programs and Features.lnk", cAlternateFileName="")) returned 0 [0223.200] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0223.200] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk")) returned 1 [0223.200] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk")) returned 0xffffffff [0223.200] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.200] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.200] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.201] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.201] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0223.201] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini")) returned 0x26 [0223.201] VirtualAlloc (lpAddress=0x664000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x664000 [0223.202] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.202] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.202] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3bb, lpOverlapped=0x0) returned 1 [0223.204] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3bb, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3bb, lpOverlapped=0x0) returned 1 [0223.205] ReadFile (in: hFile=0x1e8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.205] WriteFile (in: hFile=0x1d8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0223.205] CloseHandle (hObject=0x1e8) returned 1 [0223.205] CloseHandle (hObject=0x1d8) returned 1 [0223.206] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.206] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.206] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e590 [0223.207] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.207] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0223.207] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini")) returned 1 [0223.208] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini")) returned 0xffffffff [0223.208] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.209] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0223.209] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6567616e, cFileName="Group3", cAlternateFileName="")) returned 0 [0223.209] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0223.209] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2e737475, cFileName="WinX", cAlternateFileName="")) returned 0 [0223.209] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0223.209] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x377dee7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207972, dwReserved1=0x7265746e, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0223.209] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x377dee7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2e737475, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0223.212] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x377dee7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2e737475, cFileName="..", cAlternateFileName="")) returned 1 [0223.212] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2e737475, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0223.213] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6120736d, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0223.213] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6120736d, cFileName="..", cAlternateFileName="")) returned 1 [0223.213] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6120736d, cFileName="..", cAlternateFileName="")) returned 0 [0223.213] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0223.213] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377dee7, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x2e737475, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0223.213] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.213] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.214] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.214] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.214] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.214] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0223.214] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini")) returned 0x20 [0223.214] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0223.214] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0223.215] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x50, lpOverlapped=0x0) returned 1 [0223.216] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x50, lpOverlapped=0x0) returned 1 [0223.217] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0223.217] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0223.217] CloseHandle (hObject=0x1d0) returned 1 [0223.217] CloseHandle (hObject=0x1e4) returned 1 [0223.218] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.219] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.219] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377dee7, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="settings.ini", cAlternateFileName="")) returned 0x55e310 [0223.219] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377dee7, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="settings.ini", cAlternateFileName="")) returned 0 [0223.219] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0223.219] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini")) returned 1 [0223.220] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini")) returned 0xffffffff [0223.220] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377dee7, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x2e737475, cFileName="settings.ini", cAlternateFileName="")) returned 0 [0223.220] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0223.220] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x377dee7, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207972, dwReserved1=0x7265746e, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0223.221] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0223.221] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64695320, dwReserved1=0x72616265, cFileName="Temp", cAlternateFileName="")) returned 1 [0223.221] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\temp\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e73, dwReserved1=0x72657469, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0223.221] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e73, dwReserved1=0x72657469, cFileName="..", cAlternateFileName="")) returned 1 [0223.221] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e73, dwReserved1=0x72657469, cFileName="..", cAlternateFileName="")) returned 0 [0223.221] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0223.221] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x72616265, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0223.221] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e73, dwReserved1=0x72657469, cFileName="..", cAlternateFileName="\x90äU")) returned 0xffffffff [0223.221] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x72616265, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0 [0223.221] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0223.222] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207972, dwReserved1=0x7265746e, cFileName="Roaming", cAlternateFileName="")) returned 1 [0223.222] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x72616265, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0223.222] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x72616265, cFileName="..", cAlternateFileName="")) returned 1 [0223.222] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x72616265, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0223.222] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e73, dwReserved1=0x2700082f, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0223.223] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e73, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="")) returned 1 [0223.223] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e73, dwReserved1=0x2700082f, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0223.223] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0223.224] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="")) returned 1 [0223.224] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf6600cb, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf6600cb, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0223.224] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf6600cb, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf6600cb, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0223.224] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf6600cb, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf6600cb, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.224] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf6600cb, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.224] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.224] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.224] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.224] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.225] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.225] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0223.225] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini")) returned 0x26 [0223.226] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0223.226] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.228] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x94, lpOverlapped=0x0) returned 1 [0223.228] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x94, lpOverlapped=0x0) returned 1 [0223.229] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0223.230] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0223.230] CloseHandle (hObject=0x1d0) returned 1 [0223.230] CloseHandle (hObject=0x1d8) returned 1 [0223.235] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.235] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.236] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf6600cb, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e850 [0223.236] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf6600cb, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee52126, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.236] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0223.236] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini")) returned 1 [0223.237] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini")) returned 0xffffffff [0223.237] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x55a2d0, dwReserved1=0x2000002, cFileName="Shows Desktop.lnk", cAlternateFileName="")) returned 1 [0223.238] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.238] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.238] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.238] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.238] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.238] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0223.238] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk")) returned 0x20 [0223.238] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.239] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0223.239] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x160, lpOverlapped=0x0) returned 1 [0223.240] WriteFile (in: hFile=0x1d0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x160, lpOverlapped=0x0) returned 1 [0223.241] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0223.241] WriteFile (in: hFile=0x1d0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0223.241] CloseHandle (hObject=0x1d8) returned 1 [0223.241] CloseHandle (hObject=0x1d0) returned 1 [0223.243] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.243] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.243] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Shows Desktop.lnk", cAlternateFileName="")) returned 0x55e490 [0223.243] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fff9e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x251fff9e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Shows Desktop.lnk", cAlternateFileName="")) returned 0 [0223.243] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0223.243] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk")) returned 1 [0223.244] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk")) returned 0xffffffff [0223.244] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="Window Switcher.lnk", cAlternateFileName="")) returned 1 [0223.244] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.244] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.244] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.244] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.245] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0223.245] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk")) returned 0x20 [0223.247] VirtualAlloc (lpAddress=0x668000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x668000 [0223.247] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0223.247] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.248] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x14e, lpOverlapped=0x0) returned 1 [0223.249] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x14e, lpOverlapped=0x0) returned 1 [0223.250] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0223.250] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0223.250] CloseHandle (hObject=0x1d0) returned 1 [0223.250] CloseHandle (hObject=0x1d8) returned 1 [0223.251] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.251] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.251] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Window Switcher.lnk", cAlternateFileName="")) returned 0x55e850 [0223.252] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Window Switcher.lnk", cAlternateFileName="")) returned 0 [0223.252] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0223.252] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk")) returned 1 [0223.252] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk")) returned 0xffffffff [0223.252] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="Window Switcher.lnk", cAlternateFileName="")) returned 0 [0223.252] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0223.252] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf6600cb, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf6600cb, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0 [0223.252] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0223.252] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x636e7561, dwReserved1=0x27000868, cFileName="Windows", cAlternateFileName="")) returned 1 [0223.253] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0223.255] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="..", cAlternateFileName="")) returned 1 [0223.255] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1 [0223.255] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\network shortcuts\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0223.256] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.256] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0223.256] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0223.256] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1 [0223.256] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\printer shortcuts\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0223.257] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.257] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0223.257] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0223.257] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="Recent", cAlternateFileName="")) returned 1 [0223.257] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0223.257] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.257] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0223.257] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0223.257] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37a4145, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37a4145, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="SendTo", cAlternateFileName="")) returned 1 [0223.258] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37a4145, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37a4145, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0223.259] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37a4145, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37a4145, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.260] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Compressed (zipped) Folder.ZFSendToTarget", cAlternateFileName="COMPRE~1.ZFS")) returned 1 [0223.260] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7, dwReserved0=0x69007a, dwReserved1=0x700070, cFileName="Desktop (create shortcut).DeskLink", cAlternateFileName="DESKTO~1.DES")) returned 1 [0223.261] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x740061, dwReserved1=0x200065, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0223.261] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.261] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.261] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.261] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.261] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.261] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0223.261] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini")) returned 0x26 [0223.262] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.262] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0223.262] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x22e, lpOverlapped=0x0) returned 1 [0223.263] WriteFile (in: hFile=0x1d0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x22e, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x22e, lpOverlapped=0x0) returned 1 [0223.264] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0223.264] WriteFile (in: hFile=0x1d0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0223.264] CloseHandle (hObject=0x1d8) returned 1 [0223.265] CloseHandle (hObject=0x1d0) returned 1 [0223.269] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.304] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.304] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Desktop.ini", cAlternateFileName="")) returned 0x55e750 [0223.304] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Desktop.ini", cAlternateFileName="")) returned 0 [0223.304] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0223.304] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini")) returned 1 [0223.305] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini")) returned 0xffffffff [0223.305] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571e447b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x571e447b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x571e447b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Fax Recipient.lnk", cAlternateFileName="")) returned 1 [0223.306] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.306] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.306] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.306] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.306] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.306] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0223.306] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk")) returned 0x20 [0223.307] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0223.307] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.308] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x458, lpOverlapped=0x0) returned 1 [0223.309] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x458, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x458, lpOverlapped=0x0) returned 1 [0223.310] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0223.310] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0223.310] CloseHandle (hObject=0x1d0) returned 1 [0223.310] CloseHandle (hObject=0x1d8) returned 1 [0223.312] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.312] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.312] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571e447b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x571e447b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x571e447b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Fax Recipient.lnk", cAlternateFileName="")) returned 0x55e650 [0223.312] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571e447b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x571e447b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x571e447b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Fax Recipient.lnk", cAlternateFileName="")) returned 0 [0223.312] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0223.312] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk")) returned 1 [0223.313] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk")) returned 0xffffffff [0223.313] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 1 [0223.313] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 0 [0223.313] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0223.313] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69706963, dwReserved1=0x2e746e65, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0223.314] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74006e, dwReserved1=0x6d002e, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0223.314] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74006e, dwReserved1=0x6d002e, cFileName="..", cAlternateFileName="")) returned 1 [0223.315] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74006e, dwReserved1=0x6d002e, cFileName="Programs", cAlternateFileName="")) returned 1 [0223.315] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0223.319] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0223.319] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0223.319] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2800062e, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0223.320] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2800062e, cFileName="..", cAlternateFileName="")) returned 1 [0223.320] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x2800062e, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0223.320] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.320] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.320] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.320] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.320] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.320] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0223.321] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini")) returned 0x26 [0223.321] VirtualAlloc (lpAddress=0x66c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x66c000 [0223.321] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.322] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.324] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x238, lpOverlapped=0x0) returned 1 [0223.326] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x238, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x238, lpOverlapped=0x0) returned 1 [0223.327] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.327] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.327] CloseHandle (hObject=0x1e8) returned 1 [0223.327] CloseHandle (hObject=0x1ec) returned 1 [0223.329] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.329] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.329] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Desktop.ini", cAlternateFileName="")) returned 0x55e650 [0223.329] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Desktop.ini", cAlternateFileName="")) returned 0 [0223.330] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0223.330] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini")) returned 1 [0223.331] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini")) returned 0xffffffff [0223.331] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18863489, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x18863489, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x18863489, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Magnify.lnk", cAlternateFileName="")) returned 1 [0223.331] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.332] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.332] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.332] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0223.332] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk")) returned 0x20 [0223.333] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.333] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.334] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x452, lpOverlapped=0x0) returned 1 [0223.335] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x452, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x452, lpOverlapped=0x0) returned 1 [0223.337] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.337] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.337] CloseHandle (hObject=0x1ec) returned 1 [0223.337] CloseHandle (hObject=0x1e8) returned 1 [0223.338] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.339] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.339] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18863489, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x18863489, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x18863489, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Magnify.lnk", cAlternateFileName="")) returned 0x55e690 [0223.339] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18863489, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x18863489, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x18863489, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Magnify.lnk", cAlternateFileName="")) returned 0 [0223.339] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0223.339] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk")) returned 1 [0223.340] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk")) returned 0xffffffff [0223.340] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x188896e8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x188896e8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x188896e8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Narrator.lnk", cAlternateFileName="")) returned 1 [0223.340] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.340] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.340] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.340] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.340] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.341] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0223.341] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk")) returned 0x20 [0223.341] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.341] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.342] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x454, lpOverlapped=0x0) returned 1 [0223.344] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x454, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x454, lpOverlapped=0x0) returned 1 [0223.345] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.345] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.345] CloseHandle (hObject=0x1e8) returned 1 [0223.345] CloseHandle (hObject=0x1ec) returned 1 [0223.346] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.347] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.347] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x188896e8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x188896e8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x188896e8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Narrator.lnk", cAlternateFileName="")) returned 0x55e710 [0223.348] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x188896e8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x188896e8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x188896e8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Narrator.lnk", cAlternateFileName="")) returned 0 [0223.348] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0223.348] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk")) returned 1 [0223.348] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk")) returned 0xffffffff [0223.348] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1870bf67, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1870bf67, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1870bf67, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="On-Screen Keyboard.lnk", cAlternateFileName="")) returned 1 [0223.349] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.349] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0223.349] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk")) returned 0x20 [0223.350] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.350] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.350] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x452, lpOverlapped=0x0) returned 1 [0223.352] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x452, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x452, lpOverlapped=0x0) returned 1 [0223.353] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.353] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.353] CloseHandle (hObject=0x1ec) returned 1 [0223.354] CloseHandle (hObject=0x1e8) returned 1 [0223.355] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.355] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.355] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1870bf67, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1870bf67, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1870bf67, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x550370, dwReserved1=0xf, cFileName="On-Screen Keyboard.lnk", cAlternateFileName="")) returned 0x55e8d0 [0223.356] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1870bf67, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1870bf67, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1870bf67, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x550370, dwReserved1=0xf, cFileName="On-Screen Keyboard.lnk", cAlternateFileName="")) returned 0 [0223.356] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0223.356] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk")) returned 1 [0223.356] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk")) returned 0xffffffff [0223.356] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1870bf67, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1870bf67, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1870bf67, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="On-Screen Keyboard.lnk", cAlternateFileName="")) returned 0 [0223.356] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0223.357] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4b206e65, dwReserved1=0x6f627965, cFileName="Accessories", cAlternateFileName="ACCESS~2")) returned 1 [0223.357] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0223.357] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0223.357] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37ca39c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee05c71, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0223.357] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.357] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.358] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.358] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0223.358] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini")) returned 0x26 [0223.366] VirtualAlloc (lpAddress=0x670000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x670000 [0223.366] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.367] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.367] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x148, lpOverlapped=0x0) returned 1 [0223.368] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x148, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x148, lpOverlapped=0x0) returned 1 [0223.369] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.369] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.369] CloseHandle (hObject=0x1e8) returned 1 [0223.369] CloseHandle (hObject=0x1ec) returned 1 [0223.371] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.371] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.371] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37ca39c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee05c71, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Desktop.ini", cAlternateFileName="")) returned 0x55e610 [0223.371] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37ca39c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee05c71, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Desktop.ini", cAlternateFileName="")) returned 0 [0223.371] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0223.372] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini")) returned 1 [0223.373] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini")) returned 0xffffffff [0223.373] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2206112b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2206112b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2206112b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Notepad.lnk", cAlternateFileName="")) returned 1 [0223.373] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.373] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.373] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.373] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.373] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.373] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0223.374] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk")) returned 0x20 [0223.374] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.374] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.376] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x486, lpOverlapped=0x0) returned 1 [0223.378] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x486, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x486, lpOverlapped=0x0) returned 1 [0223.379] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.379] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.379] CloseHandle (hObject=0x1ec) returned 1 [0223.380] CloseHandle (hObject=0x1e8) returned 1 [0223.381] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.381] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.381] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2206112b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2206112b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2206112b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Notepad.lnk", cAlternateFileName="")) returned 0x55e610 [0223.381] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2206112b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2206112b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2206112b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Notepad.lnk", cAlternateFileName="")) returned 0 [0223.381] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0223.382] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk")) returned 1 [0223.382] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk")) returned 0xffffffff [0223.382] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2206112b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2206112b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2206112b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Notepad.lnk", cAlternateFileName="")) returned 0 [0223.382] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0223.382] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b6e6c2e, dwReserved1=0x6f627965, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0223.382] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0223.383] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.383] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37ca39c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0223.383] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.383] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.384] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.384] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0223.384] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini")) returned 0x26 [0223.384] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.384] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.388] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0xaa, lpOverlapped=0x0) returned 1 [0223.389] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0xaa, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0xaa, lpOverlapped=0x0) returned 1 [0223.390] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.390] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.390] CloseHandle (hObject=0x1e8) returned 1 [0223.390] CloseHandle (hObject=0x1ec) returned 1 [0223.391] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.391] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.391] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37ca39c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Desktop.ini", cAlternateFileName="")) returned 0x55e510 [0223.391] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37ca39c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Desktop.ini", cAlternateFileName="")) returned 0 [0223.391] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0223.392] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini")) returned 1 [0223.393] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini")) returned 0xffffffff [0223.393] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37ca39c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Desktop.ini", cAlternateFileName="")) returned 0 [0223.393] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0223.393] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6f627965, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0223.393] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0223.395] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37ca39c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37ca39c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.395] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f9d556, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x14f9d556, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x14f9d556, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x476, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Command Prompt.lnk", cAlternateFileName="")) returned 1 [0223.395] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.395] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.396] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.396] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.396] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.396] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0223.396] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk")) returned 0x20 [0223.396] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.396] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.397] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x476, lpOverlapped=0x0) returned 1 [0223.399] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x476, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x476, lpOverlapped=0x0) returned 1 [0223.400] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.400] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.400] CloseHandle (hObject=0x1ec) returned 1 [0223.400] CloseHandle (hObject=0x1e8) returned 1 [0223.401] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.402] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.402] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f9d556, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x14f9d556, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x14f9d556, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x476, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Command Prompt.lnk", cAlternateFileName="")) returned 0x55e650 [0223.402] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14f9d556, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x14f9d556, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x14f9d556, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x476, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Command Prompt.lnk", cAlternateFileName="")) returned 0 [0223.402] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0223.402] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk")) returned 1 [0223.403] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk")) returned 0xffffffff [0223.403] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14f, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="computer.lnk", cAlternateFileName="")) returned 1 [0223.403] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.403] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.403] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.403] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0223.404] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk")) returned 0x20 [0223.404] VirtualAlloc (lpAddress=0x674000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x674000 [0223.404] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.404] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.405] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x14f, lpOverlapped=0x0) returned 1 [0223.476] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x14f, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x14f, lpOverlapped=0x0) returned 1 [0223.478] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.478] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.478] CloseHandle (hObject=0x1e8) returned 1 [0223.478] CloseHandle (hObject=0x1ec) returned 1 [0223.483] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.484] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.484] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14f, dwReserved0=0x550370, dwReserved1=0x11, cFileName="computer.lnk", cAlternateFileName="")) returned 0x55e310 [0223.484] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14f, dwReserved0=0x550370, dwReserved1=0x11, cFileName="computer.lnk", cAlternateFileName="")) returned 0 [0223.484] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0223.484] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk")) returned 1 [0223.485] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk")) returned 0xffffffff [0223.485] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x195, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Control Panel.lnk", cAlternateFileName="")) returned 1 [0223.485] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.485] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.485] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.485] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0223.486] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk")) returned 0x20 [0223.487] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.487] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.488] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x195, lpOverlapped=0x0) returned 1 [0223.489] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x195, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x195, lpOverlapped=0x0) returned 1 [0223.490] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.490] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.490] CloseHandle (hObject=0x1ec) returned 1 [0223.490] CloseHandle (hObject=0x1e8) returned 1 [0223.495] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.495] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.495] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x195, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Control Panel.lnk", cAlternateFileName="")) returned 0x55e2d0 [0223.496] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252726a6, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252726a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x195, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Control Panel.lnk", cAlternateFileName="")) returned 0 [0223.496] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0223.496] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk")) returned 1 [0223.496] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk")) returned 0xffffffff [0223.497] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Default Apps.lnk", cAlternateFileName="")) returned 1 [0223.497] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.497] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.497] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.497] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.498] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0223.498] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk")) returned 0x20 [0223.498] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.498] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.499] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x32f, lpOverlapped=0x0) returned 1 [0223.501] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x32f, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x32f, lpOverlapped=0x0) returned 1 [0223.503] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.503] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.503] CloseHandle (hObject=0x1e8) returned 1 [0223.503] CloseHandle (hObject=0x1ec) returned 1 [0223.511] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.511] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.511] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Default Apps.lnk", cAlternateFileName="")) returned 0x55e490 [0223.512] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Default Apps.lnk", cAlternateFileName="")) returned 0 [0223.512] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0223.512] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk")) returned 1 [0223.512] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk")) returned 0xffffffff [0223.512] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37ca39c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Desktop.ini", cAlternateFileName="")) returned 1 [0223.512] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.513] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.513] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.513] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.513] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.513] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0223.513] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini")) returned 0x26 [0223.513] VirtualAlloc (lpAddress=0x678000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x678000 [0223.514] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.514] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.514] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x3e0, lpOverlapped=0x0) returned 1 [0223.520] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x3e0, lpOverlapped=0x0) returned 1 [0223.521] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.521] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.521] CloseHandle (hObject=0x1ec) returned 1 [0223.521] CloseHandle (hObject=0x1e8) returned 1 [0223.523] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.523] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.523] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37ca39c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Desktop.ini", cAlternateFileName="")) returned 0x55e2d0 [0223.523] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37ca39c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Desktop.ini", cAlternateFileName="")) returned 0 [0223.523] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0223.523] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini")) returned 1 [0223.525] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini")) returned 0xffffffff [0223.525] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2524c44b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Devices.lnk", cAlternateFileName="")) returned 1 [0223.525] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.525] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.528] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.528] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0223.528] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk")) returned 0x20 [0223.528] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.529] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.529] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x32d, lpOverlapped=0x0) returned 1 [0223.531] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x32d, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x32d, lpOverlapped=0x0) returned 1 [0223.532] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.532] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.532] CloseHandle (hObject=0x1e8) returned 1 [0223.532] CloseHandle (hObject=0x1ec) returned 1 [0223.533] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.533] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.534] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2524c44b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Devices.lnk", cAlternateFileName="")) returned 0x55e8d0 [0223.534] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252261fd, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252261fd, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2524c44b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x550340, dwReserved1=0x6, cFileName="Devices.lnk", cAlternateFileName="")) returned 0 [0223.534] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0223.534] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk")) returned 1 [0223.535] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk")) returned 0xffffffff [0223.535] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="File Explorer.lnk", cAlternateFileName="")) returned 1 [0223.535] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.535] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.535] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.535] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0223.536] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk")) returned 0x20 [0223.537] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.537] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.537] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x197, lpOverlapped=0x0) returned 1 [0223.539] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x197, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x197, lpOverlapped=0x0) returned 1 [0223.540] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.540] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.540] CloseHandle (hObject=0x1ec) returned 1 [0223.540] CloseHandle (hObject=0x1e8) returned 1 [0223.543] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.543] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.543] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="File Explorer.lnk", cAlternateFileName="")) returned 0x55e650 [0223.543] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="File Explorer.lnk", cAlternateFileName="")) returned 0 [0223.543] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0223.544] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk")) returned 1 [0223.544] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk")) returned 0xffffffff [0223.544] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Run.lnk", cAlternateFileName="")) returned 1 [0223.544] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.544] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.545] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.545] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0223.545] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk")) returned 0x20 [0223.545] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.545] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.546] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x199, lpOverlapped=0x0) returned 1 [0223.547] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x199, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x199, lpOverlapped=0x0) returned 1 [0223.548] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.548] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.548] CloseHandle (hObject=0x1e8) returned 1 [0223.548] CloseHandle (hObject=0x1ec) returned 1 [0223.549] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.550] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.550] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="Run.lnk", cAlternateFileName="")) returned 0x55e2d0 [0223.556] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="Run.lnk", cAlternateFileName="")) returned 0 [0223.556] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0223.556] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk")) returned 1 [0223.556] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk")) returned 0xffffffff [0223.556] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252988fc, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x252988fc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Run.lnk", cAlternateFileName="")) returned 0 [0223.556] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0223.557] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x726f6c70, dwReserved1=0x6c2e7265, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0223.557] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0223.558] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.558] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee2becc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.559] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.559] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.559] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.559] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.559] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.559] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0223.559] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini")) returned 0x26 [0223.559] VirtualAlloc (lpAddress=0x67c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x67c000 [0223.560] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.560] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.561] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0xda, lpOverlapped=0x0) returned 1 [0223.565] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0xda, lpOverlapped=0x0) returned 1 [0223.567] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.567] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.567] CloseHandle (hObject=0x1ec) returned 1 [0223.567] CloseHandle (hObject=0x1e8) returned 1 [0223.568] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.569] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.569] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee2becc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e310 [0223.569] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf639e71, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x9ee2becc, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x9ee2becc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.569] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0223.569] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini")) returned 1 [0223.571] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini")) returned 0xffffffff [0223.571] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ca39c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8bc, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Windows PowerShell (x86).lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0223.571] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.571] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.571] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.571] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0223.572] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk")) returned 0x20 [0223.573] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.573] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.573] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x8bc, lpOverlapped=0x0) returned 1 [0223.575] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x8bc, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x8bc, lpOverlapped=0x0) returned 1 [0223.576] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.576] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.576] CloseHandle (hObject=0x1e8) returned 1 [0223.576] CloseHandle (hObject=0x1ec) returned 1 [0223.579] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.580] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.580] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ca39c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8bc, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="Windows PowerShell (x86).lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0x55e510 [0223.580] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ca39c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8bc, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="Windows PowerShell (x86).lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0223.580] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0223.580] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk")) returned 1 [0223.582] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk")) returned 0xffffffff [0223.582] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f066aa8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f066aa8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f066aa8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="Windows PowerShell ISE (x86).lnk", cAlternateFileName="")) returned 1 [0223.582] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.582] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.582] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.583] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0223.583] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk")) returned 0x20 [0223.583] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.583] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.584] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x4fa, lpOverlapped=0x0) returned 1 [0223.585] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x4fa, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x4fa, lpOverlapped=0x0) returned 1 [0223.587] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.587] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.587] CloseHandle (hObject=0x1ec) returned 1 [0223.587] CloseHandle (hObject=0x1e8) returned 1 [0223.588] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.588] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.589] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f066aa8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f066aa8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f066aa8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x550370, dwReserved1=0xb, cFileName="Windows PowerShell ISE (x86).lnk", cAlternateFileName="")) returned 0x55e5d0 [0223.589] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f066aa8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f066aa8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f066aa8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x550370, dwReserved1=0xb, cFileName="Windows PowerShell ISE (x86).lnk", cAlternateFileName="")) returned 0 [0223.589] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0223.591] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk")) returned 1 [0223.591] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk")) returned 0xffffffff [0223.591] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f066aa8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f066aa8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f066aa8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="")) returned 1 [0223.591] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.592] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.592] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.592] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0223.592] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk")) returned 0x20 [0223.592] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.592] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.594] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x4fa, lpOverlapped=0x0) returned 1 [0223.595] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x4fa, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x4fa, lpOverlapped=0x0) returned 1 [0223.598] ReadFile (in: hFile=0x1e8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.598] WriteFile (in: hFile=0x1ec, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.598] CloseHandle (hObject=0x1e8) returned 1 [0223.598] CloseHandle (hObject=0x1ec) returned 1 [0223.606] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.607] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.607] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f066aa8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f066aa8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f066aa8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="")) returned 0x55e310 [0223.607] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f066aa8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4f066aa8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4f066aa8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="Windows PowerShell ISE.lnk", cAlternateFileName="")) returned 0 [0223.607] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0223.607] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk")) returned 1 [0223.607] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk")) returned 0xffffffff [0223.607] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8bc, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0223.608] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.608] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.608] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.608] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.608] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.608] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0223.608] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk")) returned 0x20 [0223.608] VirtualAlloc (lpAddress=0x680000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x680000 [0223.609] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0223.609] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0223.609] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x8bc, lpOverlapped=0x0) returned 1 [0223.613] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x8bc, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x8bc, lpOverlapped=0x0) returned 1 [0223.614] ReadFile (in: hFile=0x1ec, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.614] WriteFile (in: hFile=0x1e8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0223.614] CloseHandle (hObject=0x1ec) returned 1 [0223.614] CloseHandle (hObject=0x1e8) returned 1 [0223.615] MoveFileA (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.616] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.616] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8bc, dwReserved0=0x550370, dwReserved1=0xd, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 0x55e310 [0223.616] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8bc, dwReserved0=0x550370, dwReserved1=0xd, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 0 [0223.616] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0223.616] DeleteFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk")) returned 1 [0223.617] GetFileAttributesA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk")) returned 0xffffffff [0223.617] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8bc, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="Windows PowerShell.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 0 [0223.617] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0223.617] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf639e71, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x726f6c70, dwReserved1=0x6c2e7265, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 0 [0223.618] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0223.618] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74006e, dwReserved1=0x6d002e, cFileName="Programs", cAlternateFileName="")) returned 0 [0223.618] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0223.618] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69706973, dwReserved1=0x2e746e65, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0223.618] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\templates\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x776f5020, dwReserved1=0x68537265, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0223.618] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x776f5020, dwReserved1=0x68537265, cFileName="..", cAlternateFileName="")) returned 1 [0223.618] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x776f5020, dwReserved1=0x68537265, cFileName="..", cAlternateFileName="")) returned 0 [0223.618] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0223.618] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69706973, dwReserved1=0x2e746e65, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0223.618] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0223.618] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x636e7561, dwReserved1=0x27000868, cFileName="Windows", cAlternateFileName="")) returned 0 [0223.618] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0223.619] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x72616265, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0223.619] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0223.619] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207972, dwReserved1=0x7265746e, cFileName="Roaming", cAlternateFileName="")) returned 0 [0223.619] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0223.619] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d54d8a8, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d54d8a8, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d54d8a8, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x746e6576, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0223.619] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Application Data\\*.*" (normalized: "c:\\users\\default\\application data\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207972, dwReserved1=0x7265746e, cFileName="Roaming", cAlternateFileName="\x90áU")) returned 0xffffffff [0223.619] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x746e6576, cFileName="Cookies", cAlternateFileName="")) returned 1 [0223.619] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Cookies\\*.*" (normalized: "c:\\users\\default\\cookies\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207972, dwReserved1=0x7265746e, cFileName="Roaming", cAlternateFileName="\x90áU")) returned 0xffffffff [0223.619] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x746e6576, cFileName="Desktop", cAlternateFileName="")) returned 1 [0223.619] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Desktop\\*.*" (normalized: "c:\\users\\default\\desktop\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207466, dwReserved1=0x7265746e, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0223.619] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207466, dwReserved1=0x7265746e, cFileName="..", cAlternateFileName="")) returned 1 [0223.620] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207466, dwReserved1=0x7265746e, cFileName="..", cAlternateFileName="")) returned 0 [0223.620] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0223.620] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x746e6576, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0223.620] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Documents\\*.*" (normalized: "c:\\users\\default\\documents\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207466, dwReserved1=0x7265746e, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0223.626] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207466, dwReserved1=0x7265746e, cFileName="..", cAlternateFileName="")) returned 1 [0223.626] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0223.626] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*.*" (normalized: "c:\\users\\default\\documents\\my music\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x2700082f, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x3000201, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x72616265, cFileName="Micr\x02\x04", cAlternateFileName="\x10äU")) returned 0xffffffff [0223.626] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0223.626] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*.*" (normalized: "c:\\users\\default\\documents\\my pictures\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x2700082f, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x3000201, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x72616265, cFileName="Micr\x02\x04", cAlternateFileName="\x10äU")) returned 0xffffffff [0223.626] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0223.626] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*.*" (normalized: "c:\\users\\default\\documents\\my videos\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x2700082f, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x3000201, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x72616265, cFileName="Micr\x02\x04", cAlternateFileName="\x10äU")) returned 0xffffffff [0223.627] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0223.627] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0223.627] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7365736f, dwReserved1=0x746e6576, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0223.627] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Downloads\\*.*" (normalized: "c:\\users\\default\\downloads\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0223.628] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="..", cAlternateFileName="")) returned 1 [0223.628] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="..", cAlternateFileName="")) returned 0 [0223.628] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0223.628] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7365736f, dwReserved1=0x746e6576, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0223.628] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Favorites\\*.*" (normalized: "c:\\users\\default\\favorites\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0223.628] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="..", cAlternateFileName="")) returned 1 [0223.628] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="..", cAlternateFileName="")) returned 0 [0223.628] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0223.628] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7365736f, dwReserved1=0x746e6576, cFileName="Links", cAlternateFileName="")) returned 1 [0223.628] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Links\\*.*" (normalized: "c:\\users\\default\\links\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0223.629] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="..", cAlternateFileName="")) returned 1 [0223.629] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="..", cAlternateFileName="")) returned 0 [0223.629] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0223.629] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x746e6576, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0223.629] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Local Settings\\*.*" (normalized: "c:\\users\\default\\local settings\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="..", cAlternateFileName="\x90áU")) returned 0xffffffff [0223.629] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x746e6576, cFileName="Music", cAlternateFileName="")) returned 1 [0223.629] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Music\\*.*" (normalized: "c:\\users\\default\\music\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0223.630] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="..", cAlternateFileName="")) returned 1 [0223.630] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="..", cAlternateFileName="")) returned 0 [0223.630] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0223.630] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x746e6576, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0223.630] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\My Documents\\*.*" (normalized: "c:\\users\\default\\my documents\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="..", cAlternateFileName="\x90áU")) returned 0xffffffff [0223.630] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x746e6576, cFileName="NetHood", cAlternateFileName="")) returned 1 [0223.630] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\NetHood\\*.*" (normalized: "c:\\users\\default\\nethood\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x7265746e, cFileName="..", cAlternateFileName="\x90áU")) returned 0xffffffff [0223.630] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x31bfa5a5, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xea64ab63, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xea64ab63, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x746e6576, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0223.630] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.631] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.631] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.631] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0223.631] GetFileAttributesA (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat")) returned 0x2026 [0223.631] CreateFileA (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a0 [0223.631] CreateFileA (lpFileName="C:\\Users\\Default\\NTUSER.DAT.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\ntuser.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0223.632] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.633] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.635] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.636] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.636] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.636] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.637] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.637] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.637] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.637] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.638] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.638] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.638] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.638] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.638] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.638] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.639] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.639] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.639] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.639] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.639] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.640] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.640] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.640] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.640] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.640] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.640] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.640] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.641] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.642] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.642] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.642] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.642] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.642] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.642] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.643] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.643] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.643] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.643] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.643] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.643] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.644] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.644] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.644] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.644] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.644] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.644] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.644] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.645] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.645] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.645] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.645] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.645] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.645] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.646] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.646] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.646] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.646] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.646] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.646] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.647] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.647] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.647] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.647] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.647] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.647] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.648] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.648] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.648] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.648] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.648] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.648] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.649] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.649] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.649] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.649] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.649] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.649] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.650] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.650] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.650] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.650] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.650] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.651] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.651] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.651] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.651] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.651] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.652] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.652] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.652] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.652] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.652] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.703] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.703] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.703] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.704] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.704] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.704] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.704] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.705] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.705] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.705] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.705] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.705] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.705] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.706] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.706] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.706] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.706] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.706] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.707] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.707] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.707] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.707] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.707] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.708] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.708] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.708] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.708] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.708] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.708] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.709] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.709] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.709] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.709] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.709] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.710] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x1000, lpOverlapped=0x0) returned 1 [0223.710] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x0, lpOverlapped=0x0) returned 1 [0223.710] WriteFile (in: hFile=0x1a4, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x0, lpOverlapped=0x0) returned 1 [0223.710] CloseHandle (hObject=0x1a0) returned 1 [0223.710] CloseHandle (hObject=0x1a4) returned 1 [0223.727] MoveFileA (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\ntuser.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.728] GetFileAttributesA (lpFileName="C:\\Users\\Default\\NTUSER.DAT.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\default\\ntuser.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.728] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), lpFindFileData=0x19f74c | out: lpFindFileData=0x19f74c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x31bfa5a5, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xea64ab63, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xea64ab63, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x3000003, dwReserved1=0x3, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 0x55e790 [0223.728] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f74c | out: lpFindFileData=0x19f74c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x31bfa5a5, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xea64ab63, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xea64ab63, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x3000003, dwReserved1=0x3, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 0 [0223.728] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0223.728] DeleteFileA (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat")) returned 1 [0223.734] GetFileAttributesA (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat")) returned 0xffffffff [0223.738] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x31cb9166, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x31cb9166, ftLastAccessTime.dwHighDateTime=0x1d112dc, ftLastWriteTime.dwLowDateTime=0x31cb9166, ftLastWriteTime.dwHighDateTime=0x1d112dc, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0223.741] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x31cb9166, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x31cb9166, ftLastAccessTime.dwHighDateTime=0x1d112dc, ftLastWriteTime.dwLowDateTime=0x31cb9166, ftLastWriteTime.dwHighDateTime=0x1d112dc, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x67006f, dwReserved1=0x31, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0223.742] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d5f4e96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d5f4e96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x67006f, dwReserved1=0x32, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0223.742] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d5f4e96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d5f4e96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x650032, dwReserved1=0x330031, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0223.743] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d61ae52, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d61ae52, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x650032, dwReserved1=0x330031, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0223.744] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650032, dwReserved1=0x330031, cFileName="Pictures", cAlternateFileName="")) returned 1 [0223.744] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Pictures\\*.*" (normalized: "c:\\users\\default\\pictures\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e850 [0223.744] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0223.745] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0223.745] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0223.745] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x330031, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0223.745] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\PrintHood\\*.*" (normalized: "c:\\users\\default\\printhood\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="\x90áU")) returned 0xffffffff [0223.745] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x330031, cFileName="Recent", cAlternateFileName="")) returned 1 [0223.745] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Recent\\*.*" (normalized: "c:\\users\\default\\recent\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="\x90áU")) returned 0xffffffff [0223.745] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x330031, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0223.745] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Saved Games\\*.*" (normalized: "c:\\users\\default\\saved games\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0223.746] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0223.746] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0223.746] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0223.746] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x330031, cFileName="SendTo", cAlternateFileName="")) returned 1 [0223.746] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\SendTo\\*.*" (normalized: "c:\\users\\default\\sendto\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="\x90áU")) returned 0xffffffff [0223.746] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x330031, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0223.746] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Start Menu\\*.*" (normalized: "c:\\users\\default\\start menu\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="\x90áU")) returned 0xffffffff [0223.747] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x330031, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0223.747] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Templates\\*.*" (normalized: "c:\\users\\default\\templates\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="\x90áU")) returned 0xffffffff [0223.747] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x330031, cFileName="Videos", cAlternateFileName="")) returned 1 [0223.747] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Videos\\*.*" (normalized: "c:\\users\\default\\videos\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0223.747] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0223.747] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0223.747] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0223.747] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x330031, cFileName="Videos", cAlternateFileName="")) returned 0 [0223.747] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0223.747] FindNextFileA (in: hFindFile=0x55e3d0, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x4f6643a1, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x4f6643a1, ftLastAccessTime.dwHighDateTime=0x1d112ea, ftLastWriteTime.dwLowDateTime=0x4f6643a1, ftLastWriteTime.dwHighDateTime=0x1d112ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x31653236, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0223.747] FindFirstFileA (in: lpFileName="C:\\Users\\Default User\\*.*" (normalized: "c:\\users\\default user\\*.*"), lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x330031, cFileName="Videos", cAlternateFileName="ÐãU")) returned 0xffffffff [0223.750] FindNextFileA (in: hFindFile=0x55e3d0, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3757c8c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973af366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x31653236, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.750] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.750] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.753] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.753] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0223.754] GetFileAttributesA (lpFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini")) returned 0x26 [0223.754] CreateFileA (lpFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0223.754] CreateFileA (lpFileName="C:\\Users\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a4 [0223.755] ReadFile (in: hFile=0x19c, lpBuffer=0x19db18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d864, lpOverlapped=0x0 | out: lpBuffer=0x19db18*, lpNumberOfBytesRead=0x19d864*=0xae, lpOverlapped=0x0) returned 1 [0223.755] WriteFile (in: hFile=0x1a4, lpBuffer=0x19eb18*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x19d864, lpOverlapped=0x0 | out: lpBuffer=0x19eb18*, lpNumberOfBytesWritten=0x19d864*=0xae, lpOverlapped=0x0) returned 1 [0223.757] ReadFile (in: hFile=0x19c, lpBuffer=0x19db18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d864, lpOverlapped=0x0 | out: lpBuffer=0x19db18*, lpNumberOfBytesRead=0x19d864*=0x0, lpOverlapped=0x0) returned 1 [0223.757] WriteFile (in: hFile=0x1a4, lpBuffer=0x19eb18*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d864, lpOverlapped=0x0 | out: lpBuffer=0x19eb18*, lpNumberOfBytesWritten=0x19d864*=0x0, lpOverlapped=0x0) returned 1 [0223.757] CloseHandle (hObject=0x19c) returned 1 [0223.757] CloseHandle (hObject=0x1a4) returned 1 [0223.758] MoveFileA (lpExistingFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), lpNewFileName="C:\\Users\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.758] GetFileAttributesA (lpFileName="C:\\Users\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.758] FindFirstFileA (in: lpFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), lpFindFileData=0x19f9b4 | out: lpFindFileData=0x19f9b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3757c8c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973af366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x5502ec, dwReserved1=0x3, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e490 [0223.758] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f9b4 | out: lpFindFileData=0x19f9b4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3757c8c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973af366, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x5502ec, dwReserved1=0x3, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.758] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0223.759] DeleteFileA (lpFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini")) returned 1 [0223.760] GetFileAttributesA (lpFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini")) returned 0xffffffff [0223.760] FindNextFileA (in: hFindFile=0x55e3d0, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0223.760] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\*.*" (normalized: "c:\\users\\public\\*.*"), lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0223.760] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0223.760] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="AccountPictures", cAlternateFileName="ACCOUN~1")) returned 1 [0223.760] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\AccountPictures\\*.*" (normalized: "c:\\users\\public\\accountpictures\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0223.760] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="")) returned 1 [0223.761] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.761] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.761] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.761] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.761] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0223.761] GetFileAttributesA (lpFileName="C:\\Users\\Public\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\public\\accountpictures\\desktop.ini")) returned 0x6 [0223.762] VirtualAlloc (lpAddress=0x684000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x684000 [0223.767] CreateFileA (lpFileName="C:\\Users\\Public\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\public\\accountpictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a0 [0223.767] CreateFileA (lpFileName="C:\\Users\\Public\\AccountPictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\accountpictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0223.768] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xc4, lpOverlapped=0x0) returned 1 [0223.769] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xc4, lpOverlapped=0x0) returned 1 [0223.770] ReadFile (in: hFile=0x1a0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.770] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.770] CloseHandle (hObject=0x1a0) returned 1 [0223.770] CloseHandle (hObject=0x1d4) returned 1 [0223.772] MoveFileA (lpExistingFileName="C:\\Users\\Public\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\public\\accountpictures\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\AccountPictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\accountpictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.772] GetFileAttributesA (lpFileName="C:\\Users\\Public\\AccountPictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\accountpictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.772] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\public\\accountpictures\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e690 [0223.772] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.772] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0223.773] DeleteFileA (lpFileName="C:\\Users\\Public\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\public\\accountpictures\\desktop.ini")) returned 1 [0223.774] GetFileAttributesA (lpFileName="C:\\Users\\Public\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\public\\accountpictures\\desktop.ini")) returned 0xffffffff [0223.774] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.774] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0223.774] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37f05f6, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37f05f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x104, cFileName="Desktop", cAlternateFileName="")) returned 1 [0223.774] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Desktop\\*.*" (normalized: "c:\\users\\public\\desktop\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37f05f6, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37f05f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0223.774] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x37f05f6, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x37f05f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.774] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.775] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.775] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.777] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.777] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0223.778] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini")) returned 0x26 [0223.778] CreateFileA (lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0223.778] CreateFileA (lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\desktop\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a0 [0223.781] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xae, lpOverlapped=0x0) returned 1 [0223.782] WriteFile (in: hFile=0x1a0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xae, lpOverlapped=0x0) returned 1 [0223.783] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.783] WriteFile (in: hFile=0x1a0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.783] CloseHandle (hObject=0x1d4) returned 1 [0223.783] CloseHandle (hObject=0x1a0) returned 1 [0223.786] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Desktop\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\desktop\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.786] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\desktop\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.786] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x55a1d0, dwReserved1=0x55a408, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e250 [0223.786] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x55a1d0, dwReserved1=0x55a408, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.786] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0223.789] DeleteFileA (lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini")) returned 1 [0223.791] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini")) returned 0xffffffff [0223.791] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.791] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0223.791] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x696e692e, dwReserved1=0x104, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.792] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.792] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.792] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.792] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0223.792] GetFileAttributesA (lpFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini")) returned 0x26 [0223.793] CreateFileA (lpFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0223.793] CreateFileA (lpFileName="C:\\Users\\Public\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a0 [0223.793] ReadFile (in: hFile=0x19c, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0xae, lpOverlapped=0x0) returned 1 [0223.794] WriteFile (in: hFile=0x1a0, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0xae, lpOverlapped=0x0) returned 1 [0223.795] ReadFile (in: hFile=0x19c, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x0, lpOverlapped=0x0) returned 1 [0223.795] WriteFile (in: hFile=0x1a0, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x0, lpOverlapped=0x0) returned 1 [0223.796] CloseHandle (hObject=0x19c) returned 1 [0223.796] CloseHandle (hObject=0x1a0) returned 1 [0223.798] MoveFileA (lpExistingFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.798] GetFileAttributesA (lpFileName="C:\\Users\\Public\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.798] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), lpFindFileData=0x19f74c | out: lpFindFileData=0x19f74c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x3000003, dwReserved1=0x3, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e690 [0223.799] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f74c | out: lpFindFileData=0x19f74c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x3000003, dwReserved1=0x3, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.799] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0223.799] DeleteFileA (lpFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini")) returned 1 [0223.800] GetFileAttributesA (lpFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini")) returned 0xffffffff [0223.800] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0223.800] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Documents\\*.*" (normalized: "c:\\users\\public\\documents\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0223.802] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0223.802] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x104, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.802] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.802] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.804] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.805] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.805] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0223.805] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini")) returned 0x26 [0223.805] CreateFileA (lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0223.805] CreateFileA (lpFileName="C:\\Users\\Public\\Documents\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\documents\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0223.806] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x116, lpOverlapped=0x0) returned 1 [0223.807] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x116, lpOverlapped=0x0) returned 1 [0223.808] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.808] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.808] CloseHandle (hObject=0x19c) returned 1 [0223.809] CloseHandle (hObject=0x1d4) returned 1 [0223.810] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Documents\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\documents\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.810] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Documents\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\documents\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.811] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e5d0 [0223.811] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37f05f6, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.811] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0223.811] DeleteFileA (lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini")) returned 1 [0223.812] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini")) returned 0xffffffff [0223.812] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0223.812] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*.*" (normalized: "c:\\users\\public\\documents\\my music\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x402215, ftCreationTime.dwLowDateTime=0x19f660, ftCreationTime.dwHighDateTime=0x777dee30, ftLastAccessTime.dwLowDateTime=0x19f628, ftLastAccessTime.dwHighDateTime=0x77783c58, ftLastWriteTime.dwLowDateTime=0x550000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x553868, nFileSizeLow=0x19f638, dwReserved0=0x77790217, dwReserved1=0x553868, cFileName="ÿÿÿÿPö\x19", cAlternateFileName="\x10åU")) returned 0xffffffff [0223.812] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0223.812] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*.*" (normalized: "c:\\users\\public\\documents\\my pictures\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x402215, ftCreationTime.dwLowDateTime=0x19f660, ftCreationTime.dwHighDateTime=0x777dee30, ftLastAccessTime.dwLowDateTime=0x19f628, ftLastAccessTime.dwHighDateTime=0x77783c58, ftLastWriteTime.dwLowDateTime=0x550000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x553868, nFileSizeLow=0x19f638, dwReserved0=0x77790217, dwReserved1=0x553868, cFileName="ÿÿÿÿPö\x19", cAlternateFileName="\x10åU")) returned 0xffffffff [0223.812] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d5bfea2, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0223.812] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*.*" (normalized: "c:\\users\\public\\documents\\my videos\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x402215, ftCreationTime.dwLowDateTime=0x19f660, ftCreationTime.dwHighDateTime=0x777dee30, ftLastAccessTime.dwLowDateTime=0x19f628, ftLastAccessTime.dwHighDateTime=0x77783c58, ftLastWriteTime.dwLowDateTime=0x550000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x553868, nFileSizeLow=0x19f638, dwReserved0=0x77790217, dwReserved1=0x553868, cFileName="ÿÿÿÿPö\x19", cAlternateFileName="\x10åU")) returned 0xffffffff [0223.812] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d5bfea2, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0223.813] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0223.813] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7365736f, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0223.813] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Downloads\\*.*" (normalized: "c:\\users\\public\\downloads\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0223.818] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.818] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.819] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.819] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.819] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.819] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0223.819] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini")) returned 0x26 [0223.820] VirtualAlloc (lpAddress=0x688000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x688000 [0223.821] CreateFileA (lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0223.821] CreateFileA (lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\downloads\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0223.822] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xae, lpOverlapped=0x0) returned 1 [0223.823] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xae, lpOverlapped=0x0) returned 1 [0223.825] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.825] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.825] CloseHandle (hObject=0x1d4) returned 1 [0223.825] CloseHandle (hObject=0x19c) returned 1 [0223.828] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Downloads\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\downloads\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.829] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\downloads\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.829] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e410 [0223.829] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.829] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0223.829] DeleteFileA (lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini")) returned 1 [0223.830] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini")) returned 0xffffffff [0223.831] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.831] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0223.831] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0223.831] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Libraries\\*.*" (normalized: "c:\\users\\public\\libraries\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0223.831] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.831] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.831] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.831] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.832] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.832] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0223.832] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini")) returned 0x26 [0223.832] CreateFileA (lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0223.832] CreateFileA (lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\libraries\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0223.835] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xaf, lpOverlapped=0x0) returned 1 [0223.836] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xaf, lpOverlapped=0x0) returned 1 [0223.837] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.837] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.837] CloseHandle (hObject=0x19c) returned 1 [0223.837] CloseHandle (hObject=0x1d4) returned 1 [0223.838] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Libraries\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\libraries\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.839] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\libraries\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.839] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e510 [0223.839] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.839] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0223.839] DeleteFileA (lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini")) returned 1 [0223.843] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini")) returned 0xffffffff [0223.843] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0223.843] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0 [0223.843] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0223.843] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e565464, dwReserved1=0x7262696c, cFileName="Music", cAlternateFileName="")) returned 1 [0223.844] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Music\\*.*" (normalized: "c:\\users\\public\\music\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x620069, dwReserved1=0x610072, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0223.844] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x620069, dwReserved1=0x610072, cFileName="..", cAlternateFileName="")) returned 1 [0223.844] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x620069, dwReserved1=0x610072, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.844] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.844] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.844] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.844] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0223.844] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini")) returned 0x26 [0223.845] CreateFileA (lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0223.846] CreateFileA (lpFileName="C:\\Users\\Public\\Music\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\music\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0223.846] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x17c, lpOverlapped=0x0) returned 1 [0223.847] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x17c, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x17c, lpOverlapped=0x0) returned 1 [0223.848] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.848] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.848] CloseHandle (hObject=0x1d4) returned 1 [0223.848] CloseHandle (hObject=0x19c) returned 1 [0223.849] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Music\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\music\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.849] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Music\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\music\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.849] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x55a1d0, dwReserved1=0x55a408, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e1d0 [0223.849] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x55a1d0, dwReserved1=0x55a408, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.850] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0223.850] DeleteFileA (lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini")) returned 1 [0223.851] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini")) returned 0xffffffff [0223.851] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x620069, dwReserved1=0x610072, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.851] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0223.851] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x7262696c, cFileName="Pictures", cAlternateFileName="")) returned 1 [0223.851] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Pictures\\*.*" (normalized: "c:\\users\\public\\pictures\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x553860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0223.851] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x553860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.851] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x553860, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.851] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.851] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.851] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.852] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0223.852] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini")) returned 0x26 [0223.852] CreateFileA (lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0223.854] CreateFileA (lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0223.855] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x17c, lpOverlapped=0x0) returned 1 [0223.856] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x17c, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x17c, lpOverlapped=0x0) returned 1 [0223.857] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.857] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.857] CloseHandle (hObject=0x19c) returned 1 [0223.857] CloseHandle (hObject=0x1d4) returned 1 [0223.858] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.859] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.859] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e890 [0223.859] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.859] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0223.859] DeleteFileA (lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini")) returned 1 [0223.861] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini")) returned 0xffffffff [0223.861] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x553860, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.861] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0223.862] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x7262696c, cFileName="Videos", cAlternateFileName="")) returned 1 [0223.862] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Videos\\*.*" (normalized: "c:\\users\\public\\videos\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0223.862] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.862] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0223.863] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.863] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.863] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.863] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0223.863] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini")) returned 0x26 [0223.864] VirtualAlloc (lpAddress=0x68c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x68c000 [0223.869] CreateFileA (lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0223.869] CreateFileA (lpFileName="C:\\Users\\Public\\Videos\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\videos\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0223.869] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x17c, lpOverlapped=0x0) returned 1 [0223.870] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x17c, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x17c, lpOverlapped=0x0) returned 1 [0223.872] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.872] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0223.872] CloseHandle (hObject=0x1d4) returned 1 [0223.872] CloseHandle (hObject=0x19c) returned 1 [0223.873] MoveFileA (lpExistingFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Videos\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\videos\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.873] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Videos\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\public\\videos\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.873] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x55a1d0, dwReserved1=0x55a408, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e710 [0223.874] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x55a1d0, dwReserved1=0x55a408, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.874] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0223.874] DeleteFileA (lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini")) returned 1 [0223.875] GetFileAttributesA (lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini")) returned 0xffffffff [0223.875] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0223.875] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0223.875] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3816851, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x7262696c, cFileName="Videos", cAlternateFileName="")) returned 0 [0223.875] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0223.875] FindNextFileA (in: hFindFile=0x55e3d0, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x84ac775d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84ac775d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e7373, dwReserved1=0x73657275, cFileName="RDhJ0CNFevzX", cAlternateFileName="RDHJ0C~1")) returned 1 [0223.875] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\*.*"), lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x84ac775d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84ac775d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x7262696c, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0223.875] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x84ac775d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84ac775d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x7262696c, cFileName="..", cAlternateFileName="")) returned 1 [0223.875] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x7262696c, cFileName="AppData", cAlternateFileName="")) returned 1 [0223.875] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x553860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0223.876] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x553860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0223.876] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x553860, dwReserved1=0x2000002, cFileName="Local", cAlternateFileName="")) returned 1 [0223.876] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e850 [0223.876] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.876] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveSync", cAlternateFileName="ACTIVE~1")) returned 1 [0223.876] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\activesync\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0223.877] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="")) returned 1 [0223.877] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="")) returned 0 [0223.877] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0223.877] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0223.877] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\application data\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="PèU")) returned 0xffffffff [0223.877] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0223.878] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x241f3052, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0223.878] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x241f3052, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="")) returned 1 [0223.878] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x41637d0, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x41637d0, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName="Temp", cAlternateFileName="")) returned 1 [0223.878] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x41637d0, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x77e259ad, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0223.878] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x41637d0, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x77e259ad, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="")) returned 1 [0223.878] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b315521, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x77e259ad, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x77e26d5d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 1 [0223.878] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.878] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.878] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.879] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.879] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.879] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0223.879] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\calendarcache.dat")) returned 0x20 [0223.879] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\calendarcache.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0223.879] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\calendarcache.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.882] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x14, lpOverlapped=0x0) returned 1 [0223.882] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x14, lpOverlapped=0x0) returned 1 [0223.883] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0223.883] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0223.883] CloseHandle (hObject=0x1e4) returned 1 [0223.884] CloseHandle (hObject=0x1d8) returned 1 [0223.885] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\calendarcache.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\calendarcache.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.885] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\calendarcache.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.885] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\calendarcache.dat"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b315521, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x77e259ad, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x77e26d5d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 0x55e310 [0223.885] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b315521, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x77e259ad, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x77e26d5d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 0 [0223.885] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0223.885] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\calendarcache.dat")) returned 1 [0223.886] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\calendarcache.dat")) returned 0xffffffff [0223.886] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b315521, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x77e259ad, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x77e26d5d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x2700082f, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 0 [0223.887] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0223.887] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x63614372, dwReserved1=0x642e6568, cFileName="Unistore", cAlternateFileName="")) returned 1 [0223.887] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistore\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0223.887] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0223.887] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 0 [0223.887] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0223.887] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x304e1230, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe231b8a5, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x63614372, dwReserved1=0x642e6568, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1 [0223.887] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x304e1230, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe231b8a5, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0223.888] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x304e1230, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe231b8a5, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0223.888] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23a0d188, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23a0d188, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xe22f57b6, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x600000, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="store.vol", cAlternateFileName="")) returned 1 [0223.889] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239e71ab, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239e71ab, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x9867d3ae, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="USS.chk", cAlternateFileName="")) returned 1 [0223.889] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.889] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.889] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.889] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0223.889] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.chk")) returned 0x20 [0223.890] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.chk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.890] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0223.890] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.892] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.893] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.893] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.894] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0223.894] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0223.894] CloseHandle (hObject=0x1d8) returned 1 [0223.894] CloseHandle (hObject=0x1e4) returned 1 [0223.895] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.chk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0223.896] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0223.896] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.chk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239e71ab, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239e71ab, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x9867d3ae, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="USS.chk", cAlternateFileName="")) returned 0x55e410 [0223.896] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239e71ab, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239e71ab, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x9867d3ae, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="USS.chk", cAlternateFileName="")) returned 0 [0223.896] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0223.896] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.chk")) returned 1 [0223.897] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.chk")) returned 0xffffffff [0223.897] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xe22f57b6, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.log", cAlternateFileName="")) returned 1 [0223.897] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0223.897] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.898] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0223.898] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0223.898] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0223.898] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0223.898] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.log")) returned 0x20 [0223.898] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0223.899] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0223.899] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.901] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.905] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.905] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.905] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.905] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.906] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.906] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.906] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.907] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.907] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.907] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.907] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.907] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.907] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.907] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.908] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.908] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.908] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.908] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.908] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.908] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.908] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.909] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.909] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.909] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.909] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.909] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.909] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.915] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.915] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.915] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.915] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.915] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.915] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.916] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.916] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.916] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.916] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.916] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.916] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.916] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.917] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.917] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.917] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.917] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.917] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.917] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.917] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.918] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.918] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.918] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.918] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.918] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.919] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.919] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.919] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.919] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.919] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.919] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.920] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.920] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.920] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.920] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.920] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.920] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.921] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.921] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.921] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.921] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.921] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.921] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.921] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.922] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.922] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.922] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.922] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.922] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.922] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.923] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.923] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.923] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.923] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.923] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.923] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.923] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.924] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.924] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.924] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.924] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.924] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.924] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.925] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.926] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.926] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.929] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.929] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.929] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.930] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.930] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.930] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.930] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.930] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.930] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.930] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.931] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.931] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.931] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.931] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.931] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.931] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.932] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.932] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.932] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.932] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.933] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.933] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.933] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.934] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.934] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.934] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.934] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.935] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.935] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.935] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.936] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.936] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.936] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.936] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.936] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.936] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.937] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.937] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.937] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.938] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.938] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.938] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.938] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.938] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.938] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.939] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.939] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.939] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.939] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.939] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.939] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.943] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.943] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.943] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.944] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.944] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.944] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.944] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.944] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.944] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.945] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.945] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.945] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.945] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.945] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.945] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.946] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.946] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.946] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.946] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.946] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.946] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.946] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.947] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.947] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.947] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.947] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.947] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.947] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.948] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.948] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.948] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.948] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.948] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.948] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.948] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.949] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.949] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.949] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.949] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.949] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.950] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.950] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.950] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.950] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.950] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.951] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.951] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.951] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.951] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.951] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.951] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.952] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.952] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.952] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.952] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.952] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.952] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.952] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.953] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.953] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.953] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.953] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.953] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.953] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.958] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.958] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.958] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.959] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.959] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.959] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.959] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.959] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.959] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.960] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.960] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.960] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.960] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.960] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.960] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.961] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.961] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.961] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.961] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.961] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.961] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.961] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.962] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.962] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.962] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.962] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.962] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.962] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.963] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.963] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.963] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.963] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.963] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.963] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.964] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.964] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.964] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.965] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.965] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.965] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.966] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.966] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.966] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.967] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.967] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.967] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.967] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.967] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.967] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.967] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.968] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.968] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.968] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.968] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.968] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.968] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.969] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.969] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.969] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.969] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.969] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.970] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.971] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.971] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.971] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.971] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.972] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.972] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.972] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.972] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.973] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.973] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.973] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.973] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.974] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.974] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.974] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.975] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.975] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.975] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.975] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.975] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.976] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.976] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.976] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.976] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.976] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.977] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.977] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.977] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.977] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.977] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.978] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.978] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.978] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.978] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.978] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.978] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.981] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.981] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.981] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.981] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.981] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.982] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.982] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.982] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.982] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.982] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.982] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.982] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.983] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.983] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.983] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.983] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.983] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.983] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.984] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.984] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.984] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.984] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.984] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.984] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.984] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.985] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.985] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.985] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.986] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.986] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.986] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.986] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.987] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.987] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.987] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.987] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.987] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.987] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.988] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.988] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.988] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.988] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.988] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.989] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.989] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.989] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.989] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.989] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.989] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.990] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.990] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.990] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.990] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.990] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.990] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.990] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.991] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.991] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.991] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.991] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.991] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.991] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.992] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.992] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.993] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.993] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.993] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.993] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.994] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.994] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.994] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.994] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.994] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.994] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.995] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.995] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.995] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.995] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.995] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.995] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.996] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.996] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.996] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.996] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0223.996] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.000] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.000] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.000] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.000] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.000] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.000] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.001] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.003] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.003] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.003] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.003] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.004] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.004] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.004] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.004] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.004] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.005] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.005] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.005] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.005] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.005] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.006] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.006] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.006] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.006] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.006] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.007] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.007] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.007] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.007] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.007] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.008] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.008] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.008] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.008] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.008] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.009] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.009] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.009] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.009] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.009] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.010] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.010] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.010] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.010] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.010] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.011] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.011] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.011] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.011] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.011] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.012] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.012] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.012] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.012] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.013] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.013] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.015] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.015] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.016] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.016] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.016] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.016] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.017] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.017] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.017] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.017] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.017] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.018] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.018] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.018] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.019] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.019] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.020] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.020] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.020] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.020] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.021] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.021] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.021] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.022] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.022] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.022] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.022] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.022] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.023] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.023] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.023] WriteFile (in: hFile=0x1d8, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.683] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0224.685] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0224.685] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.log"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xe22f57b6, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="USS.log", cAlternateFileName="")) returned 0x55e8d0 [0224.685] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xe22f57b6, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="USS.log", cAlternateFileName="")) returned 0 [0224.685] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0224.685] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.log")) returned 1 [0224.695] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\uss.log")) returned 0xffffffff [0224.695] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239c0dc2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239c0dc2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239c0dc2, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00001.jrs", cAlternateFileName="USSRES~1.JRS")) returned 1 [0224.699] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0224.699] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0224.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0224.708] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0224.708] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0224.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0224.708] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\usstmp.log")) returned 0x20 [0224.709] VirtualAlloc (lpAddress=0x690000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x690000 [0224.709] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\usstmp.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0224.709] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\usstmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0224.710] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.712] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.714] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.714] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.714] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.715] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.715] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.716] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.716] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.716] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.716] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.716] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.716] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.717] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.717] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.717] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.717] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.717] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.717] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.717] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.718] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.718] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.718] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.718] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.718] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.719] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.719] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.721] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.721] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.722] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.722] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.722] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.722] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.722] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.723] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.723] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.723] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.723] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.723] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.724] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.724] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.724] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.724] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.724] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.725] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.725] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.725] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.725] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.725] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.725] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.726] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.726] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.726] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.726] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.726] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.727] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.727] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.727] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.727] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.727] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.728] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.728] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.728] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.728] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.728] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.728] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.729] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.729] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.729] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.729] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.729] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.729] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.730] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.730] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.730] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.730] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.730] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.731] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.731] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.732] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.732] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.732] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.732] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.732] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.732] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.733] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.733] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.733] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.733] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.733] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.734] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.734] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.735] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.735] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.735] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.735] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.736] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.736] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.736] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.736] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.736] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.736] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.737] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.737] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.737] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.737] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.737] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.737] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.738] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.738] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.738] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.738] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.738] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.738] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.739] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.739] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.739] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.739] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.739] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.739] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.740] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.740] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.740] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.740] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.740] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.740] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.740] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.741] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.741] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.742] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.742] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.742] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.742] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.742] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.742] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.743] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.743] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.743] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.743] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.743] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.743] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.743] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.744] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.744] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.744] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.744] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.744] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.744] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.744] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.745] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.745] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.745] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.745] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.745] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.745] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.755] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.755] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.756] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.756] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.756] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.756] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.756] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.756] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.757] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.757] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.757] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.757] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.757] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.757] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.758] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.758] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.758] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.758] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.758] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.758] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.758] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.759] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.759] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.759] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.759] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.759] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.759] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.760] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.760] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.760] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.760] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.760] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.760] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.761] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.761] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.761] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.761] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.761] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.761] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.762] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.762] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.762] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.762] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.763] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.763] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.763] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.763] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.763] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.763] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.764] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.764] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.764] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.764] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.764] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.764] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.764] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.765] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.765] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.765] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.765] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.765] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.765] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.766] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.766] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.766] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.767] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.767] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.767] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.768] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.768] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.768] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.768] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.768] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.768] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.768] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.769] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.769] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.769] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.769] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.769] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.769] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.770] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.770] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.770] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.770] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.770] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.770] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.771] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.771] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.771] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.771] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.771] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.771] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.772] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.772] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.772] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.772] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.772] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.772] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.773] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.773] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.774] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.774] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.774] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.774] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.774] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.774] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.775] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.775] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.775] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.775] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.775] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.775] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.776] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.776] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.776] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.776] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.776] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.776] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.777] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.777] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.777] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.777] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.777] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.777] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.777] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.911] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.912] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.912] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.916] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.916] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.917] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.917] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.933] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.933] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.933] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.933] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.934] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.934] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.934] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.935] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.935] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.935] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.935] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.935] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.936] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.936] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.936] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.936] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.937] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.937] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.937] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.938] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.938] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.938] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.938] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.939] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.939] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.939] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.939] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.939] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.939] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.940] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.940] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.940] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.977] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.977] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.977] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.977] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.977] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.977] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.978] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.978] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.978] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.978] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.978] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.978] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.979] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.979] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.979] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.979] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.979] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.979] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.980] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.980] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.980] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.980] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.980] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.980] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.981] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.983] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.983] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.984] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.984] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.985] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.985] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.985] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.985] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.985] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.985] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.985] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.986] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.986] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.986] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.986] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.987] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.987] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.987] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.987] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.987] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.987] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.987] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.988] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.988] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.988] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.988] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.988] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.988] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.989] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.989] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.989] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.989] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.989] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.989] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.990] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.990] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.990] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.990] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.990] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.991] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.991] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.992] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.992] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.992] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.992] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.992] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.992] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.993] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.993] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.993] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.993] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.993] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.993] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.993] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.994] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.994] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.994] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.994] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.994] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.994] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.994] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.995] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.995] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.995] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.995] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.995] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.996] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.997] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.998] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.998] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.998] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.998] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.998] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.999] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.999] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.999] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.999] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.999] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0224.999] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.000] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.000] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.000] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.000] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.000] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.000] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.001] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.001] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.001] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.001] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.001] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.001] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.002] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.002] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.002] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.002] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.002] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.002] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.002] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.003] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.003] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.003] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.003] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.003] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.004] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.004] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.004] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.004] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.004] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.004] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.004] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.005] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.005] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.005] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.005] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.005] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.005] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.006] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.006] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.007] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.007] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.007] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.007] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.007] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.008] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.008] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.008] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.008] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.008] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.008] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.008] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.010] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.010] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.010] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.010] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.010] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.011] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.011] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.011] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.011] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.011] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.011] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.011] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.012] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.012] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.013] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.013] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.013] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.013] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.013] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.014] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.014] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.194] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\usstmp.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\usstmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.194] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\usstmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.195] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\usstmp.log"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xdd289e64, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="USStmp.log", cAlternateFileName="")) returned 0x55e750 [0225.195] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xdd289e64, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="USStmp.log", cAlternateFileName="")) returned 0 [0225.195] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0225.195] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\usstmp.log")) returned 1 [0225.205] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\usstmp.log")) returned 0xffffffff [0225.205] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2399ab8b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2399ab8b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xdd289e64, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x72006a, dwReserved1=0x73, cFileName="USStmp.log", cAlternateFileName="")) returned 0 [0225.205] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0225.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x304e1230, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe231b8a5, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x63614372, dwReserved1=0x642e6568, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 0 [0225.206] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0225.206] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0225.206] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\history\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x304e1230, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe231b8a5, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x63614372, dwReserved1=0x642e6568, cFileName="UnistoreDB", cAlternateFileName="PèU")) returned 0xffffffff [0225.206] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xb1dfb94f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xb1dfb94f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xbd3be958, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x6b5d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0225.206] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.206] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.207] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.207] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.207] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.207] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0225.207] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\iconcache.db")) returned 0x22 [0225.207] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\iconcache.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0225.207] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\IconCache.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\iconcache.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0225.208] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0225.208] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0225.209] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0225.210] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0225.210] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0225.210] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0225.210] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0225.210] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0225.211] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0225.211] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0225.211] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0225.211] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0225.211] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xb5d, lpOverlapped=0x0) returned 1 [0225.211] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xb5d, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xb5d, lpOverlapped=0x0) returned 1 [0225.212] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0225.212] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0225.212] CloseHandle (hObject=0x1d4) returned 1 [0225.212] CloseHandle (hObject=0x1e0) returned 1 [0225.213] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\IconCache.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\iconcache.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.214] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\IconCache.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\iconcache.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.214] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\iconcache.db"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xb1dfb94f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xb1dfb94f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xbd3be958, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x6b5d, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 0x55e650 [0225.214] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xb1dfb94f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xb1dfb94f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xbd3be958, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x6b5d, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 0 [0225.214] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0225.214] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\iconcache.db")) returned 1 [0225.220] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\iconcache.db")) returned 0xffffffff [0225.220] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0225.220] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0225.220] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0225.220] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="CLR_v2.0", cAlternateFileName="")) returned 1 [0225.220] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cfd8445, dwReserved1=0x2700082f, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0225.221] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cfd8445, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="")) returned 1 [0225.221] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cfd8445, dwReserved1=0x2700082f, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0225.221] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6079694, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0225.222] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6079694, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.222] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6079694, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6079694, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6079694, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="addinutil.exe.log", cAlternateFileName="ADDINU~1.LOG")) returned 1 [0225.222] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.222] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.222] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.222] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.222] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.222] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0225.223] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\addinutil.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\addinutil.exe.log")) returned 0x20 [0225.223] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\addinutil.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\addinutil.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0225.223] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\addinutil.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\addinutil.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0225.224] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xcb, lpOverlapped=0x0) returned 1 [0225.225] WriteFile (in: hFile=0x1d0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xcb, lpOverlapped=0x0) returned 1 [0225.226] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.226] WriteFile (in: hFile=0x1d0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.226] CloseHandle (hObject=0x1d8) returned 1 [0225.226] CloseHandle (hObject=0x1d0) returned 1 [0225.227] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\addinutil.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\addinutil.exe.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\addinutil.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\addinutil.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.227] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\addinutil.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\addinutil.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.228] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\addinutil.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\addinutil.exe.log"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6079694, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6079694, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6079694, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="addinutil.exe.log", cAlternateFileName="ADDINU~1.LOG")) returned 0x55e410 [0225.228] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6079694, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6079694, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6079694, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="addinutil.exe.log", cAlternateFileName="ADDINU~1.LOG")) returned 0 [0225.228] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0225.228] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\addinutil.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\addinutil.exe.log")) returned 1 [0225.229] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\addinutil.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\addinutil.exe.log")) returned 0xffffffff [0225.229] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6079694, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6079694, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6079694, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="addinutil.exe.log", cAlternateFileName="ADDINU~1.LOG")) returned 0 [0225.229] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0225.229] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cfd8445, dwReserved1=0x2700082f, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0225.229] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0225.234] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7367, dwReserved1=0x104, cFileName="CLR_v2.0_32", cAlternateFileName="CLR_V2~1.0_3")) returned 1 [0225.234] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x652e6c69, dwReserved1=0x6c2e6578, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0225.234] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x652e6c69, dwReserved1=0x6c2e6578, cFileName="..", cAlternateFileName="")) returned 1 [0225.234] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x652e6c69, dwReserved1=0x6c2e6578, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0225.234] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\UsageLogs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\usagelogs\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0225.234] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0225.234] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log", cAlternateFileName="9EE11E~1.LOG")) returned 1 [0225.235] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.235] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.235] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.235] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.235] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.235] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0225.235] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\UsageLogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\usagelogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log")) returned 0x20 [0225.235] VirtualAlloc (lpAddress=0x694000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x694000 [0225.236] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\UsageLogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\usagelogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0225.236] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\UsageLogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\usagelogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0225.243] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x198, lpOverlapped=0x0) returned 1 [0225.244] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x198, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x198, lpOverlapped=0x0) returned 1 [0225.245] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.245] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.245] CloseHandle (hObject=0x1d0) returned 1 [0225.245] CloseHandle (hObject=0x1d8) returned 1 [0225.246] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\UsageLogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\usagelogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\UsageLogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\usagelogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.247] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\UsageLogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\usagelogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.247] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\UsageLogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\usagelogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log", cAlternateFileName="9EE11E~1.LOG")) returned 0x55e890 [0225.247] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log", cAlternateFileName="9EE11E~1.LOG")) returned 0 [0225.247] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0225.247] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\UsageLogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\usagelogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log")) returned 1 [0225.248] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\UsageLogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\usagelogs\\9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log")) returned 0xffffffff [0225.248] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log", cAlternateFileName="9EE11E~1.LOG")) returned 0 [0225.248] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0225.249] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x652e6c69, dwReserved1=0x6c2e6578, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0225.249] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0225.249] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7367, dwReserved1=0x104, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1 [0225.249] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31623038, dwReserved1=0x31313837, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0225.249] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31623038, dwReserved1=0x31313837, cFileName="..", cAlternateFileName="")) returned 1 [0225.249] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31623038, dwReserved1=0x31313837, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0225.249] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x70f197fc, ftLastWriteTime.dwHighDateTime=0x1d7b059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0225.249] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x70f197fc, ftLastWriteTime.dwHighDateTime=0x1d7b059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0225.250] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xe7c3f921, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x954, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0225.250] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.250] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.250] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.250] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0225.250] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log")) returned 0x20 [0225.251] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0225.251] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0225.252] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x954, lpOverlapped=0x0) returned 1 [0225.254] WriteFile (in: hFile=0x1d0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x954, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x954, lpOverlapped=0x0) returned 1 [0225.255] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.255] WriteFile (in: hFile=0x1d0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.255] CloseHandle (hObject=0x1d8) returned 1 [0225.255] CloseHandle (hObject=0x1d0) returned 1 [0225.256] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.257] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.257] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xe7c3f921, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x954, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 0x55e890 [0225.257] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xe7c3f921, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x954, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 0 [0225.257] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0225.257] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log")) returned 1 [0225.259] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log")) returned 0xffffffff [0225.259] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f197fc, ftCreationTime.dwHighDateTime=0x1d7b059, ftLastAccessTime.dwLowDateTime=0x70f197fc, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x1cff45b5, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x15dd, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 1 [0225.260] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.260] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.260] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.260] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0225.260] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log")) returned 0x20 [0225.261] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0225.261] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0225.261] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0225.292] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0225.294] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x5dd, lpOverlapped=0x0) returned 1 [0225.294] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x5dd, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x5dd, lpOverlapped=0x0) returned 1 [0225.295] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.295] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.295] CloseHandle (hObject=0x1d0) returned 1 [0225.295] CloseHandle (hObject=0x1d8) returned 1 [0225.296] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.297] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.297] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f197fc, ftCreationTime.dwHighDateTime=0x1d7b059, ftLastAccessTime.dwLowDateTime=0x70f197fc, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x1cff45b5, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x15dd, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 0x55e290 [0225.297] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f197fc, ftCreationTime.dwHighDateTime=0x1d7b059, ftLastAccessTime.dwLowDateTime=0x70f197fc, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x1cff45b5, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x15dd, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 0 [0225.297] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0225.297] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log")) returned 1 [0225.299] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log")) returned 0xffffffff [0225.299] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f197fc, ftCreationTime.dwHighDateTime=0x1d7b059, ftLastAccessTime.dwLowDateTime=0x70f197fc, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x1cff45b5, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x15dd, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 0 [0225.299] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0225.299] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31623038, dwReserved1=0x31313837, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0225.299] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0225.299] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7367, dwReserved1=0x104, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1 [0225.299] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e74736f, dwReserved1=0x2e657865, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0225.300] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e74736f, dwReserved1=0x2e657865, cFileName="..", cAlternateFileName="")) returned 1 [0225.300] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e74736f, dwReserved1=0x2e657865, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0225.300] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0225.300] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0225.300] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd4d46a39, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1078, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0225.300] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.300] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.301] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.301] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.301] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.301] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0225.301] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log")) returned 0x20 [0225.301] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0225.301] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0225.302] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0225.304] WriteFile (in: hFile=0x1d0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0225.305] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x78, lpOverlapped=0x0) returned 1 [0225.306] WriteFile (in: hFile=0x1d0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x78, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x78, lpOverlapped=0x0) returned 1 [0225.306] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.306] WriteFile (in: hFile=0x1d0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.306] CloseHandle (hObject=0x1d8) returned 1 [0225.306] CloseHandle (hObject=0x1d0) returned 1 [0225.311] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.311] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.312] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd4d46a39, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1078, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 0x55e7d0 [0225.312] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd4d46a39, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1078, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 0 [0225.312] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0225.312] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log")) returned 1 [0225.313] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log")) returned 0xffffffff [0225.313] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd4d46a39, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1078, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 0 [0225.314] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0225.314] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e74736f, dwReserved1=0x2e657865, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0225.314] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0225.314] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb51b0, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fb51b0, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7367, dwReserved1=0x104, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0225.314] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\credentials\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb51b0, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fb51b0, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6c6c65, dwReserved1=0x2e657865, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0225.314] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb51b0, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fb51b0, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6c6c65, dwReserved1=0x2e657865, cFileName="..", cAlternateFileName="")) returned 1 [0225.314] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x508b12b7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb3e5e, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fba0be, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x2ac0, dwReserved0=0x2e6c6c65, dwReserved1=0x2e657865, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 1 [0225.315] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x508b12b7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb3e5e, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fba0be, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x2ac0, dwReserved0=0x2e6c6c65, dwReserved1=0x2e657865, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 0 [0225.315] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0225.315] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a64cda3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x43354537, dwReserved1=0x41393143, cFileName="Feeds", cAlternateFileName="")) returned 1 [0225.315] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a64cda3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x390031, dwReserved1=0x330061, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0225.316] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a64cda3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x390031, dwReserved1=0x330061, cFileName="..", cAlternateFileName="")) returned 1 [0225.316] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a64cda3, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d4915cd, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x390031, dwReserved1=0x330061, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0225.316] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7a45a8f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a64cda3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650065, dwReserved1=0x730064, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0225.316] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7a45a8f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a64cda3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0225.317] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7a45a8f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a64cda3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0225.317] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a64cda3, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d4915cd, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Internet Explorer Suggested Sites~.feed-ms", cAlternateFileName="INTERN~1.FEE")) returned 1 [0225.318] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a64cda3, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d4915cd, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Internet Explorer Suggested Sites~.feed-ms", cAlternateFileName="INTERN~1.FEE")) returned 0 [0225.318] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0225.318] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7a45a8f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a64cda3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x650065, dwReserved1=0x730064, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0 [0225.318] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0225.318] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x362d4446, dwReserved1=0x2d363334, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0225.318] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0225.319] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName="..", cAlternateFileName="")) returned 1 [0225.319] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName="B4FCKDUE", cAlternateFileName="")) returned 1 [0225.319] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\B4FCKDUE\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\b4fckdue\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f006c, dwReserved1=0x650072, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0225.320] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f006c, dwReserved1=0x650072, cFileName="..", cAlternateFileName="")) returned 1 [0225.320] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f006c, dwReserved1=0x650072, cFileName="ieonlinews.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1 [0225.321] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f006c, dwReserved1=0x650072, cFileName="ieonlinews.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 0 [0225.321] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0225.321] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7a45a8f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a45a8f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a45a8f9, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e737765, dwReserved1=0x7263696d, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0225.321] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.321] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.321] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.321] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0225.322] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\container.dat")) returned 0x2026 [0225.322] VirtualAlloc (lpAddress=0x698000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x698000 [0225.323] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.323] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0225.323] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0225.323] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0225.323] CloseHandle (hObject=0x1e4) returned 1 [0225.323] CloseHandle (hObject=0x1d0) returned 1 [0225.324] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.324] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0225.324] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\container.dat"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7a45a8f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a45a8f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a45a8f9, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e890 [0225.325] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7a45a8f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a45a8f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a45a8f9, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0225.325] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0225.325] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\container.dat")) returned 1 [0225.325] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\container.dat")) returned 0xffffffff [0225.326] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="GGQ6NIXC", cAlternateFileName="")) returned 1 [0225.326] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\GGQ6NIXC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\ggq6nixc\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0225.326] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0225.326] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 0 [0225.326] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0225.326] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="KYN7N324", cAlternateFileName="")) returned 1 [0225.326] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\KYN7N324\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\kyn7n324\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0225.326] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0225.326] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 0 [0225.326] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0225.327] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="OQ1FANI7", cAlternateFileName="")) returned 1 [0225.327] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\OQ1FANI7\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\oq1fani7\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0225.327] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0225.327] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 0 [0225.327] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0225.327] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="OQ1FANI7", cAlternateFileName="")) returned 0 [0225.327] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0225.327] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7237, dwReserved1=0x2d367461, cFileName="FORMS", cAlternateFileName="")) returned 1 [0225.327] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\forms\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0225.333] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a184b86, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0225.333] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a184b86, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a4e76b4, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0225.333] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.333] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.333] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.333] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0225.333] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\forms\\frmcache.dat")) returned 0x20 [0225.334] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\forms\\frmcache.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0225.334] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\forms\\frmcache.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.334] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.336] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.339] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.339] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.341] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.341] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.341] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.341] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.341] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.342] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.342] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.342] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.342] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.342] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.343] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.343] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.343] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.343] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.344] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.344] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.344] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.344] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.344] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.345] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.345] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.345] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.345] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.345] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.346] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.347] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.347] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.347] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.348] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.348] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.348] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.348] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.348] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.349] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.349] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.349] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.349] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.349] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.350] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.350] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.350] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.350] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.351] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.351] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.351] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.351] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.351] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.352] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.352] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.352] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.352] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.353] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.353] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.353] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.353] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.353] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.354] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.354] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.354] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.354] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.355] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.355] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.355] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.355] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.356] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.356] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.356] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.356] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.357] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.357] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.358] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.358] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.358] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.358] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.359] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.359] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.359] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.359] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.359] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.360] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.360] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.360] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.360] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.361] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.361] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.361] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.361] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.361] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.362] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.362] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.362] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.363] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.363] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.363] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.363] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.363] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.364] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.364] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.364] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.364] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.364] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.365] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.365] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.365] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.365] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.365] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.366] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.366] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.366] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.366] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.366] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.367] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.367] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.367] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.367] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.367] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.368] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xdc, lpOverlapped=0x0) returned 1 [0225.368] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xdc, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xdc, lpOverlapped=0x0) returned 1 [0225.368] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0225.368] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0225.368] CloseHandle (hObject=0x1d0) returned 1 [0225.368] CloseHandle (hObject=0x1e4) returned 1 [0225.379] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\forms\\frmcache.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\forms\\frmcache.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.379] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\forms\\frmcache.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.379] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\forms\\frmcache.dat"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a184b86, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a4e76b4, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0x55e5d0 [0225.380] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a184b86, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a4e76b4, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0 [0225.380] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0225.380] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\forms\\frmcache.dat")) returned 1 [0225.383] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\forms\\frmcache.dat")) returned 0xffffffff [0225.383] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a184b86, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a184b86, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a4e76b4, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0 [0225.383] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0225.383] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41442e45, dwReserved1=0x2d367454, cFileName="GameDVR", cAlternateFileName="")) returned 1 [0225.384] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\gamedvr\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0225.384] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc7db342, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0225.384] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7db342, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x212d1b5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd23c, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 1 [0225.384] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.384] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.384] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.384] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0225.385] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin")) returned 0x20 [0225.385] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.385] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0225.387] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.387] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.389] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.389] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.389] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.389] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.390] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.390] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.390] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.390] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.390] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.391] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.391] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.391] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.391] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.392] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.392] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.392] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.392] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.392] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.393] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.393] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.393] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.393] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.394] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.394] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0225.394] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x23c, lpOverlapped=0x0) returned 1 [0225.395] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x23c, lpOverlapped=0x0) returned 1 [0225.395] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0225.395] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0225.395] CloseHandle (hObject=0x1e4) returned 1 [0225.395] CloseHandle (hObject=0x1d0) returned 1 [0225.401] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.401] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.401] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7db342, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x212d1b5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd23c, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 0x55e7d0 [0225.401] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7db342, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x212d1b5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd23c, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 0 [0225.402] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0225.402] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin")) returned 0 [0225.402] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin")) returned 0x20 [0225.402] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7db342, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x212d1b5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd23c, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 0 [0225.402] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0225.403] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694c656d, dwReserved1=0x622e7473, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0225.403] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\inputpersonalization\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0225.418] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0225.439] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0225.439] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x2700082f, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0225.439] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="")) returned 1 [0225.439] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="")) returned 0 [0225.439] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0225.440] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 0 [0225.440] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0225.440] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61746144, dwReserved1=0x726f7453, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1 [0225.440] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\installagent\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0225.440] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0225.440] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 1 [0225.440] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\installagent\\checkpoints\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x2700082f, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0225.441] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="")) returned 1 [0225.441] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="")) returned 0 [0225.441] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0225.442] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 0 [0225.442] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0225.442] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73746e69, dwReserved1=0x726f7453, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0225.442] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x27d216a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0225.442] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x27d216a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0225.442] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4302da2a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4302da2a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x430ec4ba, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x19b3, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0225.446] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe31df21d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="DomainSuggestions", cAlternateFileName="DOMAIN~1")) returned 1 [0225.446] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe31df21d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x2700082f, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0225.446] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe31df21d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="")) returned 1 [0225.446] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31df21d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4700, dwReserved0=0x55a260, dwReserved1=0x2700082f, cFileName="en-US.1", cAlternateFileName="")) returned 1 [0225.447] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31df21d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4700, dwReserved0=0x55a260, dwReserved1=0x2700082f, cFileName="en-US.1", cAlternateFileName="")) returned 0 [0225.447] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0225.448] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x759f70fb, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x759f70fb, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="EmieSiteList", cAlternateFileName="EMIESI~1")) returned 1 [0225.448] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x759f70fb, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x759f70fb, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x2700082f, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0225.448] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x759f70fb, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x759f70fb, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x2700082f, cFileName="..", cAlternateFileName="")) returned 1 [0225.448] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x759f70fb, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x759f70fb, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x2700082f, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0225.457] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.457] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.458] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.458] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0225.461] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat")) returned 0x2026 [0225.462] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.463] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0225.463] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.463] WriteFile (in: hFile=0x1d8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.463] CloseHandle (hObject=0x1e4) returned 1 [0225.464] CloseHandle (hObject=0x1d8) returned 1 [0225.464] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.464] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0225.464] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x759f70fb, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x759f70fb, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e610 [0225.465] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x759f70fb, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x759f70fb, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0225.465] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0225.465] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat")) returned 1 [0225.465] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat")) returned 0xffffffff [0225.465] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x759f70fb, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x759f70fb, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x2700082f, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0225.465] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0225.465] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x759f70fb, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x759f70fb, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x2007461, cFileName="EmieUserList", cAlternateFileName="EMIEUS~1")) returned 1 [0225.465] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x759f70fb, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x759f70fb, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0225.466] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x759f70fb, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x759f70fb, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0225.466] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x759f70fb, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x759f70fb, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0225.466] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.466] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.466] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.466] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0225.466] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat")) returned 0x2026 [0225.466] VirtualAlloc (lpAddress=0x69c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x69c000 [0225.467] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0225.467] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.467] ReadFile (in: hFile=0x1d8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.468] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.468] CloseHandle (hObject=0x1d8) returned 1 [0225.468] CloseHandle (hObject=0x1e4) returned 1 [0225.468] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.468] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0225.468] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x759f70fb, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x759f70fb, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e490 [0225.469] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x759f70fb, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x759f70fb, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0225.469] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0225.469] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat")) returned 1 [0225.469] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat")) returned 0xffffffff [0225.469] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x759f70fb, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x759f70fb, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0225.469] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0225.469] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431ab1e5, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x431ab1e5, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x600a7168, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x642e7265, dwReserved1=0x2007461, cFileName="ie4uinit-ClearIconCache.log", cAlternateFileName="IE4UIN~2.LOG")) returned 1 [0225.470] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.470] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.470] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.470] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0225.470] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log")) returned 0x20 [0225.471] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0225.471] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.471] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x92, lpOverlapped=0x0) returned 1 [0225.496] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x92, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x92, lpOverlapped=0x0) returned 1 [0225.497] ReadFile (in: hFile=0x1d0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0225.497] WriteFile (in: hFile=0x1e4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0225.497] CloseHandle (hObject=0x1d0) returned 1 [0225.498] CloseHandle (hObject=0x1e4) returned 1 [0225.505] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.506] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.506] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431ab1e5, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x431ab1e5, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x600a7168, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="ie4uinit-ClearIconCache.log", cAlternateFileName="IE4UIN~2.LOG")) returned 0x55e310 [0225.507] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431ab1e5, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x431ab1e5, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x600a7168, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="ie4uinit-ClearIconCache.log", cAlternateFileName="IE4UIN~2.LOG")) returned 0 [0225.507] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0225.507] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log")) returned 1 [0225.508] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log")) returned 0xffffffff [0225.508] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4137bbef, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x431128d7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="ie4uinit-UserConfig.log", cAlternateFileName="IE4UIN~1.LOG")) returned 1 [0225.509] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.509] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.509] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.509] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0225.509] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log")) returned 0x20 [0225.510] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.510] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0225.511] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x514, lpOverlapped=0x0) returned 1 [0225.514] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x514, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x514, lpOverlapped=0x0) returned 1 [0225.515] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0225.515] WriteFile (in: hFile=0x1d0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0225.515] CloseHandle (hObject=0x1e4) returned 1 [0225.515] CloseHandle (hObject=0x1d0) returned 1 [0225.519] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.519] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.519] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4137bbef, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x431128d7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="ie4uinit-UserConfig.log", cAlternateFileName="IE4UIN~1.LOG")) returned 0x55e490 [0225.519] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4137bbef, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x431128d7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="ie4uinit-UserConfig.log", cAlternateFileName="IE4UIN~1.LOG")) returned 0 [0225.520] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0225.520] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log")) returned 1 [0225.521] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log")) returned 0xffffffff [0225.521] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="IECompatData", cAlternateFileName="IECOMP~1")) returned 1 [0225.521] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0225.521] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0225.522] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc10, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="iecompatdata.xml", cAlternateFileName="IECOMP~1.XML")) returned 1 [0225.522] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc10, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="iecompatdata.xml", cAlternateFileName="IECOMP~1.XML")) returned 0 [0225.522] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0225.522] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27d216a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x27d216a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27d216a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74616474, dwReserved1=0x6d782e61, cFileName="IEFlipAheadCache", cAlternateFileName="IEFLIP~1")) returned 1 [0225.522] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27d216a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x27d216a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27d216a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78002e, dwReserved1=0x6c006d, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0225.523] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27d216a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x27d216a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27d216a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78002e, dwReserved1=0x6c006d, cFileName="..", cAlternateFileName="")) returned 1 [0225.523] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27d216a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x27d216a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27d216a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78002e, dwReserved1=0x6c006d, cFileName="..", cAlternateFileName="")) returned 0 [0225.523] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0225.523] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad892634, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad892634, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74616474, dwReserved1=0x6d782e61, cFileName="imagestore", cAlternateFileName="IMAGES~1")) returned 1 [0225.523] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\imagestore\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad892634, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x7a2dd1f9, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78002e, dwReserved1=0x6c006d, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0225.523] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad892634, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x7a2dd1f9, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78002e, dwReserved1=0x6c006d, cFileName="..", cAlternateFileName="")) returned 1 [0225.523] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad892634, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad892634, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78002e, dwReserved1=0x6c006d, cFileName="wmamu79", cAlternateFileName="")) returned 1 [0225.524] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\wmamu79\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\imagestore\\wmamu79\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad892634, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad892634, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x2800062e, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0225.524] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad892634, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad892634, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x2800062e, cFileName="..", cAlternateFileName="")) returned 1 [0225.524] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad892634, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad892634, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x2800062e, cFileName="..", cAlternateFileName="")) returned 0 [0225.524] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0225.524] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2dd1f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a2dd1f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a2dd1f9, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78002e, dwReserved1=0x6c006d, cFileName="zuf01b5", cAlternateFileName="")) returned 1 [0225.524] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\zuf01b5\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\imagestore\\zuf01b5\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2dd1f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a2dd1f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a2dd1f9, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x2800062e, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0225.524] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2dd1f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a2dd1f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a2dd1f9, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x2800062e, cFileName="..", cAlternateFileName="")) returned 1 [0225.524] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2dd1f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a2dd1f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a2dd1f9, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x2800062e, cFileName="..", cAlternateFileName="")) returned 0 [0225.524] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0225.525] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2dd1f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a2dd1f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a2dd1f9, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78002e, dwReserved1=0x6c006d, cFileName="zuf01b5", cAlternateFileName="")) returned 0 [0225.525] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0225.525] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f386ce5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f386ce5, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f386ce5, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74616474, dwReserved1=0x6d782e61, cFileName="Recovery", cAlternateFileName="")) returned 1 [0225.525] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f386ce5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f386ce5, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f386ce5, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78002e, dwReserved1=0x6c006d, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0225.525] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f386ce5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f386ce5, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f386ce5, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78002e, dwReserved1=0x6c006d, cFileName="..", cAlternateFileName="")) returned 1 [0225.525] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f386ce5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f386ce5, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f386ce5, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78002e, dwReserved1=0x6c006d, cFileName="Active", cAlternateFileName="")) returned 1 [0225.525] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f386ce5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f386ce5, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d8bd80d, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x2800062e, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0225.526] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f386ce5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f386ce5, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d8bd80d, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x2800062e, cFileName="..", cAlternateFileName="")) returned 1 [0225.526] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3abcc4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f3abcc4, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0xcaa009d9, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x556a70, dwReserved1=0x2800062e, cFileName="RecoveryStore.{AABF9BF1-2D21-11ED-B0CF-7896845E3B84}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0225.526] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.526] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.526] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.526] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0225.527] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\RecoveryStore.{AABF9BF1-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\recoverystore.{aabf9bf1-2d21-11ed-b0cf-7896845e3b84}.dat")) returned 0x20 [0225.527] VirtualAlloc (lpAddress=0x6a0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6a0000 [0225.527] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\RecoveryStore.{AABF9BF1-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\recoverystore.{aabf9bf1-2d21-11ed-b0cf-7896845e3b84}.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0225.528] GetLastError () returned 0x20 [0225.528] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\RecoveryStore.{AABF9BF1-2D21-11ED-B0CF-7896845E3B84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\recoverystore.{aabf9bf1-2d21-11ed-b0cf-7896845e3b84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d8 [0225.529] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\RecoveryStore.{AABF9BF1-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\recoverystore.{aabf9bf1-2d21-11ed-b0cf-7896845e3b84}.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\RecoveryStore.{AABF9BF1-2D21-11ED-B0CF-7896845E3B84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\recoverystore.{aabf9bf1-2d21-11ed-b0cf-7896845e3b84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.529] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\RecoveryStore.{AABF9BF1-2D21-11ED-B0CF-7896845E3B84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\recoverystore.{aabf9bf1-2d21-11ed-b0cf-7896845e3b84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.529] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\RecoveryStore.{AABF9BF1-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\recoverystore.{aabf9bf1-2d21-11ed-b0cf-7896845e3b84}.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3abcc4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f3abcc4, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0xcaa009d9, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x5503c4, dwReserved1=0x1c, cFileName="RecoveryStore.{AABF9BF1-2D21-11ED-B0CF-7896845E3B84}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 0x55e5d0 [0225.529] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3abcc4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f3abcc4, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0xcaa009d9, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x5503c4, dwReserved1=0x1c, cFileName="RecoveryStore.{AABF9BF1-2D21-11ED-B0CF-7896845E3B84}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 0 [0225.529] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0225.529] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\RecoveryStore.{AABF9BF1-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\recoverystore.{aabf9bf1-2d21-11ed-b0cf-7896845e3b84}.dat")) returned 0 [0225.530] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\RecoveryStore.{AABF9BF1-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\recoverystore.{aabf9bf1-2d21-11ed-b0cf-7896845e3b84}.dat")) returned 0x20 [0225.530] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74625823, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x74625823, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a3296ce, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x55a7a8, dwReserved1=0x550288, cFileName="{B20A1ECA-2D21-11ED-B0CF-7896845E3B84}.dat", cAlternateFileName="{B20A1~1.DAT")) returned 1 [0225.530] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.530] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.530] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.530] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0225.530] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B20A1ECA-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b20a1eca-2d21-11ed-b0cf-7896845e3b84}.dat")) returned 0x20 [0225.531] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B20A1ECA-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b20a1eca-2d21-11ed-b0cf-7896845e3b84}.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0225.531] GetLastError () returned 0x20 [0225.531] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B20A1ECA-2D21-11ED-B0CF-7896845E3B84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b20a1eca-2d21-11ed-b0cf-7896845e3b84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e8 [0225.532] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B20A1ECA-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b20a1eca-2d21-11ed-b0cf-7896845e3b84}.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B20A1ECA-2D21-11ED-B0CF-7896845E3B84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b20a1eca-2d21-11ed-b0cf-7896845e3b84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.533] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B20A1ECA-2D21-11ED-B0CF-7896845E3B84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b20a1eca-2d21-11ed-b0cf-7896845e3b84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.533] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B20A1ECA-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b20a1eca-2d21-11ed-b0cf-7896845e3b84}.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74625823, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x74625823, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a3296ce, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x550370, dwReserved1=0xb, cFileName="{B20A1ECA-2D21-11ED-B0CF-7896845E3B84}.dat", cAlternateFileName="{B20A1~1.DAT")) returned 0x55e210 [0225.533] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74625823, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x74625823, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a3296ce, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x550370, dwReserved1=0xb, cFileName="{B20A1ECA-2D21-11ED-B0CF-7896845E3B84}.dat", cAlternateFileName="{B20A1~1.DAT")) returned 0 [0225.533] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0225.533] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B20A1ECA-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b20a1eca-2d21-11ed-b0cf-7896845e3b84}.dat")) returned 0 [0225.533] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B20A1ECA-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b20a1eca-2d21-11ed-b0cf-7896845e3b84}.dat")) returned 0x20 [0225.533] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8bd80d, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d8bd80d, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7dda841c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat", cAlternateFileName="{B80A0~1.DAT")) returned 1 [0225.534] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.534] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.534] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.534] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0225.534] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b80a0bdd-2d21-11ed-b0cf-7896845e3b84}.dat")) returned 0x20 [0225.535] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b80a0bdd-2d21-11ed-b0cf-7896845e3b84}.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0225.535] GetLastError () returned 0x20 [0225.535] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b80a0bdd-2d21-11ed-b0cf-7896845e3b84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1ec [0225.535] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b80a0bdd-2d21-11ed-b0cf-7896845e3b84}.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b80a0bdd-2d21-11ed-b0cf-7896845e3b84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.535] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b80a0bdd-2d21-11ed-b0cf-7896845e3b84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.535] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b80a0bdd-2d21-11ed-b0cf-7896845e3b84}.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8bd80d, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d8bd80d, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7dda841c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x550370, dwReserved1=0xb, cFileName="{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat", cAlternateFileName="{B80A0~1.DAT")) returned 0x55e7d0 [0225.536] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8bd80d, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d8bd80d, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7dda841c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x550370, dwReserved1=0xb, cFileName="{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat", cAlternateFileName="{B80A0~1.DAT")) returned 0 [0225.536] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0225.536] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b80a0bdd-2d21-11ed-b0cf-7896845e3b84}.dat")) returned 0 [0225.536] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\{b80a0bdd-2d21-11ed-b0cf-7896845e3b84}.dat")) returned 0x20 [0225.536] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8bd80d, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d8bd80d, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7dda841c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat", cAlternateFileName="{B80A0~1.DAT")) returned 0 [0225.536] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0225.536] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f386ce5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f386ce5, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f386ce5, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78002e, dwReserved1=0x6c006d, cFileName="Active", cAlternateFileName="")) returned 0 [0225.536] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0225.537] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74616474, dwReserved1=0x6d782e61, cFileName="TabRoaming", cAlternateFileName="TABROA~1")) returned 1 [0225.537] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\tabroaming\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x322d4444, dwReserved1=0x2d313244, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0225.537] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x322d4444, dwReserved1=0x2d313244, cFileName="..", cAlternateFileName="")) returned 1 [0225.537] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x322d4444, dwReserved1=0x2d313244, cFileName="..", cAlternateFileName="")) returned 0 [0225.537] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0225.537] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74616474, dwReserved1=0x6d782e61, cFileName="Tracking Protection", cAlternateFileName="TRACKI~1")) returned 1 [0225.537] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\tracking protection\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x322d4444, dwReserved1=0x2d313244, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0225.538] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x322d4444, dwReserved1=0x2d313244, cFileName="..", cAlternateFileName="")) returned 1 [0225.538] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x322d4444, dwReserved1=0x2d313244, cFileName="..", cAlternateFileName="")) returned 0 [0225.538] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0225.538] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5284b9d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc52aacec, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc52aacec, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74616474, dwReserved1=0x6d782e61, cFileName="VersionManager", cAlternateFileName="VERSIO~1")) returned 1 [0225.538] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5284b9d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc52aacec, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc52aacec, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x322d4444, dwReserved1=0x2d313244, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0225.538] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5284b9d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc52aacec, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc52aacec, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x322d4444, dwReserved1=0x2d313244, cFileName="..", cAlternateFileName="")) returned 1 [0225.538] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5284b9d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc5284b9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc5284b9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3f96, dwReserved0=0x322d4444, dwReserved1=0x2d313244, cFileName="versionlist.xml", cAlternateFileName="VERSIO~1.XML")) returned 1 [0225.539] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5284b9d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc5284b9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc5284b9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3f96, dwReserved0=0x322d4444, dwReserved1=0x2d313244, cFileName="versionlist.xml", cAlternateFileName="VERSIO~1.XML")) returned 0 [0225.539] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0225.539] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5284b9d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc52aacec, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc52aacec, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74616474, dwReserved1=0x6d782e61, cFileName="VersionManager", cAlternateFileName="VERSIO~1")) returned 0 [0225.539] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0225.539] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x616e614d, dwReserved1=0x63726567, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0225.539] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x760d4d6f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7473696c, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0225.540] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x760d4d6f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7473696c, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0225.540] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7473696c, dwReserved1=0x6c6d782e, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0225.540] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\sync playlists\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0225.542] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="..", cAlternateFileName="")) returned 1 [0225.542] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="en-US", cAlternateFileName="")) returned 1 [0225.542] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0225.543] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.543] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fe83ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fe83ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00007F03", cAlternateFileName="")) returned 1 [0225.543] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00007F03\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00007f03\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fe83ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fe83ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0225.545] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fe83ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fe83ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.545] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0225.546] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x5f006f, dwReserved1=0x610072, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0225.547] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x640065, dwReserved1=0x69005f, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0225.548] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x640065, dwReserved1=0x61005f, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0225.549] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x650079, dwReserved1=0x5f0064, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0225.549] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x610074, dwReserved1=0x65006b, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0225.550] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x610072, dwReserved1=0x650074, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0225.551] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x640065, dwReserved1=0x69005f, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0225.552] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x640065, dwReserved1=0x61005f, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0225.552] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x650079, dwReserved1=0x5f0064, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0225.553] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fe83ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x77002e, dwReserved1=0x6c0070, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0225.554] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fe83ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fe83ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fe83ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x650072, dwReserved1=0x2e0073, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0225.554] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fe83ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fe83ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fe83ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x650072, dwReserved1=0x2e0073, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0 [0225.554] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0225.555] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fe83ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fe83ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00007F03", cAlternateFileName="")) returned 0 [0225.555] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0225.556] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="en-US", cAlternateFileName="")) returned 0 [0225.556] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0225.556] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x760d4d6f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x760d4d6f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x760d4d6f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7473696c, dwReserved1=0x6c6d782e, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0225.556] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\transcoded files cache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x760d4d6f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x760d4d6f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x760d4d6f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d0033, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0225.556] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x760d4d6f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x760d4d6f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x760d4d6f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d0033, dwReserved1=0x6c, cFileName="..", cAlternateFileName="")) returned 1 [0225.556] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x760d4d6f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x760d4d6f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x760d4d6f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d0033, dwReserved1=0x6c, cFileName="..", cAlternateFileName="")) returned 0 [0225.556] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0225.557] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x760d4d6f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x760d4d6f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x760d4d6f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7473696c, dwReserved1=0x6c6d782e, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0 [0225.557] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0225.557] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x696efe32, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x696efe32, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20646564, dwReserved1=0x656c6946, cFileName="Office", cAlternateFileName="")) returned 1 [0225.557] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x696efe32, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x696efe32, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7473696c, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0225.557] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x696efe32, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x696efe32, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7473696c, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0225.557] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x3b96fdbf, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3b96fdbf, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7473696c, dwReserved1=0x6c6d782e, cFileName="16.0", cAlternateFileName="")) returned 1 [0225.557] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x3b96fdbf, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3b96fdbf, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d0033, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0225.559] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x3b96fdbf, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3b96fdbf, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d0033, dwReserved1=0x6c, cFileName="..", cAlternateFileName="")) returned 1 [0225.560] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaba9333c, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xaba9333c, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x6b3f26a7, ftLastWriteTime.dwHighDateTime=0x1d7b058, nFileSizeHigh=0x0, nFileSizeLow=0x13bd9, dwReserved0=0x6d0033, dwReserved1=0x6c, cFileName="excel.exe_Rules.xml", cAlternateFileName="EXCELE~1.XML")) returned 1 [0225.561] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cb2b47, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8cb2b47, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8cb2b47, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x11d02, dwReserved0=0x65006c, dwReserved1=0x2e0073, cFileName="msaccess.exe_Rules.xml", cAlternateFileName="MSACCE~1.XML")) returned 1 [0225.561] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20bb7bfa, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x20bb7bfa, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x20bb8ff9, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x4050, dwReserved0=0x72005f, dwReserved1=0x6c0075, cFileName="officec2rclient.exe_Rules.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0225.562] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cfcf021, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1cfcf021, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xfa561739, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x4050, dwReserved0=0x6e0065, dwReserved1=0x2e0074, cFileName="officeclicktorun.exe_Rules.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0225.563] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b96fdbf, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3b96fdbf, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3b96fdbf, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x14a91, dwReserved0=0x72006f, dwReserved1=0x6e0075, cFileName="outlook.exe_Rules.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0225.564] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb50ff70b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb50ff70b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb50ff70b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x12c3e, dwReserved0=0x750072, dwReserved1=0x65006c, cFileName="powerpnt.exe_Rules.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0225.565] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x5781bc17, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x9d540b29, ftLastWriteTime.dwHighDateTime=0x1d70502, nFileSizeHigh=0x0, nFileSizeLow=0x4d2aa, dwReserved0=0x72005f, dwReserved1=0x6c0075, cFileName="setup.exe_Rules.xml", cAlternateFileName="SETUPE~1.XML")) returned 1 [0225.565] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18417d03, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x18417d03, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1841a3b9, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x4050, dwReserved0=0x65006c, dwReserved1=0x2e0073, cFileName="setup32.exe_Rules.xml", cAlternateFileName="SETUP3~1.XML")) returned 1 [0225.566] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1fe741f9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1fe741f9, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x750072, dwReserved1=0x65006c, cFileName="WebServiceCache", cAlternateFileName="WEBSER~1")) returned 1 [0225.566] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1fe741f9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1fe741f9, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0225.569] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1fe741f9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1fe741f9, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.569] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1fe741f9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x82347855, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AllUsers", cAlternateFileName="")) returned 1 [0225.569] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1fe741f9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x82347855, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0225.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1fe741f9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x82347855, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82347855, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8b05ffa, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8b05ffa, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="binaries.templates.cdn.office.net", cAlternateFileName="BINARI~1.NET")) returned 1 [0225.569] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\binaries.templates.cdn.office.net\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\binaries.templates.cdn.office.net\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82347855, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8b05ffa, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5d4d30d2, ftLastWriteTime.dwHighDateTime=0x1d7b058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0225.573] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82347855, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8b05ffa, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5d4d30d2, ftLastWriteTime.dwHighDateTime=0x1d7b058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.575] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4e03b9e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4e03b9e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4e03b9e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xaff, dwReserved0=0x0, dwReserved1=0x0, cFileName="033A5E2E-F52B-4392-A855-EB1B603352F7", cAlternateFileName="033A5E~1")) returned 1 [0225.576] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb2bc31, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabb2bc31, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabb2d062, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2b3a, dwReserved0=0x2d0062, dwReserved1=0x330034, cFileName="0431222D-6E07-4867-BED3-3672DEAE6648", cAlternateFileName="043122~1")) returned 1 [0225.577] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ca303e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82ca303e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82ca303e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3be8, dwReserved0=0x2d0037, dwReserved1=0x380034, cFileName="05BDDC85-1B21-40A1-AD47-D6AD70518BA9", cAlternateFileName="05BDDC~1")) returned 1 [0225.578] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8494d29, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8494d29, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8496206, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xa96, dwReserved0=0x2d0031, dwReserved1=0x300034, cFileName="08DD48C4-4C22-48B1-8676-03955502381B", cAlternateFileName="08DD48~1")) returned 1 [0225.578] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b5398c, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82b5398c, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82b54d17, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x5ba7, dwReserved0=0x2d0032, dwReserved1=0x380034, cFileName="0BB3D81C-E14E-48A8-9E37-42996BD92C45", cAlternateFileName="0BB3D8~1")) returned 1 [0225.579] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c946be, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82c946be, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82c946be, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x14b50, dwReserved0=0x2d0065, dwReserved1=0x380034, cFileName="0FFEDD2D-75F1-4D91-8A68-D07299430A95", cAlternateFileName="0FFEDD~1")) returned 1 [0225.580] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b28e4c, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82b28e4c, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82b28e4c, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2426, dwReserved0=0x2d0031, dwReserved1=0x640034, cFileName="136081F3-73A0-4FF7-B28C-3470DE19BBF1", cAlternateFileName="136081~1")) returned 1 [0225.581] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84be520, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc84be520, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc84bf915, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1193, dwReserved0=0x2d0030, dwReserved1=0x660034, cFileName="149EF4F4-82E0-49BF-99DB-2EA4A1B5FD74", cAlternateFileName="149EF4~1")) returned 1 [0225.582] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d9ad45, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4d9ad45, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4d9ad45, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x812e, dwReserved0=0x2d0030, dwReserved1=0x390034, cFileName="15A1ED83-2E0D-4739-B941-AD1703A61A1C", cAlternateFileName="15A1ED~1")) returned 1 [0225.583] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb6b457, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabb6b457, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabb6b457, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1bc0, dwReserved0=0x2d0064, dwReserved1=0x370034, cFileName="1604DFC0-3711-40F4-A312-5716BCF1C705", cAlternateFileName="1604DF~1")) returned 1 [0225.584] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc860f3fd, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc860f3fd, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc86107a9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xc69, dwReserved0=0x2d0031, dwReserved1=0x300034, cFileName="1A8199FD-6A7F-407E-BA91-64E3C5A3EECB", cAlternateFileName="1A8199~1")) returned 1 [0225.584] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9f20e3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9f20e3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9f20e3, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x80bb, dwReserved0=0x2d0066, dwReserved1=0x300034, cFileName="1E1D102B-3E38-42D5-97CF-F307C2E53FA9", cAlternateFileName="1E1D10~1")) returned 1 [0225.585] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb5b5f4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabb5b5f4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabb5dbcb, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x2d0038, dwReserved1=0x320034, cFileName="21676BA8-01CC-477B-8C3D-258E774A1164", cAlternateFileName="21676B~1")) returned 1 [0225.586] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4efb86e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4efb86e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4efcbea, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x6b94, dwReserved0=0x2d0063, dwReserved1=0x370034, cFileName="23BF312F-1BE9-4411-BFF6-FA34461B5139", cAlternateFileName="23BF31~1")) returned 1 [0225.587] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9d4b04, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9d4b04, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9d5f98, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3bcb, dwReserved0=0x2d0039, dwReserved1=0x340034, cFileName="23FB071D-E9EC-4666-A0CB-7D6993563959", cAlternateFileName="23FB07~1")) returned 1 [0225.588] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a897d3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8a897d3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8a8ab48, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1fdd, dwReserved0=0x2d0063, dwReserved1=0x360034, cFileName="292EB0B0-CEFD-4710-B2BC-B6DEBB11376B", cAlternateFileName="292EB0~1")) returned 1 [0225.589] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49f4ff8, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb49f4ff8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb49f62e6, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2fff, dwReserved0=0x2d0064, dwReserved1=0x370034, cFileName="29A9F36E-19FA-474E-A88B-9EE7C96DCBA2", cAlternateFileName="29A9F3~1")) returned 1 [0225.590] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb502ff48, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb502ff48, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb503124f, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x666c, dwReserved0=0x2d0061, dwReserved1=0x370034, cFileName="2A756DDE-34E8-4DC2-855B-44682E9D4845", cAlternateFileName="2A756D~1")) returned 1 [0225.594] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49fb16b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb49fb16b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb49fb16b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4af4, dwReserved0=0x2d0038, dwReserved1=0x640034, cFileName="2DFAAC69-9C98-47D4-8E3B-6AD109FD232D", cAlternateFileName="2DFAAC~1")) returned 1 [0225.595] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a80f08, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8a80f08, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8a883fc, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x2d0038, dwReserved1=0x370034, cFileName="2EC88447-26FF-4E32-8D81-5ABC75AE65DB", cAlternateFileName="2EC884~1")) returned 1 [0225.596] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ea9c0d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4ea9c0d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4ea9c0d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x8b27, dwReserved0=0x2d0066, dwReserved1=0x650034, cFileName="33F63883-F0AE-4AB6-B4F0-30BB1951B381", cAlternateFileName="33F638~1")) returned 1 [0225.597] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bdad10, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82bdad10, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82bdad10, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x8440, dwReserved0=0x2d0065, dwReserved1=0x610034, cFileName="3628527B-53B7-45AD-A6DB-2BB7CCE4B284", cAlternateFileName="362852~1")) returned 1 [0225.597] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab8e2fcd, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab8e2fcd, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab8e2fcd, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4a91, dwReserved0=0x2d0037, dwReserved1=0x350034, cFileName="393DA17C-492D-4E39-93B9-A0EB68F559AE", cAlternateFileName="393DA1~1")) returned 1 [0225.598] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829648ac, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x829648ac, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x829648ac, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x63f1, dwReserved0=0x2d0064, dwReserved1=0x650034, cFileName="3BA4462F-9DE4-49DE-B3B4-C55DE0BC2436", cAlternateFileName="3BA446~1")) returned 1 [0225.605] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c74994, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82c74994, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82c770d1, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x235a, dwReserved0=0x2d0034, dwReserved1=0x390034, cFileName="3C5BB25A-C5B4-4565-A1C7-47EA3C32B62B", cAlternateFileName="3C5BB2~1")) returned 1 [0225.605] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaba3536d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xaba3536d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xaba3536d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a3b, dwReserved0=0x2d0034, dwReserved1=0x350034, cFileName="3E543A2A-53F0-47F8-9F51-FF1B9D7890AD", cAlternateFileName="3E543A~1")) returned 1 [0225.606] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d79e71, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82d79e71, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82d7b256, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2aee, dwReserved0=0x2d0030, dwReserved1=0x370034, cFileName="3FFAE199-5C90-4A06-AA16-96546E1FDFD1", cAlternateFileName="3FFAE1~1")) returned 1 [0225.607] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82960d16, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82960d16, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82962239, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x341b, dwReserved0=0x2d0030, dwReserved1=0x610034, cFileName="406E18D5-EC82-4FCC-82A8-2D148D067E02", cAlternateFileName="406E18~1")) returned 1 [0225.608] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84c0c6a, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc84c0c6a, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc84c20aa, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x97c, dwReserved0=0x2d0032, dwReserved1=0x660034, cFileName="43F05AC3-1345-4232-9173-E5AEAF85BF98", cAlternateFileName="43F05A~1")) returned 1 [0225.609] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc847f2b8, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc847f2b8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc847f2b8, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x2d0035, dwReserved1=0x320034, cFileName="4BCC7FD4-613C-4B15-9DBE-908105E4ED54", cAlternateFileName="4BCC7F~1")) returned 1 [0225.610] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828dd133, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x828dd133, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x828dd133, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4825, dwReserved0=0x2d0063, dwReserved1=0x620034, cFileName="4CA2E262-1B83-48AB-BA5B-2A052BA6485B", cAlternateFileName="4CA2E2~1")) returned 1 [0225.611] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5074490, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb5074490, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb5074490, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2171, dwReserved0=0x2d0033, dwReserved1=0x380034, cFileName="4F183948-A9C6-492E-8CD3-78756D7F03CF", cAlternateFileName="4F1839~1")) returned 1 [0225.612] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84da778, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc84da778, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc84db9c3, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x438, dwReserved0=0x2d0036, dwReserved1=0x390034, cFileName="4F9F0AEF-1D87-4F0C-910C-0ADC7E172289", cAlternateFileName="4F9F0A~1")) returned 1 [0225.612] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4b06560, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4b06560, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4b07902, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2c73, dwReserved0=0x2d0037, dwReserved1=0x660034, cFileName="511B4AE9-CD73-4ED0-A899-602921314CEC", cAlternateFileName="511B4A~1")) returned 1 [0225.613] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabaab9cf, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabaab9cf, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabaacd7e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1cab, dwReserved0=0x2d0033, dwReserved1=0x650034, cFileName="580DF0A8-7B09-4BAC-BD6B-1096E9BDA073", cAlternateFileName="580DF0~1")) returned 1 [0225.614] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b14252, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82b14252, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82b14252, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x23c3, dwReserved0=0x2d0039, dwReserved1=0x620034, cFileName="5B268694-C256-497F-B57F-0B2D793CBA10", cAlternateFileName="5B2686~1")) returned 1 [0225.615] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4cefda3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4cefda3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4cefda3, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x5128, dwReserved0=0x2d0036, dwReserved1=0x390034, cFileName="5B7E87C2-FC64-4F92-8D24-251DE6AF63C0", cAlternateFileName="5B7E87~1")) returned 1 [0225.616] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9fe464, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9fe464, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9fe464, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x487e, dwReserved0=0x2d0034, dwReserved1=0x660034, cFileName="5F3382B8-AFBF-4FEA-8B79-20898FE63A3D", cAlternateFileName="5F3382~1")) returned 1 [0225.617] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabbd098a, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabbd098a, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabbd1d40, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x242b, dwReserved0=0x2d0066, dwReserved1=0x660034, cFileName="6B8DE11F-3D5A-48C6-81AA-977DA661E2C5", cAlternateFileName="6B8DE1~1")) returned 1 [0225.617] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82cfd55e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82cfd55e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82d37ecc, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x7b5, dwReserved0=0x2d0061, dwReserved1=0x380034, cFileName="6E234531-C2BA-4F08-BC11-2ECA97A03E84", cAlternateFileName="6E2345~1")) returned 1 [0225.618] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc853d4e0, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc853d4e0, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc85646d8, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xbec, dwReserved0=0x2d0061, dwReserved1=0x660034, cFileName="6E4EC81F-6A7B-442E-91B3-150ED476524B", cAlternateFileName="6E4EC8~1")) returned 1 [0225.619] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b980a1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82b980a1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82b99326, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x401d, dwReserved0=0x2d0062, dwReserved1=0x340034, cFileName="6E87FFA6-570D-4F3C-832C-0F0ED39D0DE2", cAlternateFileName="6E87FF~1")) returned 1 [0225.620] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4cf260c, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4cf260c, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4cf260c, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xb156, dwReserved0=0x2d0064, dwReserved1=0x660034, cFileName="719CA5E5-2264-4D2B-B1BC-1979AE2F8481", cAlternateFileName="719CA5~1")) returned 1 [0225.621] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b05ffa, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8b05ffa, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8b07378, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x60e, dwReserved0=0x2d0034, dwReserved1=0x640034, cFileName="73949334-7885-4202-9F99-AD59E8565AB6", cAlternateFileName="739493~1")) returned 1 [0225.623] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc882d53e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc882d53e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc882e8bd, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x722, dwReserved0=0x2d0035, dwReserved1=0x320034, cFileName="7600EED5-3234-4650-8D9A-67C39E956D87", cAlternateFileName="7600EE~1")) returned 1 [0225.624] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabae28fb, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabae28fb, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabae3bb5, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x2d0034, dwReserved1=0x360034, cFileName="7C92FCEB-66EB-471D-9BA1-BDEE0E12FD94", cAlternateFileName="7C92FC~1")) returned 1 [0225.625] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b59afa, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82b59afa, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82b59afa, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x98d6, dwReserved0=0x2d0062, dwReserved1=0x370034, cFileName="7F96D0A4-ECC8-4300-A3C4-8C2B5918BBAA", cAlternateFileName="7F96D0~1")) returned 1 [0225.626] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a05a2f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8a05a2f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8a06e54, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xc11, dwReserved0=0x2d0038, dwReserved1=0x330034, cFileName="806760D6-0D46-4F0D-9A2A-5619D868318C", cAlternateFileName="806760~1")) returned 1 [0225.629] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8565b98, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8565b98, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8565b98, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x2d0036, dwReserved1=0x660034, cFileName="825BFDEB-777E-4DF1-818C-7CA4FC0D3016", cAlternateFileName="825BFD~1")) returned 1 [0225.630] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84e7d50, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc84e7d50, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc84e9287, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x9c3, dwReserved0=0x2d0065, dwReserved1=0x640034, cFileName="82B38E75-3368-40D2-B1E5-193E0E558D48", cAlternateFileName="82B38E~1")) returned 1 [0225.631] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaba093e4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xaba093e4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xaba093e4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x507d, dwReserved0=0x2d0038, dwReserved1=0x300034, cFileName="8618DFC3-EF76-4235-AA5D-06BEABD6E242", cAlternateFileName="8618DF~1")) returned 1 [0225.632] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c2c9d8, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4c2c9d8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4c2c9d8, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x17be, dwReserved0=0x2d0036, dwReserved1=0x320034, cFileName="89953CAA-1AB9-4A6E-A488-DFEFC5075387", cAlternateFileName="89953C~1")) returned 1 [0225.633] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ac863d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82ac863d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82ac9960, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x541f, dwReserved0=0x2d0039, dwReserved1=0x610034, cFileName="8EE3590E-CE33-42C6-8250-DF185AF8DAA4", cAlternateFileName="8EE359~1")) returned 1 [0225.633] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb476eaa3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb476eaa3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb476fe6d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4c3c, dwReserved0=0x2d0033, dwReserved1=0x320034, cFileName="9056E597-0C30-4F42-BA7A-70B004BF042A", cAlternateFileName="9056E5~1")) returned 1 [0225.634] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49b7e91, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb49b7e91, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb49b7e91, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x12b8, dwReserved0=0x2d0030, dwReserved1=0x660034, cFileName="92D09C47-EFFB-4E54-B85D-797F67B0527C", cAlternateFileName="92D09C~1")) returned 1 [0225.635] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc848065f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc848065f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc84819da, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3b7, dwReserved0=0x2d0062, dwReserved1=0x650034, cFileName="95301B49-34BE-47D5-99D1-1C50A4B80C13", cAlternateFileName="95301B~1")) returned 1 [0225.636] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb715e7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabb715e7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabb715e7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x372b, dwReserved0=0x2d0065, dwReserved1=0x370034, cFileName="95AFB9A8-DEAD-49F6-9234-BEA10973F0CD", cAlternateFileName="95AFB9~1")) returned 1 [0225.637] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a305e3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8a305e3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8a7fd33, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x7d42, dwReserved0=0x2d0064, dwReserved1=0x390034, cFileName="9639F732-A0F4-4A33-92A0-01330C0BB8C3", cAlternateFileName="9639F7~1")) returned 1 [0225.641] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83bbe8a, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc83bbe8a, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc83bd386, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x2d0034, dwReserved1=0x610034, cFileName="96BAA0E7-CE03-46C0-A45A-8F71ADB9C825", cAlternateFileName="96BAA0~1")) returned 1 [0225.642] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b07c5d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82b07c5d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82b07c5d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xd2e, dwReserved0=0x2d0033, dwReserved1=0x360034, cFileName="9A557D1E-5B55-45D0-B83F-66D1CCFBCC32", cAlternateFileName="9A557D~1")) returned 1 [0225.643] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a15964, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8a15964, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8a16c5a, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x2d0035, dwReserved1=0x350034, cFileName="9CFC7195-9421-404F-A40A-EEBD8F033365", cAlternateFileName="9CFC71~1")) returned 1 [0225.644] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabbdccf8, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabbdccf8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabbdccf8, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x135f, dwReserved0=0x2d0031, dwReserved1=0x300034, cFileName="A0D2B79B-05BB-4871-8DE6-E766643BD65E", cAlternateFileName="A0D2B7~1")) returned 1 [0225.645] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabae01a6, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabae01a6, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabae01a6, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x108a, dwReserved0=0x2d0062, dwReserved1=0x380034, cFileName="A1E234BD-B121-49A0-9B4B-BBF6A832161B", cAlternateFileName="A1E234~1")) returned 1 [0225.646] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ef008, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x829ef008, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x829ef008, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x990a, dwReserved0=0x2d0031, dwReserved1=0x390034, cFileName="A2F95592-6A7F-475A-878F-C593DA8BBEDD", cAlternateFileName="A2F955~1")) returned 1 [0225.647] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bb0641, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82bb0641, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82bb19b0, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2c34, dwReserved0=0x2d0066, dwReserved1=0x370034, cFileName="A50A8D38-2A06-4EF5-A84C-B00C714F6B16", cAlternateFileName="A50A8D~1")) returned 1 [0225.647] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc89f5df6, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc89f5df6, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc89f5df6, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x2d0036, dwReserved1=0x650034, cFileName="A5DEC71F-CF32-4AAD-A02A-3B306B7F1FCC", cAlternateFileName="A5DEC7~1")) returned 1 [0225.648] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49c69cc, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb49c69cc, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb49c69cc, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x75b, dwReserved0=0x2d0032, dwReserved1=0x610034, cFileName="AA8B315F-D191-411A-80E8-BBCCCE176DA7", cAlternateFileName="AA8B31~1")) returned 1 [0225.649] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabac2fca, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabac2fca, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabac3f0e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x14c5, dwReserved0=0x2d0031, dwReserved1=0x310034, cFileName="ABF009F6-7021-47EC-8025-BE55AD5EBB57", cAlternateFileName="ABF009~1")) returned 1 [0225.650] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9c9b2e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9c9b2e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9c9b2e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x367e, dwReserved0=0x2d0031, dwReserved1=0x370034, cFileName="AF769060-9C3B-4F97-8FB8-1EB72198BA39", cAlternateFileName="AF7690~1")) returned 1 [0225.651] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9f96f2, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9f96f2, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9faa6d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2132, dwReserved0=0x2d0062, dwReserved1=0x660034, cFileName="B1725647-3A36-4C56-9803-89EDCA8238A8", cAlternateFileName="B17256~1")) returned 1 [0225.652] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c666c7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8c666c7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8c666c7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x2d0036, dwReserved1=0x630034, cFileName="B20989ED-6B03-4803-ADD0-4360553EC384", cAlternateFileName="B20989~1")) returned 1 [0225.653] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4df9f3a, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4df9f3a, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4df9f3a, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x7cb, dwReserved0=0x2d0033, dwReserved1=0x380034, cFileName="B6937276-0D21-44E4-B6A5-2F13F90E1698", cAlternateFileName="B69372~1")) returned 1 [0225.657] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82cd8b94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82cd8b94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82cd8b94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x5505, dwReserved0=0x2d0031, dwReserved1=0x340034, cFileName="B74632A4-B059-4F5A-849D-252172A06A99", cAlternateFileName="B74632~1")) returned 1 [0225.658] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9f482a, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9f482a, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9f482a, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3888, dwReserved0=0x2d0039, dwReserved1=0x660034, cFileName="BB41F806-1043-41B2-9372-8F6E7066247A", cAlternateFileName="BB41F8~1")) returned 1 [0225.659] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabae635e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabae635e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabae635e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x7f46, dwReserved0=0x2d0033, dwReserved1=0x310034, cFileName="BFB97937-ABF1-480A-946B-D367067F68C4", cAlternateFileName="BFB979~1")) returned 1 [0225.660] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9c1295, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9c1295, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9c1295, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3c73, dwReserved0=0x2d0031, dwReserved1=0x380034, cFileName="C0B5FEFE-C6C1-439E-B89D-E39A2031E527", cAlternateFileName="C0B5FE~1")) returned 1 [0225.661] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb474db8b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb474db8b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb474ef1c, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1ffd, dwReserved0=0x2d0031, dwReserved1=0x330034, cFileName="C3DC5BD1-4AB1-4BDD-ACB0-FCCA65EE3D2A", cAlternateFileName="C3DC5B~1")) returned 1 [0225.662] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9cfd00, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9cfd00, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9d23da, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2f7e, dwReserved0=0x2d0031, dwReserved1=0x620034, cFileName="C4181E33-213A-4456-87BA-15FD83064187", cAlternateFileName="C4181E~1")) returned 1 [0225.662] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4974447, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4974447, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb49759af, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2bd8, dwReserved0=0x2d0061, dwReserved1=0x340034, cFileName="C52B4A7C-C9FD-485A-8375-F97F3A24C1BA", cAlternateFileName="C52B4A~1")) returned 1 [0225.663] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83e6a80, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc83e6a80, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc83e6a80, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1167, dwReserved0=0x2d0064, dwReserved1=0x380034, cFileName="C7B65EEC-91E0-4362-AC18-80B09C3C95AC", cAlternateFileName="C7B65E~1")) returned 1 [0225.664] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829b15f8, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x829b15f8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x829b5109, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x634f, dwReserved0=0x2d0030, dwReserved1=0x330034, cFileName="C85A59C5-2B02-4194-AB2C-0E6E2B6031A0", cAlternateFileName="C85A59~1")) returned 1 [0225.665] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4e2fa78, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4e2fa78, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4e30e51, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x5543, dwReserved0=0x2d0032, dwReserved1=0x310034, cFileName="C9B26F48-B9B2-452D-9E4F-BD539A769B1B", cAlternateFileName="C9B26F~1")) returned 1 [0225.666] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabad3e63, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabad3e63, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabad3e63, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a54, dwReserved0=0x2d0032, dwReserved1=0x350034, cFileName="CA094F8F-D41E-43AB-8A32-1A2F34851250", cAlternateFileName="CA094F~1")) returned 1 [0225.667] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8293e9d0, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x8293e9d0, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x8293ff31, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1e19, dwReserved0=0x2d0065, dwReserved1=0x330034, cFileName="CCB1B3FC-5E0C-4241-ABC1-CA67B6C56947", cAlternateFileName="CCB1B3~1")) returned 1 [0225.668] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d94a38, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4d94a38, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4d94a38, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x422e, dwReserved0=0x2d0063, dwReserved1=0x320034, cFileName="CFC05EA4-9A97-47D5-9459-FB2F94EE79CC", cAlternateFileName="CFC05E~1")) returned 1 [0225.669] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d89a80, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4d89a80, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4d8ae10, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x595d, dwReserved0=0x2d0037, dwReserved1=0x370034, cFileName="D03B54D7-2F02-4F26-B245-6759FD3E5356", cAlternateFileName="D03B54~1")) returned 1 [0225.670] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9d990d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9d990d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9ee668, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4c5d, dwReserved0=0x2d0032, dwReserved1=0x660034, cFileName="D1658A87-36B4-4565-B36F-CEF71FFC7033", cAlternateFileName="D1658A~1")) returned 1 [0225.671] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c85c72, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82c85c72, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82c8700a, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3894, dwReserved0=0x2d0034, dwReserved1=0x350034, cFileName="D69FD789-7AAA-4B6A-86DB-6AD5F309B97F", cAlternateFileName="D69FD7~1")) returned 1 [0225.672] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4e43432, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4e43432, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4e43432, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x6f72, dwReserved0=0x2d0061, dwReserved1=0x620034, cFileName="D7F62263-4202-4285-AB58-35DFBBB7899C", cAlternateFileName="D7F622~1")) returned 1 [0225.673] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc856808a, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc856808a, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc856808a, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x2d0032, dwReserved1=0x320034, cFileName="DB4F9AB3-289C-4C85-93DC-C7725673E79B", cAlternateFileName="DB4F9A~1")) returned 1 [0225.674] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d69f78, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82d69f78, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82d69f78, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2913, dwReserved0=0x2d0063, dwReserved1=0x630034, cFileName="DC2A3CBD-DDE4-4C82-98B2-97C578971471", cAlternateFileName="DC2A3C~1")) returned 1 [0225.675] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc89439d3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc89439d3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc89439d3, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2516, dwReserved0=0x2d0034, dwReserved1=0x630034, cFileName="E2B74C9D-38F9-4AF3-849B-6F6ED185FFC9", cAlternateFileName="E2B74C~1")) returned 1 [0225.675] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4e4e325, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4e4e325, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4e4f6b9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xa99, dwReserved0=0x2d0039, dwReserved1=0x610034, cFileName="E36912C5-9C2D-452F-95F8-CFA1FC049148", cAlternateFileName="E36912~1")) returned 1 [0225.676] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8850b3e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8850b3e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8850b3e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x38f, dwReserved0=0x2d0064, dwReserved1=0x350034, cFileName="E457C019-B991-4CCC-8425-CCD48E271DFC", cAlternateFileName="E457C0~1")) returned 1 [0225.677] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4e928f1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4e928f1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4e93c87, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x2d0031, dwReserved1=0x630034, cFileName="E64AA1EE-3ABD-40DD-9A7A-E7E891151C82", cAlternateFileName="E64AA1~1")) returned 1 [0225.678] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bd5ee3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82bd5ee3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82bd85f4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3380, dwReserved0=0x2d0064, dwReserved1=0x300034, cFileName="E8B41E01-FE51-4F72-9829-70D724467D17", cAlternateFileName="E8B41E~1")) returned 1 [0225.679] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb679a6, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabb679a6, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabb679a6, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x292e, dwReserved0=0x2d0031, dwReserved1=0x660034, cFileName="EA6554FC-7DB2-4685-948E-52402E811540", cAlternateFileName="EA6554~1")) returned 1 [0225.680] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8424f42, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8424f42, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8427531, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x153e, dwReserved0=0x2d0032, dwReserved1=0x360034, cFileName="F0A28B79-40AC-459C-968D-4F68E9798715", cAlternateFileName="F0A28B~1")) returned 1 [0225.681] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829bd95b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x829bd95b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x829bef86, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x7629, dwReserved0=0x2d0063, dwReserved1=0x350034, cFileName="F192A1E6-5284-47FF-83DA-D65DCB35FC9F", cAlternateFileName="F192A1~1")) returned 1 [0225.681] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaba00b7d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xaba00b7d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xaba00b7d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x18bd, dwReserved0=0x2d0034, dwReserved1=0x370034, cFileName="F31F431A-DF78-48BC-9A30-E15E83A7DF3B", cAlternateFileName="F31F43~1")) returned 1 [0225.682] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d4df95, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82d4df95, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82d4df95, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1362, dwReserved0=0x2d0038, dwReserved1=0x380034, cFileName="F8C7174F-633A-4FA0-9187-67153391986A", cAlternateFileName="F8C717~1")) returned 1 [0225.683] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c2675f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4c2675f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4c2675f, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x447b, dwReserved0=0x2d0061, dwReserved1=0x660034, cFileName="F97CF839-8F66-44ED-8DB4-5A4D6D408F2E", cAlternateFileName="F97CF8~1")) returned 1 [0225.688] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49ec6e1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb49ec6e1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb49eda26, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x486e, dwReserved0=0x2d0036, dwReserved1=0x340034, cFileName="FDAC0094-8C06-4BE5-856F-0DB7BB8F69B9", cAlternateFileName="FDAC00~1")) returned 1 [0225.689] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49ec6e1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb49ec6e1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb49eda26, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x486e, dwReserved0=0x2d0036, dwReserved1=0x340034, cFileName="FDAC0094-8C06-4BE5-856F-0DB7BB8F69B9", cAlternateFileName="FDAC00~1")) returned 0 [0225.689] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0225.690] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xf836a81f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xf836a81f, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x43382d34, dwReserved1=0x342d3630, cFileName="officeclient.microsoft.com", cAlternateFileName="OFFICE~1.COM")) returned 1 [0225.690] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xf836a81f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xf8387c8b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0036, dwReserved1=0x620034, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0225.694] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xf836a81f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xf8387c8b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0036, dwReserved1=0x620034, cFileName="..", cAlternateFileName="")) returned 1 [0225.694] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d374b6c, ftCreationTime.dwHighDateTime=0x1d7b058, ftLastAccessTime.dwLowDateTime=0x5d374b6c, ftLastAccessTime.dwHighDateTime=0x1d7b058, ftLastWriteTime.dwLowDateTime=0x5d37726a, ftLastWriteTime.dwHighDateTime=0x1d7b058, nFileSizeHigh=0x0, nFileSizeLow=0x21d15, dwReserved0=0x2d0036, dwReserved1=0x620034, cFileName="4958AB69-A28E-4C1F-916A-BDF19CB99CF0", cAlternateFileName="4958AB~1")) returned 1 [0225.695] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf836a81f, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xf836a81f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xf836bb5a, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x24712, dwReserved0=0x2d0065, dwReserved1=0x630034, cFileName="6AEB661E-B31C-4DE4-AD1C-ED3FF837AE7D", cAlternateFileName="6AEB66~1")) returned 1 [0225.696] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf836a81f, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xf836a81f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xf836bb5a, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x24712, dwReserved0=0x2d0065, dwReserved1=0x630034, cFileName="6AEB661E-B31C-4DE4-AD1C-ED3FF837AE7D", cAlternateFileName="6AEB66~1")) returned 0 [0225.696] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0225.697] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xf836a81f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xf836a81f, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x43382d34, dwReserved1=0x342d3630, cFileName="officeclient.microsoft.com", cAlternateFileName="OFFICE~1.COM")) returned 0 [0225.697] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0225.698] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1fe741f9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x82347855, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AllUsers", cAlternateFileName="")) returned 0 [0225.698] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0225.698] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fa7c66, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82fa7c66, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82fa7c66, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x197d6, dwReserved0=0x750073, dwReserved1=0x65006c, cFileName="winword.exe_Rules.xml", cAlternateFileName="WINWOR~1.XML")) returned 1 [0225.698] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fa7c66, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82fa7c66, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82fa7c66, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x197d6, dwReserved0=0x750073, dwReserved1=0x65006c, cFileName="winword.exe_Rules.xml", cAlternateFileName="WINWOR~1.XML")) returned 0 [0225.699] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0225.699] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x696efe32, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0xec86ec20, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec876156, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6578652e, dwReserved1=0x6c75525f, cFileName="OTele", cAlternateFileName="")) returned 1 [0225.699] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x696efe32, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0xec876156, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec876156, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x750072, dwReserved1=0x65006c, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0225.701] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x696efe32, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0xec876156, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec876156, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x750072, dwReserved1=0x65006c, cFileName="..", cAlternateFileName="")) returned 1 [0225.702] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25398aef, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x25398aef, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x25399e26, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x750072, dwReserved1=0x65006c, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTele.dat", cAlternateFileName="{12E26~2.DAT")) returned 1 [0225.702] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.702] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.702] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.702] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.703] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.703] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0225.703] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otele.dat")) returned 0x20 [0225.704] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.704] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.705] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0225.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0225.707] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.707] CloseHandle (hObject=0x1e4) returned 1 [0225.707] CloseHandle (hObject=0x1f0) returned 1 [0225.711] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.711] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.711] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25398aef, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x25398aef, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x25399e26, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTele.dat", cAlternateFileName="{12E26~2.DAT")) returned 0x55e610 [0225.711] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25398aef, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x25398aef, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x25399e26, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTele.dat", cAlternateFileName="{12E26~2.DAT")) returned 0 [0225.712] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0225.712] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otele.dat")) returned 1 [0225.713] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otele.dat")) returned 0xffffffff [0225.713] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2538eeaa, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x2538eeaa, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x25390236, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{12E26~1.DAT")) returned 1 [0225.713] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.713] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.716] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.716] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0225.716] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otelemediumcost.dat")) returned 0x20 [0225.716] VirtualAlloc (lpAddress=0x6a4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6a4000 [0225.717] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.717] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.718] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0225.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x345, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0225.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.721] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.721] CloseHandle (hObject=0x1f0) returned 1 [0225.721] CloseHandle (hObject=0x1e4) returned 1 [0225.722] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.723] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.723] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2538eeaa, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x2538eeaa, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x25390236, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{12E26~1.DAT")) returned 0x55e2d0 [0225.723] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2538eeaa, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x2538eeaa, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x25390236, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{12E26~1.DAT")) returned 0 [0225.723] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0225.724] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otelemediumcost.dat")) returned 1 [0225.725] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (0) - 3576 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0225.725] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x253ad6f4, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x253ad6f4, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x253ad6f4, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTele.dat", cAlternateFileName="{12E26~4.DAT")) returned 1 [0225.726] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.726] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.726] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.726] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.726] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.726] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0225.726] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otele.dat")) returned 0x20 [0225.727] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.727] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.728] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0225.732] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0225.734] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.734] CloseHandle (hObject=0x1e4) returned 1 [0225.734] CloseHandle (hObject=0x1f0) returned 1 [0225.737] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.738] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.738] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x253ad6f4, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x253ad6f4, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x253ad6f4, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTele.dat", cAlternateFileName="{12E26~4.DAT")) returned 0x55e5d0 [0225.738] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x253ad6f4, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x253ad6f4, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x253ad6f4, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTele.dat", cAlternateFileName="{12E26~4.DAT")) returned 0 [0225.738] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0225.738] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otele.dat")) returned 1 [0225.739] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otele.dat")) returned 0xffffffff [0225.739] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x253a2737, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x253a2737, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x253a4ded, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{12E26~3.DAT")) returned 1 [0225.740] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.740] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.740] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.740] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0225.740] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otelemediumcost.dat")) returned 0x20 [0225.740] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.741] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0225.743] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1e3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0225.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.744] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.744] CloseHandle (hObject=0x1f0) returned 1 [0225.744] CloseHandle (hObject=0x1e4) returned 1 [0225.747] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.747] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.748] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x253a2737, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x253a2737, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x253a4ded, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{12E26~3.DAT")) returned 0x55e890 [0225.748] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x253a2737, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x253a2737, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x253a4ded, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{12E26~3.DAT")) returned 0 [0225.748] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0225.748] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otelemediumcost.dat")) returned 1 [0225.749] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{12e262e7-d2b6-4d7f-8c8e-099a50a4e1b9} (1) - 3576 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0225.749] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c6bec8, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6c6bec8, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6c6bec8, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTele.dat", cAlternateFileName="{14280~2.DAT")) returned 1 [0225.750] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.750] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.750] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.750] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0225.750] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otele.dat")) returned 0x20 [0225.750] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.751] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.751] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0225.752] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0225.753] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.753] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.753] CloseHandle (hObject=0x1e4) returned 1 [0225.753] CloseHandle (hObject=0x1f0) returned 1 [0225.755] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.755] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.755] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c6bec8, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6c6bec8, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6c6bec8, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTele.dat", cAlternateFileName="{14280~2.DAT")) returned 0x55e890 [0225.755] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c6bec8, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6c6bec8, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6c6bec8, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTele.dat", cAlternateFileName="{14280~2.DAT")) returned 0 [0225.755] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0225.756] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otele.dat")) returned 1 [0225.757] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otele.dat")) returned 0xffffffff [0225.757] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c6840e, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6c6840e, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6c697c6, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{14280~1.DAT")) returned 1 [0225.757] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.757] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.757] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.757] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.757] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0225.758] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otelemediumcost.dat")) returned 0x20 [0225.758] VirtualAlloc (lpAddress=0x6a8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6a8000 [0225.758] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.759] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0225.761] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x345, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0225.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.763] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.763] CloseHandle (hObject=0x1f0) returned 1 [0225.763] CloseHandle (hObject=0x1e4) returned 1 [0225.764] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.765] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.765] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c6840e, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6c6840e, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6c697c6, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{14280~1.DAT")) returned 0x55e390 [0225.765] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c6840e, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6c6840e, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6c697c6, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{14280~1.DAT")) returned 0 [0225.765] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0225.765] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otelemediumcost.dat")) returned 1 [0225.768] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (0) - 3904 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0225.768] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c70cc0, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6c70cc0, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6c70cc0, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTele.dat", cAlternateFileName="{14280~4.DAT")) returned 1 [0225.768] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.768] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.771] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.771] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0225.772] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otele.dat")) returned 0x20 [0225.775] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.775] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.776] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0225.777] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0225.778] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.778] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.778] CloseHandle (hObject=0x1e4) returned 1 [0225.778] CloseHandle (hObject=0x1f0) returned 1 [0225.779] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.779] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.779] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c70cc0, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6c70cc0, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6c70cc0, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTele.dat", cAlternateFileName="{14280~4.DAT")) returned 0x55e7d0 [0225.779] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c70cc0, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6c70cc0, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6c70cc0, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTele.dat", cAlternateFileName="{14280~4.DAT")) returned 0 [0225.780] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0225.780] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otele.dat")) returned 1 [0225.781] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otele.dat")) returned 0xffffffff [0225.781] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c6e5dc, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6c6e5dc, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6c6e5dc, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{14280~3.DAT")) returned 1 [0225.781] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.781] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.781] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.781] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0225.781] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otelemediumcost.dat")) returned 0x20 [0225.782] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.782] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.782] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0225.784] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1e3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0225.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.785] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.785] CloseHandle (hObject=0x1f0) returned 1 [0225.785] CloseHandle (hObject=0x1e4) returned 1 [0225.786] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.786] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.786] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c6e5dc, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6c6e5dc, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6c6e5dc, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{14280~3.DAT")) returned 0x55e490 [0225.787] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c6e5dc, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6c6e5dc, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6c6e5dc, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{14280~3.DAT")) returned 0 [0225.787] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0225.787] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otelemediumcost.dat")) returned 1 [0225.788] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{14280630-395b-4995-bd22-15bd491a464a} (1) - 3904 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0225.788] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6e48b3, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6b6e48b3, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6b6e5cbe, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTele.dat", cAlternateFileName="{47686~2.DAT")) returned 1 [0225.788] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.788] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.788] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.788] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.788] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0225.789] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otele.dat")) returned 0x20 [0225.789] VirtualAlloc (lpAddress=0x6ac000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6ac000 [0225.789] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.790] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.790] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x11b, lpOverlapped=0x0) returned 1 [0225.791] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x11b, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x11b, lpOverlapped=0x0) returned 1 [0225.792] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.792] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.792] CloseHandle (hObject=0x1e4) returned 1 [0225.792] CloseHandle (hObject=0x1f0) returned 1 [0225.793] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.794] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.794] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6e48b3, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6b6e48b3, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6b6e5cbe, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTele.dat", cAlternateFileName="{47686~2.DAT")) returned 0x55e890 [0225.794] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6e48b3, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6b6e48b3, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6b6e5cbe, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTele.dat", cAlternateFileName="{47686~2.DAT")) returned 0 [0225.794] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0225.794] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otele.dat")) returned 1 [0225.795] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otele.dat")) returned 0xffffffff [0225.795] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6e21ac, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6b6e21ac, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6b6e21ac, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTeleMediumCost.dat", cAlternateFileName="{47686~1.DAT")) returned 1 [0225.795] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.795] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.795] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.795] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.796] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0225.796] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otelemediumcost.dat")) returned 0x20 [0225.796] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.797] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.797] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x34d, lpOverlapped=0x0) returned 1 [0225.798] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x34d, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x34d, lpOverlapped=0x0) returned 1 [0225.799] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.800] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.800] CloseHandle (hObject=0x1f0) returned 1 [0225.800] CloseHandle (hObject=0x1e4) returned 1 [0225.801] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.801] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.801] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6e21ac, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6b6e21ac, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6b6e21ac, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTeleMediumCost.dat", cAlternateFileName="{47686~1.DAT")) returned 0x55e390 [0225.801] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6e21ac, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6b6e21ac, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6b6e21ac, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTeleMediumCost.dat", cAlternateFileName="{47686~1.DAT")) returned 0 [0225.801] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0225.801] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otelemediumcost.dat")) returned 1 [0225.803] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (0) - 3924 - winword.exe - otelemediumcost.dat")) returned 0xffffffff [0225.803] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6ed17c, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6b6ed17c, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6b6ed17c, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTele.dat", cAlternateFileName="{47686~4.DAT")) returned 1 [0225.803] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.803] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.803] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.803] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0225.803] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otele.dat")) returned 0x20 [0225.807] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.808] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.809] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0225.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0225.811] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.811] CloseHandle (hObject=0x1e4) returned 1 [0225.811] CloseHandle (hObject=0x1f0) returned 1 [0225.812] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.813] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.813] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6ed17c, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6b6ed17c, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6b6ed17c, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTele.dat", cAlternateFileName="{47686~4.DAT")) returned 0x55e7d0 [0225.813] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6ed17c, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6b6ed17c, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6b6ed17c, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTele.dat", cAlternateFileName="{47686~4.DAT")) returned 0 [0225.813] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0225.813] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otele.dat")) returned 1 [0225.814] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otele.dat")) returned 0xffffffff [0225.814] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6e9709, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6b6e9709, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6b6e9709, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTeleMediumCost.dat", cAlternateFileName="{47686~3.DAT")) returned 1 [0225.814] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.814] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.814] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.814] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.814] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0225.815] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otelemediumcost.dat")) returned 0x20 [0225.816] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.817] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.821] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0225.823] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1e3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0225.824] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.824] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.824] CloseHandle (hObject=0x1f0) returned 1 [0225.824] CloseHandle (hObject=0x1e4) returned 1 [0225.825] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.825] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.825] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6e9709, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6b6e9709, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6b6e9709, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTeleMediumCost.dat", cAlternateFileName="{47686~3.DAT")) returned 0x55e5d0 [0225.826] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6e9709, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6b6e9709, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6b6e9709, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTeleMediumCost.dat", cAlternateFileName="{47686~3.DAT")) returned 0 [0225.826] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0225.826] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otelemediumcost.dat")) returned 1 [0225.827] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{476867b0-6c71-41f9-b8ee-957d2c806c59} (1) - 3924 - winword.exe - otelemediumcost.dat")) returned 0xffffffff [0225.827] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa09a244, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa09a244, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa09b603, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTele.dat", cAlternateFileName="{5ABD4~2.DAT")) returned 1 [0225.827] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.827] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.828] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.828] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0225.828] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otele.dat")) returned 0x20 [0225.828] VirtualAlloc (lpAddress=0x6b0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6b0000 [0225.828] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.828] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.829] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0225.830] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0225.831] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.831] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.831] CloseHandle (hObject=0x1e4) returned 1 [0225.831] CloseHandle (hObject=0x1f0) returned 1 [0225.832] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.833] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.833] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa09a244, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa09a244, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa09b603, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTele.dat", cAlternateFileName="{5ABD4~2.DAT")) returned 0x55e1d0 [0225.833] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa09a244, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa09a244, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa09b603, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTele.dat", cAlternateFileName="{5ABD4~2.DAT")) returned 0 [0225.833] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0225.833] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otele.dat")) returned 1 [0225.834] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otele.dat")) returned 0xffffffff [0225.834] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa097b47, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa097b47, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa098ed3, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{5ABD4~1.DAT")) returned 1 [0225.835] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.835] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.835] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.835] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0225.835] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otelemediumcost.dat")) returned 0x20 [0225.835] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.835] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0225.837] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x345, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0225.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.838] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.838] CloseHandle (hObject=0x1f0) returned 1 [0225.838] CloseHandle (hObject=0x1e4) returned 1 [0225.840] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.840] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.840] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa097b47, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa097b47, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa098ed3, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{5ABD4~1.DAT")) returned 0x55e1d0 [0225.840] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa097b47, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa097b47, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa098ed3, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{5ABD4~1.DAT")) returned 0 [0225.840] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0225.841] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otelemediumcost.dat")) returned 1 [0225.842] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (0) - 3620 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0225.842] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0a0408, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa0a0408, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa0a17d0, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTele.dat", cAlternateFileName="{5ABD4~4.DAT")) returned 1 [0225.842] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.842] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.842] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.842] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0225.843] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otele.dat")) returned 0x20 [0225.843] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.844] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.844] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0225.845] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0225.846] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.846] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.846] CloseHandle (hObject=0x1e4) returned 1 [0225.846] CloseHandle (hObject=0x1f0) returned 1 [0225.847] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.847] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.847] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0a0408, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa0a0408, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa0a17d0, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTele.dat", cAlternateFileName="{5ABD4~4.DAT")) returned 0x55e310 [0225.847] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa0a0408, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa0a0408, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa0a17d0, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTele.dat", cAlternateFileName="{5ABD4~4.DAT")) returned 0 [0225.847] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0225.848] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otele.dat")) returned 1 [0225.848] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otele.dat")) returned 0xffffffff [0225.849] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa09dd30, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa09dd30, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa09dd30, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{5ABD4~3.DAT")) returned 1 [0225.850] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.850] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.850] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.850] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.850] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0225.851] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otelemediumcost.dat")) returned 0x20 [0225.851] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.851] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.851] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0225.854] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1e3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0225.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.855] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.855] CloseHandle (hObject=0x1f0) returned 1 [0225.855] CloseHandle (hObject=0x1e4) returned 1 [0225.857] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.857] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.857] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa09dd30, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa09dd30, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa09dd30, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{5ABD4~3.DAT")) returned 0x55e710 [0225.857] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa09dd30, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa09dd30, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa09dd30, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{5ABD4~3.DAT")) returned 0 [0225.857] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0225.857] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otelemediumcost.dat")) returned 1 [0225.858] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{5abd4b01-aba3-41bd-9fd7-3db72380d196} (1) - 3620 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0225.858] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa350c2f, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa350c2f, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa351f84, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTele.dat", cAlternateFileName="{69050~2.DAT")) returned 1 [0225.859] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.859] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.859] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.859] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0225.859] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otele.dat")) returned 0x20 [0225.859] VirtualAlloc (lpAddress=0x6b4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6b4000 [0225.860] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.860] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.860] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0225.861] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0225.862] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.862] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.862] CloseHandle (hObject=0x1e4) returned 1 [0225.862] CloseHandle (hObject=0x1f0) returned 1 [0225.863] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.863] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.864] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa350c2f, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa350c2f, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa351f84, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTele.dat", cAlternateFileName="{69050~2.DAT")) returned 0x55e7d0 [0225.864] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa350c2f, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa350c2f, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa351f84, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTele.dat", cAlternateFileName="{69050~2.DAT")) returned 0 [0225.864] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0225.864] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otele.dat")) returned 1 [0225.865] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otele.dat")) returned 0xffffffff [0225.865] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa343554, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa343554, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa3448db, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{69050~1.DAT")) returned 1 [0225.865] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.865] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.865] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.865] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0225.866] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otelemediumcost.dat")) returned 0x20 [0225.866] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.866] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.866] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0225.868] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x345, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0225.869] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.869] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.869] CloseHandle (hObject=0x1f0) returned 1 [0225.869] CloseHandle (hObject=0x1e4) returned 1 [0225.870] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.870] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.871] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa343554, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa343554, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa3448db, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{69050~1.DAT")) returned 0x55e510 [0225.871] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa343554, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa343554, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa3448db, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{69050~1.DAT")) returned 0 [0225.871] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0225.871] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otelemediumcost.dat")) returned 1 [0225.872] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (0) - 3748 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0225.872] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa355ae5, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa355ae5, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa356dfc, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTele.dat", cAlternateFileName="{69050~4.DAT")) returned 1 [0225.872] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.872] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.873] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.873] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0225.873] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otele.dat")) returned 0x20 [0225.873] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.873] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.874] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0225.875] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0225.875] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.876] CloseHandle (hObject=0x1e4) returned 1 [0225.876] CloseHandle (hObject=0x1f0) returned 1 [0225.877] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.877] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.877] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa355ae5, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa355ae5, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa356dfc, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTele.dat", cAlternateFileName="{69050~4.DAT")) returned 0x55e710 [0225.877] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa355ae5, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa355ae5, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa356dfc, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTele.dat", cAlternateFileName="{69050~4.DAT")) returned 0 [0225.877] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0225.877] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otele.dat")) returned 1 [0225.878] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otele.dat")) returned 0xffffffff [0225.878] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa35485e, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa35485e, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa35485e, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{69050~3.DAT")) returned 1 [0225.878] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.879] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.879] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.879] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.879] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.879] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0225.879] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otelemediumcost.dat")) returned 0x20 [0225.879] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.879] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.880] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0225.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1e3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0225.887] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.887] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.887] CloseHandle (hObject=0x1f0) returned 1 [0225.888] CloseHandle (hObject=0x1e4) returned 1 [0225.889] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.889] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.889] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa35485e, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa35485e, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa35485e, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{69050~3.DAT")) returned 0x55e390 [0225.890] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa35485e, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xaa35485e, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xaa35485e, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{69050~3.DAT")) returned 0 [0225.890] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0225.890] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otelemediumcost.dat")) returned 1 [0225.891] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{69050054-7f79-4e06-8aa2-536c8bf4f0d3} (1) - 3748 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0225.891] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8872c06e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8872c06e, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8872d3d5, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTele.dat", cAlternateFileName="{6B789~2.DAT")) returned 1 [0225.891] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.891] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.891] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.891] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0225.892] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otele.dat")) returned 0x20 [0225.892] VirtualAlloc (lpAddress=0x6b8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6b8000 [0225.893] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.893] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.893] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x11b, lpOverlapped=0x0) returned 1 [0225.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x11b, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x11b, lpOverlapped=0x0) returned 1 [0225.895] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.895] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.895] CloseHandle (hObject=0x1e4) returned 1 [0225.895] CloseHandle (hObject=0x1f0) returned 1 [0225.896] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.897] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.897] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8872c06e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8872c06e, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8872d3d5, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTele.dat", cAlternateFileName="{6B789~2.DAT")) returned 0x55e890 [0225.897] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8872c06e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8872c06e, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8872d3d5, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTele.dat", cAlternateFileName="{6B789~2.DAT")) returned 0 [0225.897] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0225.897] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otele.dat")) returned 1 [0225.898] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otele.dat")) returned 0xffffffff [0225.898] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x887272b9, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x887272b9, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x887285c9, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTeleMediumCost.dat", cAlternateFileName="{6B789~1.DAT")) returned 1 [0225.899] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.899] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.899] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.899] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0225.899] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otelemediumcost.dat")) returned 0x20 [0225.900] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.900] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.901] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x34d, lpOverlapped=0x0) returned 1 [0225.903] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x34d, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x34d, lpOverlapped=0x0) returned 1 [0225.904] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.904] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.904] CloseHandle (hObject=0x1f0) returned 1 [0225.904] CloseHandle (hObject=0x1e4) returned 1 [0225.906] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.906] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.906] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x887272b9, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x887272b9, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x887285c9, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTeleMediumCost.dat", cAlternateFileName="{6B789~1.DAT")) returned 0x55e5d0 [0225.907] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x887272b9, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x887272b9, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x887285c9, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTeleMediumCost.dat", cAlternateFileName="{6B789~1.DAT")) returned 0 [0225.907] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0225.907] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otelemediumcost.dat")) returned 1 [0225.908] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (0) - 3248 - outlook.exe - otelemediumcost.dat")) returned 0xffffffff [0225.908] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88735cf4, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x88735cf4, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x88735cf4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTele.dat", cAlternateFileName="{6B789~4.DAT")) returned 1 [0225.908] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.908] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.909] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.909] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0225.909] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otele.dat")) returned 0x20 [0225.909] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.909] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.910] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xb8, lpOverlapped=0x0) returned 1 [0225.910] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xb8, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xb8, lpOverlapped=0x0) returned 1 [0225.911] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.911] CloseHandle (hObject=0x1e4) returned 1 [0225.912] CloseHandle (hObject=0x1f0) returned 1 [0225.913] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.913] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.913] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88735cf4, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x88735cf4, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x88735cf4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTele.dat", cAlternateFileName="{6B789~4.DAT")) returned 0x55e510 [0225.913] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88735cf4, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x88735cf4, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x88735cf4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTele.dat", cAlternateFileName="{6B789~4.DAT")) returned 0 [0225.913] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0225.913] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otele.dat")) returned 1 [0225.914] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otele.dat")) returned 0xffffffff [0225.914] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88730eef, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x88730eef, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x88730eef, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTeleMediumCost.dat", cAlternateFileName="{6B789~3.DAT")) returned 1 [0225.915] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.915] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.915] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.915] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.915] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.915] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0225.915] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otelemediumcost.dat")) returned 0x20 [0225.916] VirtualAlloc (lpAddress=0x6bc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6bc000 [0225.916] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.916] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.917] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x20b, lpOverlapped=0x0) returned 1 [0225.918] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x20b, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x20b, lpOverlapped=0x0) returned 1 [0225.919] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.919] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.919] CloseHandle (hObject=0x1f0) returned 1 [0225.920] CloseHandle (hObject=0x1e4) returned 1 [0225.921] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.921] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.921] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88730eef, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x88730eef, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x88730eef, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTeleMediumCost.dat", cAlternateFileName="{6B789~3.DAT")) returned 0x55e490 [0225.921] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88730eef, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x88730eef, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x88730eef, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x5503c4, dwReserved1=0x1a, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTeleMediumCost.dat", cAlternateFileName="{6B789~3.DAT")) returned 0 [0225.921] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0225.921] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otelemediumcost.dat")) returned 1 [0225.922] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} (1) - 3248 - outlook.exe - otelemediumcost.dat")) returned 0xffffffff [0225.922] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb50719fc, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb50719fc, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb5072d96, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTele.dat", cAlternateFileName="{730EE~2.DAT")) returned 1 [0225.923] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.923] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.923] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.923] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0225.923] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otele.dat")) returned 0x20 [0225.923] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.923] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.924] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0225.927] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0225.928] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.928] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.928] CloseHandle (hObject=0x1e4) returned 1 [0225.928] CloseHandle (hObject=0x1f0) returned 1 [0225.929] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.929] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.929] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb50719fc, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb50719fc, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb5072d96, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTele.dat", cAlternateFileName="{730EE~2.DAT")) returned 0x55e710 [0225.930] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb50719fc, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb50719fc, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb5072d96, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTele.dat", cAlternateFileName="{730EE~2.DAT")) returned 0 [0225.930] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0225.930] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otele.dat")) returned 1 [0225.931] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otele.dat")) returned 0xffffffff [0225.931] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506907b, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb506907b, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb506a417, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{730EE~1.DAT")) returned 1 [0225.931] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.931] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.931] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.931] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0225.931] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otelemediumcost.dat")) returned 0x20 [0225.932] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.932] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.932] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0225.935] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x345, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0225.936] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.936] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.936] CloseHandle (hObject=0x1f0) returned 1 [0225.936] CloseHandle (hObject=0x1e4) returned 1 [0225.937] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.937] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.937] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506907b, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb506907b, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb506a417, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{730EE~1.DAT")) returned 0x55e650 [0225.937] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506907b, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb506907b, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb506a417, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{730EE~1.DAT")) returned 0 [0225.938] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0225.938] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otelemediumcost.dat")) returned 1 [0225.939] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (0) - 3644 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0225.939] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb507a2b6, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb507a2b6, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb507c92b, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTele.dat", cAlternateFileName="{730EE~4.DAT")) returned 1 [0225.939] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.939] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.943] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.943] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.943] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.943] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0225.943] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otele.dat")) returned 0x20 [0225.943] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.943] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.944] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0225.945] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0225.946] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.946] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.946] CloseHandle (hObject=0x1e4) returned 1 [0225.946] CloseHandle (hObject=0x1f0) returned 1 [0225.947] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.947] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.947] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb507a2b6, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb507a2b6, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb507c92b, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTele.dat", cAlternateFileName="{730EE~4.DAT")) returned 0x55e890 [0225.948] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb507a2b6, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb507a2b6, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb507c92b, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTele.dat", cAlternateFileName="{730EE~4.DAT")) returned 0 [0225.948] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0225.948] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otele.dat")) returned 1 [0225.949] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otele.dat")) returned 0xffffffff [0225.949] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5076767, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb5076767, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb5076767, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{730EE~3.DAT")) returned 1 [0225.949] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.949] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.950] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.950] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.950] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.950] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0225.950] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otelemediumcost.dat")) returned 0x20 [0225.950] VirtualAlloc (lpAddress=0x6c0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6c0000 [0225.951] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.951] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.951] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0225.953] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1e3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0225.954] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.954] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.954] CloseHandle (hObject=0x1f0) returned 1 [0225.954] CloseHandle (hObject=0x1e4) returned 1 [0225.955] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.956] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.956] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5076767, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb5076767, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb5076767, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{730EE~3.DAT")) returned 0x55e710 [0225.956] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5076767, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb5076767, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb5076767, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{730EE~3.DAT")) returned 0 [0225.956] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0225.956] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otelemediumcost.dat")) returned 1 [0225.958] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{730eed67-cb03-48eb-b6a2-97fadd6a81fb} (1) - 3644 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0225.958] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e2830f, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54e2830f, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54e29737, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTele.dat", cAlternateFileName="{76787~2.DAT")) returned 1 [0225.958] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.958] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.958] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.958] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.958] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0225.959] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otele.dat")) returned 0x20 [0225.960] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.960] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.960] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0225.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0225.967] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.967] CloseHandle (hObject=0x1e4) returned 1 [0225.967] CloseHandle (hObject=0x1f0) returned 1 [0225.971] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.971] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.971] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e2830f, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54e2830f, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54e29737, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTele.dat", cAlternateFileName="{76787~2.DAT")) returned 0x55e7d0 [0225.972] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e2830f, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54e2830f, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54e29737, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTele.dat", cAlternateFileName="{76787~2.DAT")) returned 0 [0225.972] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0225.972] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otele.dat")) returned 1 [0225.973] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otele.dat")) returned 0xffffffff [0225.973] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e23516, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54e23516, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54e24874, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{76787~1.DAT")) returned 1 [0225.974] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.974] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0225.974] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0225.974] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0225.974] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otelemediumcost.dat")) returned 0x20 [0225.975] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0225.975] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0225.976] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0225.978] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x345, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0225.979] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.979] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0225.979] CloseHandle (hObject=0x1f0) returned 1 [0225.980] CloseHandle (hObject=0x1e4) returned 1 [0225.996] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0225.996] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0225.997] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e23516, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54e23516, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54e24874, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{76787~1.DAT")) returned 0x55e490 [0225.997] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e23516, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54e23516, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54e24874, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{76787~1.DAT")) returned 0 [0225.997] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0225.997] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otelemediumcost.dat")) returned 1 [0225.999] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (0) - 3608 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0225.999] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e31fe2, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54e31fe2, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54e332c7, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTele.dat", cAlternateFileName="{76787~4.DAT")) returned 1 [0225.999] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0225.999] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0225.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.000] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.000] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.000] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0226.000] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otele.dat")) returned 0x20 [0226.000] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.000] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.001] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0226.002] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0226.004] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.004] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.004] CloseHandle (hObject=0x1e4) returned 1 [0226.004] CloseHandle (hObject=0x1f0) returned 1 [0226.007] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.007] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.007] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e31fe2, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54e31fe2, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54e332c7, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTele.dat", cAlternateFileName="{76787~4.DAT")) returned 0x55e650 [0226.008] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e31fe2, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54e31fe2, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54e332c7, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTele.dat", cAlternateFileName="{76787~4.DAT")) returned 0 [0226.008] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0226.008] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otele.dat")) returned 1 [0226.009] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otele.dat")) returned 0xffffffff [0226.009] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e2d167, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54e2d167, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54e2d167, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{76787~3.DAT")) returned 1 [0226.011] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.011] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.012] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.012] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0226.013] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otelemediumcost.dat")) returned 0x20 [0226.014] VirtualAlloc (lpAddress=0x6c4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6c4000 [0226.015] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.015] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.015] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0226.018] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1e3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0226.019] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.019] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.020] CloseHandle (hObject=0x1f0) returned 1 [0226.020] CloseHandle (hObject=0x1e4) returned 1 [0226.021] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.021] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.021] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e2d167, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54e2d167, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54e2d167, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{76787~3.DAT")) returned 0x55e7d0 [0226.021] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e2d167, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54e2d167, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54e2d167, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{76787~3.DAT")) returned 0 [0226.021] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0226.021] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otelemediumcost.dat")) returned 1 [0226.022] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{76787746-0ef6-4759-84bc-631b78c93eb7} (1) - 3608 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0226.022] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec74c2ae, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec74c2ae, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec74c2ae, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTele.dat", cAlternateFileName="{78AE2~2.DAT")) returned 1 [0226.023] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.023] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.023] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.023] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0226.023] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otele.dat")) returned 0x20 [0226.023] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.024] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.024] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0226.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0226.026] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.026] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.026] CloseHandle (hObject=0x1e4) returned 1 [0226.026] CloseHandle (hObject=0x1f0) returned 1 [0226.027] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.027] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.027] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec74c2ae, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec74c2ae, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec74c2ae, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x5503c4, dwReserved1=0x1e, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTele.dat", cAlternateFileName="{78AE2~2.DAT")) returned 0x55e290 [0226.101] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec74c2ae, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec74c2ae, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec74c2ae, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x5503c4, dwReserved1=0x1e, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTele.dat", cAlternateFileName="{78AE2~2.DAT")) returned 0 [0226.101] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0226.101] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otele.dat")) returned 1 [0226.103] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otele.dat")) returned 0xffffffff [0226.106] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec734f7b, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec734f7b, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec736348, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{78AE2~1.DAT")) returned 1 [0226.109] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.109] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.109] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.109] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.109] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.110] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0226.110] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otelemediumcost.dat")) returned 0x20 [0226.110] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.110] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0226.114] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x345, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0226.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.115] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.115] CloseHandle (hObject=0x1f0) returned 1 [0226.115] CloseHandle (hObject=0x1e4) returned 1 [0226.116] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.116] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.117] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec734f7b, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec734f7b, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec736348, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{78AE2~1.DAT")) returned 0x55e490 [0226.117] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec734f7b, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec734f7b, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec736348, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{78AE2~1.DAT")) returned 0 [0226.117] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0226.117] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otelemediumcost.dat")) returned 1 [0226.118] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (0) - 776 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0226.118] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec75ad0b, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec75ad0b, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec75ad0b, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTele.dat", cAlternateFileName="{78AE2~4.DAT")) returned 1 [0226.118] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.118] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.118] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.119] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.119] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0226.119] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otele.dat")) returned 0x20 [0226.119] VirtualAlloc (lpAddress=0x6c8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6c8000 [0226.120] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.120] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.121] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0226.122] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0226.123] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.123] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.123] CloseHandle (hObject=0x1e4) returned 1 [0226.123] CloseHandle (hObject=0x1f0) returned 1 [0226.124] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.124] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.125] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec75ad0b, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec75ad0b, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec75ad0b, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x5503c4, dwReserved1=0x1e, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTele.dat", cAlternateFileName="{78AE2~4.DAT")) returned 0x55e710 [0226.125] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec75ad0b, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec75ad0b, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec75ad0b, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x5503c4, dwReserved1=0x1e, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTele.dat", cAlternateFileName="{78AE2~4.DAT")) returned 0 [0226.125] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0226.125] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otele.dat")) returned 1 [0226.126] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otele.dat")) returned 0xffffffff [0226.126] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec753855, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec753855, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec754c33, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{78AE2~3.DAT")) returned 1 [0226.126] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.126] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.126] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.126] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.127] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0226.127] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otelemediumcost.dat")) returned 0x20 [0226.127] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.127] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0226.136] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1e3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0226.137] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.137] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.137] CloseHandle (hObject=0x1f0) returned 1 [0226.161] CloseHandle (hObject=0x1e4) returned 1 [0226.162] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.163] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.163] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec753855, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec753855, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec754c33, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{78AE2~3.DAT")) returned 0x55e7d0 [0226.163] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec753855, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec753855, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec754c33, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{78AE2~3.DAT")) returned 0 [0226.163] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0226.163] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otelemediumcost.dat")) returned 1 [0226.165] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{78ae2e81-404d-463f-8150-c93cdda45e7b} (1) - 776 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0226.165] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250a518d, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x250a518d, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x250a649d, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTele.dat", cAlternateFileName="{7D881~2.DAT")) returned 1 [0226.165] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.165] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.165] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.165] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0226.166] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otele.dat")) returned 0x20 [0226.166] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.166] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.167] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0226.168] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0226.170] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.170] CloseHandle (hObject=0x1e4) returned 1 [0226.170] CloseHandle (hObject=0x1f0) returned 1 [0226.171] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.172] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.172] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250a518d, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x250a518d, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x250a649d, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTele.dat", cAlternateFileName="{7D881~2.DAT")) returned 0x55e510 [0226.172] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250a518d, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x250a518d, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x250a649d, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTele.dat", cAlternateFileName="{7D881~2.DAT")) returned 0 [0226.172] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0226.173] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otele.dat")) returned 1 [0226.174] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otele.dat")) returned 0xffffffff [0226.174] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250a0302, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x250a0302, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x250a0302, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{7D881~1.DAT")) returned 1 [0226.174] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.175] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.175] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.175] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0226.175] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otelemediumcost.dat")) returned 0x20 [0226.176] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.176] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0226.179] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x345, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0226.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.180] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.180] CloseHandle (hObject=0x1f0) returned 1 [0226.180] CloseHandle (hObject=0x1e4) returned 1 [0226.183] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.183] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.183] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250a0302, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x250a0302, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x250a0302, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{7D881~1.DAT")) returned 0x55e890 [0226.183] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250a0302, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x250a0302, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x250a0302, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{7D881~1.DAT")) returned 0 [0226.183] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0226.183] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otelemediumcost.dat")) returned 1 [0226.185] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (0) - 3440 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0226.185] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250b3c0a, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x250b3c0a, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x250b4f76, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTele.dat", cAlternateFileName="{7D881~4.DAT")) returned 1 [0226.185] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.185] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.185] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.185] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.185] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.185] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0226.185] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otele.dat")) returned 0x20 [0226.185] VirtualAlloc (lpAddress=0x6cc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6cc000 [0226.186] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.186] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.186] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0226.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0226.188] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.188] CloseHandle (hObject=0x1e4) returned 1 [0226.189] CloseHandle (hObject=0x1f0) returned 1 [0226.191] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.191] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.191] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250b3c0a, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x250b3c0a, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x250b4f76, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTele.dat", cAlternateFileName="{7D881~4.DAT")) returned 0x55e510 [0226.191] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250b3c0a, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x250b3c0a, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x250b4f76, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTele.dat", cAlternateFileName="{7D881~4.DAT")) returned 0 [0226.191] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0226.192] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otele.dat")) returned 1 [0226.193] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otele.dat")) returned 0xffffffff [0226.193] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250ab32a, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x250ab32a, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x250ac695, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{7D881~3.DAT")) returned 1 [0226.193] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.193] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0226.193] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otelemediumcost.dat")) returned 0x20 [0226.194] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.194] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0226.203] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1e3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0226.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.204] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.204] CloseHandle (hObject=0x1f0) returned 1 [0226.204] CloseHandle (hObject=0x1e4) returned 1 [0226.207] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.207] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.207] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250ab32a, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x250ab32a, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x250ac695, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{7D881~3.DAT")) returned 0x55e710 [0226.207] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250ab32a, ftCreationTime.dwHighDateTime=0x1d8a650, ftLastAccessTime.dwLowDateTime=0x250ab32a, ftLastAccessTime.dwHighDateTime=0x1d8a650, ftLastWriteTime.dwLowDateTime=0x250ac695, ftLastWriteTime.dwHighDateTime=0x1d8a650, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{7D881~3.DAT")) returned 0 [0226.207] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0226.208] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otelemediumcost.dat")) returned 1 [0226.209] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{7d881d02-986e-4a6b-893f-406db8a8a682} (1) - 3440 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0226.209] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b66a13, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54b66a13, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54b66a13, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTele.dat", cAlternateFileName="{BCA15~2.DAT")) returned 1 [0226.209] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.209] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.209] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.209] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.209] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.209] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0226.209] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otele.dat")) returned 0x20 [0226.210] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.210] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.210] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0226.211] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0226.212] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.212] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.212] CloseHandle (hObject=0x1e4) returned 1 [0226.213] CloseHandle (hObject=0x1f0) returned 1 [0226.215] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.216] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.216] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b66a13, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54b66a13, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54b66a13, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTele.dat", cAlternateFileName="{BCA15~2.DAT")) returned 0x55e910 [0226.216] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b66a13, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54b66a13, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54b66a13, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTele.dat", cAlternateFileName="{BCA15~2.DAT")) returned 0 [0226.216] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0226.216] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otele.dat")) returned 1 [0226.217] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otele.dat")) returned 0xffffffff [0226.217] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b62f78, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54b62f78, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54b6430a, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{BCA15~1.DAT")) returned 1 [0226.218] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.218] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.218] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.218] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0226.218] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otelemediumcost.dat")) returned 0x20 [0226.219] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.219] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.219] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0226.221] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x345, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0226.222] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.222] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.222] CloseHandle (hObject=0x1f0) returned 1 [0226.222] CloseHandle (hObject=0x1e4) returned 1 [0226.230] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.231] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.231] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b62f78, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54b62f78, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54b6430a, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{BCA15~1.DAT")) returned 0x55e910 [0226.231] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b62f78, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54b62f78, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54b6430a, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{BCA15~1.DAT")) returned 0 [0226.231] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0226.232] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otelemediumcost.dat")) returned 1 [0226.233] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (0) - 3500 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0226.233] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b6f308, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54b6f308, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54b6f308, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTele.dat", cAlternateFileName="{BCA15~4.DAT")) returned 1 [0226.233] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.233] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.233] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.233] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.233] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.233] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0226.234] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otele.dat")) returned 0x20 [0226.234] VirtualAlloc (lpAddress=0x6d0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6d0000 [0226.234] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.235] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.235] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0226.243] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0226.244] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.244] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.244] CloseHandle (hObject=0x1e4) returned 1 [0226.244] CloseHandle (hObject=0x1f0) returned 1 [0226.247] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.248] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.248] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b6f308, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54b6f308, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54b6f308, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTele.dat", cAlternateFileName="{BCA15~4.DAT")) returned 0x55e490 [0226.248] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b6f308, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54b6f308, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54b6f308, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTele.dat", cAlternateFileName="{BCA15~4.DAT")) returned 0 [0226.248] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0226.248] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otele.dat")) returned 1 [0226.250] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otele.dat")) returned 0xffffffff [0226.250] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b6b8b6, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54b6b8b6, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54b6b8b6, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{BCA15~3.DAT")) returned 1 [0226.250] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.250] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.250] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.250] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0226.250] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otelemediumcost.dat")) returned 0x20 [0226.251] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.251] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.252] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0226.254] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1e3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0226.255] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.255] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.255] CloseHandle (hObject=0x1f0) returned 1 [0226.255] CloseHandle (hObject=0x1e4) returned 1 [0226.259] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.259] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.259] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b6b8b6, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54b6b8b6, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54b6b8b6, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{BCA15~3.DAT")) returned 0x55e710 [0226.259] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b6b8b6, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x54b6b8b6, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x54b6b8b6, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{BCA15~3.DAT")) returned 0 [0226.259] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0226.259] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otelemediumcost.dat")) returned 1 [0226.261] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{bca15875-e8cf-40e2-a2a2-a665fc46f3a7} (1) - 3500 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0226.261] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51ab52a, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb51ab52a, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb51ab52a, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTele.dat", cAlternateFileName="{C9F88~2.DAT")) returned 1 [0226.261] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.261] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.261] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.261] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.261] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.261] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0226.261] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otele.dat")) returned 0x20 [0226.262] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.262] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.376] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0226.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0226.378] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.378] CloseHandle (hObject=0x1e4) returned 1 [0226.378] CloseHandle (hObject=0x1f0) returned 1 [0226.379] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.379] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.380] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51ab52a, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb51ab52a, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb51ab52a, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTele.dat", cAlternateFileName="{C9F88~2.DAT")) returned 0x55e890 [0226.380] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51ab52a, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb51ab52a, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb51ab52a, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTele.dat", cAlternateFileName="{C9F88~2.DAT")) returned 0 [0226.380] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0226.380] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otele.dat")) returned 1 [0226.381] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otele.dat")) returned 0xffffffff [0226.381] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51a1893, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb51a1893, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb51a1893, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{C9F88~1.DAT")) returned 1 [0226.381] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.382] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.382] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.382] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.382] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.382] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0226.382] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otelemediumcost.dat")) returned 0x20 [0226.383] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.383] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0226.385] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x345, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0226.387] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.387] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.387] CloseHandle (hObject=0x1f0) returned 1 [0226.387] CloseHandle (hObject=0x1e4) returned 1 [0226.388] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.389] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.389] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51a1893, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb51a1893, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb51a1893, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{C9F88~1.DAT")) returned 0x55e290 [0226.389] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51a1893, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb51a1893, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb51a1893, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{C9F88~1.DAT")) returned 0 [0226.389] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0226.389] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otelemediumcost.dat")) returned 1 [0226.390] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (0) - 3748 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0226.391] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51b9f31, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb51b9f31, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb51b9f31, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTele.dat", cAlternateFileName="{C9F88~4.DAT")) returned 1 [0226.391] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.391] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.392] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.392] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0226.392] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otele.dat")) returned 0x20 [0226.392] VirtualAlloc (lpAddress=0x6d4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6d4000 [0226.393] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.393] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.394] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0226.398] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0226.399] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.399] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.399] CloseHandle (hObject=0x1e4) returned 1 [0226.399] CloseHandle (hObject=0x1f0) returned 1 [0226.403] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.403] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.403] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51b9f31, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb51b9f31, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb51b9f31, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTele.dat", cAlternateFileName="{C9F88~4.DAT")) returned 0x55e210 [0226.403] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51b9f31, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb51b9f31, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb51b9f31, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTele.dat", cAlternateFileName="{C9F88~4.DAT")) returned 0 [0226.404] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0226.404] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otele.dat")) returned 1 [0226.405] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otele.dat")) returned 0xffffffff [0226.405] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51b5128, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb51b5128, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb51b64da, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{C9F88~3.DAT")) returned 1 [0226.405] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.405] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.405] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.405] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.406] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0226.406] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otelemediumcost.dat")) returned 0x20 [0226.406] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.406] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.407] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0226.408] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1e3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0226.409] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.409] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.409] CloseHandle (hObject=0x1f0) returned 1 [0226.410] CloseHandle (hObject=0x1e4) returned 1 [0226.413] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.413] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.413] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51b5128, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb51b5128, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb51b64da, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{C9F88~3.DAT")) returned 0x55e710 [0226.413] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb51b5128, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0xb51b5128, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0xb51b64da, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{C9F88~3.DAT")) returned 0 [0226.413] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0226.413] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otelemediumcost.dat")) returned 1 [0226.415] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{c9f887ab-1565-4d03-878c-e985b67ffef2} (1) - 3748 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0226.415] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac1e44, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6ac1e44, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6ac1e44, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTele.dat", cAlternateFileName="{D32DD~2.DAT")) returned 1 [0226.415] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.415] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.415] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.415] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0226.415] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otele.dat")) returned 0x20 [0226.415] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.416] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.416] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0226.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0226.418] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.418] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.418] CloseHandle (hObject=0x1e4) returned 1 [0226.418] CloseHandle (hObject=0x1f0) returned 1 [0226.420] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.420] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.420] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac1e44, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6ac1e44, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6ac1e44, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTele.dat", cAlternateFileName="{D32DD~2.DAT")) returned 0x55e2d0 [0226.420] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac1e44, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6ac1e44, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6ac1e44, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTele.dat", cAlternateFileName="{D32DD~2.DAT")) returned 0 [0226.420] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0226.421] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otele.dat")) returned 1 [0226.422] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otele.dat")) returned 0xffffffff [0226.422] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abf735, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6abf735, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6ac0b41, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{D32DD~1.DAT")) returned 1 [0226.422] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.422] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.422] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.422] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0226.422] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otelemediumcost.dat")) returned 0x20 [0226.423] VirtualAlloc (lpAddress=0x6d8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6d8000 [0226.423] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.423] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.424] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0226.425] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x345, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0226.426] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.426] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.426] CloseHandle (hObject=0x1f0) returned 1 [0226.426] CloseHandle (hObject=0x1e4) returned 1 [0226.431] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.431] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.431] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abf735, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6abf735, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6ac0b41, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{D32DD~1.DAT")) returned 0x55e210 [0226.431] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abf735, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6abf735, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6ac0b41, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{D32DD~1.DAT")) returned 0 [0226.431] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0226.432] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otelemediumcost.dat")) returned 1 [0226.433] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (0) - 3812 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0226.433] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac8022, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6ac8022, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6aca799, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTele.dat", cAlternateFileName="{D32DD~4.DAT")) returned 1 [0226.433] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.433] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.433] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.433] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0226.434] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otele.dat")) returned 0x20 [0226.437] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.437] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.438] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0226.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0226.440] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.440] CloseHandle (hObject=0x1e4) returned 1 [0226.440] CloseHandle (hObject=0x1f0) returned 1 [0226.441] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.442] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.442] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac8022, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6ac8022, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6aca799, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTele.dat", cAlternateFileName="{D32DD~4.DAT")) returned 0x55e710 [0226.442] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac8022, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6ac8022, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6aca799, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTele.dat", cAlternateFileName="{D32DD~4.DAT")) returned 0 [0226.442] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0226.442] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otele.dat")) returned 1 [0226.443] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otele.dat")) returned 0xffffffff [0226.443] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac4552, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6ac4552, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6ac5939, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{D32DD~3.DAT")) returned 1 [0226.443] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.443] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.444] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.444] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.444] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0226.444] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otelemediumcost.dat")) returned 0x20 [0226.444] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.444] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0226.450] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1e3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0226.451] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.451] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.451] CloseHandle (hObject=0x1f0) returned 1 [0226.451] CloseHandle (hObject=0x1e4) returned 1 [0226.452] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.453] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.453] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac4552, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6ac4552, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6ac5939, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{D32DD~3.DAT")) returned 0x55e5d0 [0226.453] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ac4552, ftCreationTime.dwHighDateTime=0x1d8a64f, ftLastAccessTime.dwLowDateTime=0x6ac4552, ftLastAccessTime.dwHighDateTime=0x1d8a64f, ftLastWriteTime.dwLowDateTime=0x6ac5939, ftLastWriteTime.dwHighDateTime=0x1d8a64f, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{D32DD~3.DAT")) returned 0 [0226.453] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0226.453] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otelemediumcost.dat")) returned 1 [0226.454] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{d32ddb02-a781-4d79-bbb3-90dd7781c33d} (1) - 3812 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0226.454] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8662c9, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec8662c9, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec8675e6, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTele.dat", cAlternateFileName="{E347E~2.DAT")) returned 1 [0226.455] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.455] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.457] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.457] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0226.458] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otele.dat")) returned 0x20 [0226.458] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.459] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.459] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0226.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x117, lpOverlapped=0x0) returned 1 [0226.461] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.461] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.461] CloseHandle (hObject=0x1e4) returned 1 [0226.462] CloseHandle (hObject=0x1f0) returned 1 [0226.463] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.463] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.463] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8662c9, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec8662c9, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec8675e6, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTele.dat", cAlternateFileName="{E347E~2.DAT")) returned 0x55e2d0 [0226.463] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8662c9, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec8662c9, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec8675e6, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTele.dat", cAlternateFileName="{E347E~2.DAT")) returned 0 [0226.464] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0226.464] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otele.dat")) returned 1 [0226.465] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otele.dat")) returned 0xffffffff [0226.465] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8600bf, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec8600bf, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec8600bf, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{E347E~1.DAT")) returned 1 [0226.466] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.466] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.466] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.466] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0226.467] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otelemediumcost.dat")) returned 0x20 [0226.467] VirtualAlloc (lpAddress=0x6dc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6dc000 [0226.467] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.468] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0226.472] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x345, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x345, lpOverlapped=0x0) returned 1 [0226.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.473] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.473] CloseHandle (hObject=0x1f0) returned 1 [0226.474] CloseHandle (hObject=0x1e4) returned 1 [0226.475] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.476] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.476] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8600bf, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec8600bf, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec8600bf, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{E347E~1.DAT")) returned 0x55e610 [0226.476] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec8600bf, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec8600bf, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec8600bf, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{E347E~1.DAT")) returned 0 [0226.476] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0226.476] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otelemediumcost.dat")) returned 1 [0226.477] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (0) - 3128 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0226.477] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec876156, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec876156, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec8773b8, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTele.dat", cAlternateFileName="{E347E~4.DAT")) returned 1 [0226.478] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.478] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.478] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.478] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0226.478] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otele.dat")) returned 0x20 [0226.479] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otele.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.479] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.479] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0226.484] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x12c, lpOverlapped=0x0) returned 1 [0226.486] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.486] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.486] CloseHandle (hObject=0x1e4) returned 1 [0226.486] CloseHandle (hObject=0x1f0) returned 1 [0226.488] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otele.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.488] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.489] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otele.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec876156, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec876156, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec8773b8, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTele.dat", cAlternateFileName="{E347E~4.DAT")) returned 0x55e7d0 [0226.489] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec876156, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec876156, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec8773b8, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTele.dat", cAlternateFileName="{E347E~4.DAT")) returned 0 [0226.489] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0226.489] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otele.dat")) returned 1 [0226.490] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTele.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otele.dat")) returned 0xffffffff [0226.491] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec86c413, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec86c413, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec86ec20, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{E347E~3.DAT")) returned 1 [0226.491] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.491] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.491] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.491] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.492] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0226.492] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otelemediumcost.dat")) returned 0x20 [0226.492] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otelemediumcost.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.492] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.493] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0226.499] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1e3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1e3, lpOverlapped=0x0) returned 1 [0226.500] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.500] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.501] CloseHandle (hObject=0x1f0) returned 1 [0226.501] CloseHandle (hObject=0x1e4) returned 1 [0226.502] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otelemediumcost.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.502] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otelemediumcost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.502] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otelemediumcost.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec86c413, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec86c413, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec86ec20, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{E347E~3.DAT")) returned 0x55e610 [0226.502] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec86c413, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec86c413, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec86ec20, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x5503c4, dwReserved1=0x1b, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{E347E~3.DAT")) returned 0 [0226.503] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0226.503] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otelemediumcost.dat")) returned 1 [0226.504] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\{e347e1df-602b-433d-b049-596c6048612b} (1) - 3128 - excel.exe - otelemediumcost.dat")) returned 0xffffffff [0226.504] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec86c413, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0xec86c413, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec86ec20, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat", cAlternateFileName="{E347E~3.DAT")) returned 0 [0226.504] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0226.504] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x696efe32, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0xec86ec20, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0xec876156, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6578652e, dwReserved1=0x6c75525f, cFileName="OTele", cAlternateFileName="")) returned 0 [0226.504] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0226.505] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb1ac323a, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2c68d12, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20646564, dwReserved1=0x656c6946, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0226.505] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb1ac323a, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2c68d12, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x362d4644, dwReserved1=0x2d423230, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0226.505] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb1ac323a, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2c68d12, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x362d4644, dwReserved1=0x2d423230, cFileName="..", cAlternateFileName="")) returned 1 [0226.505] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x883c79d5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x973d65a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x980cd2db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x362d4644, dwReserved1=0x2d423230, cFileName="17.3.5892.0626", cAlternateFileName="173589~1.062")) returned 1 [0226.505] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x883c79d5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x973d65a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x980cd2db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0226.507] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x883c79d5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x973d65a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x980cd2db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0226.507] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cd17d55, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8cd17d55, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x8dfb8492, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="AutoPlayLogo.png", cAlternateFileName="AUTOPL~1.PNG")) returned 1 [0226.508] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.508] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.508] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.508] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.508] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.508] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0226.508] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png")) returned 0x20 [0226.509] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.509] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.509] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.512] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.513] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x23c, lpOverlapped=0x0) returned 1 [0226.513] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x23c, lpOverlapped=0x0) returned 1 [0226.513] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.513] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.513] CloseHandle (hObject=0x1e4) returned 1 [0226.514] CloseHandle (hObject=0x1f0) returned 1 [0226.515] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.516] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.516] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cd17d55, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8cd17d55, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x8dfb8492, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayLogo.png", cAlternateFileName="AUTOPL~1.PNG")) returned 0x55e650 [0226.516] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cd17d55, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8cd17d55, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x8dfb8492, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayLogo.png", cAlternateFileName="AUTOPL~1.PNG")) returned 0 [0226.516] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0226.516] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png")) returned 1 [0226.517] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png")) returned 0xffffffff [0226.517] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f743688, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8f743688, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x91beba26, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 1 [0226.518] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.518] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.518] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.518] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.523] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0226.523] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif")) returned 0x20 [0226.523] VirtualAlloc (lpAddress=0x6e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6e0000 [0226.524] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.524] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.528] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.530] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.535] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.535] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.538] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.538] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.539] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.539] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.540] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.540] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.541] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.541] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.542] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.542] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.542] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.543] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.544] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.544] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.544] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.545] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.545] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.546] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.546] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.546] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.547] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.547] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.548] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.548] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.548] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.549] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.549] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.549] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.549] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.550] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.550] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.551] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.551] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.552] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.553] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.553] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.554] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.554] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.554] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.554] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.556] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.556] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.556] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.557] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.557] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.558] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.558] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.558] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.559] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.559] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.559] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.560] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.561] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.561] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.561] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.562] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.562] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.562] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.563] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.563] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.563] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.564] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.564] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.565] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x8f6, lpOverlapped=0x0) returned 1 [0226.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x8f6, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x8f6, lpOverlapped=0x0) returned 1 [0226.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.574] CloseHandle (hObject=0x1f0) returned 1 [0226.574] CloseHandle (hObject=0x1e4) returned 1 [0226.585] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.586] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.586] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f743688, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8f743688, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x91beba26, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 0x55e650 [0226.586] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f743688, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8f743688, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x91beba26, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 0 [0226.586] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0226.587] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif")) returned 1 [0226.591] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif")) returned 0xffffffff [0226.591] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x922c670c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x922c670c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92849c84, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~2.PNG")) returned 1 [0226.592] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.592] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.592] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.592] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0226.592] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png")) returned 0x20 [0226.593] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.593] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.594] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.598] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.599] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x7f2, lpOverlapped=0x0) returned 1 [0226.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x7f2, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x7f2, lpOverlapped=0x0) returned 1 [0226.599] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.599] CloseHandle (hObject=0x1e4) returned 1 [0226.600] CloseHandle (hObject=0x1f0) returned 1 [0226.601] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.603] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.603] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x922c670c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x922c670c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92849c84, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~2.PNG")) returned 0x55e5d0 [0226.604] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x922c670c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x922c670c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92849c84, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~2.PNG")) returned 0 [0226.604] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0226.604] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png")) returned 1 [0226.611] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png")) returned 0xffffffff [0226.611] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92ed8427, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92ed8427, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93350a85, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="CollectOneDriveLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 1 [0226.612] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.612] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.612] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.612] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.613] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0226.613] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat")) returned 0x20 [0226.614] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.614] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.614] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.616] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x6da, lpOverlapped=0x0) returned 1 [0226.618] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x6da, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x6da, lpOverlapped=0x0) returned 1 [0226.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.618] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.618] CloseHandle (hObject=0x1f0) returned 1 [0226.618] CloseHandle (hObject=0x1e4) returned 1 [0226.623] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.623] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.624] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92ed8427, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92ed8427, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93350a85, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x550340, dwReserved1=0x6, cFileName="CollectOneDriveLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 0x55e490 [0226.624] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92ed8427, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92ed8427, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93350a85, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x550340, dwReserved1=0x6, cFileName="CollectOneDriveLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 0 [0226.624] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0226.624] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat")) returned 1 [0226.625] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat")) returned 0xffffffff [0226.625] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93ea3eb7, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93ea3eb7, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9404784f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ETWlog.dll", cAlternateFileName="")) returned 1 [0226.625] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.625] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.626] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.626] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.626] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0226.626] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll")) returned 0x20 [0226.627] VirtualAlloc (lpAddress=0x6e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6e4000 [0226.627] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.627] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.628] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.631] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.631] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.631] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.632] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.632] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.632] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.633] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2c0, lpOverlapped=0x0) returned 1 [0226.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2c0, lpOverlapped=0x0) returned 1 [0226.633] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.633] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.633] CloseHandle (hObject=0x1e4) returned 1 [0226.633] CloseHandle (hObject=0x1f0) returned 1 [0226.635] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.635] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.636] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93ea3eb7, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93ea3eb7, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9404784f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ETWlog.dll", cAlternateFileName="")) returned 0x55e750 [0226.636] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93ea3eb7, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93ea3eb7, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9404784f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ETWlog.dll", cAlternateFileName="")) returned 0 [0226.636] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0226.636] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll")) returned 1 [0226.637] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll")) returned 0xffffffff [0226.637] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94689b47, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94689b47, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9489fc30, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ExclusionList.xml", cAlternateFileName="EXCLUS~1.XML")) returned 1 [0226.638] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94bc0dc5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94bc0dc5, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94ebbc59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x2e0074, dwReserved1=0x6d0078, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 1 [0226.638] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.638] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.638] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.638] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.638] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.638] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0226.639] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.localizedresources.dll")) returned 0x20 [0226.643] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.localizedresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.643] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.localizedresources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.646] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.647] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.648] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.648] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.648] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.650] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.650] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.650] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.650] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.650] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.652] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.652] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.652] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.655] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.656] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.656] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.658] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xc0, lpOverlapped=0x0) returned 1 [0226.658] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xc0, lpOverlapped=0x0) returned 1 [0226.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.658] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0226.658] CloseHandle (hObject=0x1f0) returned 1 [0226.658] CloseHandle (hObject=0x1e4) returned 1 [0226.662] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.localizedresources.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.localizedresources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0226.662] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.localizedresources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0226.662] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.localizedresources.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94bc0dc5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94bc0dc5, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94ebbc59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 0x55e490 [0226.663] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94bc0dc5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94bc0dc5, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94ebbc59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 0 [0226.663] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0226.663] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.localizedresources.dll")) returned 1 [0226.666] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.localizedresources.dll")) returned 0xffffffff [0226.666] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x959c295b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x959c295b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x98355904, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xf8000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 1 [0226.666] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0226.666] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.666] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0226.666] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0226.666] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0226.667] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0226.667] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.resources.dll")) returned 0x20 [0226.668] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.resources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0226.668] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0226.669] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.673] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.675] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.675] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.676] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.676] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.677] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.677] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.677] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.678] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.678] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.678] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.679] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.679] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.679] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.681] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.682] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.682] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.682] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.683] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.683] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.683] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.684] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.684] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.685] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.685] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.685] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.686] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.686] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.686] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.687] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.687] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.687] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.687] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.688] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.688] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.688] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.688] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.689] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.689] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.689] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.690] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.690] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.690] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.690] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.691] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.691] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.691] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.692] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.962] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.962] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.963] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.964] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.964] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.965] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.965] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.967] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.967] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.968] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.968] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.969] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.969] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.970] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.971] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.971] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.973] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.973] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.977] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.978] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.978] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.978] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.979] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.979] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.980] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.980] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.981] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.982] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.982] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.983] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.986] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.987] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.987] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.987] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.987] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.988] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.988] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.988] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.988] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.988] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.989] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.989] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.989] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.989] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.990] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.990] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.991] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.991] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.992] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.992] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.993] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.993] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.993] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.993] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.994] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.994] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.994] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.994] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.994] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.995] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.995] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.996] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.996] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.997] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.997] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.998] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.998] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.999] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.999] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0226.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.000] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.000] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.000] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.000] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.001] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.001] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.001] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.001] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.002] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.009] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.009] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.010] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.010] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.010] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.011] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.011] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.011] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.012] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.013] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.013] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.013] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.013] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.013] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.013] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.014] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.014] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.014] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.015] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.015] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.015] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.016] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.017] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.017] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.017] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.018] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.018] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.018] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.019] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.019] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.019] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.020] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.020] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.020] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.166] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.166] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.166] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.167] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.167] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.167] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.167] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.167] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.167] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.168] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.168] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.168] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.168] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.168] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.169] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.169] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.169] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.169] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.170] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.170] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.170] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.170] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.171] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.171] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.171] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.172] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.172] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.172] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.172] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.172] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.172] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.173] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.173] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.173] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.173] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.174] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.174] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.174] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.174] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.175] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.175] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.175] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.175] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.176] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.176] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.176] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.177] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.177] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.177] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.177] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.178] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.178] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.178] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.178] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.179] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.179] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.179] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.180] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.181] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.181] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.182] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.182] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.182] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.183] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.183] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.183] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.184] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.185] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.185] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.185] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.186] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.186] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.186] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.187] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.187] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.187] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.188] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.188] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.188] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.189] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.189] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.189] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.191] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.191] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.191] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.192] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.192] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.192] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.193] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.193] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.193] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.194] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.194] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.194] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.195] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.195] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.195] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.196] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.196] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.196] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.197] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.197] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.197] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.197] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.198] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.198] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.198] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.198] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.199] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.199] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.199] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.199] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.265] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.269] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.269] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.270] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.270] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.270] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.271] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.271] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.271] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.271] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.271] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.272] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.272] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.272] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.272] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.273] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.273] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.273] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.273] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.273] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.274] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.274] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.274] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.274] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.274] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.275] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0227.275] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0227.275] CloseHandle (hObject=0x1e4) returned 1 [0227.275] CloseHandle (hObject=0x1f0) returned 1 [0227.306] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.resources.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0227.307] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0227.307] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.resources.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x959c295b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x959c295b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x98355904, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xf8000, dwReserved0=0x550340, dwReserved1=0x6, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 0x55e710 [0227.307] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x959c295b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x959c295b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x98355904, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xf8000, dwReserved0=0x550340, dwReserved1=0x6, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 0 [0227.307] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0227.307] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.resources.dll")) returned 1 [0227.355] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\filesync.resources.dll")) returned 0xffffffff [0227.360] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bbcedb7, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8bbcedb7, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x8bbcedb7, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="is", cAlternateFileName="")) returned 1 [0227.360] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bbcedb7, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8bbcedb7, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x8edba01f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x55e9b8, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0227.361] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bbcedb7, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8bbcedb7, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x8edba01f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x55e9b8, cFileName="..", cAlternateFileName="")) returned 1 [0227.361] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8edba01f, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8edba01f, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x8f89abc5, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x152c0, dwReserved0=0x0, dwReserved1=0x55e9b8, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0227.362] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8edba01f, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8edba01f, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x8f89abc5, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x152c0, dwReserved0=0x0, dwReserved1=0x55e9b8, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0227.362] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0227.362] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fca0d59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8fca0d59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x8fca0d59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="it", cAlternateFileName="")) returned 1 [0227.362] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fca0d59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8fca0d59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x907a79a9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0227.362] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fca0d59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8fca0d59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x907a79a9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0227.362] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a79a9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x907a79a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x90ea89ac, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0227.363] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a79a9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x907a79a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x90ea89ac, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0227.363] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0227.363] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90f6733c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x90f6733c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x90f6733c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="ja", cAlternateFileName="")) returned 1 [0227.363] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\ja\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90f6733c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x90f6733c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x91510d84, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0227.364] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90f6733c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x90f6733c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x91510d84, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0227.364] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91510d84, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x91510d84, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9259b185, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xfcc0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0227.365] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91510d84, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x91510d84, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9259b185, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xfcc0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0227.365] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0227.365] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92954bae, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92954bae, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92954bae, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="ka", cAlternateFileName="")) returned 1 [0227.365] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ka\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\ka\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92954bae, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92954bae, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93186f59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0227.365] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92954bae, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92954bae, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93186f59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0227.365] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93186f59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93186f59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93faeefa, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0227.366] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93186f59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93186f59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93faeefa, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0227.366] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0227.366] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944bfdaf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x944bfdaf, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x944bfdaf, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="kk", cAlternateFileName="")) returned 1 [0227.366] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\kk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\kk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944bfdaf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x944bfdaf, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94e232ee, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0227.366] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944bfdaf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x944bfdaf, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94e232ee, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0227.366] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94e232ee, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94e232ee, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x952c1a4e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0227.367] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94e232ee, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94e232ee, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x952c1a4e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0227.367] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0227.367] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95c97643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95c97643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x95c97643, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="km-kh", cAlternateFileName="")) returned 1 [0227.367] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\km-kh\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\km-kh\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95c97643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95c97643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x962b3645, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0227.367] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95c97643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95c97643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x962b3645, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0227.367] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x962b3645, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x962b3645, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x96647060, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0227.368] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x962b3645, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x962b3645, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x96647060, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0227.368] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0227.368] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x967520dd, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x967520dd, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x967520dd, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="kn", cAlternateFileName="")) returned 1 [0227.368] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\kn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\kn\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x967520dd, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x967520dd, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x96f11a4d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0227.368] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x967520dd, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x967520dd, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x96f11a4d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0227.368] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f11a4d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x96f11a4d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x97317979, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x172c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0227.369] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f11a4d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x96f11a4d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x97317979, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x172c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0227.369] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0227.369] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973d65a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x973d65a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x973d65a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="ko", cAlternateFileName="")) returned 1 [0227.369] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ko\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\ko\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973d65a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x973d65a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x97a3ea55, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0227.370] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973d65a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x973d65a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x97a3ea55, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0227.370] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a3ea55, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x97a3ea55, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x97edd415, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xf2c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0227.370] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a3ea55, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x97a3ea55, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x97edd415, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xf2c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0227.371] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0227.371] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x980cd2db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x980cd2db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x980cd2db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="kok", cAlternateFileName="")) returned 1 [0227.371] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\kok\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\kok\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x980cd2db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x980cd2db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x980cd2db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0227.372] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x980cd2db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x980cd2db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x980cd2db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0227.372] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x980cd2db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x980cd2db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x980cd2db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 0 [0227.372] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0227.372] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x980cd2db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x980cd2db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x980cd2db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="kok", cAlternateFileName="")) returned 0 [0227.372] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0227.372] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13a98591, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x27e196bc, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x27e196bc, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65522e63, dwReserved1=0x72756f73, cFileName="17.3.5892.0626_1", cAlternateFileName="173589~2.062")) returned 1 [0227.372] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13a98591, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x27e196bc, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x27e196bc, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0227.436] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13a98591, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x27e196bc, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x27e196bc, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="..", cAlternateFileName="")) returned 1 [0227.436] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d93484, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13d93484, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x13ec46bb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="AutoPlayLogo.png", cAlternateFileName="AUTOPL~1.PNG")) returned 1 [0227.437] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0227.437] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0227.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0227.437] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0227.437] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0227.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0227.437] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png")) returned 0x20 [0227.438] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0227.439] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0227.441] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.443] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x23c, lpOverlapped=0x0) returned 1 [0227.445] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x23c, lpOverlapped=0x0) returned 1 [0227.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0227.445] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0227.445] CloseHandle (hObject=0x1f0) returned 1 [0227.445] CloseHandle (hObject=0x1e4) returned 1 [0227.445] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0227.446] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0227.446] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d93484, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13d93484, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x13ec46bb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayLogo.png", cAlternateFileName="AUTOPL~1.PNG")) returned 0x55e490 [0227.446] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d93484, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13d93484, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x13ec46bb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayLogo.png", cAlternateFileName="AUTOPL~1.PNG")) returned 0 [0227.446] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0227.446] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png")) returned 1 [0227.447] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png")) returned 0xffffffff [0227.447] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141bf54b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x141bf54b, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x14742dc7, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 1 [0227.448] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0227.448] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0227.448] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0227.448] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0227.448] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0227.448] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0227.448] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif")) returned 0x20 [0227.449] VirtualAlloc (lpAddress=0x6e8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6e8000 [0227.449] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0227.450] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0227.450] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.453] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.594] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.595] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.595] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.595] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.595] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.596] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.596] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.596] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.596] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.597] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.597] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.598] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.598] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.599] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.599] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.600] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.600] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.603] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.603] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.603] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.604] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.604] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.605] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.605] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.606] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.606] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.607] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.607] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.608] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.608] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.608] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.609] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.609] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.609] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.609] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.610] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.610] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.610] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.611] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.611] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.611] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.612] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.612] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.613] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.613] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.613] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.614] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.614] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.614] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.615] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.615] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.616] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.616] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.616] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.618] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.618] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.619] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.619] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.620] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.620] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.621] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.621] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.622] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.622] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.623] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.623] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.624] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.624] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.624] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.624] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.625] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.625] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.625] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.625] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.625] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.626] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.627] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.627] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.628] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.628] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.629] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.629] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.629] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.629] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.630] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.630] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.630] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.631] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.631] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.631] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.631] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.632] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.632] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.632] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.689] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.689] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.690] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.691] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.691] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.691] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.692] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.692] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.692] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.692] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.693] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.693] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.693] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.693] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.694] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.694] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.694] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.694] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.694] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.695] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.695] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x8f6, lpOverlapped=0x0) returned 1 [0227.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x8f6, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x8f6, lpOverlapped=0x0) returned 1 [0227.695] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0227.695] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0227.696] CloseHandle (hObject=0x1e4) returned 1 [0227.696] CloseHandle (hObject=0x1f0) returned 1 [0227.702] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0227.703] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0227.703] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141bf54b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x141bf54b, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x14742dc7, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 0x55e8d0 [0227.703] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141bf54b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x141bf54b, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x14742dc7, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 0 [0227.703] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0227.703] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif")) returned 1 [0227.708] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif")) returned 0xffffffff [0227.708] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x149cb56a, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x149cb56a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x14e439d9, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~2.PNG")) returned 1 [0227.708] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0227.708] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0227.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0227.708] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0227.708] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0227.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0227.709] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png")) returned 0x20 [0227.710] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0227.710] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0227.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.853] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.854] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.956] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.957] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x7f2, lpOverlapped=0x0) returned 1 [0227.957] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x7f2, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x7f2, lpOverlapped=0x0) returned 1 [0227.957] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0227.957] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0227.957] CloseHandle (hObject=0x1f0) returned 1 [0227.957] CloseHandle (hObject=0x1e4) returned 1 [0227.958] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0227.958] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0227.958] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x149cb56a, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x149cb56a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x14e439d9, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~2.PNG")) returned 0x55e750 [0227.958] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x149cb56a, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x149cb56a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x14e439d9, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~2.PNG")) returned 0 [0227.958] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0227.959] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png")) returned 1 [0227.960] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png")) returned 0xffffffff [0227.960] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1513eaa7, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1513eaa7, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1526fd00, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="CollectOneDriveLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 1 [0227.960] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0227.960] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0227.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0227.960] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0227.960] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0227.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0227.960] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat")) returned 0x20 [0227.961] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0227.961] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0227.962] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0227.964] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x6da, lpOverlapped=0x0) returned 1 [0227.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x6da, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x6da, lpOverlapped=0x0) returned 1 [0227.965] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0227.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0227.965] CloseHandle (hObject=0x1e4) returned 1 [0227.965] CloseHandle (hObject=0x1f0) returned 1 [0227.966] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0227.966] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0227.966] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1513eaa7, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1513eaa7, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1526fd00, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x550340, dwReserved1=0x6, cFileName="CollectOneDriveLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 0x55e7d0 [0227.966] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1513eaa7, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1513eaa7, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1526fd00, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x550340, dwReserved1=0x6, cFileName="CollectOneDriveLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 0 [0227.966] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0227.967] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat")) returned 1 [0227.968] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat")) returned 0xffffffff [0227.968] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1583f985, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1583f985, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x15a2f89d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ETWlog.dll", cAlternateFileName="")) returned 1 [0227.968] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0227.968] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0227.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0227.968] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0227.968] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0227.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0227.968] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll")) returned 0x20 [0227.968] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0227.969] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0227.969] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.022] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.043] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.044] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.044] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.045] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.045] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.045] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.046] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2c0, lpOverlapped=0x0) returned 1 [0228.046] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2c0, lpOverlapped=0x0) returned 1 [0228.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.046] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.047] CloseHandle (hObject=0x1f0) returned 1 [0228.047] CloseHandle (hObject=0x1e4) returned 1 [0228.048] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0228.049] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0228.049] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1583f985, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1583f985, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x15a2f89d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ETWlog.dll", cAlternateFileName="")) returned 0x55e290 [0228.049] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1583f985, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1583f985, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x15a2f89d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ETWlog.dll", cAlternateFileName="")) returned 0 [0228.049] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0228.049] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll")) returned 1 [0228.051] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll")) returned 0xffffffff [0228.051] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15de92d7, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x15de92d7, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x15f66b03, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ExclusionList.xml", cAlternateFileName="EXCLUS~1.XML")) returned 1 [0228.051] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16071ad7, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x16071ad7, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x161c908f, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x2e0074, dwReserved1=0x6d0078, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 1 [0228.052] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0228.052] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0228.052] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0228.052] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0228.052] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll")) returned 0x20 [0228.053] VirtualAlloc (lpAddress=0x6ec000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6ec000 [0228.053] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0228.053] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.054] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.061] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.062] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.063] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.063] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.063] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.063] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.063] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.064] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.064] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.064] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.064] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.064] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.065] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.065] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.066] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.066] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.067] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.067] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.067] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.068] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.068] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.068] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.068] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.069] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.069] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.069] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.069] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.069] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.070] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xc0, lpOverlapped=0x0) returned 1 [0228.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xc0, lpOverlapped=0x0) returned 1 [0228.070] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.070] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.070] CloseHandle (hObject=0x1e4) returned 1 [0228.070] CloseHandle (hObject=0x1f0) returned 1 [0228.073] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0228.073] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0228.073] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16071ad7, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x16071ad7, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x161c908f, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 0x55e710 [0228.074] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16071ad7, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x16071ad7, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x161c908f, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 0 [0228.074] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0228.074] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll")) returned 1 [0228.076] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll")) returned 0xffffffff [0228.076] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x164ea204, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x164ea204, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1ba724f0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 1 [0228.076] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0228.076] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0228.076] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0228.076] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.077] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0228.077] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll")) returned 0x20 [0228.078] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.078] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0228.078] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.088] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.089] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.093] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.093] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.093] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.093] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.094] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.094] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.094] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.094] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.094] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.094] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.095] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.095] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.095] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.095] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.096] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.096] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.096] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.096] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.097] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.097] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.097] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.098] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.098] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.098] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.099] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.099] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.099] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.099] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.100] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.100] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.100] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.100] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.100] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.100] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.101] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.102] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.102] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.102] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.102] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.103] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.103] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.103] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.103] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.103] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.103] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.104] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.104] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.104] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.104] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.105] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.105] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.105] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.105] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.106] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.106] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.106] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.106] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.107] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.107] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.107] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.107] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.108] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.108] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.108] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.108] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.109] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.109] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.109] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.109] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.110] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.110] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.110] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.110] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.111] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.111] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.111] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.111] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.112] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.112] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.112] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.112] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.112] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.112] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.113] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.113] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.113] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.113] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.114] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.114] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.114] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.114] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.115] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.115] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.116] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.116] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.116] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.117] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.118] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.118] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.118] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.119] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.119] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.120] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.120] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.120] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.121] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.121] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.122] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.122] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.122] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.123] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.123] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.123] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.123] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.123] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.124] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.124] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.124] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.139] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.140] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.140] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.141] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.141] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.142] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.142] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.143] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.143] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.143] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.144] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.144] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.145] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.145] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.145] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.146] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.146] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.147] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.147] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.147] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.148] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.148] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.148] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.149] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.149] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.149] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.150] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.150] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.151] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.151] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.158] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.158] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.158] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.159] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.159] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.159] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.160] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.160] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.160] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.161] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.161] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.161] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.161] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.162] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.162] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.162] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.163] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.163] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.163] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.163] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.163] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.164] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.164] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.164] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.165] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.165] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.165] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.165] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.166] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.167] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.167] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.167] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.167] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.168] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.168] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.168] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.168] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.169] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.169] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.169] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.170] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.170] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.170] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.170] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.170] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.170] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.171] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.171] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.171] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.171] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.172] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.172] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.172] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.173] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.173] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.173] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.173] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.173] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.174] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.174] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.174] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.174] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.174] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.174] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.175] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.175] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.175] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.175] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.176] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.176] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.176] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.176] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.177] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.177] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.177] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.177] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.178] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.178] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.178] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.179] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.179] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.179] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.179] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.180] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.180] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.182] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.182] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.182] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.182] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.183] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.183] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.183] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.183] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.184] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.184] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.184] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.185] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.185] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.185] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.186] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.186] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.186] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.186] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.186] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.187] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.187] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.187] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.187] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.187] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.187] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.187] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.188] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.188] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.188] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.189] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.189] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.189] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.190] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.191] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.191] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.191] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.192] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.192] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.192] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.192] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.192] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.192] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.194] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.194] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.194] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.195] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.195] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.195] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.196] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.196] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.196] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.197] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.197] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.197] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.198] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.202] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.202] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.203] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.203] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.203] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.203] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.204] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.204] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.204] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.204] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.205] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.205] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.205] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.205] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.205] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.205] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.206] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.206] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.206] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.206] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.206] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.206] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.207] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.207] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.207] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.207] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.207] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.207] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.208] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.208] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.208] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.208] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.208] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.208] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.209] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.209] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.209] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.209] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.209] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.209] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.210] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.210] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.210] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.210] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.210] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.210] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.211] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.211] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.211] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.211] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.211] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.211] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.212] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.212] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.212] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.212] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.212] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.213] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.213] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.213] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.214] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.214] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.214] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.214] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.214] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.215] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.215] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.215] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.217] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.217] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.217] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.217] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.217] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.218] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.218] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.218] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.378] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0228.379] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0228.379] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x164ea204, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x164ea204, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1ba724f0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 0x55e490 [0228.379] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x164ea204, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x164ea204, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1ba724f0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 0 [0228.379] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0228.379] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll")) returned 1 [0228.385] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll")) returned 0xffffffff [0228.385] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c4220a6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1c4220a6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1d118c6c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x362c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="FileSyncApi.dll", cAlternateFileName="FILESY~3.DLL")) returned 1 [0228.385] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0228.386] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0228.386] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0228.386] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0228.386] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll")) returned 0x20 [0228.388] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0228.389] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.389] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.392] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.393] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.393] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.394] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.394] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.394] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.394] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.394] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.395] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.395] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.395] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.395] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.395] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.395] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.396] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.396] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.396] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.396] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.396] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.396] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.397] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.397] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.397] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.398] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.398] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.399] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.399] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.399] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.399] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.399] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.399] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.400] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.400] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.400] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.400] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.400] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.400] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.400] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.401] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.401] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.401] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.401] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.401] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.401] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.402] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.402] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.402] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.450] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.450] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.451] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.451] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.451] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.452] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.452] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.452] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.452] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.453] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.453] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.453] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.453] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.453] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.453] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.454] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.454] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.454] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.454] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.455] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.455] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.455] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.455] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.456] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.456] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.456] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.456] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.457] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.457] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.457] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.458] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.458] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.458] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.458] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.459] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.459] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.459] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.459] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.460] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2c0, lpOverlapped=0x0) returned 1 [0228.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2c0, lpOverlapped=0x0) returned 1 [0228.460] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.460] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.460] CloseHandle (hObject=0x1e4) returned 1 [0228.460] CloseHandle (hObject=0x1f0) returned 1 [0228.466] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0228.467] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0228.467] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c4220a6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1c4220a6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1d118c6c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x362c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncApi.dll", cAlternateFileName="FILESY~3.DLL")) returned 0x55e8d0 [0228.467] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c4220a6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1c4220a6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1d118c6c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x362c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncApi.dll", cAlternateFileName="FILESY~3.DLL")) returned 0 [0228.467] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0228.467] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll")) returned 1 [0228.469] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll")) returned 0xffffffff [0228.469] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21721d25, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x21721d25, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x218eb79d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="FileSyncClient.dll", cAlternateFileName="FILESY~4.DLL")) returned 1 [0228.470] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0228.470] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0228.470] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0228.470] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0228.470] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll")) returned 0x20 [0228.473] VirtualAlloc (lpAddress=0x6f0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6f0000 [0228.474] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.474] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0228.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.476] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.480] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.481] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.481] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.482] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.482] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.482] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.482] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.483] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.483] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.483] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.483] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.484] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.484] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.484] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.484] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.484] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.484] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.485] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.485] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.485] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.485] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.486] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.486] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.486] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.487] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.488] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.488] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.488] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.489] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.489] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.489] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.490] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.490] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.490] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.490] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.491] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.491] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.491] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.491] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.492] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.492] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.492] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.492] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.493] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.493] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.493] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.493] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.493] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.493] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.494] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.494] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.494] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.494] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.494] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.494] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.495] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.495] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.495] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.496] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.496] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.496] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.496] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.496] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.497] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.497] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.497] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.498] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.498] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.498] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.498] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.498] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.498] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.499] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.499] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.499] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.500] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.500] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.501] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.501] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.501] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.501] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.502] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.502] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.502] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.502] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.502] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.502] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.503] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.503] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.503] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.504] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.504] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.504] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.506] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.507] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.507] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.507] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.508] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.508] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.509] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.509] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.509] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.511] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.511] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.511] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.512] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.513] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.513] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.513] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.515] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.515] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.516] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.518] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.518] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.518] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.518] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.518] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.519] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.519] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.519] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.520] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.520] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.520] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.521] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.521] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.521] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.524] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.524] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.525] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.525] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.525] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.525] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.525] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.526] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.526] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.526] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.526] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.527] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.527] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.527] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.527] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.527] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.528] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.528] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.528] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.530] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.530] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.535] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.535] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.536] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.536] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.536] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.536] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.536] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.537] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.537] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.538] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.538] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.539] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.539] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.540] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.540] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.541] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.541] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.542] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.542] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.543] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.543] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.543] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.543] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.544] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.544] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.544] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.545] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.545] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.546] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.546] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.546] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.547] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.547] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.547] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.548] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.548] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.548] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.549] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.551] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.552] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.552] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.553] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.553] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.554] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.555] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.556] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.556] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.557] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.557] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.557] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.558] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.559] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.560] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.561] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.561] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.561] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.562] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.562] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.562] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.563] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.563] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.563] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.564] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.564] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.565] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.565] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.565] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.566] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.566] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.566] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.566] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.566] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.566] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.582] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.582] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.603] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.603] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.603] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.608] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.608] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.608] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.609] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.609] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.610] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.610] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.611] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.611] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.612] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.612] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.696] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0228.696] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0228.696] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21721d25, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x21721d25, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x218eb79d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncClient.dll", cAlternateFileName="FILESY~4.DLL")) returned 0x55e290 [0228.696] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21721d25, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x21721d25, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x218eb79d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncClient.dll", cAlternateFileName="FILESY~4.DLL")) returned 0 [0228.697] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0228.697] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll")) returned 1 [0228.709] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll")) returned 0xffffffff [0228.709] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e196bc, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x27e196bc, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x27eb206a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x238c0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="FileSyncConfig.exe", cAlternateFileName="FILESY~1.EXE")) returned 1 [0228.735] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0228.735] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0228.736] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0228.736] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0228.736] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplaylogo.png")) returned 0x20 [0228.736] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplaylogo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0228.737] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplaylogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.737] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.739] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.741] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x23c, lpOverlapped=0x0) returned 1 [0228.741] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x23c, lpOverlapped=0x0) returned 1 [0228.741] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.741] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.741] CloseHandle (hObject=0x1e4) returned 1 [0228.742] CloseHandle (hObject=0x1f0) returned 1 [0228.742] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplaylogo.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplaylogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0228.743] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplaylogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0228.743] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplaylogo.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd25ab06c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd25ab06c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd29d7222, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayLogo.png", cAlternateFileName="AUTOPL~1.PNG")) returned 0x55e910 [0228.743] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd25ab06c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd25ab06c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd29d7222, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayLogo.png", cAlternateFileName="AUTOPL~1.PNG")) returned 0 [0228.743] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0228.743] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplaylogo.png")) returned 1 [0228.744] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplaylogo.png")) returned 0xffffffff [0228.744] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5dd86f0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd5dd86f0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd5e70f71, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 1 [0228.745] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0228.745] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0228.745] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0228.745] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0228.745] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.gif")) returned 0x20 [0228.745] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.746] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0228.746] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.751] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.753] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.753] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.754] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.754] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.755] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.755] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.755] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.755] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.755] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.755] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.756] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.756] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.756] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.757] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.757] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.757] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.757] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.758] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.758] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.759] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.760] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.760] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.760] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.761] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.761] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.761] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.762] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.762] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.762] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.763] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.763] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.764] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.764] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.765] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.765] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.765] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.766] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.766] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.766] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.766] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.766] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.766] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.767] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.767] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.767] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.768] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.768] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.768] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.769] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.769] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.769] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.770] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.770] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.771] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.771] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.772] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.772] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.772] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.773] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.773] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.773] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.773] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.773] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.774] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.774] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.774] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.774] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.775] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.775] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.775] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.775] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.776] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.776] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.777] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.777] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.777] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.778] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.778] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.778] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.779] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.779] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.779] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.779] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.780] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.781] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.781] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.781] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.782] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.782] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.782] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.782] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.782] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.783] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.783] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.783] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.783] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.783] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.784] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.784] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.785] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.785] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.785] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.786] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.786] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.786] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.786] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.787] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.787] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.787] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.787] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.787] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.788] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.788] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.788] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.788] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.788] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.789] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.789] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.789] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.789] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.789] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.790] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.790] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.790] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.790] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.791] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.791] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.791] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.792] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.792] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x8f6, lpOverlapped=0x0) returned 1 [0228.792] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x8f6, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x8f6, lpOverlapped=0x0) returned 1 [0228.792] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.792] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.792] CloseHandle (hObject=0x1f0) returned 1 [0228.792] CloseHandle (hObject=0x1e4) returned 1 [0228.803] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0228.804] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0228.804] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.gif"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5dd86f0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd5dd86f0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd5e70f71, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 0x55e710 [0228.804] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5dd86f0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd5dd86f0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd5e70f71, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 0 [0228.804] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0228.804] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.gif")) returned 1 [0228.809] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.gif")) returned 0xffffffff [0228.809] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda5ab377, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xda5ab377, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xda8f2699, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~2.PNG")) returned 1 [0228.810] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0228.810] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.810] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0228.810] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0228.810] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.810] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0228.810] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.png")) returned 0x20 [0228.811] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0228.811] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.811] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.813] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.816] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.816] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.816] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x7f2, lpOverlapped=0x0) returned 1 [0228.816] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x7f2, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x7f2, lpOverlapped=0x0) returned 1 [0228.817] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.817] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.817] CloseHandle (hObject=0x1e4) returned 1 [0228.817] CloseHandle (hObject=0x1f0) returned 1 [0228.817] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0228.818] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0228.818] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda5ab377, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xda5ab377, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xda8f2699, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~2.PNG")) returned 0x55e2d0 [0228.818] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda5ab377, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xda5ab377, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xda8f2699, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~2.PNG")) returned 0 [0228.818] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0228.818] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.png")) returned 1 [0228.820] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\autoplayoptin.png")) returned 0xffffffff [0228.820] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb92c03, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbb92c03, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc26d7fb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="CollectOneDriveLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 1 [0228.820] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0228.820] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0228.820] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0228.820] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0228.820] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\collectonedrivelogs.bat")) returned 0x20 [0228.821] VirtualAlloc (lpAddress=0x6f4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6f4000 [0228.822] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\collectonedrivelogs.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.822] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\collectonedrivelogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0228.823] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.826] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.831] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x6da, lpOverlapped=0x0) returned 1 [0228.831] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x6da, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x6da, lpOverlapped=0x0) returned 1 [0228.831] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.831] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.831] CloseHandle (hObject=0x1f0) returned 1 [0228.831] CloseHandle (hObject=0x1e4) returned 1 [0228.832] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\collectonedrivelogs.bat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\collectonedrivelogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0228.832] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\collectonedrivelogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0228.833] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\collectonedrivelogs.bat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb92c03, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbb92c03, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc26d7fb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x550340, dwReserved1=0x6, cFileName="CollectOneDriveLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 0x55e490 [0228.833] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb92c03, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbb92c03, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc26d7fb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x550340, dwReserved1=0x6, cFileName="CollectOneDriveLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 0 [0228.833] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0228.833] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\collectonedrivelogs.bat")) returned 1 [0228.834] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\collectonedrivelogs.bat")) returned 0xffffffff [0228.834] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd4e444, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdcd4e444, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdd66554a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ETWlog.dll", cAlternateFileName="")) returned 1 [0228.835] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0228.835] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0228.835] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0228.835] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0228.835] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\etwlog.dll")) returned 0x20 [0228.839] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\etwlog.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0228.840] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\etwlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.840] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.844] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.845] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.846] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.846] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.846] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.846] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.846] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.847] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.847] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.847] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.847] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.848] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.848] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2c0, lpOverlapped=0x0) returned 1 [0228.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2c0, lpOverlapped=0x0) returned 1 [0228.848] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.848] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.848] CloseHandle (hObject=0x1e4) returned 1 [0228.849] CloseHandle (hObject=0x1f0) returned 1 [0228.850] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\etwlog.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\etwlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0228.850] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\etwlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0228.850] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\etwlog.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd4e444, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdcd4e444, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdd66554a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ETWlog.dll", cAlternateFileName="")) returned 0x55e290 [0228.851] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd4e444, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdcd4e444, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdd66554a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ETWlog.dll", cAlternateFileName="")) returned 0 [0228.851] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0228.851] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\etwlog.dll")) returned 1 [0228.852] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\etwlog.dll")) returned 0xffffffff [0228.852] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42ba1e4, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe42ba1e4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe7c64fd5, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ExclusionList.xml", cAlternateFileName="EXCLUS~1.XML")) returned 1 [0228.853] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb1bd98b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xeb1bd98b, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xeb3ad73a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x2e0074, dwReserved1=0x6d0078, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 1 [0228.853] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0228.853] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0228.854] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0228.854] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0228.854] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.localizedresources.dll")) returned 0x20 [0228.854] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.localizedresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.855] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.localizedresources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0228.855] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.873] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.874] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.874] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.875] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.875] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.875] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.876] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.876] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.876] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.877] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.877] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.877] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.877] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.877] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.877] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.878] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.878] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.878] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.878] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.878] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.878] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.879] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.879] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.879] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.879] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.879] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.879] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.880] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.880] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.880] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.880] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.880] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.880] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xc0, lpOverlapped=0x0) returned 1 [0228.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xc0, lpOverlapped=0x0) returned 1 [0228.881] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0228.881] CloseHandle (hObject=0x1f0) returned 1 [0228.881] CloseHandle (hObject=0x1e4) returned 1 [0228.883] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.localizedresources.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.localizedresources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0228.884] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.localizedresources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0228.884] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.localizedresources.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb1bd98b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xeb1bd98b, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xeb3ad73a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 0x55e890 [0228.884] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb1bd98b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xeb1bd98b, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xeb3ad73a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 0 [0228.884] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0228.884] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.localizedresources.dll")) returned 1 [0228.886] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.localizedresources.dll")) returned 0xffffffff [0228.886] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc43b7e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xecc43b7e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf5c4b24e, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 1 [0228.886] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0228.886] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0228.886] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0228.886] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0228.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0228.886] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.resources.dll")) returned 0x20 [0228.886] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.resources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0228.887] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0228.887] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.889] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.891] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.891] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.891] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.898] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.898] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.898] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.898] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.898] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.898] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.899] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.899] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.899] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.899] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.900] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.900] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.900] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.900] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.900] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.900] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.900] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.901] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.901] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.903] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.903] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.904] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.904] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.905] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.905] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.905] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.905] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.906] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.906] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.906] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.907] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.907] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.907] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.908] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.908] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.908] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.909] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.909] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.909] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.909] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.909] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.909] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.910] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.910] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.910] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.910] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.910] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.911] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.911] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.911] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.912] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.912] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.912] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.912] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.912] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.913] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.913] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.913] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.914] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.914] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.914] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.914] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.914] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.915] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.916] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.916] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.916] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.916] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.917] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.917] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.917] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.918] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.918] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.918] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.918] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.918] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.918] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.919] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.919] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.919] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.919] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.920] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.920] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.921] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.921] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.921] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.921] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.922] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.923] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.923] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.923] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.924] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.924] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.924] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.925] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.925] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.925] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.925] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.925] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.925] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.925] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.926] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.926] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.926] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.926] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.926] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.926] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.927] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.927] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.927] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.927] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.927] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.930] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.930] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.934] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.934] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.934] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.935] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.935] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.935] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.936] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.936] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.936] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.938] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.938] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.938] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.939] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.939] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.939] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.940] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.940] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.940] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.940] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.941] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.941] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.941] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.941] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.942] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.948] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.948] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.949] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.949] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.949] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.949] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.949] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.950] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.950] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.950] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.950] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.950] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.951] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.951] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.951] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.951] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.952] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.952] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.952] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.952] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.953] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.953] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.953] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.953] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.954] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.954] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.954] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.954] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.956] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.956] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.957] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.957] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.957] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.957] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.957] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.957] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.958] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.958] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.958] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.958] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.958] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.958] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.959] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.959] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.959] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.959] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.959] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.959] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.960] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.960] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.960] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.961] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.961] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.961] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.963] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.963] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.964] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.964] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.964] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.965] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.965] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.965] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.967] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.967] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.967] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.968] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.968] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.968] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.969] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.969] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.969] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.970] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.970] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.970] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.970] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.971] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.971] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.971] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.971] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.972] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.972] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.972] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.972] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.973] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.973] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.973] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.974] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.974] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.975] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.975] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.975] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.976] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.976] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.976] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.976] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.977] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.977] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.977] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.978] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.978] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.978] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.979] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.979] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.979] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.980] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.981] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.981] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.981] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.982] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.982] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.983] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.983] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.983] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.983] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.983] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.983] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.983] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.984] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.984] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.984] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.985] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.985] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.985] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0228.985] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.003] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.003] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.004] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.004] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.004] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.005] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.005] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.005] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.006] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.007] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.007] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.007] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.008] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.008] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.009] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.009] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.010] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.010] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.011] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.011] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.011] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.012] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.012] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.012] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.013] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.013] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.013] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.014] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.014] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.014] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.015] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.015] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.015] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.016] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.016] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.016] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.017] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.017] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.018] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.018] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.019] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.020] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.020] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.022] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.022] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.023] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.023] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.023] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.023] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.192] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.resources.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0229.193] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0229.193] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.resources.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc43b7e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xecc43b7e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf5c4b24e, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 0x55e610 [0229.193] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc43b7e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xecc43b7e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf5c4b24e, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 0 [0229.193] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0229.193] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.resources.dll")) returned 1 [0229.215] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesync.resources.dll")) returned 0xffffffff [0229.217] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf77c8633, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf77c8633, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf7d9801d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x362c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="FileSyncApi.dll", cAlternateFileName="FILESY~3.DLL")) returned 1 [0229.217] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0229.218] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0229.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0229.218] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0229.218] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0229.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0229.218] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncapi.dll")) returned 0x20 [0229.219] VirtualAlloc (lpAddress=0x6f8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6f8000 [0229.220] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0229.220] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0229.221] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.225] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.226] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.228] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.229] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.229] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.229] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.229] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.229] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.229] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.230] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.230] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.230] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.230] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.230] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.230] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.231] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.231] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.231] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.231] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.231] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.231] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.232] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.232] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.233] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.233] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.234] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.234] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.234] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.235] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.235] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.235] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.235] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.236] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.236] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.236] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.236] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.237] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.237] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.237] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.237] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.237] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.237] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.238] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.238] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.238] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.238] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.239] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.239] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.239] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.239] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.239] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.239] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.240] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.240] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.240] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.240] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.240] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.240] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.240] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.241] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.241] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.241] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.242] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.242] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.242] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.242] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.242] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.242] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.242] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.243] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.243] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.243] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.243] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.243] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.243] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.244] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.244] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.244] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.244] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.244] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.244] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.245] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.245] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.245] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.245] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.245] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.246] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.246] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.246] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.246] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.246] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.246] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.247] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.247] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.247] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.247] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.247] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.247] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.248] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.248] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2c0, lpOverlapped=0x0) returned 1 [0229.248] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2c0, lpOverlapped=0x0) returned 1 [0229.249] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0229.249] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0229.249] CloseHandle (hObject=0x1f0) returned 1 [0229.249] CloseHandle (hObject=0x1e4) returned 1 [0229.255] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncapi.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0229.255] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0229.255] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncapi.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf77c8633, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf77c8633, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf7d9801d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x362c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncApi.dll", cAlternateFileName="FILESY~3.DLL")) returned 0x55e1d0 [0229.256] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf77c8633, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf77c8633, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf7d9801d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x362c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncApi.dll", cAlternateFileName="FILESY~3.DLL")) returned 0 [0229.256] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0229.256] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncapi.dll")) returned 1 [0229.258] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncapi.dll")) returned 0xffffffff [0229.259] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8878a7e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf8878a7e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfc424655, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="FileSyncClient.dll", cAlternateFileName="FILESY~4.DLL")) returned 1 [0229.259] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0229.259] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0229.259] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0229.259] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0229.259] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0229.259] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0229.259] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncclient.dll")) returned 0x20 [0229.262] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0229.262] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncClient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncclient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0229.263] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.266] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.267] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.269] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.269] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.269] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.270] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.270] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.270] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.271] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.271] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.271] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.271] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.272] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.272] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.272] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.272] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.272] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.273] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.273] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.273] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.273] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.273] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.274] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.274] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.274] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.275] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.277] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.277] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.277] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.277] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.277] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.278] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.278] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.278] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.279] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.280] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.280] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.280] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.280] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.280] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.281] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.281] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.281] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.281] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.281] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.282] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.282] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.282] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.282] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.282] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.283] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.283] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.283] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.283] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.283] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.284] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.284] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.284] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.284] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.284] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.285] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.285] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.285] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.285] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.286] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.286] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.286] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.286] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.286] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.286] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.287] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.287] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.287] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.287] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.288] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.288] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.288] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.288] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.288] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.288] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.289] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.289] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.289] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.289] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.290] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.290] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.290] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.292] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.292] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.292] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.293] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.293] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.293] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.294] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.294] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.294] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.294] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.295] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.295] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.295] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.296] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.296] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.296] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.297] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.297] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.297] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.297] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.297] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.298] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.298] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.298] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.299] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.299] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.299] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.303] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.303] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.303] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.303] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.304] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.304] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.304] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.304] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.305] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.305] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.305] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.305] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.305] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.306] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.306] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.306] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.306] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.306] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.307] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.307] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.307] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.307] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.307] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.308] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.308] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.308] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.308] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.341] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.342] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.342] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.343] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.343] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.344] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.344] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.344] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.344] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.345] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.346] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.346] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.346] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.346] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.347] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.347] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.348] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.348] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.349] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.349] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.350] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.351] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.351] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.352] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.352] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.353] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.354] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.354] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.355] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.355] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.356] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.356] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.357] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.357] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.357] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.357] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.359] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.359] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.359] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.360] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.360] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.360] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.364] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.364] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.365] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.365] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.365] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.365] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.366] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.366] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.367] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.367] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.367] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.368] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.368] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.368] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.368] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.369] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.369] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.369] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.369] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.370] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.370] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.370] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.371] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.371] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.371] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.371] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.372] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.372] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.372] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.373] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.373] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.374] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.374] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.375] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.376] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.376] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.376] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.377] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.377] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.377] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.378] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.378] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.378] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.378] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.379] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.379] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.379] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.380] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.380] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.380] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.380] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.380] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.381] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.381] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.383] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.384] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.384] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.384] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.385] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.385] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.385] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.386] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.386] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.386] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.386] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.387] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.387] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.388] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.388] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.388] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.389] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.389] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.390] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.391] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.391] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.391] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.392] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.392] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.392] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.392] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.392] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.393] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.393] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.393] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.393] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.393] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.394] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.394] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.394] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.394] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.395] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.395] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.395] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.395] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.395] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.396] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.396] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.396] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.396] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.396] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.397] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.397] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.397] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.397] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.398] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.399] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.399] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.400] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.400] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.400] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.400] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.401] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.401] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.401] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.401] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.401] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.402] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.402] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.402] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.403] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.403] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.403] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.403] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.404] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.404] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.404] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.405] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.405] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.405] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.406] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.406] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.406] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.407] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.407] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.407] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.409] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.409] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.409] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.410] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.410] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.410] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.410] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.410] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.411] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.411] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.411] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.412] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.412] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.412] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.412] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.412] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.413] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.413] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.413] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.413] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.414] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.414] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.414] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.414] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.415] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.417] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.417] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.417] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.418] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.418] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.419] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.419] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.419] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.419] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.419] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.420] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.420] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.420] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.420] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.420] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.421] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.421] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.421] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.421] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.422] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.422] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.422] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.423] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.423] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.423] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.424] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.424] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.424] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.425] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.425] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.425] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.426] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.426] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.426] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.427] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.427] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.427] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.428] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.428] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.428] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.428] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.429] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.429] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.429] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.430] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.430] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.430] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.431] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.433] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.433] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.434] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.434] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.434] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.435] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.435] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.435] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.435] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.436] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.436] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.437] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.437] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.438] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.438] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.438] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.438] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.540] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncclient.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncClient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncclient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0229.552] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncClient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncclient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0229.553] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncclient.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8878a7e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf8878a7e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfc424655, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncClient.dll", cAlternateFileName="FILESY~4.DLL")) returned 0x55e5d0 [0229.553] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8878a7e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf8878a7e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfc424655, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncClient.dll", cAlternateFileName="FILESY~4.DLL")) returned 0 [0229.553] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0229.553] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncclient.dll")) returned 1 [0229.564] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncclient.dll")) returned 0xffffffff [0229.564] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcbbde9d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfcbbde9d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfd2fec9b, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x238c0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="FileSyncConfig.exe", cAlternateFileName="FILESY~1.EXE")) returned 1 [0229.565] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0229.565] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0229.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0229.565] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0229.565] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0229.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0229.566] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncSessions.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncsessions.dll")) returned 0x20 [0229.566] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncSessions.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncsessions.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0229.567] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncSessions.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncsessions.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0229.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.594] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.594] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.595] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.595] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.596] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.596] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.596] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.597] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.650] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.651] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.652] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.652] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.652] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.653] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.653] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.653] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.655] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.655] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.656] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.656] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.658] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.658] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.659] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.659] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.660] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.660] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.664] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.664] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.664] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.665] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.666] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.666] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.666] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.666] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.667] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.667] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.667] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.668] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.668] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.668] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.668] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.669] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.669] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.670] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.670] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.670] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.671] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.671] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.671] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.672] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.672] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.672] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.672] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.672] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.673] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.673] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.673] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.673] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.673] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.674] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.674] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.674] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.675] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.675] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.675] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.676] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.676] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.676] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.676] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.677] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.677] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.677] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.679] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.680] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.680] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.681] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.681] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.682] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.682] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.682] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.682] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.683] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.683] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.683] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.684] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.684] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.684] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.685] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.685] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.685] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.685] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.686] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.686] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.686] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.687] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.687] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.687] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.688] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.688] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.688] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.689] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.689] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.690] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.690] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.691] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.691] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.691] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.692] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.692] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.693] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.693] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.694] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.694] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.694] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.695] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.698] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.698] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.698] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.699] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.699] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.699] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.699] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.700] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.700] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.700] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.701] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.701] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.701] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.701] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.702] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.702] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.702] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.702] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.703] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.703] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.703] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.704] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.704] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.704] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.704] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.704] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.705] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.705] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.705] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.705] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.705] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.706] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.706] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.706] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.707] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.707] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.708] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.708] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.708] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.709] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.709] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.710] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.710] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.711] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.713] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.713] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.714] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.714] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.714] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.715] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.715] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.715] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.715] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.716] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.716] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.716] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.716] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.716] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.717] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.717] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.717] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.717] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.718] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.718] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.718] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.718] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.718] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.721] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.721] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.722] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.723] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.723] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.723] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.724] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.724] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.724] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.724] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.724] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.724] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.725] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.725] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.725] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.725] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.726] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.726] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.726] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.727] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.727] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.727] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.727] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.727] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.728] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.730] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.730] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.731] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.731] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.731] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.731] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.732] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.732] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.732] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.733] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.733] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.733] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.733] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.733] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.734] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.734] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.734] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.734] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.735] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.735] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.735] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.735] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.736] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.736] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.736] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.736] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.736] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.737] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.737] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.737] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.737] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.738] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.738] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.738] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.738] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.739] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.739] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.739] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.740] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.740] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.740] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.741] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.741] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.741] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.742] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.742] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.742] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.742] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.743] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.743] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.743] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.744] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.744] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.744] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.745] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.745] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.746] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.746] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.747] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.747] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.747] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.747] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.748] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.748] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.748] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.748] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.749] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.749] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.749] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.750] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.750] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.750] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.750] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.750] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.795] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncSessions.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncsessions.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncSessions.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncsessions.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0229.795] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncSessions.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncsessions.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0229.796] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncSessions.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncsessions.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd704ae4, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfd704ae4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23231a2, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1464c0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="FileSyncSessions.dll", cAlternateFileName="FIFC38~1.DLL")) returned 0x55e210 [0229.796] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd704ae4, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfd704ae4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23231a2, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1464c0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="FileSyncSessions.dll", cAlternateFileName="FIFC38~1.DLL")) returned 0 [0229.796] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0229.796] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncSessions.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncsessions.dll")) returned 1 [0229.800] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncSessions.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncsessions.dll")) returned 0xffffffff [0229.800] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2454520, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x2454520, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x253922a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x182cc0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="FileSyncShell.dll", cAlternateFileName="FI340C~1.DLL")) returned 1 [0229.801] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0229.801] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0229.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0229.801] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0229.801] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0229.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0229.801] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncShell.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncshell.dll")) returned 0x20 [0229.802] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncShell.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncshell.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0229.802] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncShell.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncshell.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0229.803] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.806] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.808] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.809] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.809] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.810] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.810] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.810] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.811] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.811] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.811] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.812] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.812] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.812] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.812] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.812] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.813] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.813] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.813] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.813] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.813] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.814] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.814] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.814] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.814] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.815] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.815] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.815] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.816] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.817] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.818] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.818] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.818] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.818] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.818] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.819] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.819] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.819] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.819] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.819] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.820] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.820] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.820] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.820] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.820] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.821] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.821] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.821] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.821] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.822] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.822] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.822] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.822] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.823] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.823] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.823] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.823] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.823] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.824] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.824] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.825] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.825] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.825] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.826] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.826] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.826] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.827] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.827] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.827] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.827] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.827] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.828] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.828] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.828] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.829] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.829] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.829] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.829] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.830] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.830] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.830] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.832] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.832] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.832] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.832] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.833] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.833] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.833] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.834] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.834] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.834] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.834] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.834] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.835] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.835] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.835] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.835] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.835] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.836] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.836] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.836] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.836] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.837] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.837] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.837] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.837] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.837] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.838] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.838] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.838] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.838] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.838] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.839] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.839] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.840] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.840] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.840] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.841] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.841] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.841] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.842] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.842] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.842] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.842] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.842] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.843] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.843] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.843] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.844] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.844] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.844] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.844] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.845] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.845] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.845] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.845] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.845] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.851] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.852] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.852] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.852] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.852] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.852] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.853] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.853] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.854] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.854] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.854] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.854] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.854] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.855] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.855] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.855] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.855] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.856] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.856] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.856] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.856] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.857] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.857] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.857] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.858] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.858] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.858] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.858] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.859] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.859] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.859] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.860] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.860] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.860] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.860] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.860] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.861] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.861] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.861] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.861] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.861] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.862] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.862] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.862] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.862] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.863] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.863] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.863] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.863] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.863] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.864] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.864] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.864] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.864] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.865] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.865] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.865] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.867] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.867] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.868] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.868] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.868] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.868] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.869] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.869] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.869] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.870] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.870] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.870] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.870] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.871] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.871] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.871] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.872] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.872] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.872] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.873] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.873] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.873] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.873] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.874] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.874] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.874] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.876] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.876] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.876] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.876] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.877] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.877] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.877] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.877] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.877] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.878] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.878] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.878] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.878] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.878] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.879] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.879] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.879] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.879] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.879] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.880] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.880] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.880] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.880] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.880] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.881] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.881] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.883] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.885] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.885] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.885] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.886] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.886] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.886] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.886] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.887] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.887] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.887] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.888] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.888] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.888] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.888] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.889] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.889] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.889] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.889] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.889] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.890] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.890] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.890] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.890] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.891] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.891] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.891] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.891] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.891] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.892] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.892] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.892] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.893] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.893] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.893] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.893] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.893] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.894] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.894] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.894] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.895] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.895] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.895] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.895] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.896] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.896] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.896] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.896] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.897] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.897] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.897] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.898] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.898] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.898] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.901] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.902] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.902] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.902] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.903] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.903] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.903] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.903] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.904] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.904] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.904] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.905] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.905] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.905] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.905] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.905] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.906] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.906] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.906] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.906] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.907] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.907] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.907] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.908] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.908] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.908] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.908] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.909] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.909] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.909] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.910] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.910] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.911] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.911] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.911] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.911] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.912] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.912] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.912] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.912] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.912] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.913] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.913] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.913] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.913] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.914] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.914] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.914] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.914] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.915] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.915] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.915] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.916] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.917] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.917] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.918] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.920] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.920] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.920] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.921] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.921] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.921] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.922] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.922] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.922] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.922] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.923] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.923] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.923] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.923] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.923] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.924] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.924] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.924] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.925] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.925] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.925] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.925] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.925] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.926] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.926] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.926] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.926] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.926] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.927] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.927] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.927] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.927] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.928] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.928] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.928] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.928] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.928] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.929] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.929] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.929] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.929] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.929] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.930] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.930] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.930] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.930] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.931] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.931] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.931] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.932] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.933] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.934] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.934] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.935] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.935] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.936] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.936] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.936] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.937] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.938] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.938] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.938] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.939] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0229.939] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.013] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncShell.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncshell.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncShell.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncshell.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0230.013] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncShell.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncshell.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0230.014] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncShell.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncshell.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2454520, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x2454520, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x253922a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x182cc0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncShell.dll", cAlternateFileName="FI340C~1.DLL")) returned 0x55e890 [0230.014] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2454520, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x2454520, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x253922a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x182cc0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncShell.dll", cAlternateFileName="FI340C~1.DLL")) returned 0 [0230.014] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0230.014] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncShell.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncshell.dll")) returned 1 [0230.021] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\FileSyncShell.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\filesyncshell.dll")) returned 0xffffffff [0230.021] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2538864, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd2538864, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd2538864, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="is", cAlternateFileName="")) returned 1 [0230.021] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\is\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\is\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2538864, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd2538864, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd779fe38, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0230.022] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2538864, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd2538864, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd779fe38, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0230.022] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd779fe38, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd779fe38, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xda79b1fb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x152c0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0230.039] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0230.039] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0230.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0230.039] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0230.039] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0230.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0230.039] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\LoggingPlatform.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\loggingplatform.dll")) returned 0x20 [0230.040] VirtualAlloc (lpAddress=0x6fc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x6fc000 [0230.043] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\LoggingPlatform.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\loggingplatform.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0230.043] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\LoggingPlatform.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\loggingplatform.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0230.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.060] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.062] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.063] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.063] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.063] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.063] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.064] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.064] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.064] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.064] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.065] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.065] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.065] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.065] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.066] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.066] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.067] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.067] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.067] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.067] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.068] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.068] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.068] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.068] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.069] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.069] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.069] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.069] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.070] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.070] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.070] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.071] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.071] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.072] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.072] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.072] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.073] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.073] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.073] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.074] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.074] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.074] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.075] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.075] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.075] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x8c0, lpOverlapped=0x0) returned 1 [0230.075] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x8c0, lpOverlapped=0x0) returned 1 [0230.075] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0230.075] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0230.076] CloseHandle (hObject=0x1f0) returned 1 [0230.076] CloseHandle (hObject=0x1e4) returned 1 [0230.083] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\LoggingPlatform.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\loggingplatform.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\LoggingPlatform.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\loggingplatform.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0230.084] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\LoggingPlatform.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\loggingplatform.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0230.084] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\LoggingPlatform.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\loggingplatform.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32eeba5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x32eeba5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4889ef2, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="LoggingPlatform.dll", cAlternateFileName="LOGGIN~1.DLL")) returned 0x55e5d0 [0230.084] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32eeba5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x32eeba5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4889ef2, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="LoggingPlatform.dll", cAlternateFileName="LOGGIN~1.DLL")) returned 0 [0230.084] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0230.085] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\LoggingPlatform.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\loggingplatform.dll")) returned 1 [0230.087] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\LoggingPlatform.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\loggingplatform.dll")) returned 0xffffffff [0230.089] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9739439, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf9739439, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf9739439, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="lt", cAlternateFileName="")) returned 1 [0230.090] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\lt\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\lt\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9739439, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf9739439, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfa977fad, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0230.090] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9739439, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf9739439, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfa977fad, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0230.090] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa977fad, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfa977fad, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfaefb782, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0230.091] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa977fad, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfa977fad, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfaefb782, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0230.091] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0230.091] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb006851, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb006851, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfb006851, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="lv", cAlternateFileName="")) returned 1 [0230.092] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\lv\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\lv\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb006851, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb006851, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfb3017e0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0230.092] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb006851, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb006851, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfb3017e0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0230.092] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb3017e0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb3017e0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfb622788, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0230.093] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb3017e0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb3017e0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfb622788, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0230.093] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0230.093] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb969ac6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb969ac6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfb969ac6, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="mi-nz", cAlternateFileName="")) returned 1 [0230.093] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mi-nz\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mi-nz\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb969ac6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb969ac6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfbe2e789, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0230.095] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb969ac6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb969ac6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfbe2e789, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0230.096] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe2e789, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfbe2e789, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfbfd20c1, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0230.096] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe2e789, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfbe2e789, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfbfd20c1, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0230.096] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0230.097] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc090d46, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc090d46, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfc090d46, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="mk", cAlternateFileName="")) returned 1 [0230.097] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc090d46, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc090d46, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfc2f31ae, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0230.097] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc090d46, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc090d46, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfc2f31ae, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0230.097] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2f31ae, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc2f31ae, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfc63a815, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x162c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0230.098] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2f31ae, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc2f31ae, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfc63a815, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x162c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0230.098] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0230.098] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc71f7fa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc71f7fa, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfc71f7fa, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="ml-in", cAlternateFileName="")) returned 1 [0230.099] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ml-in\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ml-in\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc71f7fa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc71f7fa, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfcf9de36, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0230.099] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc71f7fa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc71f7fa, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfcf9de36, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0230.099] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcf9de36, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfcf9de36, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfd4c8811, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x186c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0230.100] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcf9de36, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfcf9de36, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfd4c8811, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x186c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0230.100] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0230.100] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd587570, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfd587570, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfd587570, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="mn", cAlternateFileName="")) returned 1 [0230.100] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mn\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd587570, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfd587570, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfe14cdcb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0230.100] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd587570, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfd587570, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfe14cdcb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0230.100] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe14cdcb, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe14cdcb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfe388ff2, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0230.101] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe14cdcb, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe14cdcb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfe388ff2, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0230.101] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0230.102] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe46dff5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe46dff5, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfe46dff5, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="mr", cAlternateFileName="")) returned 1 [0230.102] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mr\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mr\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe46dff5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe46dff5, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfe683ed2, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0230.102] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe46dff5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe46dff5, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfe683ed2, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0230.102] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe683ed2, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe683ed2, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xff2499db, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x15cc0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0230.103] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe683ed2, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe683ed2, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xff2499db, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x15cc0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0230.103] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0230.104] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffc1f3cf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xffc1f3cf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xffc1f3cf, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="ms", cAlternateFileName="")) returned 1 [0230.104] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ms\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ms\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffc1f3cf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xffc1f3cf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xb4ba12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0230.105] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffc1f3cf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xffc1f3cf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xb4ba12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0230.105] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ba12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb4ba12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1a7e8c8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15cc0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0230.106] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ba12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb4ba12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1a7e8c8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15cc0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0230.106] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0230.106] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67fb07e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67fb07e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xae9cb73, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x6f2a0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0230.107] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0230.107] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0230.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0230.108] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0230.108] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0230.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0230.108] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcp120.dll")) returned 0x20 [0230.109] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0230.109] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0230.110] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.112] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.114] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.115] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.115] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.116] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.116] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.117] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.117] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.117] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.118] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.118] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.119] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.119] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.119] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.120] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.120] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.120] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.120] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.121] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.121] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.121] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.122] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.122] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.125] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.125] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.125] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.125] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.126] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.126] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.126] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.126] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.127] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.127] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.127] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.127] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.128] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.128] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.128] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.129] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.129] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.129] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.129] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.130] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.130] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.130] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.131] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.131] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.131] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.132] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.132] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.132] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.132] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.133] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.133] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.133] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.133] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.133] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.134] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.145] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.145] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.146] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.146] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.146] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.147] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.147] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.147] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.148] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.148] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.148] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.149] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.149] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.149] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.150] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.150] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.150] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.151] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.151] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.151] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.153] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.153] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.153] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.154] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.154] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.154] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.155] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.155] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.155] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.156] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.156] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.156] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.156] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.157] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.157] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.157] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.158] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.158] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.158] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.158] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.159] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.159] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.159] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.159] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.159] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.160] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.160] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.160] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.160] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.164] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.164] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.164] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.165] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.165] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.165] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.180] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.181] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.181] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.181] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.182] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.182] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.182] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.183] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.183] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.183] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.183] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.184] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.184] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.184] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.185] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.185] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.185] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.185] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.186] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.186] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.186] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.186] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.187] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.187] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.187] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.187] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.188] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.188] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.188] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.189] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.189] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.189] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.189] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.190] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.190] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.190] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.190] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.191] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.191] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.191] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.191] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.192] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.192] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.192] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.193] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.193] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.193] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.193] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.194] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.194] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.194] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.195] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.195] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.196] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.196] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.196] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.196] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.200] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.201] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.201] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.201] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.201] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0230.202] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2a0, lpOverlapped=0x0) returned 1 [0230.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2a0, lpOverlapped=0x0) returned 1 [0230.202] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0230.202] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0230.203] CloseHandle (hObject=0x1e4) returned 1 [0230.203] CloseHandle (hObject=0x1f0) returned 1 [0232.447] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcp120.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0232.447] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0232.447] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcp120.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67fb07e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67fb07e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xae9cb73, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x6f2a0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="msvcp120.dll", cAlternateFileName="")) returned 0x55e210 [0232.447] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67fb07e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67fb07e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xae9cb73, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x6f2a0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="msvcp120.dll", cAlternateFileName="")) returned 0 [0232.448] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0232.448] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcp120.dll")) returned 1 [0232.448] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcp120.dll")) returned 0xffffffff [0232.448] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb9ac6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbbb9ac6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xddeae4a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xed0a0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0232.449] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0232.449] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0232.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0232.449] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0232.449] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0232.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0232.449] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcr120.dll")) returned 0x20 [0232.449] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0232.450] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0232.450] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.452] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.454] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.454] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.454] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.455] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.455] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.456] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.456] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.456] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.456] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.457] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.457] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.457] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.457] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.458] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.458] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.458] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.458] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.458] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.459] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.459] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.460] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.461] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.461] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.461] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.461] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.462] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.462] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.462] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.462] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.463] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.463] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.463] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.464] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.464] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.464] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.465] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.465] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.465] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.466] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.466] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.466] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.467] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.467] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.467] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.467] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.468] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.468] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.468] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.469] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.469] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.469] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.470] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.470] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.470] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.470] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.472] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.472] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.472] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.472] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.473] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.473] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.473] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.473] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.474] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.474] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.474] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.475] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.475] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.475] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.475] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.476] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.476] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.476] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.477] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.477] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.477] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.477] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.478] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.501] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.501] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.501] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.502] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.502] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.503] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.503] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.503] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.503] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.504] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.504] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.504] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.506] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.506] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.506] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.506] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.507] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.509] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.511] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.511] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.512] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.512] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.513] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.513] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.513] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.513] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.513] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.513] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.515] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.515] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.515] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.515] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.515] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.516] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.516] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.516] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.516] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.516] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.516] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.516] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.517] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.517] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.517] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.518] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.518] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.518] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.518] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.518] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.519] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.519] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.519] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.519] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.520] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.520] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.520] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.522] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.523] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.524] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.524] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.524] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.525] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.525] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.525] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.526] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.526] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.526] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.526] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.526] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.527] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.527] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.527] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.527] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.527] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.528] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.528] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.528] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.528] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.528] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.528] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.529] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.530] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.530] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.531] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.532] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.533] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.534] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.535] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.535] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.535] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.537] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.537] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.537] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.538] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.538] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.538] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.539] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.539] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.539] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.539] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.540] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.540] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.562] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.564] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.571] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.572] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.582] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.582] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.593] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.594] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.594] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.594] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.594] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.595] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.595] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.596] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.596] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.597] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.597] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.597] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.598] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.598] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.600] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.609] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.609] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.610] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.610] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.610] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.611] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.611] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.611] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.612] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.612] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.612] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.612] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.613] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa0, lpOverlapped=0x0) returned 1 [0232.613] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa0, lpOverlapped=0x0) returned 1 [0232.613] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0232.613] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0232.613] CloseHandle (hObject=0x1f0) returned 1 [0232.613] CloseHandle (hObject=0x1e4) returned 1 [0232.913] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcr120.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0232.913] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0232.913] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcr120.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb9ac6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbbb9ac6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xddeae4a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xed0a0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="msvcr120.dll", cAlternateFileName="")) returned 0x55e490 [0232.913] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb9ac6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbbb9ac6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xddeae4a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xed0a0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="msvcr120.dll", cAlternateFileName="")) returned 0 [0232.914] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0232.914] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcr120.dll")) returned 1 [0232.925] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\msvcr120.dll")) returned 0xffffffff [0232.925] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e38526, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1e38526, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1e38526, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="mt-mt", cAlternateFileName="")) returned 1 [0232.926] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mt-mt\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mt-mt\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e38526, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1e38526, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2d4510a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0232.926] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e38526, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1e38526, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2d4510a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0232.926] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d4510a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x2d4510a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x3bb95f5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.927] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d4510a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x2d4510a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x3bb95f5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.927] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0232.927] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f00a8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3f00a8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x3f00a8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="nb-no", cAlternateFileName="")) returned 1 [0232.927] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\nb-no\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\nb-no\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f00a8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3f00a8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d8cca0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0232.928] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f00a8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3f00a8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d8cca0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.928] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d8cca0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d8cca0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6d7e5c9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x14cc0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.928] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d8cca0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d8cca0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6d7e5c9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x14cc0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.928] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0232.929] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a4f09e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7a4f09e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7a4f09e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="ne-np", cAlternateFileName="")) returned 1 [0232.929] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ne-np\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ne-np\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a4f09e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7a4f09e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8fea519, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0232.929] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a4f09e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7a4f09e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8fea519, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.929] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fea519, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8fea519, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9aa4e53, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.930] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fea519, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8fea519, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9aa4e53, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.930] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0232.930] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0c0f2f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xa0c0f2f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xa0c0f2f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="nl", cAlternateFileName="")) returned 1 [0232.930] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\nl\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\nl\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0c0f2f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xa0c0f2f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xacd2f90, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0232.931] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0c0f2f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xa0c0f2f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xacd2f90, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.931] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacd2f90, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xacd2f90, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb5515c4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.935] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacd2f90, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xacd2f90, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb5515c4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.936] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0232.936] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5515c4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb5515c4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb5515c4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="nn-no", cAlternateFileName="")) returned 1 [0232.936] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\nn-no\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\nn-no\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5515c4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb5515c4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xbd5d4c4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0232.936] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5515c4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb5515c4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xbd5d4c4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.936] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd5d4c4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbd5d4c4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xc2484cb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x14cc0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.937] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd5d4c4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbd5d4c4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xc2484cb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x14cc0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.937] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0232.937] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc593d87, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc593d87, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xc593d87, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="nso-za", cAlternateFileName="")) returned 1 [0232.937] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\nso-za\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\nso-za\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc593d87, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc593d87, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xc88a52c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0232.939] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc593d87, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc593d87, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xc88a52c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.939] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc88a52c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc88a52c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xd4e8897, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x16cc0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.940] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc88a52c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc88a52c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xd4e8897, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x16cc0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.940] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0232.940] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f40d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe50f40d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xefa8864, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x5d4c0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="OneDrive.exe", cAlternateFileName="")) returned 1 [0232.940] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd63fe7d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xd63fe7d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xd63fe7d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c0000, dwReserved1=0x696c6163, cFileName="or-in", cAlternateFileName="")) returned 1 [0232.940] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\or-in\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\or-in\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd63fe7d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xd63fe7d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xdb049b8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0232.941] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd63fe7d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xd63fe7d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xdb049b8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.941] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb049b8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xdb049b8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xdee5c50, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.942] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb049b8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xdb049b8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xdee5c50, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.942] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0232.942] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee5c50, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xdee5c50, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xdee5c50, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="pa", cAlternateFileName="")) returned 1 [0232.942] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pa\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pa\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee5c50, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xdee5c50, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xe640666, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0232.942] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee5c50, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xdee5c50, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xe640666, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.942] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe640666, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe640666, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xe6d91fe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.943] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe640666, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe640666, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xe6d91fe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.943] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0232.943] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d91fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe6d91fe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xe6d91fe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="pa-arab", cAlternateFileName="")) returned 1 [0232.944] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pa-arab\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pa-arab\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d91fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe6d91fe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xedb3e67, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0232.944] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d91fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe6d91fe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xedb3e67, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.944] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb3e67, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xedb3e67, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xfb947ac, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.945] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb3e67, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xedb3e67, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xfb947ac, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.945] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0232.945] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc5962, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xfcc5962, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xfcc5962, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="pa-arab-pk", cAlternateFileName="PA-ARA~1")) returned 1 [0232.945] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pa-arab-pk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pa-arab-pk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc5962, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xfcc5962, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x103c6b62, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0232.945] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc5962, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xfcc5962, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x103c6b62, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.945] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103c6b62, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x103c6b62, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1083ed90, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.946] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103c6b62, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x103c6b62, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1083ed90, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.946] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0232.947] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10bd26fa, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x10bd26fa, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x10bd26fa, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="pl", cAlternateFileName="")) returned 1 [0232.947] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pl\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pl\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10bd26fa, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x10bd26fa, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1102b950, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0232.947] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10bd26fa, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x10bd26fa, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1102b950, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.947] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1102b950, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1102b950, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1149d5d9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x16ec0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.948] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1102b950, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1102b950, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1149d5d9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x16ec0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.948] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0232.948] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x116ff8a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x116ff8a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x116ff8a5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="prs-af", cAlternateFileName="")) returned 1 [0232.948] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\prs-af\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\prs-af\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x116ff8a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x116ff8a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x11e72c7e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0232.949] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x116ff8a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x116ff8a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x11e72c7e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.949] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11e72c7e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x11e72c7e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x12ba82ea, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.949] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11e72c7e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x11e72c7e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x12ba82ea, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.949] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0232.950] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x130c8fc0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x130c8fc0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x130c8fc0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="pt-br", cAlternateFileName="")) returned 1 [0232.950] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pt-br\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pt-br\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x130c8fc0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x130c8fc0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x133517d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0232.950] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x130c8fc0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x130c8fc0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x133517d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.950] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x133517d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x133517d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x135ad91f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.951] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x133517d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x133517d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x135ad91f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.951] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0232.951] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13646246, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13646246, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x13646246, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="pt-pt", cAlternateFileName="")) returned 1 [0232.951] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pt-pt\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pt-pt\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13646246, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13646246, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x13967473, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0232.952] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13646246, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13646246, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x13967473, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.952] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13967473, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13967473, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x13e071a6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.953] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13967473, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13967473, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x13e071a6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.953] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0232.953] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13e9e78d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13e9e78d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x13e9e78d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="qut-latn", cAlternateFileName="")) returned 1 [0232.953] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\qut-latn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\qut-latn\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13e9e78d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13e9e78d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x141bf6d6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0232.953] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13e9e78d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13e9e78d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x141bf6d6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.953] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141bf6d6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x141bf6d6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1489a4b4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x17ec0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.954] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141bf6d6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x141bf6d6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1489a4b4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x17ec0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.954] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0232.954] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14933008, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x14933008, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x14933008, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="quz-pe", cAlternateFileName="")) returned 1 [0232.954] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\quz-pe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\quz-pe\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14933008, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x14933008, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x14b24ea6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0232.955] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14933008, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x14933008, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x14b24ea6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0232.955] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14b24ea6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x14b24ea6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x16a608f5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x168c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0232.956] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14b24ea6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x14b24ea6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x16a608f5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x168c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0232.956] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0232.956] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1018a7a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1018a7a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1149d5d9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xa0ec0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="RemoteAccess.dll", cAlternateFileName="REMOTE~1.DLL")) returned 1 [0232.956] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0232.956] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0232.956] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0232.956] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0232.956] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0232.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0232.957] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\RemoteAccess.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\remoteaccess.dll")) returned 0x20 [0232.957] VirtualAlloc (lpAddress=0x700000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x700000 [0232.958] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\RemoteAccess.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\remoteaccess.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0232.958] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\RemoteAccess.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\remoteaccess.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0232.958] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.960] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.963] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.963] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.963] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.964] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.964] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.965] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.965] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.965] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.966] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.967] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.967] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.967] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.968] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.968] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.968] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.968] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.969] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.969] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.975] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.975] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.975] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.976] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.976] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.976] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.977] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.977] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.977] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.978] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.978] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.978] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.978] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.979] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.979] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.979] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.980] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.980] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.980] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.981] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.981] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.981] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.981] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.982] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.982] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.982] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.983] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.983] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.983] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.983] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.983] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.984] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.984] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.984] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.985] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.985] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.985] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.985] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.985] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.985] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.986] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.986] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.986] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.986] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.986] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.987] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.987] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.987] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.987] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.988] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.988] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.988] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.989] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.990] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.990] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.991] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.991] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.991] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.992] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.992] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.992] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.992] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.993] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.993] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.993] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.995] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.995] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.995] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.996] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.996] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.996] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.997] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.997] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.997] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.997] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.998] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.998] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.998] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.999] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0232.999] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.000] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.000] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.001] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.001] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.001] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.001] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.002] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.002] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.002] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.002] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.002] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.003] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.003] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.003] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.003] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.003] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.004] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.004] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.004] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.004] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.005] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.005] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.005] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.005] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.005] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.006] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.006] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.007] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.008] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.009] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.009] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.010] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.010] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.010] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.010] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.011] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.011] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.011] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.012] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.012] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.012] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.013] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.013] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.013] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.013] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.013] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.014] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.014] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.014] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.015] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.015] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.015] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.015] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.016] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.016] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.016] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.017] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.017] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.017] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.018] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.018] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.018] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.019] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.019] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.019] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.020] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.020] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.020] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.022] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.022] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.022] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.026] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.027] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.027] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.028] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.028] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.028] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.029] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.029] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.030] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.030] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.030] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.030] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.030] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.031] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.031] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.031] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.031] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.032] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.032] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.032] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.033] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.033] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.033] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.034] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.034] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.034] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.035] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.036] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.036] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.036] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.037] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.037] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.037] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.038] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.038] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.039] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.039] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.039] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.040] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.041] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.041] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.041] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.042] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.042] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.043] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.043] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.044] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.044] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.045] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.045] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.045] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.046] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.046] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.047] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.047] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.047] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.047] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.047] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.048] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.048] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.048] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.048] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.048] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.049] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.049] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.049] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.049] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xec0, lpOverlapped=0x0) returned 1 [0233.050] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xec0, lpOverlapped=0x0) returned 1 [0233.050] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0233.050] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0233.050] CloseHandle (hObject=0x1e4) returned 1 [0233.050] CloseHandle (hObject=0x1f0) returned 1 [0233.252] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\RemoteAccess.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\remoteaccess.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\RemoteAccess.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\remoteaccess.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0233.252] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\RemoteAccess.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\remoteaccess.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0233.252] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\RemoteAccess.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\remoteaccess.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1018a7a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1018a7a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1149d5d9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xa0ec0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="RemoteAccess.dll", cAlternateFileName="REMOTE~1.DLL")) returned 0x55e710 [0233.253] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1018a7a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1018a7a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1149d5d9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xa0ec0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="RemoteAccess.dll", cAlternateFileName="REMOTE~1.DLL")) returned 0 [0233.253] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0233.253] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\RemoteAccess.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\remoteaccess.dll")) returned 1 [0233.271] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\RemoteAccess.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\remoteaccess.dll")) returned 0xffffffff [0233.271] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16b45b0a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x16b45b0a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x16b45b0a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="ro", cAlternateFileName="")) returned 1 [0233.271] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ro\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ro\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16b45b0a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x16b45b0a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x170a2d96, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0233.271] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16b45b0a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x16b45b0a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x170a2d96, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0233.271] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170a2d96, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x170a2d96, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x17292a39, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0233.272] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170a2d96, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x170a2d96, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x17292a39, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0233.272] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0233.273] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x172deef5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x172deef5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x172deef5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="ru", cAlternateFileName="")) returned 1 [0233.273] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ru\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ru\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x172deef5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x172deef5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x174cef11, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0233.273] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x172deef5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x172deef5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x174cef11, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0233.273] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x174cef11, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x174cef11, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x17ac4b94, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0233.274] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x174cef11, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x174cef11, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x17ac4b94, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0233.274] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0233.279] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bf5de5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x17bf5de5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x17bf5de5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="rw", cAlternateFileName="")) returned 1 [0233.279] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\rw\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\rw\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bf5de5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x17bf5de5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1954aec9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0233.279] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bf5de5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x17bf5de5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1954aec9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0233.279] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1954aec9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1954aec9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1986bebc, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0233.280] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1954aec9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1954aec9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1986bebc, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0233.280] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0233.281] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x126710a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x126710a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x130c8fc0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x124b, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="ScreenshotLogo.png", cAlternateFileName="SCREEN~1.PNG")) returned 1 [0233.281] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0233.281] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0233.281] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0233.281] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0233.281] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0233.282] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0233.282] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotlogo.png")) returned 0x20 [0233.282] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotlogo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0233.282] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotlogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0233.283] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.285] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.287] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x24b, lpOverlapped=0x0) returned 1 [0233.287] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x24b, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x24b, lpOverlapped=0x0) returned 1 [0233.287] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0233.287] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0233.287] CloseHandle (hObject=0x1f0) returned 1 [0233.287] CloseHandle (hObject=0x1e4) returned 1 [0233.289] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotlogo.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotlogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0233.289] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotlogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0233.289] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotlogo.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x126710a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x126710a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x130c8fc0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x124b, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ScreenshotLogo.png", cAlternateFileName="SCREEN~1.PNG")) returned 0x55e390 [0233.289] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x126710a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x126710a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x130c8fc0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x124b, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ScreenshotLogo.png", cAlternateFileName="SCREEN~1.PNG")) returned 0 [0233.290] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0233.290] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotlogo.png")) returned 1 [0233.296] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotlogo.png")) returned 0xffffffff [0233.296] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1347c6a3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1347c6a3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x140b472d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x6c00a, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="ScreenshotOptIn.png", cAlternateFileName="SCREEN~2.PNG")) returned 1 [0233.297] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0233.297] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0233.297] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0233.297] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0233.298] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0233.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0233.298] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotoptin.png")) returned 0x20 [0233.298] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotoptin.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0233.298] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0233.299] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.302] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.303] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.304] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.304] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.305] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.305] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.305] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.305] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.306] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.306] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.306] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.307] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.307] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.307] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.307] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.308] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.308] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.308] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.308] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.308] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.309] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.309] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.309] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.309] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.309] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.310] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.310] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.310] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.312] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.313] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.313] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.313] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.313] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.314] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.314] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.315] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.315] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.315] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.315] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.315] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.316] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.316] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.316] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.316] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.317] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.317] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.317] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.317] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.317] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.318] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.318] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.318] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.318] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.319] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.319] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.319] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.319] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.319] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.320] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.320] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.320] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.320] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.321] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.321] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.321] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.321] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.321] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.322] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.322] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.322] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.322] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.322] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.323] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.323] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.323] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.324] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.324] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.324] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.324] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.324] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.325] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.325] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.326] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.326] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.328] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.328] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.329] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.329] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.330] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.330] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.330] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.330] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.331] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.331] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.331] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.331] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.331] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.332] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.332] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.332] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.332] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.332] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.333] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.333] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.333] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.333] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.334] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.334] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.334] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.335] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.335] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.335] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.337] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.337] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.342] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.342] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.343] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.343] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.343] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.343] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.344] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.344] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.344] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.344] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.344] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.345] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.345] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.345] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.346] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.346] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.346] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.346] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.346] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.347] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.347] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.347] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.348] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.348] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.348] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.349] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.349] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.349] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.350] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.350] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.350] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.350] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.351] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.351] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.351] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.352] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.352] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.352] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.352] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.353] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.353] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.354] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.354] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.355] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.355] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.356] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.356] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.356] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.356] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.357] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.357] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.357] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.357] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.357] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.358] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.358] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.358] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.358] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.359] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.359] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.359] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.359] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.359] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.360] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.360] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa, lpOverlapped=0x0) returned 1 [0233.360] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa, lpOverlapped=0x0) returned 1 [0233.360] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0233.361] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0233.361] CloseHandle (hObject=0x1e4) returned 1 [0233.361] CloseHandle (hObject=0x1f0) returned 1 [0233.375] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotoptin.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0233.375] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0233.375] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotoptin.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1347c6a3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1347c6a3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x140b472d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x6c00a, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ScreenshotOptIn.png", cAlternateFileName="SCREEN~2.PNG")) returned 0x55e710 [0233.376] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1347c6a3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1347c6a3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x140b472d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x6c00a, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ScreenshotOptIn.png", cAlternateFileName="SCREEN~2.PNG")) returned 0 [0233.376] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0233.376] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotoptin.png")) returned 1 [0233.381] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ScreenshotOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\screenshotoptin.png")) returned 0xffffffff [0233.381] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1986bebc, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1986bebc, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1986bebc, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="sd-arab", cAlternateFileName="")) returned 1 [0233.381] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sd-arab\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sd-arab\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1986bebc, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1986bebc, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1aec60c3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0233.382] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1986bebc, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1986bebc, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1aec60c3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0233.382] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aec60c3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1aec60c3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1bb96a1e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0233.383] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aec60c3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1aec60c3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1bb96a1e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 0 [0233.383] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0233.383] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bc7bb71, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1bc7bb71, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1bc7bb71, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="sd-arab-pk", cAlternateFileName="SD-ARA~1")) returned 1 [0233.383] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sd-arab-pk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sd-arab-pk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bc7bb71, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1bc7bb71, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1bc7bb71, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0233.388] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bc7bb71, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1bc7bb71, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1bc7bb71, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 1 [0233.388] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bc7bb71, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1bc7bb71, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1bc7bb71, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="..", cAlternateFileName="")) returned 0 [0233.388] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0233.388] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1478f592, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1478f592, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x149cb731, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2ff40, dwReserved0=0x6f4c2e63, dwReserved1=0x696c6163, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0233.388] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0233.388] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0233.388] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0233.388] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0233.389] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0233.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0233.389] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sqmapi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmapi.dll")) returned 0x20 [0233.389] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sqmapi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0233.389] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sqmapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0233.390] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.431] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.432] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.444] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.444] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.444] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.445] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.445] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.445] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.445] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.446] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.446] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.446] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.498] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.499] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.499] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.499] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.499] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.500] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.500] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.500] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.500] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.500] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.501] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.501] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.501] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.501] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.502] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.502] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.502] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.502] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.502] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.503] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.503] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.504] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.504] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.504] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.505] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.506] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.506] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.506] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.507] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.507] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.507] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.507] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.507] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.508] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.508] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.508] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.508] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.509] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.509] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.509] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.510] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.510] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.511] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.511] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.511] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.512] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.512] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.513] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.513] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.513] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.513] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.514] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.515] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.515] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.515] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.515] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.516] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.516] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.516] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xf40, lpOverlapped=0x0) returned 1 [0233.516] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xf40, lpOverlapped=0x0) returned 1 [0233.517] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0233.517] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0233.517] CloseHandle (hObject=0x1f0) returned 1 [0233.517] CloseHandle (hObject=0x1e4) returned 1 [0233.529] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sqmapi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmapi.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sqmapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0233.535] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sqmapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0233.536] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sqmapi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmapi.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1478f592, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1478f592, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x149cb731, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2ff40, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0x55e490 [0233.536] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1478f592, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1478f592, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x149cb731, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2ff40, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0233.537] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0233.537] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sqmapi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmapi.dll")) returned 1 [0233.540] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sqmapi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmapi.dll")) returned 0xffffffff [0233.540] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16909517, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x16909517, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x16c7693c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="SqmWrapper.dll", cAlternateFileName="SQMWRA~1.DLL")) returned 1 [0233.540] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0233.540] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0233.541] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0233.542] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0233.542] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0233.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0233.542] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SqmWrapper.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmwrapper.dll")) returned 0x20 [0233.542] VirtualAlloc (lpAddress=0x704000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x704000 [0233.543] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SqmWrapper.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmwrapper.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0233.543] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SqmWrapper.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmwrapper.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0233.543] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.546] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.547] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.547] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.547] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.548] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.548] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.548] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.548] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.549] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.549] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.549] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.549] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.549] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xac0, lpOverlapped=0x0) returned 1 [0233.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xac0, lpOverlapped=0x0) returned 1 [0233.550] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0233.550] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0233.550] CloseHandle (hObject=0x1e4) returned 1 [0233.550] CloseHandle (hObject=0x1f0) returned 1 [0233.552] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SqmWrapper.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmwrapper.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SqmWrapper.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmwrapper.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0233.552] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SqmWrapper.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmwrapper.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0233.552] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SqmWrapper.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmwrapper.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16909517, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x16909517, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x16c7693c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="SqmWrapper.dll", cAlternateFileName="SQMWRA~1.DLL")) returned 0x55e5d0 [0233.552] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16909517, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x16909517, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x16c7693c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="SqmWrapper.dll", cAlternateFileName="SQMWRA~1.DLL")) returned 0 [0233.553] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0233.553] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SqmWrapper.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmwrapper.dll")) returned 1 [0233.554] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SqmWrapper.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sqmwrapper.dll")) returned 0xffffffff [0233.554] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17410332, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x17410332, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1c297983, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x130000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="SyncEngine.dll", cAlternateFileName="SYNCEN~1.DLL")) returned 1 [0233.554] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0233.554] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0233.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0233.557] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0233.557] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0233.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0233.557] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SyncEngine.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\syncengine.dll")) returned 0x20 [0233.558] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SyncEngine.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\syncengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0233.558] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SyncEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\syncengine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0233.558] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.561] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.563] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.564] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.564] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.565] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.565] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.565] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.566] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.566] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.566] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.566] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.566] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.567] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.568] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.570] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.574] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.575] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.576] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.577] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.578] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.579] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.580] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.581] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.582] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.582] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.582] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.582] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.583] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.584] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.585] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.586] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.587] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.588] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.589] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.590] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.591] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.592] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.595] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.595] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.596] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.596] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.596] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.596] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.597] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.597] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.597] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.597] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.598] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.598] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.598] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.598] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.599] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.601] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.603] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.604] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.604] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.604] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.605] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.605] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.605] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.606] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.606] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.608] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.608] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.609] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.609] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.617] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.618] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.619] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.619] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.619] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.620] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.620] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.620] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.620] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.620] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.621] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.621] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.622] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.623] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.623] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.623] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.623] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.624] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.625] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.625] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.626] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.626] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.626] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.626] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.626] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.626] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.627] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.627] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.632] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.632] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.632] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.632] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.633] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.633] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.634] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.637] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.637] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.637] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.637] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.638] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.638] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.638] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.638] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.639] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.639] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.639] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.639] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.639] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.639] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.640] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.640] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.640] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.640] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.641] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.641] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.641] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.641] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.641] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.641] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.642] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.642] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.642] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.643] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.643] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.643] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.643] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.644] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.644] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.644] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.645] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.646] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.646] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.646] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.646] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.647] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.647] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.647] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.647] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.647] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.648] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.648] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.648] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.648] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.649] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.649] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.650] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.650] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.650] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.653] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.653] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.654] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.654] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.654] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.655] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.655] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.655] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.655] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.656] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.656] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.656] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.657] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.657] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.658] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.658] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.658] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.659] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.659] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.659] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.659] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.660] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.660] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.660] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.660] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.661] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.661] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.661] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.661] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.662] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.662] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.662] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.662] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.663] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.663] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.663] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.663] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.664] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.664] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.664] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.665] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.665] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.665] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.665] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.666] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.705] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.705] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.706] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.706] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.706] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.706] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.707] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.707] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.707] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.707] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.708] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.708] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.708] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.708] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.709] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.709] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.709] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.709] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.709] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.710] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.710] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.710] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.710] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.711] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.711] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.712] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.712] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.712] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.712] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.719] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.720] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.721] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.721] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.721] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.721] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.722] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.722] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.722] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.753] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.754] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.754] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.754] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.754] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.755] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.755] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.755] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.755] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.755] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.756] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.756] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.756] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.756] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.757] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.758] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.758] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.761] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.761] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.761] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.762] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.762] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.762] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.762] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.763] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.763] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.763] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.763] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.764] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.764] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.764] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.764] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.765] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.765] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.765] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.765] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.766] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.766] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.766] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.766] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.766] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.766] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.767] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.767] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.767] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.767] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.767] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.768] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.768] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.768] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.769] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.769] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.769] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.769] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.769] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.770] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.770] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.770] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.770] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0233.992] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SyncEngine.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\syncengine.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SyncEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\syncengine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0233.993] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SyncEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\syncengine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0233.993] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SyncEngine.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\syncengine.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17410332, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x17410332, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1c297983, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x130000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="SyncEngine.dll", cAlternateFileName="SYNCEN~1.DLL")) returned 0x55e5d0 [0233.993] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17410332, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x17410332, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1c297983, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x130000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="SyncEngine.dll", cAlternateFileName="SYNCEN~1.DLL")) returned 0 [0233.993] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0233.994] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SyncEngine.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\syncengine.dll")) returned 1 [0233.997] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\SyncEngine.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\syncengine.dll")) returned 0xffffffff [0233.997] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17410332, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x17410332, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1c297983, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x130000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="SyncEngine.dll", cAlternateFileName="SYNCEN~1.DLL")) returned 0 [0233.997] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0233.997] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4be92b64, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6abcad0b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6aeebefe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e656e69, dwReserved1=0x6e6c6c64, cFileName="17.3.5892.0626_3", cAlternateFileName="173589~4.062")) returned 1 [0233.997] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4be92b64, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6abcad0b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6aeebefe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0234.000] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4be92b64, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6abcad0b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6aeebefe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0234.001] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6915b22f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6915b22f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6915b22f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="af", cAlternateFileName="")) returned 1 [0234.002] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\af\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\af\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6915b22f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6915b22f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x693e3c42, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0234.002] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6915b22f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6915b22f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x693e3c42, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0234.002] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x693e3c42, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x693e3c42, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6969295c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x158c0, dwReserved0=0x563b90, dwReserved1=0x24000a2e, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0234.006] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0234.006] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0234.007] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0234.007] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0234.007] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\amd64\\filesyncapi64.dll")) returned 0x20 [0234.007] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\amd64\\filesyncapi64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0234.008] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\amd64\\FileSyncApi64.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\amd64\\filesyncapi64.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0234.008] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.112] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.115] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.116] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.116] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.117] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.117] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.117] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.118] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.118] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.118] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.119] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.119] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.119] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.120] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.120] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.121] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.121] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.121] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.122] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.122] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.122] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.122] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.123] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.123] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.124] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.124] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.124] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.125] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.125] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.125] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.125] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.126] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.126] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.126] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.126] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.126] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.127] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.127] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.127] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.139] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.139] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.140] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.140] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.141] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.141] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.141] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.142] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.142] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.143] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.143] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.143] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.144] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.144] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.144] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.144] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.145] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.145] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.145] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.146] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.146] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.146] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.147] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.147] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.147] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.148] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.148] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.149] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.149] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.149] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.149] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.150] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.150] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.150] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.150] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.151] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.151] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.151] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.151] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.152] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.152] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.152] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.152] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.153] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.153] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.153] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0234.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0234.153] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0234.154] CloseHandle (hObject=0x1f0) returned 1 [0234.154] CloseHandle (hObject=0x1f4) returned 1 [0234.160] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\amd64\\filesyncapi64.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\amd64\\FileSyncApi64.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\amd64\\filesyncapi64.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0234.160] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\amd64\\FileSyncApi64.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\amd64\\filesyncapi64.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0234.160] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\amd64\\filesyncapi64.dll"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ae5336a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6ae5336a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6b71df77, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x550340, dwReserved1=0x6, cFileName="FileSyncApi64.dll", cAlternateFileName="FILESY~1.DLL")) returned 0x55e5d0 [0234.160] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ae5336a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6ae5336a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6b71df77, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x550340, dwReserved1=0x6, cFileName="FileSyncApi64.dll", cAlternateFileName="FILESY~1.DLL")) returned 0 [0234.160] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0234.161] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\amd64\\filesyncapi64.dll")) returned 1 [0234.163] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\amd64\\filesyncapi64.dll")) returned 0xffffffff [0234.163] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ae5336a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6ae5336a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6b71df77, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x6c0061, dwReserved1=0x7a0069, cFileName="FileSyncApi64.dll", cAlternateFileName="FILESY~1.DLL")) returned 0 [0234.163] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0234.164] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c2263c9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4c2263c9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c416268, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x69704163, dwReserved1=0x642e3436, cFileName="AutoPlayLogo.png", cAlternateFileName="AUTOPL~1.PNG")) returned 1 [0234.164] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0234.164] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0234.164] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0234.164] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0234.164] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplaylogo.png")) returned 0x20 [0234.165] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplaylogo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0234.165] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplaylogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0234.165] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.170] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.171] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x23c, lpOverlapped=0x0) returned 1 [0234.171] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x23c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x23c, lpOverlapped=0x0) returned 1 [0234.171] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0234.171] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0234.171] CloseHandle (hObject=0x1e4) returned 1 [0234.171] CloseHandle (hObject=0x1f4) returned 1 [0234.172] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplaylogo.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplaylogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0234.172] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplaylogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0234.173] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplaylogo.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c2263c9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4c2263c9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c416268, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayLogo.png", cAlternateFileName="AUTOPL~1.PNG")) returned 0x55e510 [0234.173] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c2263c9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4c2263c9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c416268, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayLogo.png", cAlternateFileName="AUTOPL~1.PNG")) returned 0 [0234.173] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0234.173] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplaylogo.png")) returned 1 [0234.174] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplaylogo.png")) returned 0xffffffff [0234.174] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c711399, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4c711399, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4efe5598, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 1 [0234.174] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0234.174] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.176] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0234.176] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0234.176] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.176] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0234.176] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.gif")) returned 0x20 [0234.177] VirtualAlloc (lpAddress=0x708000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x708000 [0234.178] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0234.178] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0234.178] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.180] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.182] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.183] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.183] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.183] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.183] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.184] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.184] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.185] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.185] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.185] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.185] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.185] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.186] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.186] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.186] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.186] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.186] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.187] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.187] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.187] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.187] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.187] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.187] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.188] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.188] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.188] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.188] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.189] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.189] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.189] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.191] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.191] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.191] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.191] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.191] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.192] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.192] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.192] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.192] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.192] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.192] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.193] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.193] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.193] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.193] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.193] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.194] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.194] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.194] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.194] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.194] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.195] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.195] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.195] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.195] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.195] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.195] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.196] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.196] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.196] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.196] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.196] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.197] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.197] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.197] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.198] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.198] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.198] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.198] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.198] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.199] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.199] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.199] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.199] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.199] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.199] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.200] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.200] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.200] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.200] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.200] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.201] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.201] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.201] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.201] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.201] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.202] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.202] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.202] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.202] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.202] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.203] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.203] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.203] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.204] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.204] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.204] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.204] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.205] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.205] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.205] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.205] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.205] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.206] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.206] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.206] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.207] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.207] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.207] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.207] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.207] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.207] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.208] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.208] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.208] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.208] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.208] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.209] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.209] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.209] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.209] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.209] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.210] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.210] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.210] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.210] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.210] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.210] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.211] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.212] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.212] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.212] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.212] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.212] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.213] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.215] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.215] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.215] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.216] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.216] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.216] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.216] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.216] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.217] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.217] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.217] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.217] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.217] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.217] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.218] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.218] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.219] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.219] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.219] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.219] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.220] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.220] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.220] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.220] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.220] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.221] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.221] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.221] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.221] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.221] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.222] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.222] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.222] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.222] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.222] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.223] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.223] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.223] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.223] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.223] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.224] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.224] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.224] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.224] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.224] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.225] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.225] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x8f6, lpOverlapped=0x0) returned 1 [0234.225] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x8f6, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x8f6, lpOverlapped=0x0) returned 1 [0234.225] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0234.225] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0234.225] CloseHandle (hObject=0x1f4) returned 1 [0234.225] CloseHandle (hObject=0x1e4) returned 1 [0234.236] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0234.237] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0234.237] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.gif"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c711399, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4c711399, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4efe5598, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 0x55e390 [0234.237] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c711399, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4c711399, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4efe5598, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.gif", cAlternateFileName="AUTOPL~1.GIF")) returned 0 [0234.237] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0234.237] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.gif")) returned 1 [0234.241] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.gif")) returned 0xffffffff [0234.242] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f7329ea, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4f7329ea, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4f7cb58f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~2.PNG")) returned 1 [0234.242] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0234.242] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.242] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0234.242] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0234.242] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.243] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0234.243] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.png")) returned 0x20 [0234.244] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0234.244] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0234.245] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.247] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.248] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.279] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.280] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x7f2, lpOverlapped=0x0) returned 1 [0234.280] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x7f2, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x7f2, lpOverlapped=0x0) returned 1 [0234.280] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0234.280] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0234.280] CloseHandle (hObject=0x1e4) returned 1 [0234.280] CloseHandle (hObject=0x1f4) returned 1 [0234.281] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0234.281] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0234.281] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f7329ea, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4f7329ea, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4f7cb58f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~2.PNG")) returned 0x55e910 [0234.281] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f7329ea, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4f7329ea, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4f7cb58f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AutoPlayOptIn.png", cAlternateFileName="AUTOPL~2.PNG")) returned 0 [0234.281] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0234.281] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.png")) returned 1 [0234.282] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\AutoPlayOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\autoplayoptin.png")) returned 0xffffffff [0234.283] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f863ecc, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4f863ecc, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4f8fc8ef, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="CollectOneDriveLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 1 [0234.283] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0234.283] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.283] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0234.283] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0234.283] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.283] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0234.283] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\collectonedrivelogs.bat")) returned 0x20 [0234.284] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\collectonedrivelogs.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0234.284] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\collectonedrivelogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0234.284] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.286] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.287] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x6da, lpOverlapped=0x0) returned 1 [0234.287] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x6da, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x6da, lpOverlapped=0x0) returned 1 [0234.288] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0234.288] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0234.288] CloseHandle (hObject=0x1f4) returned 1 [0234.288] CloseHandle (hObject=0x1e4) returned 1 [0234.288] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\collectonedrivelogs.bat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\collectonedrivelogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0234.288] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\collectonedrivelogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0234.288] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\collectonedrivelogs.bat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f863ecc, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4f863ecc, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4f8fc8ef, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x550340, dwReserved1=0x6, cFileName="CollectOneDriveLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 0x55e5d0 [0234.289] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f863ecc, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4f863ecc, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4f8fc8ef, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x550340, dwReserved1=0x6, cFileName="CollectOneDriveLogs.bat", cAlternateFileName="COLLEC~1.BAT")) returned 0 [0234.289] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0234.289] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\collectonedrivelogs.bat")) returned 1 [0234.290] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\collectonedrivelogs.bat")) returned 0xffffffff [0234.290] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96ed39, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4f96ed39, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4fa075cf, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ETWlog.dll", cAlternateFileName="")) returned 1 [0234.290] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0234.290] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.290] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0234.290] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0234.290] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.290] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0234.290] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\etwlog.dll")) returned 0x20 [0234.291] VirtualAlloc (lpAddress=0x70c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x70c000 [0234.291] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\etwlog.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0234.291] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\etwlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0234.292] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.293] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.294] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.295] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.295] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.295] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.295] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.295] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.295] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.296] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.296] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.296] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.296] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.296] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.296] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2c0, lpOverlapped=0x0) returned 1 [0234.296] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2c0, lpOverlapped=0x0) returned 1 [0234.297] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0234.297] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0234.297] CloseHandle (hObject=0x1e4) returned 1 [0234.297] CloseHandle (hObject=0x1f4) returned 1 [0234.298] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\etwlog.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\etwlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0234.298] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\etwlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0234.298] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\etwlog.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96ed39, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4f96ed39, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4fa075cf, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ETWlog.dll", cAlternateFileName="")) returned 0x55e1d0 [0234.298] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f96ed39, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4f96ed39, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4fa075cf, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ETWlog.dll", cAlternateFileName="")) returned 0 [0234.298] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0234.298] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\etwlog.dll")) returned 1 [0234.299] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ETWlog.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\etwlog.dll")) returned 0xffffffff [0234.300] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fa075cf, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4fa075cf, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4fc43cb2, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ExclusionList.xml", cAlternateFileName="EXCLUS~1.XML")) returned 1 [0234.300] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501ed543, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x501ed543, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x50390d5d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x2e0074, dwReserved1=0x6d0078, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 1 [0234.300] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0234.300] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0234.300] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0234.300] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.301] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0234.301] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.localizedresources.dll")) returned 0x20 [0234.301] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.localizedresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0234.301] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.localizedresources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0234.302] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.304] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.305] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.328] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.328] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.328] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.328] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.329] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.329] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.329] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.329] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.330] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.330] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.330] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.330] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.330] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.331] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.331] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.331] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.331] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.332] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.332] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.332] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.332] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.332] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.333] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.333] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.333] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.333] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.334] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.334] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.334] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.334] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.334] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.335] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.335] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.335] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.335] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.336] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.336] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.336] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xc0, lpOverlapped=0x0) returned 1 [0234.336] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xc0, lpOverlapped=0x0) returned 1 [0234.336] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0234.336] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0234.336] CloseHandle (hObject=0x1f4) returned 1 [0234.337] CloseHandle (hObject=0x1e4) returned 1 [0234.341] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.localizedresources.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.localizedresources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0234.342] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.localizedresources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0234.342] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.localizedresources.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501ed543, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x501ed543, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x50390d5d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 0x55e8d0 [0234.342] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501ed543, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x501ed543, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x50390d5d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="FileSync.LocalizedResources.dll", cAlternateFileName="FILESY~1.DLL")) returned 0 [0234.342] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0234.342] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.localizedresources.dll")) returned 1 [0234.344] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.localizedresources.dll")) returned 0xffffffff [0234.344] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50390d5d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x50390d5d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x505a6c82, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 1 [0234.345] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0234.345] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.345] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0234.345] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0234.345] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0234.345] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0234.345] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.resources.dll")) returned 0x20 [0234.346] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.resources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0234.347] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0234.347] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.415] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.417] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.485] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.485] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.485] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.486] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.486] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.486] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.486] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.487] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.487] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.487] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.487] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.487] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.488] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.488] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.488] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.488] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.488] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.489] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.489] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.489] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.489] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.489] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.490] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.490] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.490] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.490] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.491] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.491] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.491] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.491] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.492] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.492] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.492] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.492] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.492] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.493] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.493] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.493] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.493] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.494] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.494] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.494] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.494] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.495] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.495] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.495] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.495] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.496] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.496] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.496] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.496] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.496] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.497] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.497] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.497] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.497] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.497] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.498] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.498] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.498] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.498] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.498] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.499] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.499] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.499] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.499] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.499] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.500] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.500] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.500] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.500] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.500] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.501] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.501] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.501] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.501] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.501] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.502] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.502] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.502] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.502] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.503] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.503] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.503] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.503] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.503] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.504] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.504] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.504] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.504] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.504] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.505] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.505] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.505] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.586] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.587] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.587] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.587] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.587] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.588] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.588] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.589] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.589] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.589] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.589] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.589] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.589] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.590] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.590] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.590] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.590] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.591] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.591] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.591] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.591] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.591] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.591] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.592] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.592] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.592] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.592] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.592] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.593] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.593] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.593] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.593] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.593] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.595] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.595] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.595] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.595] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.595] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.596] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.596] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.596] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.596] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.596] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.597] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.597] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.597] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.597] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.597] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.597] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.598] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.598] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.598] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.598] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.599] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.599] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.599] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.599] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.599] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.600] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.600] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.600] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.600] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.600] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.601] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.706] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.707] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.707] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.707] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.707] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.708] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.708] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.708] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.708] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.708] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.709] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.709] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.709] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.709] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.709] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.710] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.710] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.710] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.710] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.710] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.711] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.711] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.711] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.711] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.711] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.712] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.712] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.712] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.712] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.712] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.713] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.713] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.713] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.714] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.714] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.714] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.715] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.715] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.715] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.715] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.715] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.716] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.716] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.716] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.716] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.716] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.717] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.717] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.717] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.717] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.717] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.718] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.718] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.718] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.718] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.718] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.719] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.719] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.719] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.719] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.719] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.720] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.720] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.720] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.813] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.814] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.814] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.814] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.814] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.815] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.815] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.815] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.815] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.815] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.816] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.816] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.816] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.816] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.816] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.817] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.817] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.817] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.817] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.817] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.818] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.818] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.818] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.818] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.818] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.819] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.819] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.819] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.819] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.820] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.820] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.820] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.820] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.821] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.822] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.822] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.822] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.822] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.822] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.823] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.823] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.823] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.823] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.823] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.824] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.824] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.824] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.824] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.825] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.825] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.825] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.825] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.825] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.826] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.826] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.826] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.827] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.827] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.827] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.827] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.827] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.828] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.828] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.828] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.875] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.875] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.875] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.875] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.876] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.876] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.876] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.876] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.876] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.877] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.877] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.877] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.877] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.877] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.878] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.878] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.878] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.878] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.878] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.879] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.879] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.879] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.879] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.880] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.880] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.880] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.880] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.880] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.881] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.881] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.881] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.881] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.881] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.882] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.882] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.882] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.882] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.882] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.883] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.883] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.883] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.883] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.883] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.884] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.884] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.884] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.884] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.885] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.885] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.885] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.885] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.885] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.886] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.886] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.886] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.886] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.886] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.887] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.887] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.887] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.890] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.890] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.890] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.890] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.891] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.891] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.891] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.891] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.891] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.892] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.892] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.892] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.892] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.893] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.893] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.893] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.893] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.893] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.894] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.894] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.894] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.894] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.895] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.895] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.895] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.895] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.895] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.896] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.896] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.896] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.896] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.897] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.897] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.897] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.897] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.897] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.898] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.899] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.899] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.899] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.899] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.899] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.900] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.900] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.900] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.901] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.901] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.901] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.901] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.901] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.902] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.902] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.902] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.902] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.902] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.903] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.903] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.903] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.903] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.903] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.904] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.904] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.904] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.904] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.905] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.907] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.907] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.907] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.907] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.908] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.908] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.908] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.908] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.909] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.909] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.909] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.909] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.910] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.910] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.910] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.910] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.910] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.911] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.911] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.911] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.911] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.911] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.912] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.912] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.912] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.912] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.912] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.913] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.913] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.913] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.913] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.913] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.914] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.914] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.914] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.914] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.915] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.915] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.915] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.915] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.916] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.916] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.919] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.919] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.919] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.919] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.919] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.920] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.920] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.920] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.920] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.920] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.921] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.921] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.921] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.921] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.922] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.922] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.922] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.922] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.922] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.923] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.923] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.923] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.925] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.925] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.925] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.925] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.926] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.926] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.926] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.926] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.926] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.927] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.927] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.927] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.927] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.927] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.928] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.928] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.928] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.928] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.929] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0234.929] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.228] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.resources.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0235.231] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0235.231] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.resources.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50390d5d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x50390d5d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x505a6c82, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 0x55e750 [0235.232] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50390d5d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x50390d5d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x505a6c82, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="FileSync.Resources.dll", cAlternateFileName="FILESY~2.DLL")) returned 0 [0235.232] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0235.232] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.resources.dll")) returned 1 [0235.240] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSync.Resources.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesync.resources.dll")) returned 0xffffffff [0235.240] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505f317e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x505f317e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5082f572, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x362c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="FileSyncApi.dll", cAlternateFileName="FILESY~3.DLL")) returned 1 [0235.248] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0235.248] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0235.248] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0235.248] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0235.248] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0235.249] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0235.249] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncapi.dll")) returned 0x20 [0235.249] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0235.249] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0235.250] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.275] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.277] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.324] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.325] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.325] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.325] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.325] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.325] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.326] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.326] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.326] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.326] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.326] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.327] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.327] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.327] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.327] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.328] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.328] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.328] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.328] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.329] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.329] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.329] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.329] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.329] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.330] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.330] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.330] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.330] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.330] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.331] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.331] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.331] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.331] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.331] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.332] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.332] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.332] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.332] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.332] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.333] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.333] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.333] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.333] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.334] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.334] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.334] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.334] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.334] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.335] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.335] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.335] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.335] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.335] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.336] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.336] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.336] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.336] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.337] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.337] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.337] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.337] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.337] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.354] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.355] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.355] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.355] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.355] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.355] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.356] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.356] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.356] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.356] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.356] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.357] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.357] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.357] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.357] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.357] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.357] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.358] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.358] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.358] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.358] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.358] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.359] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.359] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.359] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.359] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.359] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.360] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.360] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.360] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.360] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.360] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.403] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.403] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.404] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.404] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.404] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.404] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.404] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.405] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.405] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.405] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.405] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.405] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2c0, lpOverlapped=0x0) returned 1 [0235.406] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2c0, lpOverlapped=0x0) returned 1 [0235.406] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0235.406] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0235.406] CloseHandle (hObject=0x1f4) returned 1 [0235.406] CloseHandle (hObject=0x1e4) returned 1 [0235.412] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncapi.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0235.412] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0235.412] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncapi.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505f317e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x505f317e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5082f572, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x362c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncApi.dll", cAlternateFileName="FILESY~3.DLL")) returned 0x55e750 [0235.412] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505f317e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x505f317e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5082f572, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x362c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncApi.dll", cAlternateFileName="FILESY~3.DLL")) returned 0 [0235.413] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0235.413] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncapi.dll")) returned 1 [0235.416] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncapi.dll")) returned 0xffffffff [0235.416] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50855780, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x50855780, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x50914269, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="FileSyncClient.dll", cAlternateFileName="FILESY~4.DLL")) returned 1 [0235.417] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0235.417] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0235.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0235.417] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0235.417] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0235.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0235.417] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncclient.dll")) returned 0x20 [0235.418] VirtualAlloc (lpAddress=0x710000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x710000 [0235.419] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0235.419] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncClient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncclient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0235.420] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.514] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.515] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.559] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.559] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.560] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.560] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.560] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.560] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.560] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.561] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.561] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.561] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.561] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.562] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.562] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.562] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.562] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.562] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.563] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.563] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.563] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.563] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.563] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.564] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.564] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.564] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.564] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.565] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.565] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.565] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.565] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.565] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.566] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.566] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.566] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.566] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.567] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.567] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.567] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.567] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.568] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.568] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.568] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.568] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.569] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.569] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.569] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.569] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.569] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.570] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.570] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.570] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.570] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.571] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.571] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.571] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.571] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.571] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.572] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.572] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.572] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.573] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.573] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.573] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.609] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.609] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.609] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.610] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.610] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.610] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.610] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.610] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.611] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.611] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.611] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.611] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.612] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.612] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.612] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.612] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.612] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.613] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.613] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.615] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.615] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.615] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.615] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.616] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.616] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.616] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.616] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.617] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.617] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.617] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.618] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.618] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.618] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.619] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.619] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.619] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.619] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.620] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.620] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.620] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.620] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.620] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.621] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.621] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.621] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.621] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.621] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.622] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.622] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.622] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.622] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.622] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.623] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.623] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.623] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.623] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.623] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.624] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.624] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.624] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.624] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.624] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.625] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.625] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.625] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.626] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.626] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.627] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.627] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.627] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.627] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.627] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.628] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.628] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.628] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.628] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.628] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.629] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.629] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.629] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.629] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.629] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.630] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.630] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.630] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.630] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.630] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.631] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.631] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.631] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.631] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.631] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.632] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.632] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.632] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.632] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.638] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.639] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.639] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.639] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.639] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.639] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.640] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.640] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.640] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.640] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.640] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.641] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.641] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.641] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.641] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.641] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.641] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.642] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.642] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.642] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.642] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.642] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.643] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.643] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.643] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.643] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.643] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.644] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.646] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.646] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.646] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.646] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.646] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.647] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.647] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.647] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.647] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.648] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.648] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.648] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.648] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.649] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.649] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.649] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.649] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.649] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.649] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.650] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.650] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.650] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.651] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.651] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.651] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.651] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.651] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.652] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.652] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.652] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.652] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.652] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.653] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.653] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.653] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.654] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.654] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.654] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.654] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.655] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.655] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.655] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.655] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.655] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.656] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.656] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.656] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.657] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.657] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.658] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.658] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.658] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.658] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.658] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.659] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.659] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.659] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.659] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.659] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.660] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.660] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.660] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.660] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.661] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.661] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.661] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.661] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.661] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.662] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.663] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.663] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.663] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.663] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.664] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.664] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.664] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.664] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.664] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.665] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.665] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.665] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.665] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.665] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.666] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.666] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.667] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.667] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.667] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.667] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.667] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.668] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.668] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.668] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.668] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.668] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.669] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.669] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.669] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.670] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.670] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.670] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.670] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.671] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.671] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.671] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.671] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.671] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.672] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.672] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.672] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.672] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.672] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.673] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.673] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.673] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.673] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.673] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.674] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.674] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.674] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.674] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.675] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.675] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.675] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.675] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.675] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.676] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.676] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.676] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.676] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.676] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.677] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.677] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.677] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.677] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.678] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.678] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.678] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.678] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.678] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.679] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.679] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.679] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.679] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.679] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.680] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.680] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.680] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.680] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.681] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.681] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.681] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.681] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.683] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.683] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.684] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.684] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.686] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.686] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.686] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.687] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.687] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.687] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.688] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.688] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.688] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.688] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.689] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.689] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.689] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.689] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.690] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.690] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.690] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.690] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.690] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.691] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.691] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.691] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.691] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.691] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.692] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.692] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.692] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.692] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.692] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.693] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.693] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.693] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.693] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.694] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.694] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.694] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.694] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.694] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.695] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.695] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.696] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.696] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.696] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.697] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.697] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.698] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.698] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.698] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.698] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.698] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.699] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.699] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.699] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.699] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.700] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.700] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.701] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.701] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.701] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.701] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.702] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.702] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.702] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.702] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.703] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.703] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.703] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.705] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.705] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.705] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.705] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.706] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.706] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.706] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.706] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.707] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.707] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.707] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.707] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.707] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.708] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.708] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.708] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.708] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.709] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.709] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.709] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.709] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.709] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.710] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.710] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.710] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.711] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.711] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.711] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.711] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.711] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.712] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.712] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.712] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.712] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.712] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.713] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.713] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.713] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.713] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.714] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.714] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.714] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.714] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.714] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.715] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.715] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.715] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.715] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.715] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.716] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.716] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.716] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.716] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.717] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.717] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.717] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.717] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.717] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.718] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.718] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.718] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.718] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.718] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.719] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.719] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.719] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.719] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.719] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.734] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.734] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.734] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.735] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.735] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.735] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.735] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.736] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.736] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.736] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.736] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.737] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.737] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.737] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.737] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.738] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.738] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.822] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncclient.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncClient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncclient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0235.827] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncClient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncclient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0235.827] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncclient.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50855780, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x50855780, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x50914269, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncClient.dll", cAlternateFileName="FILESY~4.DLL")) returned 0x55e490 [0235.828] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50855780, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x50855780, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x50914269, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncClient.dll", cAlternateFileName="FILESY~4.DLL")) returned 0 [0235.828] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0235.828] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncclient.dll")) returned 1 [0235.836] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncClient.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncclient.dll")) returned 0xffffffff [0235.836] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5096097b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5096097b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x50a920f2, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x238c0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="FileSyncConfig.exe", cAlternateFileName="FILESY~1.EXE")) returned 1 [0235.840] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0235.841] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0235.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0235.842] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0235.842] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0235.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0235.842] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncSessions.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncsessions.dll")) returned 0x20 [0235.847] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncSessions.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncsessions.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0235.848] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncSessions.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncsessions.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0235.848] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.851] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.853] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.853] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.854] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.855] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.855] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.855] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.855] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.855] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.856] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.856] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.856] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.856] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.857] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.857] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.857] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.857] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.858] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.858] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.858] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.858] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.858] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.859] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.859] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.859] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.859] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.859] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.860] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.862] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.863] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.863] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.863] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.863] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.863] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.864] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.864] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.864] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.864] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.864] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.865] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.865] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.865] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.865] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.865] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.865] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.866] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.866] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.866] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.866] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.866] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.866] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.867] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.867] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.867] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.867] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.867] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.868] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.868] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.868] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.868] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.868] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.869] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.869] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.869] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.869] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.869] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.870] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.870] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.870] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.870] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.870] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.871] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.871] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.871] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.871] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.871] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.871] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.872] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.872] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.872] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.872] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.872] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.872] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.873] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.873] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.873] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.873] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.873] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.874] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.874] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.874] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.874] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.875] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.875] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.876] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.876] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.876] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.876] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.876] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.877] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.877] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.877] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.877] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.877] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.877] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.878] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.878] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.878] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.878] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.878] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.878] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.879] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.879] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.879] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.879] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.879] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.879] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.880] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.880] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.880] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.880] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.880] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.880] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.881] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.881] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.881] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.882] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.883] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.883] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.883] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.883] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.883] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.883] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.884] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.884] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.884] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.884] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.884] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.885] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.885] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.885] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.885] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.885] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.886] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.886] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.886] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.887] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.887] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.887] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.887] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.887] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.889] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.889] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.889] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.889] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.890] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.890] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.890] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.890] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.890] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.890] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.891] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.891] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.891] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.891] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.891] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.891] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.892] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.892] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.892] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.892] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.892] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.893] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.893] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.893] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.893] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.893] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.894] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.894] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.894] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.894] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.894] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.895] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.895] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.895] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.895] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.895] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.896] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.896] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.896] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.896] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.896] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.897] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.897] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.897] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.897] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.897] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.898] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.898] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.898] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.898] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.898] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.899] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.899] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.899] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.899] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.899] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.900] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.900] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.900] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.900] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.902] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.902] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.902] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.902] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.904] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.905] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.905] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.905] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.905] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.906] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.906] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.906] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.906] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.906] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.907] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.907] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.907] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.907] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.907] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.907] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.908] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.908] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.908] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.908] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.908] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.908] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.909] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.909] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.909] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.909] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.909] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.910] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.910] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.910] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.910] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.910] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.910] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.911] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.911] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.911] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.912] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.912] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.912] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.912] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.912] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.913] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.913] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.913] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.913] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.913] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.913] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.914] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.914] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.914] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.914] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.914] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.915] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.915] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.915] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.915] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.915] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.916] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.916] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.916] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.917] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.917] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.917] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.918] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.919] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.920] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.920] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.920] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.920] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.920] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.921] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.921] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.921] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.921] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.921] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.922] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.922] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.922] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.922] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.923] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.923] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.923] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.923] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.923] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.924] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.924] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.924] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.924] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.924] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.925] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.925] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.925] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.925] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.925] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.926] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.926] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.926] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.926] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.926] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.926] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.927] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.927] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.927] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.928] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.928] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.928] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.929] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.929] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.930] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.930] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.930] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.930] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.930] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.931] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.931] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.931] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.931] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.931] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.932] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.933] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.933] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.933] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.934] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.934] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.934] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.934] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.934] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.935] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.935] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.935] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.935] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.935] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.936] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.936] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.936] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.937] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.937] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.937] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.937] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.937] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.937] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.938] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.938] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.938] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.938] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.938] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.938] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.939] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.939] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.939] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.939] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.939] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.940] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.940] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.940] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.941] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.941] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.941] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.941] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.941] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.942] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.942] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.942] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.942] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.942] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.942] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.942] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.943] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.943] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.943] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.943] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.943] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.943] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.944] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.944] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.944] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.944] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.944] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.944] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.948] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.948] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.948] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.948] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.949] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.949] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.949] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.949] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.949] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.949] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.950] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.950] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.950] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.950] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.951] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.951] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.951] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.951] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.951] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.951] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.952] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.952] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.952] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.952] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.952] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.952] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.952] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.953] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.953] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.953] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.953] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.953] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.954] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.954] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.954] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.954] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.954] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.955] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.955] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.955] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.955] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.955] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.955] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.956] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.956] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.956] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.956] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.956] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.956] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.957] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.957] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.957] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.957] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.957] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.957] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.958] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.958] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.958] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.958] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.958] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.959] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.959] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.959] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.959] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.960] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.961] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.961] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.961] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.961] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.961] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.961] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.962] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.962] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.962] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.962] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.962] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.987] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.987] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.987] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.988] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.988] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.988] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.988] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.988] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0235.989] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.024] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncSessions.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncsessions.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncSessions.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncsessions.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0236.024] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncSessions.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncsessions.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0236.024] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncSessions.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncsessions.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ade11a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x50ade11a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x50fc8d11, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1464c0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="FileSyncSessions.dll", cAlternateFileName="FIFC38~1.DLL")) returned 0x55e750 [0236.025] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ade11a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x50ade11a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x50fc8d11, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1464c0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="FileSyncSessions.dll", cAlternateFileName="FIFC38~1.DLL")) returned 0 [0236.025] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0236.025] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncSessions.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncsessions.dll")) returned 1 [0236.029] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncSessions.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncsessions.dll")) returned 0xffffffff [0236.029] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5103b5e0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5103b5e0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x511def4c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x182cc0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="FileSyncShell.dll", cAlternateFileName="FI340C~1.DLL")) returned 1 [0236.029] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0236.029] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0236.029] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0236.029] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0236.029] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0236.029] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0236.029] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncShell.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncshell.dll")) returned 0x20 [0236.030] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncShell.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncshell.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0236.031] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncShell.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncshell.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.173] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncShell.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncshell.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncShell.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncshell.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0236.173] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncShell.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncshell.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0236.173] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncShell.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncshell.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5103b5e0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5103b5e0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x511def4c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x182cc0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncShell.dll", cAlternateFileName="FI340C~1.DLL")) returned 0x55e2d0 [0236.174] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5103b5e0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5103b5e0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x511def4c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x182cc0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FileSyncShell.dll", cAlternateFileName="FI340C~1.DLL")) returned 0 [0236.174] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0236.174] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncShell.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncshell.dll")) returned 1 [0236.180] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\FileSyncShell.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\filesyncshell.dll")) returned 0xffffffff [0236.180] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c2bee50, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4c2bee50, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c2bee50, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="is", cAlternateFileName="")) returned 1 [0236.180] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\is\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\is\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c2bee50, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4c2bee50, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c7a9cca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0236.181] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c2bee50, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4c2bee50, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c7a9cca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0236.181] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c7a9cca, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4c7a9cca, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4caa4b91, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x152c0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0236.198] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0236.198] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0236.199] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0236.199] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0236.199] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0236.199] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0236.199] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\LoggingPlatform.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\loggingplatform.dll")) returned 0x20 [0236.199] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\LoggingPlatform.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\loggingplatform.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.200] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\LoggingPlatform.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\loggingplatform.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0236.359] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\LoggingPlatform.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\loggingplatform.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\LoggingPlatform.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\loggingplatform.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0236.362] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\LoggingPlatform.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\loggingplatform.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0236.362] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\LoggingPlatform.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\loggingplatform.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5125164f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5125164f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x512e9fc5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="LoggingPlatform.dll", cAlternateFileName="LOGGIN~1.DLL")) returned 0x55e750 [0236.363] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5125164f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5125164f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x512e9fc5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="LoggingPlatform.dll", cAlternateFileName="LOGGIN~1.DLL")) returned 0 [0236.363] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0236.363] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\LoggingPlatform.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\loggingplatform.dll")) returned 1 [0236.365] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\LoggingPlatform.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\loggingplatform.dll")) returned 0xffffffff [0236.365] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519787fb, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x519787fb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x519787fb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="lt", cAlternateFileName="")) returned 1 [0236.365] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\lt\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\lt\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519787fb, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x519787fb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x52079625, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0236.366] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519787fb, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x519787fb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x52079625, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0236.366] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52079625, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x52079625, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x526e1a8e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0236.382] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0236.382] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0236.382] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0236.383] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0236.383] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0236.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0236.383] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcp120.dll")) returned 0x20 [0236.383] VirtualAlloc (lpAddress=0x714000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x714000 [0236.384] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0236.384] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.386] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.389] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.390] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.391] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.391] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.391] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.391] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.392] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.392] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.392] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.392] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.392] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.392] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.393] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.393] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.393] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.393] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.393] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.393] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.394] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.394] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.394] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.394] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.394] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.394] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.395] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.395] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.395] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.395] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.397] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.397] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.397] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.397] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.397] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.398] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.398] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.398] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.398] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.398] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.398] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.398] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.399] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.399] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.399] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.399] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.399] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.399] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.400] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.400] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.400] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.400] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.400] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.401] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.401] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.401] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.401] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.401] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.401] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.401] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.402] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.402] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.402] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.402] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.402] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.402] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.403] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.403] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.403] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.403] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.403] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.403] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.403] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.404] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.404] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.404] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.404] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.404] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.404] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.405] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.405] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.405] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.405] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.405] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.405] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.405] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.406] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.406] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.406] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.406] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.406] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.406] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.406] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.407] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.408] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.408] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.408] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.408] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.408] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.408] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.409] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.409] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.409] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.409] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.409] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.409] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.409] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.410] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.410] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.410] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.410] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.410] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.410] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.410] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.411] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.411] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.411] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.411] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.411] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.411] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.411] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.412] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.412] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.412] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.412] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.412] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.412] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.412] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.413] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.413] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.413] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.414] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.414] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.414] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.414] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.414] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.414] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.415] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.415] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.415] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.415] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.415] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.415] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.416] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.419] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.419] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.419] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.419] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.420] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.420] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.420] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.420] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.420] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.420] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.421] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.421] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.421] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.421] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.421] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.422] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.422] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.422] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.422] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.422] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.422] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.423] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.423] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.423] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.423] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.423] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.424] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.424] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.424] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.424] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.424] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.424] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.425] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.425] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.425] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.425] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.425] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.425] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.426] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.426] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.426] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.426] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.426] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.426] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.426] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.427] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.427] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.427] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.427] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.427] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.427] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.428] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.428] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.428] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.429] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.429] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.429] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.429] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.429] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.429] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.429] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.430] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.430] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.430] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.430] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.430] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.430] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.431] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.431] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.431] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.431] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.431] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.512] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.512] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.512] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.513] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.513] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.513] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.513] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.513] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2a0, lpOverlapped=0x0) returned 1 [0236.513] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2a0, lpOverlapped=0x0) returned 1 [0236.514] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0236.514] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0236.514] CloseHandle (hObject=0x1e4) returned 1 [0236.514] CloseHandle (hObject=0x1f4) returned 1 [0236.611] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcp120.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0236.611] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0236.611] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcp120.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51336474, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x51336474, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x514da01f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x6f2a0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="msvcp120.dll", cAlternateFileName="")) returned 0x55e910 [0236.611] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51336474, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x51336474, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x514da01f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x6f2a0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="msvcp120.dll", cAlternateFileName="")) returned 0 [0236.611] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0236.612] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcp120.dll")) returned 1 [0236.616] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcp120.dll")) returned 0xffffffff [0236.616] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51598aff, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x51598aff, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x51788816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xed0a0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0236.616] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0236.616] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0236.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0236.616] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0236.617] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0236.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0236.617] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcr120.dll")) returned 0x20 [0236.617] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0236.617] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0236.618] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.635] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.636] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.708] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.708] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.709] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.709] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.709] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.709] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.709] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.710] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.710] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.710] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.710] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.711] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.711] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.711] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.711] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.712] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.712] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.712] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.712] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.712] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.712] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.713] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.713] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.713] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.713] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.714] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.714] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.714] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.714] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.715] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.715] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.715] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.715] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.715] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.716] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.716] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.716] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.716] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.716] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.717] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.717] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.717] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.717] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.717] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.717] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.718] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.718] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.718] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.718] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.718] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.719] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.719] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.720] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.720] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.721] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.721] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.721] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.779] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.780] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.780] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.780] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.780] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.780] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.781] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.781] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.781] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.781] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.781] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.782] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.782] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.782] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.782] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.782] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.783] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.783] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.783] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.783] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.783] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.784] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.784] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.784] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.784] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.784] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.784] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.785] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.785] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.785] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.785] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.785] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.876] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.876] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.876] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.877] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.877] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.877] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.877] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.878] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.878] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.878] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.878] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.878] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.879] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.879] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.879] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.879] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.879] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.880] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.880] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.880] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.880] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.881] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.881] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.881] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.881] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.882] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.882] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.882] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.882] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.883] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.883] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.884] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.884] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.884] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.886] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.886] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.887] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.887] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.887] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.887] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.887] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.888] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.888] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.888] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.888] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.888] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.889] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.889] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.889] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.889] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.890] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.890] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.890] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.890] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.890] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.894] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.894] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.895] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.895] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.895] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.895] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.895] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.896] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.896] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.896] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.896] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.896] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.897] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.897] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.897] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.897] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.897] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.898] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.898] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.898] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.898] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.898] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.899] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.899] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.899] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.899] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.899] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.900] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.900] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.900] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.900] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.901] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.901] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.901] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.901] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.901] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.902] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.902] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.902] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.902] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.902] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.903] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.903] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.903] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.903] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.903] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.903] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.904] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.904] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.904] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.904] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.904] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.905] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.905] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.905] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.905] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.905] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.905] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.906] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.906] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.906] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.906] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.906] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.907] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.907] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.907] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.907] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.907] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.908] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.908] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.908] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.908] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.908] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.908] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.909] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.909] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.909] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.909] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.909] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.909] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.909] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.910] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.910] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.910] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.910] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.910] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.910] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.911] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.911] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.911] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.911] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.911] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.911] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.912] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.912] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.912] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.912] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.912] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.912] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.912] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.913] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.913] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.914] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.914] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.914] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.914] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.914] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.914] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.915] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.915] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.915] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.915] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.915] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.915] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.915] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0236.979] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcr120.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0236.980] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0236.980] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcr120.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51598aff, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x51598aff, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x51788816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xed0a0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="msvcr120.dll", cAlternateFileName="")) returned 0x55e650 [0236.980] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51598aff, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x51598aff, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x51788816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xed0a0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="msvcr120.dll", cAlternateFileName="")) returned 0 [0236.980] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0236.980] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcr120.dll")) returned 1 [0236.988] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\msvcr120.dll")) returned 0xffffffff [0236.988] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5cf8febe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5cf8febe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5cf8febe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="mt-mt", cAlternateFileName="")) returned 1 [0236.989] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\mt-mt\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\mt-mt\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5cf8febe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5cf8febe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d349bc1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0236.990] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5cf8febe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5cf8febe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d349bc1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0236.990] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d349bc1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d349bc1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d51389a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0237.012] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0237.012] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0237.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0237.012] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0237.012] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0237.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0237.012] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\RemoteAccess.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\remoteaccess.dll")) returned 0x20 [0237.013] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\RemoteAccess.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\remoteaccess.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0237.013] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\RemoteAccess.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\remoteaccess.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.336] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\RemoteAccess.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\remoteaccess.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\RemoteAccess.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\remoteaccess.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0237.337] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\RemoteAccess.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\remoteaccess.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0237.337] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\RemoteAccess.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\remoteaccess.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51aa9ab3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x51aa9ab3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5456dd0b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xa0ec0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="RemoteAccess.dll", cAlternateFileName="REMOTE~1.DLL")) returned 0x55e5d0 [0237.338] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51aa9ab3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x51aa9ab3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5456dd0b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xa0ec0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="RemoteAccess.dll", cAlternateFileName="REMOTE~1.DLL")) returned 0 [0237.340] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0237.341] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\RemoteAccess.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\remoteaccess.dll")) returned 1 [0237.354] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\RemoteAccess.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\remoteaccess.dll")) returned 0xffffffff [0237.358] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6928c707, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6928c707, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6928c707, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="ro", cAlternateFileName="")) returned 1 [0237.358] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ro\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ro\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6928c707, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6928c707, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x694c8d43, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0237.359] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6928c707, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6928c707, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x694c8d43, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0237.359] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x694c8d43, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x694c8d43, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x69b573d0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0237.370] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0237.370] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0237.371] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0237.371] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0237.371] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0237.371] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0237.371] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotlogo.png")) returned 0x20 [0237.373] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotlogo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.373] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotlogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0237.377] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotlogo.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotlogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0237.377] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotlogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0237.377] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotlogo.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55880b0b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55880b0b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55b558b3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x124b, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ScreenshotLogo.png", cAlternateFileName="SCREEN~1.PNG")) returned 0x55e750 [0237.378] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55880b0b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55880b0b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55b558b3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x124b, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ScreenshotLogo.png", cAlternateFileName="SCREEN~1.PNG")) returned 0 [0237.378] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0237.378] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotlogo.png")) returned 1 [0237.379] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotLogo.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotlogo.png")) returned 0xffffffff [0237.379] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ee912c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55ee912c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56931178, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x6c00a, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="ScreenshotOptIn.png", cAlternateFileName="SCREEN~2.PNG")) returned 1 [0237.379] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0237.379] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0237.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0237.380] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0237.380] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0237.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0237.380] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotoptin.png")) returned 0x20 [0237.380] VirtualAlloc (lpAddress=0x718000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x718000 [0237.381] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotoptin.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0237.381] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0237.381] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.432] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.433] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.450] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.451] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.451] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.451] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.451] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.451] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.451] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.452] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.452] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.452] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.452] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.452] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.453] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.453] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.453] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.453] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.453] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.453] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.454] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.454] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.454] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.454] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.454] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.454] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.455] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.455] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.455] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.455] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.455] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.455] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.456] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.456] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.456] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.456] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.456] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.457] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.457] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.457] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.457] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.457] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.457] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.458] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.458] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.458] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.458] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.458] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.458] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.459] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.459] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.459] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.459] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.459] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.459] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.459] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.460] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.460] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.460] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.460] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.460] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.460] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.461] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.461] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.513] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.513] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.513] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.514] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.514] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.514] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.514] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.514] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.515] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.515] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.515] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.515] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.515] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.516] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.516] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.516] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.516] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.516] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.517] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.517] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.517] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.517] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.517] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.518] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.518] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.518] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.518] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.518] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.519] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.519] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.519] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.519] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.534] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.535] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.535] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.537] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.541] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.542] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.542] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.542] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.542] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.542] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.542] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.543] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.543] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.543] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.543] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.543] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.543] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.544] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.544] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.544] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.544] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.544] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.544] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.545] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.547] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.547] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.548] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.548] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.553] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.553] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.553] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.553] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.554] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.558] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.558] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.559] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.559] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.559] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.559] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.560] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.560] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.560] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.560] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.560] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.561] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.561] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.563] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.563] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.566] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.567] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.567] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.567] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.567] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.568] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.568] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.569] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.570] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.570] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.570] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.571] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.571] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.571] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.571] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.572] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.572] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.575] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.575] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.588] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.588] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.589] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.589] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.589] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.589] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.589] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.590] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.590] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.590] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.590] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.590] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.591] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.591] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.591] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.591] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.591] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.592] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.592] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.592] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.592] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.592] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.593] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.593] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.593] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.593] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.593] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.594] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.594] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.594] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.594] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.595] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.595] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.595] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.595] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.595] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.596] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.596] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.596] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.596] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.596] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.597] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.597] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.597] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.597] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.597] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.598] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.598] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.599] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.599] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.599] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.599] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0237.600] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa, lpOverlapped=0x0) returned 1 [0237.600] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa, lpOverlapped=0x0) returned 1 [0237.600] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0237.600] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0237.600] CloseHandle (hObject=0x1e4) returned 1 [0237.600] CloseHandle (hObject=0x1f4) returned 1 [0238.108] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotoptin.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0238.109] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotoptin.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0238.109] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotoptin.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ee912c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55ee912c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56931178, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x6c00a, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ScreenshotOptIn.png", cAlternateFileName="SCREEN~2.PNG")) returned 0x55e490 [0238.109] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ee912c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55ee912c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56931178, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x6c00a, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ScreenshotOptIn.png", cAlternateFileName="SCREEN~2.PNG")) returned 0 [0238.109] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0238.109] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotoptin.png")) returned 1 [0238.114] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ScreenshotOptIn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\screenshotoptin.png")) returned 0xffffffff [0238.114] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d10fdf, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d10fdf, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x571d59f7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2ff40, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0238.114] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0238.114] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0238.114] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0238.114] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0238.114] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0238.114] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0238.114] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\sqmapi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmapi.dll")) returned 0x20 [0238.115] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\sqmapi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0238.115] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\sqmapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0238.115] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.117] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.118] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.118] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.119] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.119] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.119] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.120] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.120] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.121] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.121] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.121] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.122] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.122] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.122] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.123] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.123] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.124] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.124] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.124] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.125] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.125] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.125] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.126] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.126] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.127] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.127] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.135] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.135] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.136] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.136] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.137] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.139] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.141] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.142] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.142] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.142] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.142] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.142] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.143] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.143] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.143] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.143] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.143] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.144] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.144] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.144] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.144] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.144] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.144] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.145] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.145] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.145] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.145] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.145] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.146] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.146] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.146] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.146] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.146] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.146] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.147] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.147] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.147] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.147] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.147] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.147] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.148] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.148] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.148] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.148] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.148] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.148] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.149] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.149] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.149] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.149] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.149] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.149] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.150] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.150] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.150] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.150] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.150] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.151] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.151] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.151] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.151] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.151] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.151] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.151] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.152] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.152] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.152] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.152] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xf40, lpOverlapped=0x0) returned 1 [0238.152] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xf40, lpOverlapped=0x0) returned 1 [0238.152] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0238.152] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0238.152] CloseHandle (hObject=0x1f4) returned 1 [0238.153] CloseHandle (hObject=0x1e4) returned 1 [0238.157] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\sqmapi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmapi.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\sqmapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0238.157] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\sqmapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0238.157] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\sqmapi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmapi.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d10fdf, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d10fdf, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x571d59f7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2ff40, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0x55e310 [0238.157] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d10fdf, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d10fdf, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x571d59f7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2ff40, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0 [0238.157] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0238.158] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\sqmapi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmapi.dll")) returned 1 [0238.315] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\sqmapi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmapi.dll")) returned 0xffffffff [0238.315] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57a07ba6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x57a07ba6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x57ef2857, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="SqmWrapper.dll", cAlternateFileName="SQMWRA~1.DLL")) returned 1 [0238.316] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0238.316] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0238.316] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0238.316] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0238.316] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0238.316] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0238.316] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SqmWrapper.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmwrapper.dll")) returned 0x20 [0238.317] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SqmWrapper.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmwrapper.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0238.317] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SqmWrapper.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmwrapper.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0238.317] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.320] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.321] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.322] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.322] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.326] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.327] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.327] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.327] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.327] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.328] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.328] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.328] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.328] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.329] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.329] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.329] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.329] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.330] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xac0, lpOverlapped=0x0) returned 1 [0238.330] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xac0, lpOverlapped=0x0) returned 1 [0238.330] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0238.330] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0238.330] CloseHandle (hObject=0x1e4) returned 1 [0238.330] CloseHandle (hObject=0x1f4) returned 1 [0238.332] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SqmWrapper.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmwrapper.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SqmWrapper.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmwrapper.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0238.332] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SqmWrapper.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmwrapper.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0238.332] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SqmWrapper.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmwrapper.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57a07ba6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x57a07ba6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x57ef2857, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="SqmWrapper.dll", cAlternateFileName="SQMWRA~1.DLL")) returned 0x55e890 [0238.332] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57a07ba6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x57a07ba6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x57ef2857, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="SqmWrapper.dll", cAlternateFileName="SQMWRA~1.DLL")) returned 0 [0238.333] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0238.333] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SqmWrapper.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmwrapper.dll")) returned 1 [0238.334] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SqmWrapper.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\sqmwrapper.dll")) returned 0xffffffff [0238.334] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a649506, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a649506, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x624f252c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3018c0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="SyncEngine.dll", cAlternateFileName="SYNCEN~1.DLL")) returned 1 [0238.335] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0238.335] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0238.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0238.335] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0238.335] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0238.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0238.335] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SyncEngine.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\syncengine.dll")) returned 0x20 [0238.336] VirtualAlloc (lpAddress=0x71c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x71c000 [0238.337] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SyncEngine.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\syncengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0238.337] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SyncEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\syncengine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0238.342] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.346] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.350] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.351] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.351] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.351] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.352] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.352] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.352] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.353] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.353] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.353] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.354] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.354] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.354] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.354] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.354] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.355] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.355] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.355] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.355] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.355] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.356] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.356] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.356] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.356] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.356] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.357] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.357] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.359] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.359] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.360] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.360] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.360] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.360] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.360] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.361] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.361] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.361] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.361] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.362] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.362] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.362] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.362] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.362] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.363] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.363] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.363] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.363] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.363] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.364] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.364] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.364] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.364] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.364] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.365] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.365] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.365] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.365] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.365] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.366] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.366] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.366] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.366] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.366] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.367] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.367] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.367] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.367] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.367] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.368] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.368] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.395] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.395] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.396] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.396] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.396] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.396] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.396] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.397] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.397] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.397] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.397] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.397] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.398] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.398] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.398] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.398] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.398] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.399] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.399] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.399] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.399] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.400] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.401] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.402] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.402] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.402] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.402] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.402] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.403] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.403] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.403] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.403] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.403] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.404] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.404] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.404] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.404] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.404] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.405] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.405] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.405] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.405] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.406] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.406] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.406] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.406] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.406] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.406] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.407] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.407] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.407] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.407] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.407] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.408] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.408] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.408] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.408] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.408] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.410] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.410] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.410] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.410] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.410] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.411] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.411] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.411] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.411] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.411] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.412] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.412] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.412] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.412] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.412] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.413] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.413] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.413] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.413] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.413] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.414] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.414] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.414] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.415] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.415] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.415] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.415] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.419] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.419] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.419] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.420] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.420] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.421] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.421] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.422] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.422] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.422] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.422] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.422] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.423] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.423] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.423] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.423] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.423] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.423] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.424] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.424] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.424] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.424] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.424] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.424] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.425] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.425] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.425] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.425] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.425] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.425] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.426] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.426] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.426] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.426] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.426] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.426] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.427] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.427] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.427] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.427] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.427] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.427] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.428] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.428] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.434] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.434] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.434] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.434] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.435] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.435] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.435] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.435] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.435] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.435] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.436] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.436] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.436] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.436] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.436] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.436] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.436] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.437] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.437] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.437] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.438] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.438] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.438] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.438] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.438] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.438] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.439] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.439] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.439] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.439] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.439] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.439] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.440] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.440] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.440] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.440] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.440] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.440] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.441] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.441] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.441] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.441] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.441] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.441] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.442] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.442] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.442] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.442] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.442] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.442] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.442] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.443] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.443] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.443] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.443] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.443] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.443] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.444] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.444] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.445] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.445] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.445] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.445] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.445] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.445] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.446] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.446] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.446] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.446] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.446] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.446] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.447] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.447] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.447] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.448] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.448] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.448] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.449] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.449] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.449] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.449] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.449] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.449] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.450] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.450] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.450] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.450] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.450] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.457] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.458] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.458] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.458] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.458] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.458] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.458] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.459] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.459] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.459] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.459] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.459] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.460] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.460] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.460] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.460] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.460] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.460] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.461] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.461] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.461] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.461] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.461] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.461] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.462] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.462] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.462] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.462] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.463] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.463] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.463] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.463] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.463] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.464] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.464] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.464] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.464] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.464] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.464] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.465] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.465] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.465] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.465] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.465] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.465] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.466] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.466] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.466] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.466] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.466] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.466] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.467] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.467] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.467] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.467] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.467] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.467] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.468] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.468] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.468] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.468] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.468] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.468] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.468] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.478] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.478] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.478] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.479] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.479] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.479] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.479] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.479] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.480] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.480] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.480] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.480] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.480] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.480] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.481] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.481] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.481] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.481] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.481] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.481] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.482] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.482] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.482] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.482] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.482] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.482] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.483] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.483] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.483] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.483] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.483] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.483] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.483] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.484] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.484] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.485] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.485] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.485] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.485] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.485] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.485] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.486] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.486] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.486] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.488] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.488] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.488] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.488] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.488] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.488] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.489] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.489] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.489] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.490] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.490] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.490] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.491] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.491] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.491] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.492] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.492] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.492] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.492] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.492] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.492] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.493] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.493] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.493] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.493] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.493] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.493] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.521] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.521] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.521] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.521] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.521] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.522] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.522] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.522] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.522] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.523] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.523] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.523] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.524] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.524] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.524] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.524] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.524] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.525] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.525] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.525] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.525] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.526] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.526] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.526] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.527] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.527] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.527] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.527] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.527] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.528] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.528] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.528] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.528] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.528] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.528] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.529] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.529] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.529] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.530] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.530] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.531] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.531] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.532] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.532] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.532] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.533] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.533] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.533] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.533] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.534] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0238.832] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SyncEngine.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\syncengine.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SyncEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\syncengine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0238.832] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SyncEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\syncengine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0238.832] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SyncEngine.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\syncengine.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a649506, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a649506, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x624f252c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3018c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="SyncEngine.dll", cAlternateFileName="SYNCEN~1.DLL")) returned 0x55e490 [0238.832] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a649506, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a649506, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x624f252c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3018c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="SyncEngine.dll", cAlternateFileName="SYNCEN~1.DLL")) returned 0 [0238.832] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0238.833] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SyncEngine.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\syncengine.dll")) returned 1 [0238.834] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\SyncEngine.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\syncengine.dll")) returned 0xffffffff [0238.834] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x641685fa, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x641685fa, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x64bd6a07, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x494c0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Telemetry.dll", cAlternateFileName="TELEME~1.DLL")) returned 1 [0238.834] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0238.834] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0238.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0238.835] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0238.835] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0238.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0238.835] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\Telemetry.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\telemetry.dll")) returned 0x20 [0238.835] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\Telemetry.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\telemetry.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0238.835] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\Telemetry.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\telemetry.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0238.975] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\Telemetry.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\telemetry.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\Telemetry.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\telemetry.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0238.976] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\Telemetry.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\telemetry.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0238.976] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\Telemetry.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\telemetry.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x641685fa, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x641685fa, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x64bd6a07, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x494c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Telemetry.dll", cAlternateFileName="TELEME~1.DLL")) returned 0x55e750 [0238.976] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x641685fa, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x641685fa, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x64bd6a07, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x494c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Telemetry.dll", cAlternateFileName="TELEME~1.DLL")) returned 0 [0238.976] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0238.977] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\Telemetry.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\telemetry.dll")) returned 1 [0238.981] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\Telemetry.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\telemetry.dll")) returned 0xffffffff [0238.981] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x650751e8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x650751e8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6596648d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x632c0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="VideoStreamingPlugin.dll", cAlternateFileName="VIDEOS~1.DLL")) returned 1 [0238.982] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0238.982] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0238.982] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0238.982] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0238.982] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0238.982] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0238.982] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\VideoStreamingPlugin.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\videostreamingplugin.dll")) returned 0x20 [0238.983] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\VideoStreamingPlugin.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\videostreamingplugin.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0238.984] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\VideoStreamingPlugin.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\videostreamingplugin.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0239.230] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\VideoStreamingPlugin.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\videostreamingplugin.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\VideoStreamingPlugin.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\videostreamingplugin.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0239.231] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\VideoStreamingPlugin.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\videostreamingplugin.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0239.231] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\VideoStreamingPlugin.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\videostreamingplugin.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x650751e8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x650751e8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6596648d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x632c0, dwReserved0=0x550370, dwReserved1=0x11, cFileName="VideoStreamingPlugin.dll", cAlternateFileName="VIDEOS~1.DLL")) returned 0x55e5d0 [0239.231] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x650751e8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x650751e8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6596648d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x632c0, dwReserved0=0x550370, dwReserved1=0x11, cFileName="VideoStreamingPlugin.dll", cAlternateFileName="VIDEOS~1.DLL")) returned 0 [0239.231] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0239.231] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\VideoStreamingPlugin.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\videostreamingplugin.dll")) returned 1 [0239.236] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\VideoStreamingPlugin.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\videostreamingplugin.dll")) returned 0xffffffff [0239.236] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6675a388, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6675a388, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x679d4966, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x684c0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="wlmfds.dll", cAlternateFileName="")) returned 1 [0239.237] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0239.237] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0239.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0239.239] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0239.239] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0239.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0239.239] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\wlmfds.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wlmfds.dll")) returned 0x20 [0239.239] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\wlmfds.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wlmfds.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0239.240] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\wlmfds.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wlmfds.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0239.515] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\wlmfds.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wlmfds.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\wlmfds.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wlmfds.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0239.516] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\wlmfds.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wlmfds.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0239.516] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\wlmfds.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wlmfds.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6675a388, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6675a388, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x679d4966, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x684c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="wlmfds.dll", cAlternateFileName="")) returned 0x55e7d0 [0239.517] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6675a388, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6675a388, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x679d4966, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x684c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="wlmfds.dll", cAlternateFileName="")) returned 0 [0239.517] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0239.518] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\wlmfds.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wlmfds.dll")) returned 1 [0239.525] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\wlmfds.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wlmfds.dll")) returned 0xffffffff [0239.525] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68062f9d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x68062f9d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x68b901fc, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x5d6c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="WnsClientApi.dll", cAlternateFileName="WNSCLI~1.DLL")) returned 1 [0239.525] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0239.525] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0239.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0239.526] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0239.526] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0239.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0239.529] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\WnsClientApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wnsclientapi.dll")) returned 0x20 [0239.529] VirtualAlloc (lpAddress=0x720000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x720000 [0239.531] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\WnsClientApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wnsclientapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0239.531] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\WnsClientApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wnsclientapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0239.531] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.545] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.548] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.548] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.548] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.549] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.549] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.549] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.549] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.549] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.550] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.550] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.552] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.552] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.552] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.553] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.553] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.553] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.553] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.553] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.554] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.554] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.554] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.554] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.554] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.555] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.555] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.556] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.556] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.556] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.557] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.557] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.557] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.557] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.557] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.558] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.558] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.558] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.558] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.559] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.559] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.559] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.559] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.560] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.560] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.560] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.560] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.560] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.561] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.561] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.561] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.561] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.561] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.562] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.562] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.562] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.562] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.562] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.563] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.563] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.563] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.563] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.564] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.565] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.566] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.566] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.566] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.566] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.567] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.567] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.567] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.568] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.568] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.569] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.569] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.569] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.570] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.570] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.571] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.571] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.571] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.573] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.573] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.574] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.575] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.575] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.576] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.576] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.576] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.577] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.577] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.578] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.578] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.579] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.582] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.582] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.582] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.587] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.587] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.589] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.591] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.591] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.592] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.592] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.593] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.593] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.593] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.594] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.594] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.594] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.594] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.595] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.595] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.595] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0239.595] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x6c0, lpOverlapped=0x0) returned 1 [0239.595] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x6c0, lpOverlapped=0x0) returned 1 [0239.596] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0239.596] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0239.596] CloseHandle (hObject=0x1f4) returned 1 [0239.596] CloseHandle (hObject=0x1e4) returned 1 [0240.551] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\WnsClientApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wnsclientapi.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\WnsClientApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wnsclientapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0240.552] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\WnsClientApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wnsclientapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0240.552] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\WnsClientApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wnsclientapi.dll"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68062f9d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x68062f9d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x68b901fc, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x5d6c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="WnsClientApi.dll", cAlternateFileName="WNSCLI~1.DLL")) returned 0x55e490 [0240.552] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68062f9d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x68062f9d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x68b901fc, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x5d6c0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="WnsClientApi.dll", cAlternateFileName="WNSCLI~1.DLL")) returned 0 [0240.552] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0240.553] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\WnsClientApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wnsclientapi.dll")) returned 1 [0240.559] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\WnsClientApi.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\wnsclientapi.dll")) returned 0xffffffff [0240.559] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68062f9d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x68062f9d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x68b901fc, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x5d6c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="WnsClientApi.dll", cAlternateFileName="WNSCLI~1.DLL")) returned 0 [0240.559] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0240.559] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2a1d565, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xb2c68d12, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2c68d12, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7041746e, dwReserved1=0x6c642e69, cFileName="17.3.5892.0626_4", cAlternateFileName="177A54~1.062")) returned 1 [0240.559] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2a1d565, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xb2c68d12, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2c68d12, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0240.559] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2a1d565, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xb2c68d12, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2c68d12, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0240.560] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c2b9548, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb2b73c60, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2b73c60, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="amd64", cAlternateFileName="")) returned 1 [0240.560] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c2b9548, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb2b73c60, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2b73c60, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0240.560] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c2b9548, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb2b73c60, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2b73c60, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0240.561] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f15d6eb, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3f15d6eb, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x439eedd5, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x18f6c0, dwReserved0=0x556a70, dwReserved1=0x24000a2e, cFileName="FileSyncShell64.dll", cAlternateFileName="FILESY~2.DLL")) returned 1 [0240.561] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0240.561] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0240.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0240.561] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0240.561] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0240.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0240.561] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\filesyncshell64.dll")) returned 0x20 [0240.561] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\filesyncshell64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0240.562] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\FileSyncShell64.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\filesyncshell64.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0240.562] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.564] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.565] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.566] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.566] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.566] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.567] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.567] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.567] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.567] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.567] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.567] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.567] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.568] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.568] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.568] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.568] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.569] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.569] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.569] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.569] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.570] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.570] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.570] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.571] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.571] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.571] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.571] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.572] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.572] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.572] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.572] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.572] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.572] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.573] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.573] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.573] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.573] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.574] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.574] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.574] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.574] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.575] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.575] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.575] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.575] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.576] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.576] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.576] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.576] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.576] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.576] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.576] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.577] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.577] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.577] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.577] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.577] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.577] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.578] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.578] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.578] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.578] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.579] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.579] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.580] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.581] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.597] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.597] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.598] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.598] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.598] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.598] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.599] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.599] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.599] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.600] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.600] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.600] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.600] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.600] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.601] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.601] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.601] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.602] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.602] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.602] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.602] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.603] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.603] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.604] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.604] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.604] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.604] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.605] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.605] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.605] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.605] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.605] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.606] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.606] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.606] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.606] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.607] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.607] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.612] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.612] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.612] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.612] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.613] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.613] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.613] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.616] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.617] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.617] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.618] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.618] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.618] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.619] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.619] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.619] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.619] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.620] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.620] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.620] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.621] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.621] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.621] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.622] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.622] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.622] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.622] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.622] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.623] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.623] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.623] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.623] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.624] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.624] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.624] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.624] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.624] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.624] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.624] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.625] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.625] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.625] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.625] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.625] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.626] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.626] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.626] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.626] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.627] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.627] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.627] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.627] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.628] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.628] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.628] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.666] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.666] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.667] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.667] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.667] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.667] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.667] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.668] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.668] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.668] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.668] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.669] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.669] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.669] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.669] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.669] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.669] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.669] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.670] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.670] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.670] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.671] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.671] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.671] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.671] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.672] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.672] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.672] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.673] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.673] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.673] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.673] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.673] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.673] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.674] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.674] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.674] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.674] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.675] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.675] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.675] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.675] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.675] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.676] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.676] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.676] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.677] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.677] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.677] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.677] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.678] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.678] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.678] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.678] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.678] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.679] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.679] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.679] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.679] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.680] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.680] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.680] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.681] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.681] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.681] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.681] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.681] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.682] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.682] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.682] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.682] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.683] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.683] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.683] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.683] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.683] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.684] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.684] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.684] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.684] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.685] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.685] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.685] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.685] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.685] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.686] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.686] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.686] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.686] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.687] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.704] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.704] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.704] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.704] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.704] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.705] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.705] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.705] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.705] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.705] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.705] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.705] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.706] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.706] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.706] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.706] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.707] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.707] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.707] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.707] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.708] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.708] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.708] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.708] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.708] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.709] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.709] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.710] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.710] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.710] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.710] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.711] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.711] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.711] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.712] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.712] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.712] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.712] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.713] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.713] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.713] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.713] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.714] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.714] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.714] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.714] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.714] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.723] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.724] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.724] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.724] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.724] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.725] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.725] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.725] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.725] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.725] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.725] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.726] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.726] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.726] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.726] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.727] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.727] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.727] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.727] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.728] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.728] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.728] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.728] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.729] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.729] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.729] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.729] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.730] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.730] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.730] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.730] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.730] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.730] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.731] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.731] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.731] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.731] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.731] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.731] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.732] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.732] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.732] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.732] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.732] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.732] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.732] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.733] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.733] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.733] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.733] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.733] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.733] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.734] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.734] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.734] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.735] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.735] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.735] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.735] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.736] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.736] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.736] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.736] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.737] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.737] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.737] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0240.737] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0241.039] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\filesyncshell64.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\FileSyncShell64.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\filesyncshell64.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0241.042] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\FileSyncShell64.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\filesyncshell64.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0241.042] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\filesyncshell64.dll"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f15d6eb, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3f15d6eb, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x439eedd5, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x18f6c0, dwReserved0=0x550370, dwReserved1=0x11, cFileName="FileSyncShell64.dll", cAlternateFileName="FILESY~2.DLL")) returned 0x55e890 [0241.042] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f15d6eb, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3f15d6eb, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x439eedd5, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x18f6c0, dwReserved0=0x550370, dwReserved1=0x11, cFileName="FileSyncShell64.dll", cAlternateFileName="FILESY~2.DLL")) returned 0 [0241.042] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0241.043] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\filesyncshell64.dll")) returned 1 [0241.051] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\filesyncshell64.dll")) returned 0xffffffff [0241.051] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x471cffdb, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x471cffdb, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x4a322aae, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0241.051] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0241.051] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0241.051] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0241.052] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0241.052] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0241.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0241.052] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll")) returned 0x20 [0241.052] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0241.053] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0241.237] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0241.237] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0241.237] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x471cffdb, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x471cffdb, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x4a322aae, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="msvcp120.dll", cAlternateFileName="")) returned 0x55e210 [0241.237] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x471cffdb, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x471cffdb, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x4a322aae, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="msvcp120.dll", cAlternateFileName="")) returned 0 [0241.237] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0241.238] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll")) returned 1 [0241.262] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll")) returned 0xffffffff [0241.279] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fa9af2b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4fa9af2b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x59bfc168, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0241.280] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0241.280] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0241.280] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0241.280] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0241.280] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0241.280] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0241.280] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll")) returned 0x20 [0241.281] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0241.281] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0241.545] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0241.545] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0241.546] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fa9af2b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4fa9af2b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x59bfc168, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="msvcr120.dll", cAlternateFileName="")) returned 0x55e750 [0241.546] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fa9af2b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4fa9af2b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x59bfc168, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="msvcr120.dll", cAlternateFileName="")) returned 0 [0241.546] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0241.546] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll")) returned 1 [0241.557] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll")) returned 0xffffffff [0241.557] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fa9af2b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4fa9af2b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x59bfc168, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="msvcr120.dll", cAlternateFileName="")) returned 0 [0241.557] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0241.557] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c2b9548, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb2b73c60, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2b73c60, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="amd64", cAlternateFileName="")) returned 0 [0241.558] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0241.558] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b49234, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87b49234, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7041746e, dwReserved1=0x6c642e69, cFileName="setup", cAlternateFileName="")) returned 1 [0241.558] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b49234, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87b49234, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c642e30, dwReserved1=0x34366c6c, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0241.558] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b49234, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87b49234, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c642e30, dwReserved1=0x34366c6c, cFileName="..", cAlternateFileName="")) returned 1 [0241.558] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb15a88f0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb15a88f0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c642e30, dwReserved1=0x34366c6c, cFileName="logs", cAlternateFileName="")) returned 1 [0241.558] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb15a88f0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb15a88f0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0241.560] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb15a88f0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb15a88f0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0241.562] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6630871f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x6630871f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x66bb717b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x215e, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="2021-02-18_130550_474-cac.log", cAlternateFileName="2021-0~2.LOG")) returned 1 [0241.563] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0241.563] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0241.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0241.563] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0241.563] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0241.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0241.564] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_474-cac.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_474-cac.log")) returned 0x20 [0241.565] VirtualAlloc (lpAddress=0x724000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x724000 [0241.566] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_474-cac.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_474-cac.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0241.566] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_474-cac.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_474-cac.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0241.575] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_474-cac.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_474-cac.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_474-cac.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_474-cac.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0241.575] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_474-cac.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_474-cac.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0241.576] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_474-cac.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_474-cac.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6630871f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x6630871f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x66bb717b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x215e, dwReserved0=0x550340, dwReserved1=0x6, cFileName="2021-02-18_130550_474-cac.log", cAlternateFileName="2021-0~2.LOG")) returned 0x55e490 [0241.576] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6630871f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x6630871f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x66bb717b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x215e, dwReserved0=0x550340, dwReserved1=0x6, cFileName="2021-02-18_130550_474-cac.log", cAlternateFileName="2021-0~2.LOG")) returned 0 [0241.576] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0241.576] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_474-cac.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_474-cac.log")) returned 1 [0241.577] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_474-cac.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_474-cac.log")) returned 0xffffffff [0241.578] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65f2e5a1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x65f2e5a1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x66f8974f, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="2021-02-18_130550_ac-d08.log", cAlternateFileName="2021-0~1.LOG")) returned 1 [0241.578] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0241.578] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0241.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0241.578] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0241.578] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0241.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0241.579] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_ac-d08.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_ac-d08.log")) returned 0x20 [0241.579] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_ac-d08.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_ac-d08.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0241.579] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_ac-d08.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_ac-d08.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0241.698] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_ac-d08.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_ac-d08.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_ac-d08.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_ac-d08.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0241.698] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_ac-d08.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_ac-d08.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0241.698] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_ac-d08.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_ac-d08.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65f2e5a1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x65f2e5a1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x66f8974f, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x550340, dwReserved1=0x6, cFileName="2021-02-18_130550_ac-d08.log", cAlternateFileName="2021-0~1.LOG")) returned 0x55e750 [0241.699] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65f2e5a1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x65f2e5a1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x66f8974f, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x550340, dwReserved1=0x6, cFileName="2021-02-18_130550_ac-d08.log", cAlternateFileName="2021-0~1.LOG")) returned 0 [0241.699] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0241.699] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_ac-d08.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_ac-d08.log")) returned 1 [0241.700] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2021-02-18_130550_ac-d08.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2021-02-18_130550_ac-d08.log")) returned 0xffffffff [0241.700] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8805a3a7, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8805a3a7, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x98355904, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x234b2, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Install-PerUser_2021-02-11_125336_9c0-9f8.log", cAlternateFileName="INSTAL~2.LOG")) returned 1 [0241.701] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0241.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0241.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0241.701] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0241.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0241.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0241.701] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_125336_9c0-9f8.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_125336_9c0-9f8.log")) returned 0x20 [0241.702] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_125336_9c0-9f8.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_125336_9c0-9f8.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0241.703] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_125336_9c0-9f8.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_125336_9c0-9f8.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0241.959] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_125336_9c0-9f8.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_125336_9c0-9f8.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_125336_9c0-9f8.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_125336_9c0-9f8.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0241.960] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_125336_9c0-9f8.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_125336_9c0-9f8.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0241.960] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_125336_9c0-9f8.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_125336_9c0-9f8.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8805a3a7, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8805a3a7, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x98355904, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x234b2, dwReserved0=0x550370, dwReserved1=0xe, cFileName="Install-PerUser_2021-02-11_125336_9c0-9f8.log", cAlternateFileName="INSTAL~2.LOG")) returned 0x55e7d0 [0241.960] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8805a3a7, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8805a3a7, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x98355904, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x234b2, dwReserved0=0x550370, dwReserved1=0xe, cFileName="Install-PerUser_2021-02-11_125336_9c0-9f8.log", cAlternateFileName="INSTAL~2.LOG")) returned 0 [0241.960] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0241.961] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_125336_9c0-9f8.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_125336_9c0-9f8.log")) returned 1 [0241.963] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_125336_9c0-9f8.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_125336_9c0-9f8.log")) returned 0xffffffff [0241.963] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x137c38b0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x137c38b0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2b646bb1, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x2745e, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Install-PerUser_2021-02-11_131859_f38-f3c.log", cAlternateFileName="INSTAL~4.LOG")) returned 1 [0241.963] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0241.963] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0241.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0241.964] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0241.964] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0241.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0241.964] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_131859_f38-f3c.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_131859_f38-f3c.log")) returned 0x20 [0241.964] VirtualAlloc (lpAddress=0x728000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x728000 [0241.965] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_131859_f38-f3c.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_131859_f38-f3c.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0241.965] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_131859_f38-f3c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_131859_f38-f3c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0242.030] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_131859_f38-f3c.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_131859_f38-f3c.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_131859_f38-f3c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_131859_f38-f3c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.030] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_131859_f38-f3c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_131859_f38-f3c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.030] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_131859_f38-f3c.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_131859_f38-f3c.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x137c38b0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x137c38b0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2b646bb1, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x2745e, dwReserved0=0x550370, dwReserved1=0xe, cFileName="Install-PerUser_2021-02-11_131859_f38-f3c.log", cAlternateFileName="INSTAL~4.LOG")) returned 0x55e610 [0242.030] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x137c38b0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x137c38b0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2b646bb1, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x2745e, dwReserved0=0x550370, dwReserved1=0xe, cFileName="Install-PerUser_2021-02-11_131859_f38-f3c.log", cAlternateFileName="INSTAL~4.LOG")) returned 0 [0242.030] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0242.031] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_131859_f38-f3c.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_131859_f38-f3c.log")) returned 1 [0242.033] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_131859_f38-f3c.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_131859_f38-f3c.log")) returned 0xffffffff [0242.033] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xced0b146, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xced0b146, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1c297983, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x36366, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Install-PerUser_2021-02-11_132413_e60-e64.log", cAlternateFileName="IN9480~1.LOG")) returned 1 [0242.034] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.034] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.034] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.034] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0242.035] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132413_e60-e64.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132413_e60-e64.log")) returned 0x20 [0242.036] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132413_e60-e64.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132413_e60-e64.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0242.036] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132413_e60-e64.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132413_e60-e64.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.037] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.041] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.042] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.043] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.044] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.044] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.044] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.045] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.045] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.045] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.046] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.046] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.046] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.047] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.047] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.047] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.047] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.047] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.048] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.048] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.048] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.048] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.048] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.049] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.049] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.050] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.050] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.050] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.050] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.050] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.051] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.051] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.051] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.051] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.051] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.052] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.052] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.052] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.052] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.052] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.053] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.053] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.053] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.053] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.053] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.054] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.054] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.054] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.054] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.055] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.055] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.055] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.055] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.055] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.056] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.056] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.056] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.056] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.056] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.057] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.057] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.057] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.057] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.057] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.058] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.058] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.058] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.059] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.059] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.059] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.059] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.059] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.060] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.060] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.060] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.060] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.061] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.061] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.061] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.061] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.061] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.061] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.062] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.063] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.064] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.064] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.064] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.064] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.064] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.065] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.065] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.065] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.065] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.065] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.065] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.066] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.066] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x366, lpOverlapped=0x0) returned 1 [0242.066] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x366, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x366, lpOverlapped=0x0) returned 1 [0242.066] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.066] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.066] CloseHandle (hObject=0x1f0) returned 1 [0242.067] CloseHandle (hObject=0x1f4) returned 1 [0242.073] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132413_e60-e64.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132413_e60-e64.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132413_e60-e64.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132413_e60-e64.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.073] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132413_e60-e64.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132413_e60-e64.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.074] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132413_e60-e64.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132413_e60-e64.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xced0b146, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xced0b146, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1c297983, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x36366, dwReserved0=0x550370, dwReserved1=0xe, cFileName="Install-PerUser_2021-02-11_132413_e60-e64.log", cAlternateFileName="IN9480~1.LOG")) returned 0x55e490 [0242.074] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xced0b146, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xced0b146, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1c297983, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x36366, dwReserved0=0x550370, dwReserved1=0xe, cFileName="Install-PerUser_2021-02-11_132413_e60-e64.log", cAlternateFileName="IN9480~1.LOG")) returned 0 [0242.074] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0242.074] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132413_e60-e64.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132413_e60-e64.log")) returned 1 [0242.077] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132413_e60-e64.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132413_e60-e64.log")) returned 0xffffffff [0242.077] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb4b96d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4bb4b96d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6b71df77, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x390a2, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Install-PerUser_2021-02-11_132743_ca8-cac.log", cAlternateFileName="IN2849~1.LOG")) returned 1 [0242.078] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.078] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.078] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.078] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0242.078] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132743_ca8-cac.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132743_ca8-cac.log")) returned 0x20 [0242.079] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132743_ca8-cac.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132743_ca8-cac.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.079] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132743_ca8-cac.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132743_ca8-cac.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0242.080] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.082] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.083] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.085] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.085] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.086] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.086] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.086] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.086] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.086] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.087] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.087] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.087] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.088] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.088] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.089] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.089] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.089] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.090] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.090] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.090] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.090] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.090] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.092] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.092] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.093] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.093] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.093] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.094] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.094] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.094] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.094] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.095] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.095] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.095] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.096] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.096] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.096] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.097] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.097] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.097] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.097] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.098] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.098] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.098] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.099] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.099] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.099] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.099] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.100] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.100] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.100] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.100] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.101] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.101] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.101] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.101] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.101] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.103] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.103] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.103] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.103] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.103] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.104] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.104] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.104] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.104] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.104] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.104] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.105] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.105] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.105] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.105] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.106] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.106] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.106] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.106] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.107] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.107] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xa2, lpOverlapped=0x0) returned 1 [0242.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xa2, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xa2, lpOverlapped=0x0) returned 1 [0242.107] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.107] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.107] CloseHandle (hObject=0x1f4) returned 1 [0242.107] CloseHandle (hObject=0x1f0) returned 1 [0242.115] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132743_ca8-cac.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132743_ca8-cac.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132743_ca8-cac.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132743_ca8-cac.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.115] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132743_ca8-cac.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132743_ca8-cac.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.115] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132743_ca8-cac.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132743_ca8-cac.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb4b96d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4bb4b96d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6b71df77, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x390a2, dwReserved0=0x550370, dwReserved1=0xe, cFileName="Install-PerUser_2021-02-11_132743_ca8-cac.log", cAlternateFileName="IN2849~1.LOG")) returned 0x55e310 [0242.116] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb4b96d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4bb4b96d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6b71df77, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x390a2, dwReserved0=0x550370, dwReserved1=0xe, cFileName="Install-PerUser_2021-02-11_132743_ca8-cac.log", cAlternateFileName="IN2849~1.LOG")) returned 0 [0242.116] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0242.116] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132743_ca8-cac.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132743_ca8-cac.log")) returned 1 [0242.119] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_132743_ca8-cac.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_132743_ca8-cac.log")) returned 0xffffffff [0242.119] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd27489e1, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xd27489e1, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x8afcf13b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x5c1cc, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Install-PerUser_2021-02-11_134548_958-b14.log", cAlternateFileName="IN9042~1.LOG")) returned 1 [0242.119] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.119] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.119] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.119] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0242.119] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_134548_958-b14.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_134548_958-b14.log")) returned 0x20 [0242.120] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_134548_958-b14.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_134548_958-b14.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0242.120] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_134548_958-b14.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_134548_958-b14.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.120] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.123] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.124] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.126] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.126] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.126] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.127] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.127] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.127] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.127] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.128] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.128] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.128] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.128] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.129] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.129] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.129] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.129] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.130] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.130] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.130] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.131] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.131] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.131] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.131] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.131] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.131] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.132] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.133] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.134] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.134] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.134] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.134] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.135] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.135] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.135] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.135] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.136] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.136] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.136] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.136] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.136] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.136] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.136] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.137] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.137] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.137] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.137] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.137] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.137] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.138] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.138] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.138] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.138] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.138] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.138] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.139] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.139] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.139] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.139] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.140] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.140] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.140] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.140] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.141] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.141] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.141] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.141] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.141] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.142] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.142] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.142] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.145] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.145] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.145] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.146] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.146] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.146] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.147] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.147] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.147] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.147] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.148] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.148] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.148] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.153] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.153] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.188] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.188] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.189] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.189] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.189] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.189] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.190] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.190] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.190] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.190] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.191] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.191] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.191] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.192] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.192] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.192] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.192] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.193] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.193] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.193] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.193] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.194] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.194] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.194] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.194] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.195] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.195] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.195] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.196] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.196] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.197] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.197] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.197] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.197] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.198] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.198] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.198] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.198] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.199] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.199] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.199] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.199] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.200] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.200] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.200] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.200] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.201] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.201] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.201] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.201] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.202] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1cc, lpOverlapped=0x0) returned 1 [0242.202] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1cc, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1cc, lpOverlapped=0x0) returned 1 [0242.202] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.202] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.202] CloseHandle (hObject=0x1f0) returned 1 [0242.203] CloseHandle (hObject=0x1f4) returned 1 [0242.236] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_134548_958-b14.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_134548_958-b14.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_134548_958-b14.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_134548_958-b14.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.237] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_134548_958-b14.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_134548_958-b14.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.237] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_134548_958-b14.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_134548_958-b14.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd27489e1, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xd27489e1, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x8afcf13b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x5c1cc, dwReserved0=0x550370, dwReserved1=0xe, cFileName="Install-PerUser_2021-02-11_134548_958-b14.log", cAlternateFileName="IN9042~1.LOG")) returned 0x55e490 [0242.237] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd27489e1, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xd27489e1, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x8afcf13b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x5c1cc, dwReserved0=0x550370, dwReserved1=0xe, cFileName="Install-PerUser_2021-02-11_134548_958-b14.log", cAlternateFileName="IN9042~1.LOG")) returned 0 [0242.238] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0242.238] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_134548_958-b14.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_134548_958-b14.log")) returned 1 [0242.245] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2021-02-11_134548_958-b14.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2021-02-11_134548_958-b14.log")) returned 0xffffffff [0242.245] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b49234, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93186f59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Install_2021-02-11_125336_460-898.log", cAlternateFileName="INSTAL~1.LOG")) returned 1 [0242.246] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.246] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.246] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.246] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.247] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.247] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0242.247] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_125336_460-898.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_125336_460-898.log")) returned 0x20 [0242.247] VirtualAlloc (lpAddress=0x72c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x72c000 [0242.247] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_125336_460-898.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_125336_460-898.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.248] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_125336_460-898.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_125336_460-898.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0242.248] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.250] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.251] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.251] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.252] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.252] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.252] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.252] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.252] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.252] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.253] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.253] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.253] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.253] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.253] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.253] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.254] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.254] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.254] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.254] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.257] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.257] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.257] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.257] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.257] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.257] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.258] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.258] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.258] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.258] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.258] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x5f6, lpOverlapped=0x0) returned 1 [0242.259] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x5f6, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x5f6, lpOverlapped=0x0) returned 1 [0242.259] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.259] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.259] CloseHandle (hObject=0x1f4) returned 1 [0242.259] CloseHandle (hObject=0x1f0) returned 1 [0242.261] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_125336_460-898.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_125336_460-898.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_125336_460-898.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_125336_460-898.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.262] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_125336_460-898.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_125336_460-898.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.262] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_125336_460-898.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_125336_460-898.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b49234, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93186f59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Install_2021-02-11_125336_460-898.log", cAlternateFileName="INSTAL~1.LOG")) returned 0x55e210 [0242.262] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b49234, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93186f59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Install_2021-02-11_125336_460-898.log", cAlternateFileName="INSTAL~1.LOG")) returned 0 [0242.262] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0242.262] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_125336_460-898.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_125336_460-898.log")) returned 1 [0242.263] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_125336_460-898.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_125336_460-898.log")) returned 0xffffffff [0242.263] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13219ec0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13219ec0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1ae607dc, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Install_2021-02-11_131858_ed0-ed4.log", cAlternateFileName="INSTAL~3.LOG")) returned 1 [0242.264] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.264] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.264] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.264] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.264] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.264] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0242.264] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_131858_ed0-ed4.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_131858_ed0-ed4.log")) returned 0x20 [0242.265] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_131858_ed0-ed4.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_131858_ed0-ed4.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0242.265] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_131858_ed0-ed4.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_131858_ed0-ed4.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.265] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.275] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.276] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.276] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.276] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.277] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.277] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.277] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.277] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.277] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.277] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.277] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.278] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.278] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.278] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.278] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.278] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.278] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.279] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.279] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.279] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.279] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.279] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.279] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.279] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.280] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.280] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.280] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.280] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.280] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.280] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x5f6, lpOverlapped=0x0) returned 1 [0242.280] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x5f6, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x5f6, lpOverlapped=0x0) returned 1 [0242.281] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.281] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.281] CloseHandle (hObject=0x1f0) returned 1 [0242.281] CloseHandle (hObject=0x1f4) returned 1 [0242.284] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_131858_ed0-ed4.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_131858_ed0-ed4.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_131858_ed0-ed4.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_131858_ed0-ed4.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.284] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_131858_ed0-ed4.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_131858_ed0-ed4.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.284] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_131858_ed0-ed4.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_131858_ed0-ed4.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13219ec0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13219ec0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1ae607dc, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Install_2021-02-11_131858_ed0-ed4.log", cAlternateFileName="INSTAL~3.LOG")) returned 0x55e5d0 [0242.284] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13219ec0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13219ec0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1ae607dc, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Install_2021-02-11_131858_ed0-ed4.log", cAlternateFileName="INSTAL~3.LOG")) returned 0 [0242.284] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0242.284] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_131858_ed0-ed4.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_131858_ed0-ed4.log")) returned 1 [0242.286] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_131858_ed0-ed4.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_131858_ed0-ed4.log")) returned 0xffffffff [0242.286] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce65674c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xce65674c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xed3dd471, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Install_2021-02-11_132412_e10-e14.log", cAlternateFileName="IN9930~1.LOG")) returned 1 [0242.286] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.286] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.286] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.286] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.286] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.286] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0242.287] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132412_e10-e14.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132412_e10-e14.log")) returned 0x20 [0242.287] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132412_e10-e14.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132412_e10-e14.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.287] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132412_e10-e14.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132412_e10-e14.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0242.287] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.306] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.307] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.324] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.325] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.325] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.325] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.325] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.326] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.326] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.326] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.326] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.327] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.327] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.327] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.327] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.327] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.328] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.328] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.328] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.328] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.329] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x5f6, lpOverlapped=0x0) returned 1 [0242.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x5f6, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x5f6, lpOverlapped=0x0) returned 1 [0242.329] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.329] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.329] CloseHandle (hObject=0x1f4) returned 1 [0242.329] CloseHandle (hObject=0x1f0) returned 1 [0242.332] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132412_e10-e14.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132412_e10-e14.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132412_e10-e14.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132412_e10-e14.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.333] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132412_e10-e14.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132412_e10-e14.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.333] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132412_e10-e14.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132412_e10-e14.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce65674c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xce65674c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xed3dd471, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Install_2021-02-11_132412_e10-e14.log", cAlternateFileName="IN9930~1.LOG")) returned 0x55e5d0 [0242.333] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce65674c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xce65674c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xed3dd471, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Install_2021-02-11_132412_e10-e14.log", cAlternateFileName="IN9930~1.LOG")) returned 0 [0242.333] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0242.334] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132412_e10-e14.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132412_e10-e14.log")) returned 1 [0242.338] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132412_e10-e14.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132412_e10-e14.log")) returned 0xffffffff [0242.338] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b7b80c2, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4b7b80c2, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4f5db470, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Install_2021-02-11_132742_c8c-c90.log", cAlternateFileName="IN7F4F~1.LOG")) returned 1 [0242.339] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.339] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.339] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.340] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.340] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.340] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0242.340] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132742_c8c-c90.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132742_c8c-c90.log")) returned 0x20 [0242.342] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132742_c8c-c90.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132742_c8c-c90.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0242.343] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132742_c8c-c90.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132742_c8c-c90.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.344] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.351] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.352] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.369] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.369] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.370] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.370] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.370] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.370] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.370] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.370] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.370] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.371] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.371] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.371] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.371] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.371] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.371] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.372] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.372] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.372] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.372] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.373] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.373] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.373] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.373] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.374] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x5f6, lpOverlapped=0x0) returned 1 [0242.374] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x5f6, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x5f6, lpOverlapped=0x0) returned 1 [0242.374] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.374] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.374] CloseHandle (hObject=0x1f0) returned 1 [0242.374] CloseHandle (hObject=0x1f4) returned 1 [0242.376] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132742_c8c-c90.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132742_c8c-c90.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132742_c8c-c90.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132742_c8c-c90.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.377] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132742_c8c-c90.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132742_c8c-c90.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.377] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132742_c8c-c90.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132742_c8c-c90.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b7b80c2, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4b7b80c2, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4f5db470, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Install_2021-02-11_132742_c8c-c90.log", cAlternateFileName="IN7F4F~1.LOG")) returned 0x55e310 [0242.377] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b7b80c2, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4b7b80c2, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4f5db470, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Install_2021-02-11_132742_c8c-c90.log", cAlternateFileName="IN7F4F~1.LOG")) returned 0 [0242.377] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0242.378] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132742_c8c-c90.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132742_c8c-c90.log")) returned 1 [0242.379] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_132742_c8c-c90.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_132742_c8c-c90.log")) returned 0xffffffff [0242.379] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2499e2e, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xd2499e2e, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x8b2a3f4c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0xfa9c, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Install_2021-02-11_134547_2bc-868.log", cAlternateFileName="IN58DE~1.LOG")) returned 1 [0242.379] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.379] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.380] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.380] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0242.380] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_134547_2bc-868.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_134547_2bc-868.log")) returned 0x20 [0242.380] VirtualAlloc (lpAddress=0x730000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x730000 [0242.380] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_134547_2bc-868.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_134547_2bc-868.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.381] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_134547_2bc-868.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_134547_2bc-868.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0242.381] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.383] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.384] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.385] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.385] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.385] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.385] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.386] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.386] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.386] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.386] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.386] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.386] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.387] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.387] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.387] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.387] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.388] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.388] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.388] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.388] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.389] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.389] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xa9c, lpOverlapped=0x0) returned 1 [0242.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xa9c, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xa9c, lpOverlapped=0x0) returned 1 [0242.389] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.389] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.389] CloseHandle (hObject=0x1f4) returned 1 [0242.389] CloseHandle (hObject=0x1f0) returned 1 [0242.391] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_134547_2bc-868.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_134547_2bc-868.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_134547_2bc-868.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_134547_2bc-868.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.392] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_134547_2bc-868.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_134547_2bc-868.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.392] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_134547_2bc-868.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_134547_2bc-868.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2499e2e, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xd2499e2e, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x8b2a3f4c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0xfa9c, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Install_2021-02-11_134547_2bc-868.log", cAlternateFileName="IN58DE~1.LOG")) returned 0x55e510 [0242.392] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2499e2e, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xd2499e2e, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x8b2a3f4c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0xfa9c, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Install_2021-02-11_134547_2bc-868.log", cAlternateFileName="IN58DE~1.LOG")) returned 0 [0242.392] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0242.392] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_134547_2bc-868.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_134547_2bc-868.log")) returned 1 [0242.394] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2021-02-11_134547_2bc-868.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2021-02-11_134547_2bc-868.log")) returned 0xffffffff [0242.394] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb13d58b4, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb13d58b4, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb254453d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x10c74, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Uninstall-PerMachine_2022-08-03_151233_e44-b50.log", cAlternateFileName="UNINST~2.LOG")) returned 1 [0242.395] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.395] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.395] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.395] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0242.395] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerMachine_2022-08-03_151233_e44-b50.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-permachine_2022-08-03_151233_e44-b50.log")) returned 0x20 [0242.396] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerMachine_2022-08-03_151233_e44-b50.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-permachine_2022-08-03_151233_e44-b50.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0242.396] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerMachine_2022-08-03_151233_e44-b50.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-permachine_2022-08-03_151233_e44-b50.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.396] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.400] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.401] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.462] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.463] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.463] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.463] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.464] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.464] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.464] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.464] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.465] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.465] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.465] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.466] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.466] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.466] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.466] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.467] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.467] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.467] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.468] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.468] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.468] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xc74, lpOverlapped=0x0) returned 1 [0242.468] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xc74, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xc74, lpOverlapped=0x0) returned 1 [0242.469] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.469] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.469] CloseHandle (hObject=0x1f0) returned 1 [0242.469] CloseHandle (hObject=0x1f4) returned 1 [0242.471] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerMachine_2022-08-03_151233_e44-b50.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-permachine_2022-08-03_151233_e44-b50.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerMachine_2022-08-03_151233_e44-b50.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-permachine_2022-08-03_151233_e44-b50.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.472] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerMachine_2022-08-03_151233_e44-b50.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-permachine_2022-08-03_151233_e44-b50.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.472] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerMachine_2022-08-03_151233_e44-b50.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-permachine_2022-08-03_151233_e44-b50.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb13d58b4, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb13d58b4, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb254453d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x10c74, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="Uninstall-PerMachine_2022-08-03_151233_e44-b50.log", cAlternateFileName="UNINST~2.LOG")) returned 0x55e510 [0242.472] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb13d58b4, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb13d58b4, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb254453d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x10c74, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="Uninstall-PerMachine_2022-08-03_151233_e44-b50.log", cAlternateFileName="UNINST~2.LOG")) returned 0 [0242.472] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0242.472] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerMachine_2022-08-03_151233_e44-b50.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-permachine_2022-08-03_151233_e44-b50.log")) returned 1 [0242.474] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerMachine_2022-08-03_151233_e44-b50.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-permachine_2022-08-03_151233_e44-b50.log")) returned 0xffffffff [0242.474] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1526b6c, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb1526b6c, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2c68d12, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x11f56, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="Uninstall-PerUser_2022-08-03_151233_600-778.log", cAlternateFileName="UNINST~3.LOG")) returned 1 [0242.474] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.474] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.475] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.475] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0242.475] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerUser_2022-08-03_151233_600-778.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-peruser_2022-08-03_151233_600-778.log")) returned 0x20 [0242.475] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerUser_2022-08-03_151233_600-778.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-peruser_2022-08-03_151233_600-778.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.475] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerUser_2022-08-03_151233_600-778.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-peruser_2022-08-03_151233_600-778.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0242.476] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.478] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.479] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.535] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.536] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.536] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.536] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.536] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.537] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.537] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.537] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.537] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.537] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.537] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.538] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.538] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.538] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.538] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.538] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.539] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.539] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.540] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.540] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.540] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.540] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.541] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.541] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.541] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.542] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xf56, lpOverlapped=0x0) returned 1 [0242.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xf56, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xf56, lpOverlapped=0x0) returned 1 [0242.542] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.542] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.542] CloseHandle (hObject=0x1f4) returned 1 [0242.542] CloseHandle (hObject=0x1f0) returned 1 [0242.545] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerUser_2022-08-03_151233_600-778.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-peruser_2022-08-03_151233_600-778.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerUser_2022-08-03_151233_600-778.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-peruser_2022-08-03_151233_600-778.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.546] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerUser_2022-08-03_151233_600-778.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-peruser_2022-08-03_151233_600-778.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.546] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerUser_2022-08-03_151233_600-778.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-peruser_2022-08-03_151233_600-778.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1526b6c, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb1526b6c, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2c68d12, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x11f56, dwReserved0=0x550370, dwReserved1=0xd, cFileName="Uninstall-PerUser_2022-08-03_151233_600-778.log", cAlternateFileName="UNINST~3.LOG")) returned 0x55e510 [0242.546] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1526b6c, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb1526b6c, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2c68d12, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x11f56, dwReserved0=0x550370, dwReserved1=0xd, cFileName="Uninstall-PerUser_2022-08-03_151233_600-778.log", cAlternateFileName="UNINST~3.LOG")) returned 0 [0242.546] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0242.547] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerUser_2022-08-03_151233_600-778.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-peruser_2022-08-03_151233_600-778.log")) returned 1 [0242.548] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall-PerUser_2022-08-03_151233_600-778.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall-peruser_2022-08-03_151233_600-778.log")) returned 0xffffffff [0242.548] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eab8c0, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb0eab8c0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0xfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall_2022-08-03_151232_fb8-87c.log", cAlternateFileName="UNINST~1.LOG")) returned 1 [0242.549] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.549] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.549] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.549] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0242.549] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall_2022-08-03_151232_fb8-87c.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall_2022-08-03_151232_fb8-87c.log")) returned 0x20 [0242.549] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall_2022-08-03_151232_fb8-87c.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall_2022-08-03_151232_fb8-87c.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0242.550] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall_2022-08-03_151232_fb8-87c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall_2022-08-03_151232_fb8-87c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.550] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.552] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.552] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.690] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.690] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.690] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.691] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.691] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.691] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.691] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.692] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.692] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.692] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.692] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.693] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.693] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.693] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.693] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.694] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.694] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.694] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.694] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0242.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xc98, lpOverlapped=0x0) returned 1 [0242.695] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xc98, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xc98, lpOverlapped=0x0) returned 1 [0242.695] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.695] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0242.695] CloseHandle (hObject=0x1f0) returned 1 [0242.695] CloseHandle (hObject=0x1f4) returned 1 [0242.698] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall_2022-08-03_151232_fb8-87c.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall_2022-08-03_151232_fb8-87c.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall_2022-08-03_151232_fb8-87c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall_2022-08-03_151232_fb8-87c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.698] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall_2022-08-03_151232_fb8-87c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall_2022-08-03_151232_fb8-87c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.698] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall_2022-08-03_151232_fb8-87c.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall_2022-08-03_151232_fb8-87c.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eab8c0, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb0eab8c0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0xfc98, dwReserved0=0x550370, dwReserved1=0xf, cFileName="Uninstall_2022-08-03_151232_fb8-87c.log", cAlternateFileName="UNINST~1.LOG")) returned 0x55e5d0 [0242.698] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eab8c0, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb0eab8c0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0xfc98, dwReserved0=0x550370, dwReserved1=0xf, cFileName="Uninstall_2022-08-03_151232_fb8-87c.log", cAlternateFileName="UNINST~1.LOG")) returned 0 [0242.698] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0242.699] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall_2022-08-03_151232_fb8-87c.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall_2022-08-03_151232_fb8-87c.log")) returned 1 [0242.700] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Uninstall_2022-08-03_151232_fb8-87c.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\uninstall_2022-08-03_151232_fb8-87c.log")) returned 0xffffffff [0242.700] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eab8c0, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb0eab8c0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0xfc98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall_2022-08-03_151232_fb8-87c.log", cAlternateFileName="UNINST~1.LOG")) returned 0 [0242.700] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0242.700] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb15a88f0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb15a88f0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c642e30, dwReserved1=0x34366c6c, cFileName="logs", cAlternateFileName="")) returned 0 [0242.701] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0242.701] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b49234, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87b49234, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7041746e, dwReserved1=0x6c642e69, cFileName="setup", cAlternateFileName="")) returned 0 [0242.701] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0242.701] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11bc67, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x847a2bfc, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x302e3239, dwReserved1=0x5f363236, cFileName="Outlook", cAlternateFileName="")) returned 1 [0242.701] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11bc67, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x847a2bfc, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7041746e, dwReserved1=0x6c642e69, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0242.701] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11bc67, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x847a2bfc, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7041746e, dwReserved1=0x6c642e69, cFileName="..", cAlternateFileName="")) returned 1 [0242.701] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11cf49, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a11cf49, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a11cf49, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7041746e, dwReserved1=0x6c642e69, cFileName="gliding", cAlternateFileName="")) returned 1 [0242.701] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\gliding\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\gliding\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11cf49, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a11cf49, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a11cf49, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x325f6c6c, dwReserved1=0x2d323230, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0242.701] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11cf49, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a11cf49, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a11cf49, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x325f6c6c, dwReserved1=0x2d323230, cFileName="..", cAlternateFileName="")) returned 1 [0242.702] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11cf49, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a11cf49, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a11cf49, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x325f6c6c, dwReserved1=0x2d323230, cFileName="..", cAlternateFileName="")) returned 0 [0242.702] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0242.702] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x847a2bfc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x847a2bfc, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7041746e, dwReserved1=0x6c642e69, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 1 [0242.702] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x847a2bfc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x325f6c6c, dwReserved1=0x2d323230, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0242.785] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x847a2bfc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x325f6c6c, dwReserved1=0x2d323230, cFileName="..", cAlternateFileName="")) returned 1 [0242.785] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x852113a8, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x852113a8, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x852113a8, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x1a6, dwReserved0=0x325f6c6c, dwReserved1=0x2d323230, cFileName="Stream_AvailabilityOptions_2_2C7AA04D2219194EA70292F5EBA3A280.dat", cAlternateFileName="STREAM~3.DAT")) returned 1 [0242.785] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.785] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.785] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.785] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.785] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.785] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0242.785] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_AvailabilityOptions_2_2C7AA04D2219194EA70292F5EBA3A280.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_availabilityoptions_2_2c7aa04d2219194ea70292f5eba3a280.dat")) returned 0x20 [0242.787] VirtualAlloc (lpAddress=0x734000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x734000 [0242.787] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_AvailabilityOptions_2_2C7AA04D2219194EA70292F5EBA3A280.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_availabilityoptions_2_2c7aa04d2219194ea70292f5eba3a280.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0242.788] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_AvailabilityOptions_2_2C7AA04D2219194EA70292F5EBA3A280.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_availabilityoptions_2_2c7aa04d2219194ea70292f5eba3a280.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.788] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1a6, lpOverlapped=0x0) returned 1 [0242.789] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1a6, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1a6, lpOverlapped=0x0) returned 1 [0242.790] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.790] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.790] CloseHandle (hObject=0x1e4) returned 1 [0242.790] CloseHandle (hObject=0x1f4) returned 1 [0242.792] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_AvailabilityOptions_2_2C7AA04D2219194EA70292F5EBA3A280.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_availabilityoptions_2_2c7aa04d2219194ea70292f5eba3a280.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_AvailabilityOptions_2_2C7AA04D2219194EA70292F5EBA3A280.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_availabilityoptions_2_2c7aa04d2219194ea70292f5eba3a280.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.792] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_AvailabilityOptions_2_2C7AA04D2219194EA70292F5EBA3A280.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_availabilityoptions_2_2c7aa04d2219194ea70292f5eba3a280.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.792] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_AvailabilityOptions_2_2C7AA04D2219194EA70292F5EBA3A280.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_availabilityoptions_2_2c7aa04d2219194ea70292f5eba3a280.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x852113a8, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x852113a8, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x852113a8, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x1a6, dwReserved0=0x5503c4, dwReserved1=0x1e, cFileName="Stream_AvailabilityOptions_2_2C7AA04D2219194EA70292F5EBA3A280.dat", cAlternateFileName="STREAM~3.DAT")) returned 0x55e2d0 [0242.792] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x852113a8, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x852113a8, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x852113a8, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x1a6, dwReserved0=0x5503c4, dwReserved1=0x1e, cFileName="Stream_AvailabilityOptions_2_2C7AA04D2219194EA70292F5EBA3A280.dat", cAlternateFileName="STREAM~3.DAT")) returned 0 [0242.792] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0242.793] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_AvailabilityOptions_2_2C7AA04D2219194EA70292F5EBA3A280.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_availabilityoptions_2_2c7aa04d2219194ea70292f5eba3a280.dat")) returned 1 [0242.793] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_AvailabilityOptions_2_2C7AA04D2219194EA70292F5EBA3A280.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_availabilityoptions_2_2c7aa04d2219194ea70292f5eba3a280.dat")) returned 0xffffffff [0242.794] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851eadf9, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x851eadf9, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x851eadf9, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_Calendar_2_9CB11E4EC4310E4C8A521398899F6363.dat", cAlternateFileName="STREAM~2.DAT")) returned 1 [0242.794] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.794] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.794] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.794] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.794] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.794] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0242.794] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_Calendar_2_9CB11E4EC4310E4C8A521398899F6363.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_calendar_2_9cb11e4ec4310e4c8a521398899f6363.dat")) returned 0x20 [0242.795] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_Calendar_2_9CB11E4EC4310E4C8A521398899F6363.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_calendar_2_9cb11e4ec4310e4c8a521398899f6363.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.795] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_Calendar_2_9CB11E4EC4310E4C8A521398899F6363.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_calendar_2_9cb11e4ec4310e4c8a521398899f6363.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0242.795] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x24c, lpOverlapped=0x0) returned 1 [0242.896] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x24c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x24c, lpOverlapped=0x0) returned 1 [0242.897] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.897] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.897] CloseHandle (hObject=0x1f4) returned 1 [0242.898] CloseHandle (hObject=0x1e4) returned 1 [0242.899] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_Calendar_2_9CB11E4EC4310E4C8A521398899F6363.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_calendar_2_9cb11e4ec4310e4c8a521398899f6363.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_Calendar_2_9CB11E4EC4310E4C8A521398899F6363.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_calendar_2_9cb11e4ec4310e4c8a521398899f6363.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.899] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_Calendar_2_9CB11E4EC4310E4C8A521398899F6363.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_calendar_2_9cb11e4ec4310e4c8a521398899f6363.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.900] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_Calendar_2_9CB11E4EC4310E4C8A521398899F6363.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_calendar_2_9cb11e4ec4310e4c8a521398899f6363.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851eadf9, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x851eadf9, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x851eadf9, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Stream_Calendar_2_9CB11E4EC4310E4C8A521398899F6363.dat", cAlternateFileName="STREAM~2.DAT")) returned 0x55e310 [0242.900] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851eadf9, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x851eadf9, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x851eadf9, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Stream_Calendar_2_9CB11E4EC4310E4C8A521398899F6363.dat", cAlternateFileName="STREAM~2.DAT")) returned 0 [0242.900] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0242.900] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_Calendar_2_9CB11E4EC4310E4C8A521398899F6363.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_calendar_2_9cb11e4ec4310e4c8a521398899f6363.dat")) returned 1 [0242.901] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_Calendar_2_9CB11E4EC4310E4C8A521398899F6363.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_calendar_2_9cb11e4ec4310e4c8a521398899f6363.dat")) returned 0xffffffff [0242.901] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8523735d, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8523735d, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="Stream_ConversationPrefs_2_CB6E3F7FAEA44A4FA14976E46D022840.dat", cAlternateFileName="ST1F13~1.DAT")) returned 1 [0242.902] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.902] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.902] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.902] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.902] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.902] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0242.902] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ConversationPrefs_2_CB6E3F7FAEA44A4FA14976E46D022840.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_conversationprefs_2_cb6e3f7faea44a4fa14976e46d022840.dat")) returned 0x20 [0242.904] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ConversationPrefs_2_CB6E3F7FAEA44A4FA14976E46D022840.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_conversationprefs_2_cb6e3f7faea44a4fa14976e46d022840.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0242.904] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ConversationPrefs_2_CB6E3F7FAEA44A4FA14976E46D022840.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_conversationprefs_2_cb6e3f7faea44a4fa14976e46d022840.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.905] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x10b, lpOverlapped=0x0) returned 1 [0242.906] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x10b, lpOverlapped=0x0) returned 1 [0242.907] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.907] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.907] CloseHandle (hObject=0x1e4) returned 1 [0242.907] CloseHandle (hObject=0x1f4) returned 1 [0242.908] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ConversationPrefs_2_CB6E3F7FAEA44A4FA14976E46D022840.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_conversationprefs_2_cb6e3f7faea44a4fa14976e46d022840.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ConversationPrefs_2_CB6E3F7FAEA44A4FA14976E46D022840.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_conversationprefs_2_cb6e3f7faea44a4fa14976e46d022840.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.908] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ConversationPrefs_2_CB6E3F7FAEA44A4FA14976E46D022840.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_conversationprefs_2_cb6e3f7faea44a4fa14976e46d022840.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.908] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ConversationPrefs_2_CB6E3F7FAEA44A4FA14976E46D022840.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_conversationprefs_2_cb6e3f7faea44a4fa14976e46d022840.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8523735d, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8523735d, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="Stream_ConversationPrefs_2_CB6E3F7FAEA44A4FA14976E46D022840.dat", cAlternateFileName="ST1F13~1.DAT")) returned 0x55e490 [0242.909] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8523735d, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8523735d, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="Stream_ConversationPrefs_2_CB6E3F7FAEA44A4FA14976E46D022840.dat", cAlternateFileName="ST1F13~1.DAT")) returned 0 [0242.909] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0242.909] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ConversationPrefs_2_CB6E3F7FAEA44A4FA14976E46D022840.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_conversationprefs_2_cb6e3f7faea44a4fa14976e46d022840.dat")) returned 1 [0242.910] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ConversationPrefs_2_CB6E3F7FAEA44A4FA14976E46D022840.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_conversationprefs_2_cb6e3f7faea44a4fa14976e46d022840.dat")) returned 0xffffffff [0242.910] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8523735d, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8523735d, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_RssRule_2_89165BE322C99248809EDE195CDE0B87.dat", cAlternateFileName="ST0B25~1.DAT")) returned 1 [0242.910] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.910] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.910] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.910] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.910] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0242.911] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_RssRule_2_89165BE322C99248809EDE195CDE0B87.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_rssrule_2_89165be322c99248809ede195cde0b87.dat")) returned 0x20 [0242.911] VirtualAlloc (lpAddress=0x738000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x738000 [0242.912] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_RssRule_2_89165BE322C99248809EDE195CDE0B87.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_rssrule_2_89165be322c99248809ede195cde0b87.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.912] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_RssRule_2_89165BE322C99248809EDE195CDE0B87.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_rssrule_2_89165be322c99248809ede195cde0b87.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0242.912] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xc4, lpOverlapped=0x0) returned 1 [0242.913] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xc4, lpOverlapped=0x0) returned 1 [0242.923] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.923] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.923] CloseHandle (hObject=0x1f4) returned 1 [0242.923] CloseHandle (hObject=0x1e4) returned 1 [0242.925] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_RssRule_2_89165BE322C99248809EDE195CDE0B87.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_rssrule_2_89165be322c99248809ede195cde0b87.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_RssRule_2_89165BE322C99248809EDE195CDE0B87.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_rssrule_2_89165be322c99248809ede195cde0b87.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.925] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_RssRule_2_89165BE322C99248809EDE195CDE0B87.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_rssrule_2_89165be322c99248809ede195cde0b87.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.925] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_RssRule_2_89165BE322C99248809EDE195CDE0B87.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_rssrule_2_89165be322c99248809ede195cde0b87.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8523735d, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8523735d, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Stream_RssRule_2_89165BE322C99248809EDE195CDE0B87.dat", cAlternateFileName="ST0B25~1.DAT")) returned 0x55e910 [0242.926] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8523735d, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8523735d, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Stream_RssRule_2_89165BE322C99248809EDE195CDE0B87.dat", cAlternateFileName="ST0B25~1.DAT")) returned 0 [0242.926] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0242.926] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_RssRule_2_89165BE322C99248809EDE195CDE0B87.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_rssrule_2_89165be322c99248809ede195cde0b87.dat")) returned 1 [0242.927] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_RssRule_2_89165BE322C99248809EDE195CDE0B87.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_rssrule_2_89165be322c99248809ede195cde0b87.dat")) returned 0xffffffff [0242.927] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8523735d, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8523735d, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="Stream_TableViewPreviewPrefs_2_A742548D6458CC4C8687C7E265CEB954.dat", cAlternateFileName="ST4027~1.DAT")) returned 1 [0242.927] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.927] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.927] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.928] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0242.928] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TableViewPreviewPrefs_2_A742548D6458CC4C8687C7E265CEB954.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tableviewpreviewprefs_2_a742548d6458cc4c8687c7e265ceb954.dat")) returned 0x20 [0242.929] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TableViewPreviewPrefs_2_A742548D6458CC4C8687C7E265CEB954.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tableviewpreviewprefs_2_a742548d6458cc4c8687c7e265ceb954.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0242.929] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TableViewPreviewPrefs_2_A742548D6458CC4C8687C7E265CEB954.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tableviewpreviewprefs_2_a742548d6458cc4c8687c7e265ceb954.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.930] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x11c, lpOverlapped=0x0) returned 1 [0242.931] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x11c, lpOverlapped=0x0) returned 1 [0242.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.932] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.932] CloseHandle (hObject=0x1e4) returned 1 [0242.932] CloseHandle (hObject=0x1f4) returned 1 [0242.933] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TableViewPreviewPrefs_2_A742548D6458CC4C8687C7E265CEB954.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tableviewpreviewprefs_2_a742548d6458cc4c8687c7e265ceb954.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TableViewPreviewPrefs_2_A742548D6458CC4C8687C7E265CEB954.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tableviewpreviewprefs_2_a742548d6458cc4c8687c7e265ceb954.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.933] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TableViewPreviewPrefs_2_A742548D6458CC4C8687C7E265CEB954.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tableviewpreviewprefs_2_a742548d6458cc4c8687c7e265ceb954.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.933] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TableViewPreviewPrefs_2_A742548D6458CC4C8687C7E265CEB954.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tableviewpreviewprefs_2_a742548d6458cc4c8687c7e265ceb954.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8523735d, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8523735d, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x5503c4, dwReserved1=0x1e, cFileName="Stream_TableViewPreviewPrefs_2_A742548D6458CC4C8687C7E265CEB954.dat", cAlternateFileName="ST4027~1.DAT")) returned 0x55e610 [0242.934] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8523735d, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8523735d, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x5503c4, dwReserved1=0x1e, cFileName="Stream_TableViewPreviewPrefs_2_A742548D6458CC4C8687C7E265CEB954.dat", cAlternateFileName="ST4027~1.DAT")) returned 0 [0242.934] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0242.934] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TableViewPreviewPrefs_2_A742548D6458CC4C8687C7E265CEB954.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tableviewpreviewprefs_2_a742548d6458cc4c8687c7e265ceb954.dat")) returned 1 [0242.935] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TableViewPreviewPrefs_2_A742548D6458CC4C8687C7E265CEB954.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tableviewpreviewprefs_2_a742548d6458cc4c8687c7e265ceb954.dat")) returned 0xffffffff [0242.935] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847a2bfc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x847a2bfc, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_TCPrefs_2_D3E71568CFF98B44AA768B6125CC6184.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0242.935] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.935] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.935] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.935] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.935] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.936] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0242.936] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TCPrefs_2_D3E71568CFF98B44AA768B6125CC6184.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tcprefs_2_d3e71568cff98b44aa768b6125cc6184.dat")) returned 0x20 [0242.936] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TCPrefs_2_D3E71568CFF98B44AA768B6125CC6184.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tcprefs_2_d3e71568cff98b44aa768b6125cc6184.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.936] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TCPrefs_2_D3E71568CFF98B44AA768B6125CC6184.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tcprefs_2_d3e71568cff98b44aa768b6125cc6184.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0242.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xcc, lpOverlapped=0x0) returned 1 [0242.937] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xcc, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xcc, lpOverlapped=0x0) returned 1 [0242.938] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.938] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.939] CloseHandle (hObject=0x1f4) returned 1 [0242.939] CloseHandle (hObject=0x1e4) returned 1 [0242.940] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TCPrefs_2_D3E71568CFF98B44AA768B6125CC6184.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tcprefs_2_d3e71568cff98b44aa768b6125cc6184.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TCPrefs_2_D3E71568CFF98B44AA768B6125CC6184.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tcprefs_2_d3e71568cff98b44aa768b6125cc6184.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.940] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TCPrefs_2_D3E71568CFF98B44AA768B6125CC6184.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tcprefs_2_d3e71568cff98b44aa768b6125cc6184.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.940] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TCPrefs_2_D3E71568CFF98B44AA768B6125CC6184.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tcprefs_2_d3e71568cff98b44aa768b6125cc6184.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847a2bfc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x847a2bfc, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Stream_TCPrefs_2_D3E71568CFF98B44AA768B6125CC6184.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x55e610 [0242.940] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847a2bfc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x847a2bfc, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Stream_TCPrefs_2_D3E71568CFF98B44AA768B6125CC6184.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0242.940] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0242.940] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TCPrefs_2_D3E71568CFF98B44AA768B6125CC6184.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tcprefs_2_d3e71568cff98b44aa768b6125cc6184.dat")) returned 1 [0242.942] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_TCPrefs_2_D3E71568CFF98B44AA768B6125CC6184.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_tcprefs_2_d3e71568cff98b44aa768b6125cc6184.dat")) returned 0xffffffff [0242.942] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8523735d, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8523735d, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat", cAlternateFileName="STREAM~4.DAT")) returned 1 [0242.942] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.942] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.942] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.942] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0242.942] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_workhours_1_79cce53c766c8e47879feabfb445e1f9.dat")) returned 0x20 [0242.943] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_workhours_1_79cce53c766c8e47879feabfb445e1f9.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0242.943] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_workhours_1_79cce53c766c8e47879feabfb445e1f9.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.943] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x27c, lpOverlapped=0x0) returned 1 [0242.947] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x27c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x27c, lpOverlapped=0x0) returned 1 [0242.948] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.948] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.948] CloseHandle (hObject=0x1e4) returned 1 [0242.948] CloseHandle (hObject=0x1f4) returned 1 [0242.949] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_workhours_1_79cce53c766c8e47879feabfb445e1f9.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_workhours_1_79cce53c766c8e47879feabfb445e1f9.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.949] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_workhours_1_79cce53c766c8e47879feabfb445e1f9.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.949] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_workhours_1_79cce53c766c8e47879feabfb445e1f9.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8523735d, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8523735d, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat", cAlternateFileName="STREAM~4.DAT")) returned 0x55e390 [0242.950] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8523735d, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8523735d, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat", cAlternateFileName="STREAM~4.DAT")) returned 0 [0242.950] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0242.950] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_workhours_1_79cce53c766c8e47879feabfb445e1f9.dat")) returned 1 [0242.951] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_workhours_1_79cce53c766c8e47879feabfb445e1f9.dat")) returned 0xffffffff [0242.951] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8523735d, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8523735d, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8523735d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat", cAlternateFileName="STREAM~4.DAT")) returned 0 [0242.951] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0242.951] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x847a2bfc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x847a2bfc, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7041746e, dwReserved1=0x6c642e69, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 0 [0242.951] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0242.951] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x302e6568, dwReserved1=0x5f363236, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1 [0242.951] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\playready\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b726f57, dwReserved1=0x72756f48, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0242.952] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b726f57, dwReserved1=0x72756f48, cFileName="..", cAlternateFileName="")) returned 1 [0242.952] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b726f57, dwReserved1=0x72756f48, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0242.952] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\playready\\internet explorer\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0242.952] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="..", cAlternateFileName="")) returned 1 [0242.952] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="Desktop", cAlternateFileName="")) returned 1 [0242.952] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\playready\\internet explorer\\desktop\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0242.952] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.953] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0242.953] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0242.953] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="Desktop", cAlternateFileName="")) returned 0 [0242.953] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0242.953] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b726f57, dwReserved1=0x72756f48, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0242.953] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0242.953] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb9574d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName="Vault", cAlternateFileName="")) returned 1 [0242.953] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb9574d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b726f57, dwReserved1=0x72756f48, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0242.953] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb9574d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b726f57, dwReserved1=0x72756f48, cFileName="..", cAlternateFileName="")) returned 1 [0242.953] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8beb5c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb8beb5c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb8beb5c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b726f57, dwReserved1=0x72756f48, cFileName="4BF4C442-9B8A-41A0-B380-DD4A704DDB28", cAlternateFileName="4BF4C4~1")) returned 1 [0242.953] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8beb5c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb8beb5c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb8beb5c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0242.954] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8beb5c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb8beb5c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb8beb5c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="..", cAlternateFileName="")) returned 1 [0242.954] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8beb5c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb8beb5c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb8beb5c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1b4, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="Policy.vpol", cAlternateFileName="POLICY~1.VPO")) returned 1 [0242.954] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8beb5c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb8beb5c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb8beb5c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1b4, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="Policy.vpol", cAlternateFileName="POLICY~1.VPO")) returned 0 [0242.954] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0242.954] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb9574d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb9574d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb9574d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6f7076, dwReserved1=0x72756f48, cFileName="UserProfileRoaming", cAlternateFileName="USERPR~1")) returned 1 [0242.954] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\userprofileroaming\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb9574d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb9574d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb9574d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0242.955] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb9574d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb9574d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb9574d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="..", cAlternateFileName="")) returned 1 [0242.955] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9574d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb9574d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x576ae63d, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="Latest.dat", cAlternateFileName="")) returned 1 [0242.955] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.955] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.955] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.955] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0242.955] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat")) returned 0x20 [0242.955] VirtualAlloc (lpAddress=0x73c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x73c000 [0242.956] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.956] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0242.956] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1, lpOverlapped=0x0) returned 1 [0242.957] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1, lpOverlapped=0x0) returned 1 [0242.962] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.962] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0242.962] CloseHandle (hObject=0x1f4) returned 1 [0242.962] CloseHandle (hObject=0x1e4) returned 1 [0242.963] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0242.964] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0242.964] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9574d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb9574d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x576ae63d, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Latest.dat", cAlternateFileName="")) returned 0x55e890 [0242.964] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9574d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb9574d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x576ae63d, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Latest.dat", cAlternateFileName="")) returned 0 [0242.964] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0242.964] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat")) returned 1 [0242.965] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat")) returned 0xffffffff [0242.965] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9574d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb9574d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x576ae63d, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="Latest.dat", cAlternateFileName="")) returned 0 [0242.965] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0242.965] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb9574d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb9574d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb9574d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6f7076, dwReserved1=0x72756f48, cFileName="UserProfileRoaming", cAlternateFileName="USERPR~1")) returned 0 [0242.965] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0242.966] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x7421f977, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7421f977, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656c6966, dwReserved1=0x6d616f52, cFileName="Windows", cAlternateFileName="")) returned 1 [0242.966] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x7421f977, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7421f977, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c746164, dwReserved1=0x72756f48, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0242.966] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x7421f977, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7421f977, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c746164, dwReserved1=0x72756f48, cFileName="..", cAlternateFileName="")) returned 1 [0242.966] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2423f479, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2423f479, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2423f479, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c746164, dwReserved1=0x72756f48, cFileName="0", cAlternateFileName="")) returned 1 [0242.966] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\0\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\0\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2423f479, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2423f479, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2423f479, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0242.966] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2423f479, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2423f479, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2423f479, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0242.966] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2423f479, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2423f479, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2423f479, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0242.966] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0242.966] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4d9a492, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd4d9a492, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd4d9a492, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c746164, dwReserved1=0x72756f48, cFileName="1033", cAlternateFileName="")) returned 1 [0242.966] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\1033\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\1033\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4d9a492, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd4d9a492, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd6145c37, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0242.967] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4d9a492, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd4d9a492, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd6145c37, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0242.967] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6145c37, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd6145c37, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x5703119d, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x62c20, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="StructuredQuerySchema.bin", cAlternateFileName="STRUCT~1.BIN")) returned 1 [0242.967] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0242.967] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0242.967] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0242.967] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0242.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0242.967] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin")) returned 0x20 [0242.968] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0242.968] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0242.968] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0242.972] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0242.973] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0242.975] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0242.975] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0242.975] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0242.975] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0242.976] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0242.976] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0242.976] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.025] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.025] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.025] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.025] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.026] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.026] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.026] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.026] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.026] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.027] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.027] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.027] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.027] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.027] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.028] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.028] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.028] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.028] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.028] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.029] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.029] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.029] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.031] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.031] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.031] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.031] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.032] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.032] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.032] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.032] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.032] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.032] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.033] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.033] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.033] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.033] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.033] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.033] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.034] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.034] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.034] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.034] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.034] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.034] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.035] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.035] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.035] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.035] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.035] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.035] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.035] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.036] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.036] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.036] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.036] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.036] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.036] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.037] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.037] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.037] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.037] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.037] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.037] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.038] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.038] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.038] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.038] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.038] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.039] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.039] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.041] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.041] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.041] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.041] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.041] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.042] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.042] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.042] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.042] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.042] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.043] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.043] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.043] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.044] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.045] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.045] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.045] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.045] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.045] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.045] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.046] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.046] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.046] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.046] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.046] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.046] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.047] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.047] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.047] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.047] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.047] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.048] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.048] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.048] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.048] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.048] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.048] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.049] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.049] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.049] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.049] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.049] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.050] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.050] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.050] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.050] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.050] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.050] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.051] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.051] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.052] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.052] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.052] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.052] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.052] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.052] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.053] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.053] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.053] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.053] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.053] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.053] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.054] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.054] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.054] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.054] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.054] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.054] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.055] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.055] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.055] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.055] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.056] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.056] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.056] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.056] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.056] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.056] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.057] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.057] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.057] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.057] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.057] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.058] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.058] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.058] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.058] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.058] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.058] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.059] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.059] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.059] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.059] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.059] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.059] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.060] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.060] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.060] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.060] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.060] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.061] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.061] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.061] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.061] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.061] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.061] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.061] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.062] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.062] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.062] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.062] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.062] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.062] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.062] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.063] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.063] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.063] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xc20, lpOverlapped=0x0) returned 1 [0243.063] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xc20, lpOverlapped=0x0) returned 1 [0243.063] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.063] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.063] CloseHandle (hObject=0x1e4) returned 1 [0243.063] CloseHandle (hObject=0x1f4) returned 1 [0243.120] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.121] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.121] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6145c37, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd6145c37, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x5703119d, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x62c20, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="StructuredQuerySchema.bin", cAlternateFileName="STRUCT~1.BIN")) returned 0x55e8d0 [0243.121] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6145c37, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd6145c37, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x5703119d, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x62c20, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="StructuredQuerySchema.bin", cAlternateFileName="STRUCT~1.BIN")) returned 0 [0243.121] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0243.121] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin")) returned 1 [0243.127] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin")) returned 0xffffffff [0243.127] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6145c37, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd6145c37, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x5703119d, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x62c20, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="StructuredQuerySchema.bin", cAlternateFileName="STRUCT~1.BIN")) returned 0 [0243.127] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0243.128] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37d807a2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xd6610945, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xd6610945, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x51646572, dwReserved1=0x79726575, cFileName="ActionCenterCache", cAlternateFileName="ACTION~1")) returned 1 [0243.128] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37d807a2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xd6610945, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xd6610945, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0243.128] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37d807a2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xd6610945, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xd6610945, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0243.128] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4afded6, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd4afded6, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="{2309EC7E-231D-46A8-B772-3B87526093EF}.png", cAlternateFileName="{2309E~1.PNG")) returned 1 [0243.129] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.129] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.129] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.129] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0243.129] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{2309EC7E-231D-46A8-B772-3B87526093EF}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{2309ec7e-231d-46a8-b772-3b87526093ef}.png")) returned 0x20 [0243.130] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{2309EC7E-231D-46A8-B772-3B87526093EF}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{2309ec7e-231d-46a8-b772-3b87526093ef}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.131] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{2309EC7E-231D-46A8-B772-3B87526093EF}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{2309ec7e-231d-46a8-b772-3b87526093ef}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.131] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.132] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa42, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.135] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.135] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.135] CloseHandle (hObject=0x1f4) returned 1 [0243.136] CloseHandle (hObject=0x1e4) returned 1 [0243.216] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{2309EC7E-231D-46A8-B772-3B87526093EF}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{2309ec7e-231d-46a8-b772-3b87526093ef}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{2309EC7E-231D-46A8-B772-3B87526093EF}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{2309ec7e-231d-46a8-b772-3b87526093ef}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.216] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{2309EC7E-231D-46A8-B772-3B87526093EF}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{2309ec7e-231d-46a8-b772-3b87526093ef}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.217] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{2309EC7E-231D-46A8-B772-3B87526093EF}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{2309ec7e-231d-46a8-b772-3b87526093ef}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4afded6, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd4afded6, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{2309EC7E-231D-46A8-B772-3B87526093EF}.png", cAlternateFileName="{2309E~1.PNG")) returned 0x55e8d0 [0243.217] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4afded6, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd4afded6, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{2309EC7E-231D-46A8-B772-3B87526093EF}.png", cAlternateFileName="{2309E~1.PNG")) returned 0 [0243.217] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0243.217] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{2309EC7E-231D-46A8-B772-3B87526093EF}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{2309ec7e-231d-46a8-b772-3b87526093ef}.png")) returned 1 [0243.218] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{2309EC7E-231D-46A8-B772-3B87526093EF}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{2309ec7e-231d-46a8-b772-3b87526093ef}.png")) returned 0xffffffff [0243.218] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbaaeb5c, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xdbaaeb5c, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="{360B3910-A8D3-4307-8D6E-6FF79565CF29}.png", cAlternateFileName="{360B3~1.PNG")) returned 1 [0243.219] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.219] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.219] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.219] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0243.219] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{360B3910-A8D3-4307-8D6E-6FF79565CF29}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{360b3910-a8d3-4307-8d6e-6ff79565cf29}.png")) returned 0x20 [0243.220] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{360B3910-A8D3-4307-8D6E-6FF79565CF29}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{360b3910-a8d3-4307-8d6e-6ff79565cf29}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.220] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{360B3910-A8D3-4307-8D6E-6FF79565CF29}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{360b3910-a8d3-4307-8d6e-6ff79565cf29}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.220] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.266] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa42, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.267] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.267] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.267] CloseHandle (hObject=0x1e4) returned 1 [0243.267] CloseHandle (hObject=0x1f4) returned 1 [0243.267] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{360B3910-A8D3-4307-8D6E-6FF79565CF29}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{360b3910-a8d3-4307-8d6e-6ff79565cf29}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{360B3910-A8D3-4307-8D6E-6FF79565CF29}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{360b3910-a8d3-4307-8d6e-6ff79565cf29}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.268] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{360B3910-A8D3-4307-8D6E-6FF79565CF29}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{360b3910-a8d3-4307-8d6e-6ff79565cf29}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.268] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{360B3910-A8D3-4307-8D6E-6FF79565CF29}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{360b3910-a8d3-4307-8d6e-6ff79565cf29}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbaaeb5c, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xdbaaeb5c, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{360B3910-A8D3-4307-8D6E-6FF79565CF29}.png", cAlternateFileName="{360B3~1.PNG")) returned 0x55e310 [0243.268] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbaaeb5c, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xdbaaeb5c, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{360B3910-A8D3-4307-8D6E-6FF79565CF29}.png", cAlternateFileName="{360B3~1.PNG")) returned 0 [0243.268] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0243.268] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{360B3910-A8D3-4307-8D6E-6FF79565CF29}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{360b3910-a8d3-4307-8d6e-6ff79565cf29}.png")) returned 1 [0243.269] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{360B3910-A8D3-4307-8D6E-6FF79565CF29}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{360b3910-a8d3-4307-8d6e-6ff79565cf29}.png")) returned 0xffffffff [0243.269] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59331777, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x59331777, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3791FFDB-0F9B-43E7-B1BC-F83BE99BE18C}.png", cAlternateFileName="{3791F~1.PNG")) returned 1 [0243.270] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.270] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.270] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.270] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.270] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.270] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0243.270] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3791FFDB-0F9B-43E7-B1BC-F83BE99BE18C}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3791ffdb-0f9b-43e7-b1bc-f83be99be18c}.png")) returned 0x20 [0243.270] VirtualAlloc (lpAddress=0x740000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x740000 [0243.271] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3791FFDB-0F9B-43E7-B1BC-F83BE99BE18C}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3791ffdb-0f9b-43e7-b1bc-f83be99be18c}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.271] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3791FFDB-0F9B-43E7-B1BC-F83BE99BE18C}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3791ffdb-0f9b-43e7-b1bc-f83be99be18c}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.272] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.273] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa42, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.274] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.274] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.274] CloseHandle (hObject=0x1f4) returned 1 [0243.275] CloseHandle (hObject=0x1e4) returned 1 [0243.275] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3791FFDB-0F9B-43E7-B1BC-F83BE99BE18C}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3791ffdb-0f9b-43e7-b1bc-f83be99be18c}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3791FFDB-0F9B-43E7-B1BC-F83BE99BE18C}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3791ffdb-0f9b-43e7-b1bc-f83be99be18c}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.275] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3791FFDB-0F9B-43E7-B1BC-F83BE99BE18C}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3791ffdb-0f9b-43e7-b1bc-f83be99be18c}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.275] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3791FFDB-0F9B-43E7-B1BC-F83BE99BE18C}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3791ffdb-0f9b-43e7-b1bc-f83be99be18c}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59331777, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x59331777, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{3791FFDB-0F9B-43E7-B1BC-F83BE99BE18C}.png", cAlternateFileName="{3791F~1.PNG")) returned 0x55e8d0 [0243.275] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59331777, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x59331777, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{3791FFDB-0F9B-43E7-B1BC-F83BE99BE18C}.png", cAlternateFileName="{3791F~1.PNG")) returned 0 [0243.276] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0243.276] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3791FFDB-0F9B-43E7-B1BC-F83BE99BE18C}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3791ffdb-0f9b-43e7-b1bc-f83be99be18c}.png")) returned 1 [0243.277] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3791FFDB-0F9B-43E7-B1BC-F83BE99BE18C}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3791ffdb-0f9b-43e7-b1bc-f83be99be18c}.png")) returned 0xffffffff [0243.277] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42db69, ftCreationTime.dwHighDateTime=0x1d7e768, ftLastAccessTime.dwLowDateTime=0x7f42db69, ftLastAccessTime.dwHighDateTime=0x1d7e768, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="{521F7180-642B-440A-838D-C4F3A7B3C2C0}.png", cAlternateFileName="{521F7~1.PNG")) returned 1 [0243.277] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.277] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.278] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.278] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.278] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.278] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0243.278] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{521F7180-642B-440A-838D-C4F3A7B3C2C0}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{521f7180-642b-440a-838d-c4f3a7b3c2c0}.png")) returned 0x20 [0243.280] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{521F7180-642B-440A-838D-C4F3A7B3C2C0}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{521f7180-642b-440a-838d-c4f3a7b3c2c0}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.280] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{521F7180-642B-440A-838D-C4F3A7B3C2C0}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{521f7180-642b-440a-838d-c4f3a7b3c2c0}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.281] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.282] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa42, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.283] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.283] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.283] CloseHandle (hObject=0x1e4) returned 1 [0243.283] CloseHandle (hObject=0x1f4) returned 1 [0243.284] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{521F7180-642B-440A-838D-C4F3A7B3C2C0}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{521f7180-642b-440a-838d-c4f3a7b3c2c0}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{521F7180-642B-440A-838D-C4F3A7B3C2C0}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{521f7180-642b-440a-838d-c4f3a7b3c2c0}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.284] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{521F7180-642B-440A-838D-C4F3A7B3C2C0}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{521f7180-642b-440a-838d-c4f3a7b3c2c0}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.284] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{521F7180-642B-440A-838D-C4F3A7B3C2C0}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{521f7180-642b-440a-838d-c4f3a7b3c2c0}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42db69, ftCreationTime.dwHighDateTime=0x1d7e768, ftLastAccessTime.dwLowDateTime=0x7f42db69, ftLastAccessTime.dwHighDateTime=0x1d7e768, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{521F7180-642B-440A-838D-C4F3A7B3C2C0}.png", cAlternateFileName="{521F7~1.PNG")) returned 0x55e750 [0243.284] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f42db69, ftCreationTime.dwHighDateTime=0x1d7e768, ftLastAccessTime.dwLowDateTime=0x7f42db69, ftLastAccessTime.dwHighDateTime=0x1d7e768, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{521F7180-642B-440A-838D-C4F3A7B3C2C0}.png", cAlternateFileName="{521F7~1.PNG")) returned 0 [0243.284] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0243.284] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{521F7180-642B-440A-838D-C4F3A7B3C2C0}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{521f7180-642b-440a-838d-c4f3a7b3c2c0}.png")) returned 1 [0243.285] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{521F7180-642B-440A-838D-C4F3A7B3C2C0}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{521f7180-642b-440a-838d-c4f3a7b3c2c0}.png")) returned 0xffffffff [0243.286] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x270478a2, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x270478a2, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="{58F0434E-3EF5-468F-AD7B-6D3DABD11658}.png", cAlternateFileName="{58F04~1.PNG")) returned 1 [0243.286] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.286] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.286] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.286] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.286] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.286] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0243.286] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{58F0434E-3EF5-468F-AD7B-6D3DABD11658}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{58f0434e-3ef5-468f-ad7b-6d3dabd11658}.png")) returned 0x20 [0243.287] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{58F0434E-3EF5-468F-AD7B-6D3DABD11658}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{58f0434e-3ef5-468f-ad7b-6d3dabd11658}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.287] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{58F0434E-3EF5-468F-AD7B-6D3DABD11658}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{58f0434e-3ef5-468f-ad7b-6d3dabd11658}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.287] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.331] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa42, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.333] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.333] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.333] CloseHandle (hObject=0x1f4) returned 1 [0243.333] CloseHandle (hObject=0x1e4) returned 1 [0243.333] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{58F0434E-3EF5-468F-AD7B-6D3DABD11658}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{58f0434e-3ef5-468f-ad7b-6d3dabd11658}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{58F0434E-3EF5-468F-AD7B-6D3DABD11658}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{58f0434e-3ef5-468f-ad7b-6d3dabd11658}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.334] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{58F0434E-3EF5-468F-AD7B-6D3DABD11658}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{58f0434e-3ef5-468f-ad7b-6d3dabd11658}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.334] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{58F0434E-3EF5-468F-AD7B-6D3DABD11658}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{58f0434e-3ef5-468f-ad7b-6d3dabd11658}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x270478a2, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x270478a2, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{58F0434E-3EF5-468F-AD7B-6D3DABD11658}.png", cAlternateFileName="{58F04~1.PNG")) returned 0x55e750 [0243.334] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x270478a2, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x270478a2, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{58F0434E-3EF5-468F-AD7B-6D3DABD11658}.png", cAlternateFileName="{58F04~1.PNG")) returned 0 [0243.334] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0243.334] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{58F0434E-3EF5-468F-AD7B-6D3DABD11658}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{58f0434e-3ef5-468f-ad7b-6d3dabd11658}.png")) returned 1 [0243.336] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{58F0434E-3EF5-468F-AD7B-6D3DABD11658}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{58f0434e-3ef5-468f-ad7b-6d3dabd11658}.png")) returned 0xffffffff [0243.336] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x270939da, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x270939da, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6847B1C1-F55E-44F1-B047-A5D99CF50202}.png", cAlternateFileName="{6847B~1.PNG")) returned 1 [0243.337] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.337] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.337] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.337] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.337] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.337] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0243.337] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{6847B1C1-F55E-44F1-B047-A5D99CF50202}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{6847b1c1-f55e-44f1-b047-a5d99cf50202}.png")) returned 0x20 [0243.337] VirtualAlloc (lpAddress=0x744000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x744000 [0243.338] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{6847B1C1-F55E-44F1-B047-A5D99CF50202}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{6847b1c1-f55e-44f1-b047-a5d99cf50202}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.338] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{6847B1C1-F55E-44F1-B047-A5D99CF50202}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{6847b1c1-f55e-44f1-b047-a5d99cf50202}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.339] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.420] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa42, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.421] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.421] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.421] CloseHandle (hObject=0x1e4) returned 1 [0243.421] CloseHandle (hObject=0x1f4) returned 1 [0243.421] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{6847B1C1-F55E-44F1-B047-A5D99CF50202}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{6847b1c1-f55e-44f1-b047-a5d99cf50202}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{6847B1C1-F55E-44F1-B047-A5D99CF50202}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{6847b1c1-f55e-44f1-b047-a5d99cf50202}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.422] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{6847B1C1-F55E-44F1-B047-A5D99CF50202}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{6847b1c1-f55e-44f1-b047-a5d99cf50202}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.422] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{6847B1C1-F55E-44F1-B047-A5D99CF50202}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{6847b1c1-f55e-44f1-b047-a5d99cf50202}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x270939da, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x270939da, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{6847B1C1-F55E-44F1-B047-A5D99CF50202}.png", cAlternateFileName="{6847B~1.PNG")) returned 0x55e390 [0243.422] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x270939da, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x270939da, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{6847B1C1-F55E-44F1-B047-A5D99CF50202}.png", cAlternateFileName="{6847B~1.PNG")) returned 0 [0243.423] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0243.423] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{6847B1C1-F55E-44F1-B047-A5D99CF50202}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{6847b1c1-f55e-44f1-b047-a5d99cf50202}.png")) returned 1 [0243.424] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{6847B1C1-F55E-44F1-B047-A5D99CF50202}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{6847b1c1-f55e-44f1-b047-a5d99cf50202}.png")) returned 0xffffffff [0243.424] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d807a2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x37d807a2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7687CA7B-C212-4CA8-B96F-9F0A8EA68CDC}.png", cAlternateFileName="{7687C~1.PNG")) returned 1 [0243.425] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.425] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.425] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.425] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0243.425] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{7687CA7B-C212-4CA8-B96F-9F0A8EA68CDC}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{7687ca7b-c212-4ca8-b96f-9f0a8ea68cdc}.png")) returned 0x20 [0243.425] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{7687CA7B-C212-4CA8-B96F-9F0A8EA68CDC}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{7687ca7b-c212-4ca8-b96f-9f0a8ea68cdc}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.426] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{7687CA7B-C212-4CA8-B96F-9F0A8EA68CDC}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{7687ca7b-c212-4ca8-b96f-9f0a8ea68cdc}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.426] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.489] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.490] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xae6, lpOverlapped=0x0) returned 1 [0243.549] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xae6, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xae6, lpOverlapped=0x0) returned 1 [0243.550] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.550] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.550] CloseHandle (hObject=0x1f4) returned 1 [0243.550] CloseHandle (hObject=0x1e4) returned 1 [0243.555] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{7687CA7B-C212-4CA8-B96F-9F0A8EA68CDC}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{7687ca7b-c212-4ca8-b96f-9f0a8ea68cdc}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{7687CA7B-C212-4CA8-B96F-9F0A8EA68CDC}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{7687ca7b-c212-4ca8-b96f-9f0a8ea68cdc}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.555] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{7687CA7B-C212-4CA8-B96F-9F0A8EA68CDC}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{7687ca7b-c212-4ca8-b96f-9f0a8ea68cdc}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.556] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{7687CA7B-C212-4CA8-B96F-9F0A8EA68CDC}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{7687ca7b-c212-4ca8-b96f-9f0a8ea68cdc}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d807a2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x37d807a2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{7687CA7B-C212-4CA8-B96F-9F0A8EA68CDC}.png", cAlternateFileName="{7687C~1.PNG")) returned 0x55e5d0 [0243.556] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d807a2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x37d807a2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{7687CA7B-C212-4CA8-B96F-9F0A8EA68CDC}.png", cAlternateFileName="{7687C~1.PNG")) returned 0 [0243.556] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0243.556] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{7687CA7B-C212-4CA8-B96F-9F0A8EA68CDC}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{7687ca7b-c212-4ca8-b96f-9f0a8ea68cdc}.png")) returned 1 [0243.557] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{7687CA7B-C212-4CA8-B96F-9F0A8EA68CDC}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{7687ca7b-c212-4ca8-b96f-9f0a8ea68cdc}.png")) returned 0xffffffff [0243.557] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f47bd23, ftCreationTime.dwHighDateTime=0x1d7e768, ftLastAccessTime.dwLowDateTime=0x7f47bd23, ftLastAccessTime.dwHighDateTime=0x1d7e768, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="{81F3A784-E8DB-4BDD-875C-92E763AED602}.png", cAlternateFileName="{81F3A~1.PNG")) returned 1 [0243.558] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.558] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.558] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.558] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.558] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.558] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0243.558] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{81F3A784-E8DB-4BDD-875C-92E763AED602}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{81f3a784-e8db-4bdd-875c-92e763aed602}.png")) returned 0x20 [0243.559] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{81F3A784-E8DB-4BDD-875C-92E763AED602}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{81f3a784-e8db-4bdd-875c-92e763aed602}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.559] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{81F3A784-E8DB-4BDD-875C-92E763AED602}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{81f3a784-e8db-4bdd-875c-92e763aed602}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.559] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.581] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa42, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.616] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.616] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.616] CloseHandle (hObject=0x1e4) returned 1 [0243.616] CloseHandle (hObject=0x1f4) returned 1 [0243.617] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{81F3A784-E8DB-4BDD-875C-92E763AED602}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{81f3a784-e8db-4bdd-875c-92e763aed602}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{81F3A784-E8DB-4BDD-875C-92E763AED602}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{81f3a784-e8db-4bdd-875c-92e763aed602}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.618] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{81F3A784-E8DB-4BDD-875C-92E763AED602}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{81f3a784-e8db-4bdd-875c-92e763aed602}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.618] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{81F3A784-E8DB-4BDD-875C-92E763AED602}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{81f3a784-e8db-4bdd-875c-92e763aed602}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f47bd23, ftCreationTime.dwHighDateTime=0x1d7e768, ftLastAccessTime.dwLowDateTime=0x7f47bd23, ftLastAccessTime.dwHighDateTime=0x1d7e768, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{81F3A784-E8DB-4BDD-875C-92E763AED602}.png", cAlternateFileName="{81F3A~1.PNG")) returned 0x55e8d0 [0243.618] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f47bd23, ftCreationTime.dwHighDateTime=0x1d7e768, ftLastAccessTime.dwLowDateTime=0x7f47bd23, ftLastAccessTime.dwHighDateTime=0x1d7e768, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{81F3A784-E8DB-4BDD-875C-92E763AED602}.png", cAlternateFileName="{81F3A~1.PNG")) returned 0 [0243.618] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0243.619] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{81F3A784-E8DB-4BDD-875C-92E763AED602}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{81f3a784-e8db-4bdd-875c-92e763aed602}.png")) returned 1 [0243.620] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{81F3A784-E8DB-4BDD-875C-92E763AED602}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{81f3a784-e8db-4bdd-875c-92e763aed602}.png")) returned 0xffffffff [0243.620] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b3893b6, ftCreationTime.dwHighDateTime=0x1d8596d, ftLastAccessTime.dwLowDateTime=0x8b3893b6, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8393D971-367B-44C2-B843-3C0BD7C487DF}.png", cAlternateFileName="{8393D~1.PNG")) returned 1 [0243.621] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.621] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.621] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.621] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0243.621] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8393D971-367B-44C2-B843-3C0BD7C487DF}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8393d971-367b-44c2-b843-3c0bd7c487df}.png")) returned 0x20 [0243.627] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8393D971-367B-44C2-B843-3C0BD7C487DF}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8393d971-367b-44c2-b843-3c0bd7c487df}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.627] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8393D971-367B-44C2-B843-3C0BD7C487DF}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8393d971-367b-44c2-b843-3c0bd7c487df}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.628] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.630] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa42, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.631] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.631] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.631] CloseHandle (hObject=0x1f4) returned 1 [0243.631] CloseHandle (hObject=0x1e4) returned 1 [0243.632] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8393D971-367B-44C2-B843-3C0BD7C487DF}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8393d971-367b-44c2-b843-3c0bd7c487df}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8393D971-367B-44C2-B843-3C0BD7C487DF}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8393d971-367b-44c2-b843-3c0bd7c487df}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.632] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8393D971-367B-44C2-B843-3C0BD7C487DF}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8393d971-367b-44c2-b843-3c0bd7c487df}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.632] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8393D971-367B-44C2-B843-3C0BD7C487DF}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8393d971-367b-44c2-b843-3c0bd7c487df}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b3893b6, ftCreationTime.dwHighDateTime=0x1d8596d, ftLastAccessTime.dwLowDateTime=0x8b3893b6, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{8393D971-367B-44C2-B843-3C0BD7C487DF}.png", cAlternateFileName="{8393D~1.PNG")) returned 0x55e490 [0243.632] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b3893b6, ftCreationTime.dwHighDateTime=0x1d8596d, ftLastAccessTime.dwLowDateTime=0x8b3893b6, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{8393D971-367B-44C2-B843-3C0BD7C487DF}.png", cAlternateFileName="{8393D~1.PNG")) returned 0 [0243.633] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0243.633] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8393D971-367B-44C2-B843-3C0BD7C487DF}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8393d971-367b-44c2-b843-3c0bd7c487df}.png")) returned 1 [0243.634] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8393D971-367B-44C2-B843-3C0BD7C487DF}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8393d971-367b-44c2-b843-3c0bd7c487df}.png")) returned 0xffffffff [0243.634] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e863c1, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0x59e863c1, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D8B8AE5-2647-4ACA-B14D-B59359B4EC08}.png", cAlternateFileName="{8D8B8~1.PNG")) returned 1 [0243.635] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.635] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.635] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.636] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0243.636] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8D8B8AE5-2647-4ACA-B14D-B59359B4EC08}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8d8b8ae5-2647-4aca-b14d-b59359b4ec08}.png")) returned 0x20 [0243.636] VirtualAlloc (lpAddress=0x748000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x748000 [0243.636] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8D8B8AE5-2647-4ACA-B14D-B59359B4EC08}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8d8b8ae5-2647-4aca-b14d-b59359b4ec08}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.637] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8D8B8AE5-2647-4ACA-B14D-B59359B4EC08}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8d8b8ae5-2647-4aca-b14d-b59359b4ec08}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.637] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.639] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa42, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.640] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.640] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.640] CloseHandle (hObject=0x1e4) returned 1 [0243.640] CloseHandle (hObject=0x1f4) returned 1 [0243.641] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8D8B8AE5-2647-4ACA-B14D-B59359B4EC08}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8d8b8ae5-2647-4aca-b14d-b59359b4ec08}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8D8B8AE5-2647-4ACA-B14D-B59359B4EC08}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8d8b8ae5-2647-4aca-b14d-b59359b4ec08}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.641] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8D8B8AE5-2647-4ACA-B14D-B59359B4EC08}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8d8b8ae5-2647-4aca-b14d-b59359b4ec08}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.641] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8D8B8AE5-2647-4ACA-B14D-B59359B4EC08}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8d8b8ae5-2647-4aca-b14d-b59359b4ec08}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e863c1, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0x59e863c1, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{8D8B8AE5-2647-4ACA-B14D-B59359B4EC08}.png", cAlternateFileName="{8D8B8~1.PNG")) returned 0x55e5d0 [0243.642] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e863c1, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0x59e863c1, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{8D8B8AE5-2647-4ACA-B14D-B59359B4EC08}.png", cAlternateFileName="{8D8B8~1.PNG")) returned 0 [0243.642] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0243.642] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8D8B8AE5-2647-4ACA-B14D-B59359B4EC08}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8d8b8ae5-2647-4aca-b14d-b59359b4ec08}.png")) returned 1 [0243.644] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{8D8B8AE5-2647-4ACA-B14D-B59359B4EC08}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{8d8b8ae5-2647-4aca-b14d-b59359b4ec08}.png")) returned 0xffffffff [0243.644] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2441da9d, ftCreationTime.dwHighDateTime=0x1d75218, ftLastAccessTime.dwLowDateTime=0x2441da9d, ftLastAccessTime.dwHighDateTime=0x1d75218, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="{99CFFC93-F44B-4C78-9233-714D3D891D11}.png", cAlternateFileName="{99CFF~1.PNG")) returned 1 [0243.645] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.645] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.645] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.645] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0243.645] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{99CFFC93-F44B-4C78-9233-714D3D891D11}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{99cffc93-f44b-4c78-9233-714d3d891d11}.png")) returned 0x20 [0243.646] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{99CFFC93-F44B-4C78-9233-714D3D891D11}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{99cffc93-f44b-4c78-9233-714d3d891d11}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.646] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{99CFFC93-F44B-4C78-9233-714D3D891D11}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{99cffc93-f44b-4c78-9233-714d3d891d11}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.646] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.650] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa42, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.651] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.651] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.651] CloseHandle (hObject=0x1f4) returned 1 [0243.651] CloseHandle (hObject=0x1e4) returned 1 [0243.652] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{99CFFC93-F44B-4C78-9233-714D3D891D11}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{99cffc93-f44b-4c78-9233-714d3d891d11}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{99CFFC93-F44B-4C78-9233-714D3D891D11}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{99cffc93-f44b-4c78-9233-714d3d891d11}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.652] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{99CFFC93-F44B-4C78-9233-714D3D891D11}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{99cffc93-f44b-4c78-9233-714d3d891d11}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.652] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{99CFFC93-F44B-4C78-9233-714D3D891D11}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{99cffc93-f44b-4c78-9233-714d3d891d11}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2441da9d, ftCreationTime.dwHighDateTime=0x1d75218, ftLastAccessTime.dwLowDateTime=0x2441da9d, ftLastAccessTime.dwHighDateTime=0x1d75218, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{99CFFC93-F44B-4C78-9233-714D3D891D11}.png", cAlternateFileName="{99CFF~1.PNG")) returned 0x55e210 [0243.653] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2441da9d, ftCreationTime.dwHighDateTime=0x1d75218, ftLastAccessTime.dwLowDateTime=0x2441da9d, ftLastAccessTime.dwHighDateTime=0x1d75218, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{99CFFC93-F44B-4C78-9233-714D3D891D11}.png", cAlternateFileName="{99CFF~1.PNG")) returned 0 [0243.653] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0243.653] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{99CFFC93-F44B-4C78-9233-714D3D891D11}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{99cffc93-f44b-4c78-9233-714d3d891d11}.png")) returned 1 [0243.654] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{99CFFC93-F44B-4C78-9233-714D3D891D11}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{99cffc93-f44b-4c78-9233-714d3d891d11}.png")) returned 0xffffffff [0243.654] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd65ea684, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd65ea684, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A5095727-B9ED-4A33-A19E-28AE8D170960}.png", cAlternateFileName="{A5095~1.PNG")) returned 1 [0243.655] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.655] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.659] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.659] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0243.659] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A5095727-B9ED-4A33-A19E-28AE8D170960}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a5095727-b9ed-4a33-a19e-28ae8d170960}.png")) returned 0x20 [0243.659] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A5095727-B9ED-4A33-A19E-28AE8D170960}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a5095727-b9ed-4a33-a19e-28ae8d170960}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.660] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A5095727-B9ED-4A33-A19E-28AE8D170960}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a5095727-b9ed-4a33-a19e-28ae8d170960}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.660] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.661] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa42, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.663] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.663] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.663] CloseHandle (hObject=0x1e4) returned 1 [0243.663] CloseHandle (hObject=0x1f4) returned 1 [0243.663] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A5095727-B9ED-4A33-A19E-28AE8D170960}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a5095727-b9ed-4a33-a19e-28ae8d170960}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A5095727-B9ED-4A33-A19E-28AE8D170960}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a5095727-b9ed-4a33-a19e-28ae8d170960}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.664] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A5095727-B9ED-4A33-A19E-28AE8D170960}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a5095727-b9ed-4a33-a19e-28ae8d170960}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.664] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A5095727-B9ED-4A33-A19E-28AE8D170960}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a5095727-b9ed-4a33-a19e-28ae8d170960}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd65ea684, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd65ea684, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{A5095727-B9ED-4A33-A19E-28AE8D170960}.png", cAlternateFileName="{A5095~1.PNG")) returned 0x55e650 [0243.664] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd65ea684, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd65ea684, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{A5095727-B9ED-4A33-A19E-28AE8D170960}.png", cAlternateFileName="{A5095~1.PNG")) returned 0 [0243.664] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0243.665] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A5095727-B9ED-4A33-A19E-28AE8D170960}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a5095727-b9ed-4a33-a19e-28ae8d170960}.png")) returned 1 [0243.666] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A5095727-B9ED-4A33-A19E-28AE8D170960}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a5095727-b9ed-4a33-a19e-28ae8d170960}.png")) returned 0xffffffff [0243.666] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba5bff6, ftCreationTime.dwHighDateTime=0x1d8596d, ftLastAccessTime.dwLowDateTime=0x8ba5bff6, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B835D466-3F3C-4FF0-90E5-D395AAB1594D}.png", cAlternateFileName="{B835D~1.PNG")) returned 1 [0243.667] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.667] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.667] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.667] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.667] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.667] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0243.667] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B835D466-3F3C-4FF0-90E5-D395AAB1594D}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b835d466-3f3c-4ff0-90e5-d395aab1594d}.png")) returned 0x20 [0243.668] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B835D466-3F3C-4FF0-90E5-D395AAB1594D}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b835d466-3f3c-4ff0-90e5-d395aab1594d}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.668] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B835D466-3F3C-4FF0-90E5-D395AAB1594D}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b835d466-3f3c-4ff0-90e5-d395aab1594d}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.668] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.670] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa42, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.672] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.672] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.672] CloseHandle (hObject=0x1f4) returned 1 [0243.672] CloseHandle (hObject=0x1e4) returned 1 [0243.672] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B835D466-3F3C-4FF0-90E5-D395AAB1594D}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b835d466-3f3c-4ff0-90e5-d395aab1594d}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B835D466-3F3C-4FF0-90E5-D395AAB1594D}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b835d466-3f3c-4ff0-90e5-d395aab1594d}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.673] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B835D466-3F3C-4FF0-90E5-D395AAB1594D}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b835d466-3f3c-4ff0-90e5-d395aab1594d}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.673] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B835D466-3F3C-4FF0-90E5-D395AAB1594D}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b835d466-3f3c-4ff0-90e5-d395aab1594d}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba5bff6, ftCreationTime.dwHighDateTime=0x1d8596d, ftLastAccessTime.dwLowDateTime=0x8ba5bff6, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{B835D466-3F3C-4FF0-90E5-D395AAB1594D}.png", cAlternateFileName="{B835D~1.PNG")) returned 0x55e390 [0243.673] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ba5bff6, ftCreationTime.dwHighDateTime=0x1d8596d, ftLastAccessTime.dwLowDateTime=0x8ba5bff6, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{B835D466-3F3C-4FF0-90E5-D395AAB1594D}.png", cAlternateFileName="{B835D~1.PNG")) returned 0 [0243.673] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0243.673] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B835D466-3F3C-4FF0-90E5-D395AAB1594D}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b835d466-3f3c-4ff0-90e5-d395aab1594d}.png")) returned 1 [0243.675] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B835D466-3F3C-4FF0-90E5-D395AAB1594D}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b835d466-3f3c-4ff0-90e5-d395aab1594d}.png")) returned 0xffffffff [0243.675] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x243c4817, ftCreationTime.dwHighDateTime=0x1d75218, ftLastAccessTime.dwLowDateTime=0x243c4817, ftLastAccessTime.dwHighDateTime=0x1d75218, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F147815D-A2FE-4D31-8C0C-760C1D1D0961}.png", cAlternateFileName="{F1478~1.PNG")) returned 1 [0243.675] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.675] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.676] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.676] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.676] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.676] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0243.676] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F147815D-A2FE-4D31-8C0C-760C1D1D0961}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f147815d-a2fe-4d31-8c0c-760c1d1d0961}.png")) returned 0x20 [0243.677] VirtualAlloc (lpAddress=0x74c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x74c000 [0243.677] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F147815D-A2FE-4D31-8C0C-760C1D1D0961}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f147815d-a2fe-4d31-8c0c-760c1d1d0961}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.678] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F147815D-A2FE-4D31-8C0C-760C1D1D0961}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f147815d-a2fe-4d31-8c0c-760c1d1d0961}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.678] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.680] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa42, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.681] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.682] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.682] CloseHandle (hObject=0x1e4) returned 1 [0243.682] CloseHandle (hObject=0x1f4) returned 1 [0243.682] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F147815D-A2FE-4D31-8C0C-760C1D1D0961}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f147815d-a2fe-4d31-8c0c-760c1d1d0961}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F147815D-A2FE-4D31-8C0C-760C1D1D0961}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f147815d-a2fe-4d31-8c0c-760c1d1d0961}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.723] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F147815D-A2FE-4D31-8C0C-760C1D1D0961}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f147815d-a2fe-4d31-8c0c-760c1d1d0961}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.724] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F147815D-A2FE-4D31-8C0C-760C1D1D0961}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f147815d-a2fe-4d31-8c0c-760c1d1d0961}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x243c4817, ftCreationTime.dwHighDateTime=0x1d75218, ftLastAccessTime.dwLowDateTime=0x243c4817, ftLastAccessTime.dwHighDateTime=0x1d75218, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{F147815D-A2FE-4D31-8C0C-760C1D1D0961}.png", cAlternateFileName="{F1478~1.PNG")) returned 0x55e490 [0243.724] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x243c4817, ftCreationTime.dwHighDateTime=0x1d75218, ftLastAccessTime.dwLowDateTime=0x243c4817, ftLastAccessTime.dwHighDateTime=0x1d75218, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{F147815D-A2FE-4D31-8C0C-760C1D1D0961}.png", cAlternateFileName="{F1478~1.PNG")) returned 0 [0243.724] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0243.724] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F147815D-A2FE-4D31-8C0C-760C1D1D0961}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f147815d-a2fe-4d31-8c0c-760c1d1d0961}.png")) returned 1 [0243.727] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F147815D-A2FE-4D31-8C0C-760C1D1D0961}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f147815d-a2fe-4d31-8c0c-760c1d1d0961}.png")) returned 0xffffffff [0243.727] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdb95b8, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0x5fdb95b8, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png", cAlternateFileName="{F7629~1.PNG")) returned 1 [0243.734] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.735] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.735] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.735] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0243.735] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f762917d-edd6-4879-96ee-bd0a93a4e06e}.png")) returned 0x20 [0243.736] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f762917d-edd6-4879-96ee-bd0a93a4e06e}.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.736] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f762917d-edd6-4879-96ee-bd0a93a4e06e}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.738] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.742] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa42, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa42, lpOverlapped=0x0) returned 1 [0243.754] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.754] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.754] CloseHandle (hObject=0x1f4) returned 1 [0243.754] CloseHandle (hObject=0x1e4) returned 1 [0243.755] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f762917d-edd6-4879-96ee-bd0a93a4e06e}.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f762917d-edd6-4879-96ee-bd0a93a4e06e}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.756] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f762917d-edd6-4879-96ee-bd0a93a4e06e}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.756] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f762917d-edd6-4879-96ee-bd0a93a4e06e}.png"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdb95b8, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0x5fdb95b8, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png", cAlternateFileName="{F7629~1.PNG")) returned 0x55e7d0 [0243.756] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdb95b8, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0x5fdb95b8, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png", cAlternateFileName="{F7629~1.PNG")) returned 0 [0243.756] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0243.756] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f762917d-edd6-4879-96ee-bd0a93a4e06e}.png")) returned 1 [0243.758] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\{f762917d-edd6-4879-96ee-bd0a93a4e06e}.png")) returned 0xffffffff [0243.758] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdb95b8, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0x5fdb95b8, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x5030705a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png", cAlternateFileName="{F7629~1.PNG")) returned 0 [0243.758] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0243.758] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f810a8a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f810a8a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43695fb2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x452d4437, dwReserved1=0x2d364444, cFileName="Application Shortcuts", cAlternateFileName="APPLIC~1")) returned 1 [0243.758] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\application shortcuts\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f810a8a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f810a8a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43695fb2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0243.758] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f810a8a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f810a8a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43695fb2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.759] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f810a8a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f810a8a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43695fb2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0243.759] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.759] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.762] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.762] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0243.762] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini")) returned 0x6 [0243.762] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.763] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.763] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xae, lpOverlapped=0x0) returned 1 [0243.765] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xae, lpOverlapped=0x0) returned 1 [0243.766] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.766] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.766] CloseHandle (hObject=0x1e4) returned 1 [0243.766] CloseHandle (hObject=0x1f4) returned 1 [0243.771] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.771] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.771] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f810a8a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f810a8a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43695fb2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e7d0 [0243.771] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f810a8a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f810a8a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43695fb2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0243.772] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0243.772] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini")) returned 1 [0243.773] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini")) returned 0xffffffff [0243.773] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f810a8a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f810a8a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43695fb2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0243.773] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0243.778] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xa2cd8e8d, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xa2cd8e8d, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x2d364444, cFileName="Burn", cAlternateFileName="")) returned 1 [0243.779] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xa2cd8e8d, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xa2cd8e8d, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0243.779] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xa2cd8e8d, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xa2cd8e8d, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0243.779] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x81988c19, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x81988c19, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Burn", cAlternateFileName="")) returned 1 [0243.779] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x81988c19, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x81988c19, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0243.779] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x81988c19, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x81988c19, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0243.779] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x81988c19, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x81988c19, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0243.780] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.780] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.820] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.820] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0243.820] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini")) returned 0x6 [0243.821] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x1) returned 0x2160000 [0243.821] VirtualAlloc (lpAddress=0x2160000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2160000 [0243.822] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.822] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0243.823] ReadFile (in: hFile=0x1e4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xae, lpOverlapped=0x0) returned 1 [0243.824] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xae, lpOverlapped=0x0) returned 1 [0243.825] ReadFile (in: hFile=0x1e4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0243.825] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0243.825] CloseHandle (hObject=0x1e4) returned 1 [0243.825] CloseHandle (hObject=0x1f0) returned 1 [0243.826] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.834] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.834] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x81988c19, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x81988c19, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e7d0 [0243.835] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x81988c19, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x81988c19, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0243.835] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0243.835] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini")) returned 1 [0243.836] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini")) returned 0xffffffff [0243.836] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x81988c19, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x81988c19, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0243.836] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0243.841] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x821222b0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x821222b0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x821222b0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x550284, cFileName="Burn1", cAlternateFileName="")) returned 1 [0243.841] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn1\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x821222b0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x821222b0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x821222b0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0243.842] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x821222b0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x821222b0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x821222b0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0243.842] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x821222b0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x821222b0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x821222b0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0243.842] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.842] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.842] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.842] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0243.843] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini")) returned 0x6 [0243.843] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0243.843] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.844] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xae, lpOverlapped=0x0) returned 1 [0243.845] WriteFile (in: hFile=0x1e4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xae, lpOverlapped=0x0) returned 1 [0243.845] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0243.845] WriteFile (in: hFile=0x1e4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0243.846] CloseHandle (hObject=0x1f0) returned 1 [0243.846] CloseHandle (hObject=0x1e4) returned 1 [0243.846] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.849] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.849] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x821222b0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x821222b0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x821222b0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e1d0 [0243.849] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x821222b0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x821222b0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x821222b0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0243.849] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0243.849] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini")) returned 1 [0243.852] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini")) returned 0xffffffff [0243.852] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x821222b0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x821222b0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x821222b0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0243.852] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0243.857] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xa0eeabde, ftCreationTime.dwHighDateTime=0x1d7a941, ftLastAccessTime.dwLowDateTime=0xa0ef0d8a, ftLastAccessTime.dwHighDateTime=0x1d7a941, ftLastWriteTime.dwLowDateTime=0xa0ef5baa, ftLastWriteTime.dwHighDateTime=0x1d7a941, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x550284, cFileName="Burn2", cAlternateFileName="")) returned 1 [0243.857] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn2\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xa0eeabde, ftCreationTime.dwHighDateTime=0x1d7a941, ftLastAccessTime.dwLowDateTime=0xa0ef0d8a, ftLastAccessTime.dwHighDateTime=0x1d7a941, ftLastWriteTime.dwLowDateTime=0xa0ef5baa, ftLastWriteTime.dwHighDateTime=0x1d7a941, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0243.857] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xa0eeabde, ftCreationTime.dwHighDateTime=0x1d7a941, ftLastAccessTime.dwLowDateTime=0xa0ef0d8a, ftLastAccessTime.dwHighDateTime=0x1d7a941, ftLastWriteTime.dwLowDateTime=0xa0ef5baa, ftLastWriteTime.dwHighDateTime=0x1d7a941, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0243.857] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xa0ef0d8a, ftCreationTime.dwHighDateTime=0x1d7a941, ftLastAccessTime.dwLowDateTime=0xa0ef0d8a, ftLastAccessTime.dwHighDateTime=0x1d7a941, ftLastWriteTime.dwLowDateTime=0xa0ef352b, ftLastWriteTime.dwHighDateTime=0x1d7a941, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0243.858] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.858] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.859] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.859] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0243.859] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini")) returned 0x6 [0243.860] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.864] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0243.864] ReadFile (in: hFile=0x1e4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xae, lpOverlapped=0x0) returned 1 [0243.866] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xae, lpOverlapped=0x0) returned 1 [0243.867] ReadFile (in: hFile=0x1e4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0243.867] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0243.867] CloseHandle (hObject=0x1e4) returned 1 [0243.867] CloseHandle (hObject=0x1f0) returned 1 [0243.867] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.868] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.868] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xa0ef0d8a, ftCreationTime.dwHighDateTime=0x1d7a941, ftLastAccessTime.dwLowDateTime=0xa0ef0d8a, ftLastAccessTime.dwHighDateTime=0x1d7a941, ftLastWriteTime.dwLowDateTime=0xa0ef352b, ftLastWriteTime.dwHighDateTime=0x1d7a941, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e910 [0243.868] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xa0ef0d8a, ftCreationTime.dwHighDateTime=0x1d7a941, ftLastAccessTime.dwLowDateTime=0xa0ef0d8a, ftLastAccessTime.dwHighDateTime=0x1d7a941, ftLastWriteTime.dwLowDateTime=0xa0ef352b, ftLastWriteTime.dwHighDateTime=0x1d7a941, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0243.868] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0243.869] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini")) returned 1 [0243.870] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn2\\desktop.ini")) returned 0xffffffff [0243.870] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xa0ef0d8a, ftCreationTime.dwHighDateTime=0x1d7a941, ftLastAccessTime.dwLowDateTime=0xa0ef0d8a, ftLastAccessTime.dwHighDateTime=0x1d7a941, ftLastWriteTime.dwLowDateTime=0xa0ef352b, ftLastWriteTime.dwHighDateTime=0x1d7a941, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0243.870] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0243.870] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xa2cd8e8d, ftCreationTime.dwHighDateTime=0x1d8a64b, ftLastAccessTime.dwLowDateTime=0xa2ce0477, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xa2ce65cb, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x550284, cFileName="Burn3", cAlternateFileName="")) returned 1 [0243.870] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn3\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn3\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xa2cd8e8d, ftCreationTime.dwHighDateTime=0x1d8a64b, ftLastAccessTime.dwLowDateTime=0xa2ce0477, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xa2ce65cb, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0243.870] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xa2cd8e8d, ftCreationTime.dwHighDateTime=0x1d8a64b, ftLastAccessTime.dwLowDateTime=0xa2ce0477, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xa2ce65cb, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0243.871] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xa2ce0477, ftCreationTime.dwHighDateTime=0x1d8a64b, ftLastAccessTime.dwLowDateTime=0xa2ce0477, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xa2ce3f7b, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0243.871] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.871] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.871] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.871] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0243.872] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn3\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn3\\desktop.ini")) returned 0x6 [0243.872] VirtualAlloc (lpAddress=0x2164000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2164000 [0243.872] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn3\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn3\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0243.873] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.873] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xae, lpOverlapped=0x0) returned 1 [0243.875] WriteFile (in: hFile=0x1e4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xae, lpOverlapped=0x0) returned 1 [0243.876] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0243.876] WriteFile (in: hFile=0x1e4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0243.876] CloseHandle (hObject=0x1f0) returned 1 [0243.877] CloseHandle (hObject=0x1e4) returned 1 [0243.877] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn3\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn3\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.877] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.878] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn3\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn3\\desktop.ini"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xa2ce0477, ftCreationTime.dwHighDateTime=0x1d8a64b, ftLastAccessTime.dwLowDateTime=0xa2ce0477, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xa2ce3f7b, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e410 [0243.878] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xa2ce0477, ftCreationTime.dwHighDateTime=0x1d8a64b, ftLastAccessTime.dwLowDateTime=0xa2ce0477, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xa2ce3f7b, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0243.878] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0243.878] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn3\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn3\\desktop.ini")) returned 1 [0243.879] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn3\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn3\\desktop.ini")) returned 0xffffffff [0243.879] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xa2ce0477, ftCreationTime.dwHighDateTime=0x1d8a64b, ftLastAccessTime.dwLowDateTime=0xa2ce0477, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xa2ce3f7b, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0243.879] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0243.880] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xa2cd8e8d, ftCreationTime.dwHighDateTime=0x1d8a64b, ftLastAccessTime.dwLowDateTime=0xa2ce0477, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xa2ce65cb, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x550284, cFileName="Burn3", cAlternateFileName="")) returned 0 [0243.880] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0243.880] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f7a181e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x33d8c54e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x33d8c54e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x2d364444, cFileName="Caches", cAlternateFileName="")) returned 1 [0243.880] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f7a181e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x33d8c54e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x33d8c54e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0243.880] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f7a181e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x33d8c54e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x33d8c54e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0243.880] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4084eafc, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4084eafc, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4084eafc, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x696e692e, dwReserved1=0x550284, cFileName="cversions.1.db", cAlternateFileName="CVERSI~1.DB")) returned 1 [0243.880] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.880] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.881] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.881] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0243.881] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db")) returned 0x20 [0243.881] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.882] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.882] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.883] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.885] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.885] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.885] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.886] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.886] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.886] CloseHandle (hObject=0x1f4) returned 1 [0243.887] CloseHandle (hObject=0x1e4) returned 1 [0243.896] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.896] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.896] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4084eafc, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4084eafc, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4084eafc, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="cversions.1.db", cAlternateFileName="CVERSI~1.DB")) returned 0x55e390 [0243.897] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4084eafc, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4084eafc, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4084eafc, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="cversions.1.db", cAlternateFileName="CVERSI~1.DB")) returned 0 [0243.897] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0243.897] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db")) returned 0 [0243.897] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db")) returned 0x20 [0243.897] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61b83a0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd61b83a0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd61b83a0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="cversions.3.db", cAlternateFileName="CVERSI~2.DB")) returned 1 [0243.897] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.897] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.898] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.898] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.898] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0243.898] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db")) returned 0x20 [0243.898] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.898] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.899] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.900] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.900] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.901] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.901] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.901] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.901] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.901] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.902] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.902] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.902] CloseHandle (hObject=0x1e4) returned 1 [0243.902] CloseHandle (hObject=0x1f4) returned 1 [0243.907] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0243.907] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0243.907] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61b83a0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd61b83a0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd61b83a0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="cversions.3.db", cAlternateFileName="CVERSI~2.DB")) returned 0x55e190 [0243.908] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd61b83a0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd61b83a0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd61b83a0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="cversions.3.db", cAlternateFileName="CVERSI~2.DB")) returned 0 [0243.908] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0243.910] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db")) returned 1 [0243.912] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db")) returned 0xffffffff [0243.912] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00ce3a4, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xf00ce3a4, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xf00ce3a4, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x62c40, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="{286DD990-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db", cAlternateFileName="{286DD~1.DB")) returned 1 [0243.912] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0243.912] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0243.913] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0243.913] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0243.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0243.913] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{286DD990-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{286dd990-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db")) returned 0x20 [0243.913] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{286DD990-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{286dd990-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0243.913] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{286DD990-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{286dd990-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0243.914] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.915] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.916] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.916] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.917] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.917] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.917] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.917] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.917] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.917] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.918] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.918] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.918] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.918] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.918] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.918] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.919] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.919] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.919] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.919] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.919] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.920] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.920] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.920] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.920] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.920] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.921] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.921] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.921] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.921] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.921] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.922] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.924] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.924] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.924] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.924] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.925] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.925] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.925] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.925] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.925] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.925] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.926] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.926] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.926] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.926] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.926] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.926] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.927] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.927] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.927] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.927] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.928] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.928] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.928] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.928] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.929] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.929] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.929] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.929] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.930] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.930] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.930] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.930] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.931] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.931] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.931] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.931] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.931] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.931] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.932] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.932] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.932] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.932] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.932] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.932] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.933] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.933] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.933] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.933] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.933] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.933] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.934] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.934] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.934] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.934] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.935] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.935] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.935] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.935] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.936] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.936] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.943] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.943] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.943] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.943] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.943] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.944] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.944] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.944] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.944] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.944] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.945] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.945] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.945] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.945] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.946] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.946] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.946] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.946] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.946] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.947] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.947] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.947] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.947] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.948] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.948] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.948] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.948] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.949] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.949] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.949] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.949] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.951] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.952] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.952] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.953] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.953] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.957] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.957] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.957] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.957] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.958] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.958] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.958] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.958] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.958] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.959] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.959] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.959] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.959] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.960] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.960] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.960] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.960] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.961] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.961] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.961] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.961] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.962] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.962] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.962] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.962] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.963] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.963] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.963] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.963] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.964] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.964] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.964] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.964] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.964] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.965] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.965] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.965] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.965] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.966] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.966] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.966] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.966] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.967] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.967] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.967] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.968] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.968] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.968] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.971] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.971] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.972] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.972] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.972] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.972] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.972] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.973] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.973] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.973] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.973] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.974] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.974] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.974] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0243.974] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xc40, lpOverlapped=0x0) returned 1 [0243.974] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xc40, lpOverlapped=0x0) returned 1 [0243.974] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.974] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0243.975] CloseHandle (hObject=0x1f4) returned 1 [0243.975] CloseHandle (hObject=0x1e4) returned 1 [0244.104] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{286DD990-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{286dd990-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{286DD990-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{286dd990-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.105] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{286DD990-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{286dd990-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.105] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{286DD990-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{286dd990-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00ce3a4, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xf00ce3a4, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xf00ce3a4, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x62c40, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="{286DD990-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db", cAlternateFileName="{286DD~1.DB")) returned 0x55e5d0 [0244.105] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf00ce3a4, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xf00ce3a4, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xf00ce3a4, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x62c40, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="{286DD990-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db", cAlternateFileName="{286DD~1.DB")) returned 0 [0244.105] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0244.105] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{286DD990-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{286dd990-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db")) returned 1 [0244.112] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{286DD990-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{286dd990-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db")) returned 0xffffffff [0244.112] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7598a98f, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7598a98f, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7598a98f, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x19010, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000018.db", cAlternateFileName="{3DA71~1.DB")) returned 1 [0244.112] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.112] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.112] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.112] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0244.113] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000018.db")) returned 0x20 [0244.113] VirtualAlloc (lpAddress=0x2168000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2168000 [0244.113] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000018.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.114] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.114] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.115] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.116] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.116] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.117] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.117] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.117] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.117] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.117] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.118] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.118] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.118] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.118] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.118] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.118] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.119] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.119] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.119] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.119] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.119] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.120] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.120] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.120] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.120] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.120] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.121] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.121] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.121] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.121] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.121] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.122] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.122] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.122] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.122] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.122] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.122] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.123] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.123] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.123] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.123] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.123] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.124] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.126] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.126] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.126] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.126] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.126] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.127] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.127] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.127] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.127] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x10, lpOverlapped=0x0) returned 1 [0244.127] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x10, lpOverlapped=0x0) returned 1 [0244.127] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.127] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.128] CloseHandle (hObject=0x1e4) returned 1 [0244.128] CloseHandle (hObject=0x1f4) returned 1 [0244.133] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000018.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.134] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.134] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000018.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7598a98f, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7598a98f, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7598a98f, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x19010, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000018.db", cAlternateFileName="{3DA71~1.DB")) returned 0x55e290 [0244.134] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7598a98f, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7598a98f, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7598a98f, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x19010, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000018.db", cAlternateFileName="{3DA71~1.DB")) returned 0 [0244.134] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0244.134] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000018.db")) returned 0 [0244.134] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000018.db")) returned 0x20 [0244.134] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d8c54e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x33d8c54e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x33d8c54e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000019.db", cAlternateFileName="{3DA71~2.DB")) returned 1 [0244.135] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.135] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.137] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.137] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0244.137] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000019.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000019.db")) returned 0x20 [0244.138] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000019.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000019.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.138] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000019.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000019.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.138] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.139] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.140] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.140] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.141] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.141] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.141] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.141] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.141] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.141] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.142] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.142] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.142] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.142] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.142] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.142] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.143] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.143] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.143] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.143] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.143] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa90, lpOverlapped=0x0) returned 1 [0244.143] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa90, lpOverlapped=0x0) returned 1 [0244.144] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.144] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.144] CloseHandle (hObject=0x1f4) returned 1 [0244.144] CloseHandle (hObject=0x1e4) returned 1 [0244.147] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000019.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000019.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000019.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000019.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.147] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000019.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000019.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.147] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000019.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000019.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d8c54e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x33d8c54e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x33d8c54e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaa90, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000019.db", cAlternateFileName="{3DA71~2.DB")) returned 0x55e710 [0244.147] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d8c54e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x33d8c54e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x33d8c54e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaa90, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000019.db", cAlternateFileName="{3DA71~2.DB")) returned 0 [0244.147] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0244.148] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000019.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000019.db")) returned 0 [0244.148] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000019.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000019.db")) returned 0x20 [0244.148] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd3e4955, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xbd3e4955, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xbd3e4955, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x1b218, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db", cAlternateFileName="{AFBF9~2.DB")) returned 1 [0244.148] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.148] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.150] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.151] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.151] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0244.151] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db")) returned 0x20 [0244.152] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.152] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.152] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.154] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.165] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.165] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.165] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.166] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.166] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.166] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.166] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.166] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.166] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.167] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.167] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.167] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.167] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.167] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.167] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.167] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.168] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.168] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.168] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.168] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.168] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.168] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.169] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.169] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.169] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.169] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.169] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.170] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.170] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.170] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.170] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.170] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.171] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.171] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.171] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.171] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.171] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.172] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.172] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.172] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.172] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.172] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.172] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.172] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.173] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.173] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.173] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.173] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.173] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.173] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.174] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.174] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.174] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x218, lpOverlapped=0x0) returned 1 [0244.174] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x218, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x218, lpOverlapped=0x0) returned 1 [0244.174] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.174] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.174] CloseHandle (hObject=0x1e4) returned 1 [0244.174] CloseHandle (hObject=0x1f4) returned 1 [0244.178] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.179] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.179] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd3e4955, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xbd3e4955, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xbd3e4955, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x1b218, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db", cAlternateFileName="{AFBF9~2.DB")) returned 0x55e510 [0244.179] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd3e4955, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xbd3e4955, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xbd3e4955, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x1b218, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db", cAlternateFileName="{AFBF9~2.DB")) returned 0 [0244.179] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0244.179] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db")) returned 1 [0244.182] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db")) returned 0xffffffff [0244.182] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bae338, ftCreationTime.dwHighDateTime=0x1d8c107, ftLastAccessTime.dwLowDateTime=0x2bae338, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x2bae338, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x1ac28, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db", cAlternateFileName="{AFBF9~3.DB")) returned 1 [0244.182] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.182] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.185] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.185] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.185] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.185] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0244.185] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db")) returned 0x20 [0244.185] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.186] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.187] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.188] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.189] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.189] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.190] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.190] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.190] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.190] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.191] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.191] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.191] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.191] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.192] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.192] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.192] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.192] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.193] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.200] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.200] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.200] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.201] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.201] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.201] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.201] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.202] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.202] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.202] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.203] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.203] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.203] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.203] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.204] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.204] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.204] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.204] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.204] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.205] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.205] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.205] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.205] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.206] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.206] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.206] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.206] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.206] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.207] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.207] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.207] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.207] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.207] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.208] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.208] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.208] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xc28, lpOverlapped=0x0) returned 1 [0244.208] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xc28, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xc28, lpOverlapped=0x0) returned 1 [0244.208] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.208] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.209] CloseHandle (hObject=0x1f4) returned 1 [0244.209] CloseHandle (hObject=0x1e4) returned 1 [0244.214] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.214] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.214] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bae338, ftCreationTime.dwHighDateTime=0x1d8c107, ftLastAccessTime.dwLowDateTime=0x2bae338, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x2bae338, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x1ac28, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db", cAlternateFileName="{AFBF9~3.DB")) returned 0x55e750 [0244.215] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bae338, ftCreationTime.dwHighDateTime=0x1d8c107, ftLastAccessTime.dwLowDateTime=0x2bae338, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x2bae338, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x1ac28, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db", cAlternateFileName="{AFBF9~3.DB")) returned 0 [0244.215] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0244.215] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db")) returned 0 [0244.215] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000018.db")) returned 0x20 [0244.215] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bae338, ftCreationTime.dwHighDateTime=0x1d8c107, ftLastAccessTime.dwLowDateTime=0x2bae338, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x2bae338, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x1ac28, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db", cAlternateFileName="{AFBF9~3.DB")) returned 0 [0244.215] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0244.216] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f6df80c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x382d4131, dwReserved1=0x2d384545, cFileName="Explorer", cAlternateFileName="")) returned 1 [0244.216] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f6df80c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0244.216] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f6df80c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.216] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f6df80c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f6df80c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x630ed5c3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExplorerStartupLog.etl", cAlternateFileName="EXPLOR~1.ETL")) returned 1 [0244.217] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x414f940e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x414f940e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42b8f150, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x750074, dwReserved1=0x6c0070, cFileName="ExplorerStartupLog_RunOnce.etl", cAlternateFileName="EXPLOR~2.ETL")) returned 1 [0244.218] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x750074, dwReserved1=0x6c0070, cFileName="iconcache_1280.db", cAlternateFileName="IC6701~1.DB")) returned 1 [0244.218] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.218] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.221] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.221] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.221] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.221] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0244.221] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db")) returned 0x2020 [0244.222] VirtualAlloc (lpAddress=0x216c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x216c000 [0244.223] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.223] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.224] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.225] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.227] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.227] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.227] CloseHandle (hObject=0x1e4) returned 1 [0244.227] CloseHandle (hObject=0x1f4) returned 1 [0244.228] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.229] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.229] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_1280.db", cAlternateFileName="IC6701~1.DB")) returned 0x55e2d0 [0244.229] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_1280.db", cAlternateFileName="IC6701~1.DB")) returned 0 [0244.229] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0244.229] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db")) returned 1 [0244.231] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db")) returned 0xffffffff [0244.231] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="iconcache_16.db", cAlternateFileName="ICONCA~2.DB")) returned 1 [0244.231] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.231] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.231] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.231] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0244.232] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db")) returned 0x2020 [0244.232] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.239] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.240] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.241] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.242] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.242] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.242] CloseHandle (hObject=0x1f4) returned 1 [0244.242] CloseHandle (hObject=0x1e4) returned 1 [0244.247] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.247] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.247] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_16.db", cAlternateFileName="ICONCA~2.DB")) returned 0x55e710 [0244.248] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_16.db", cAlternateFileName="ICONCA~2.DB")) returned 0 [0244.248] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0244.248] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db")) returned 1 [0244.252] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db")) returned 0xffffffff [0244.252] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="iconcache_1920.db", cAlternateFileName="IC5758~1.DB")) returned 1 [0244.253] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.253] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.253] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.253] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.253] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.253] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0244.253] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db")) returned 0x2020 [0244.253] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.254] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.254] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.256] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.257] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.257] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.257] CloseHandle (hObject=0x1e4) returned 1 [0244.257] CloseHandle (hObject=0x1f4) returned 1 [0244.259] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.259] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.259] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_1920.db", cAlternateFileName="IC5758~1.DB")) returned 0x55e710 [0244.260] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_1920.db", cAlternateFileName="IC5758~1.DB")) returned 0 [0244.260] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0244.260] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db")) returned 1 [0244.261] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db")) returned 0xffffffff [0244.261] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="iconcache_256.db", cAlternateFileName="ICD45C~1.DB")) returned 1 [0244.262] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.262] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.265] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.265] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.265] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.265] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0244.265] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db")) returned 0x2020 [0244.265] VirtualAlloc (lpAddress=0x2170000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2170000 [0244.266] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.266] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.267] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.268] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.269] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.269] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.269] CloseHandle (hObject=0x1f4) returned 1 [0244.269] CloseHandle (hObject=0x1e4) returned 1 [0244.276] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.277] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.277] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_256.db", cAlternateFileName="ICD45C~1.DB")) returned 0x55e8d0 [0244.277] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_256.db", cAlternateFileName="ICD45C~1.DB")) returned 0 [0244.278] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0244.278] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db")) returned 1 [0244.279] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db")) returned 0xffffffff [0244.280] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="iconcache_2560.db", cAlternateFileName="IC33E4~1.DB")) returned 1 [0244.283] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.283] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.283] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.284] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.284] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.284] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0244.284] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db")) returned 0x2020 [0244.296] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.296] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.297] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.298] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.300] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.300] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.300] CloseHandle (hObject=0x1e4) returned 1 [0244.300] CloseHandle (hObject=0x1f4) returned 1 [0244.306] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.308] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.308] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_2560.db", cAlternateFileName="IC33E4~1.DB")) returned 0x55e650 [0244.308] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_2560.db", cAlternateFileName="IC33E4~1.DB")) returned 0 [0244.308] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0244.309] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db")) returned 1 [0244.311] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db")) returned 0xffffffff [0244.311] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="iconcache_32.db", cAlternateFileName="ICONCA~3.DB")) returned 1 [0244.311] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.311] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.319] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.319] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.320] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0244.320] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db")) returned 0x2020 [0244.321] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.323] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.324] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.327] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.335] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.335] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.335] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.335] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.336] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.337] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.337] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.337] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.337] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.338] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.338] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.338] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.338] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.339] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.339] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.364] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.364] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.366] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.366] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.367] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.367] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.367] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.367] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.368] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.368] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.368] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.369] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.372] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.373] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.373] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.373] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.373] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.377] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.377] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.378] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.378] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.378] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.379] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.379] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.379] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.379] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.380] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.380] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.380] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.380] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.381] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.381] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.381] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.381] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.382] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.382] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.382] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.382] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.382] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.383] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.383] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.383] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.384] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.384] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.384] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.384] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.384] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.385] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.385] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.385] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.386] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.386] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.386] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.386] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.387] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.387] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.387] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.387] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.388] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.388] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.388] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.388] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.388] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.389] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.389] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.389] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.389] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.390] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.390] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.390] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.390] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.391] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.391] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.391] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.392] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.392] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.398] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.399] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.399] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.399] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.400] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.400] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.400] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.400] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.401] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.401] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.401] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.401] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.401] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.401] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.402] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.402] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.402] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.402] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.402] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.403] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.403] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.403] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.403] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.403] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.404] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.404] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.404] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.404] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.404] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.405] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.405] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.405] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.405] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.406] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.406] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.406] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.406] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.410] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.410] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.411] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.411] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.411] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.411] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.411] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.412] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.412] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.412] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.412] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.413] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.413] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.413] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.413] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.414] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.414] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.414] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.414] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.415] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.415] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.415] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.415] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.416] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.416] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.416] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.416] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.436] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.436] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.437] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.437] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.437] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.438] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.438] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.438] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.438] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.439] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.439] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.439] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.440] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.440] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.440] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.440] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.441] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.441] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.441] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.442] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.442] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.445] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.445] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.445] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.445] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.446] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.446] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.501] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.502] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.503] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.503] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.503] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.503] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.504] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.504] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.504] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.504] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.504] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.505] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.505] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.505] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.506] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.506] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.506] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.506] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.506] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.507] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.507] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.507] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.507] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.507] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.508] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.508] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.508] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.508] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.508] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.508] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.509] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.509] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.509] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.509] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.512] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.512] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.513] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.513] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.513] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.513] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.514] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.514] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.514] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.528] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.529] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.529] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.529] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.530] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.530] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.531] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.531] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.531] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.531] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.532] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.532] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.532] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.533] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.533] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.533] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.533] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.534] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.534] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.534] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.536] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.536] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.536] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.536] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.536] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.537] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.537] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.537] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.537] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.537] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.538] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.538] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.538] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.539] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.539] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.539] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.539] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.540] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.540] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.540] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.540] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.540] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.541] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.541] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.541] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.541] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.545] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.545] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.545] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.545] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.545] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.552] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.552] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.552] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.552] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.552] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.553] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.553] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.553] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.553] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.553] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.554] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.554] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.554] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.554] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.554] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.555] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.555] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.555] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.556] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.556] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.556] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.556] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.557] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.557] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.557] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.557] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.557] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.557] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.558] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.558] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.558] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.558] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.559] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.559] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.559] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.559] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.559] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.560] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.560] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.560] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.560] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.560] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.561] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.561] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.565] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.566] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.566] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.566] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.566] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.567] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.567] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.567] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.568] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.568] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.568] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.571] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.571] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.571] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.572] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.572] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.572] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.572] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.573] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.573] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.573] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.574] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.574] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.574] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.574] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.575] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.575] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.575] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.576] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.576] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.576] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.576] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.577] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.577] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.578] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.578] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.580] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.581] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.581] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.583] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.583] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.584] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.585] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.586] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.586] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.587] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.587] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.587] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.588] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.588] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.589] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.590] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.590] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.591] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.591] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.591] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.591] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.592] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.592] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.592] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.593] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.593] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.593] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.597] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.597] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.597] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.598] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.598] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.598] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.598] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.598] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.599] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.599] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.599] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.600] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.600] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.600] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.600] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.601] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.601] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.601] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.602] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.602] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.602] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.603] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.603] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.603] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.603] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.603] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.604] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.604] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.604] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.604] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.604] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.605] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.605] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.605] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.605] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.605] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.605] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.606] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.606] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.606] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.606] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.607] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.607] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.607] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.607] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.608] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.608] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.616] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.616] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.617] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.617] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.617] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.617] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.618] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.618] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.618] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.618] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.623] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.638] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.638] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_32.db", cAlternateFileName="ICONCA~3.DB")) returned 0x55e290 [0244.642] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_32.db", cAlternateFileName="ICONCA~3.DB")) returned 0 [0244.642] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0244.643] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db")) returned 1 [0244.659] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db")) returned 0xffffffff [0244.659] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="iconcache_48.db", cAlternateFileName="ICONCA~4.DB")) returned 1 [0244.660] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.660] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.660] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.660] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0244.660] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db")) returned 0x2020 [0244.668] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.670] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.677] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.677] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.677] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_48.db", cAlternateFileName="ICONCA~4.DB")) returned 0x55e410 [0244.677] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_48.db", cAlternateFileName="ICONCA~4.DB")) returned 0 [0244.678] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0244.678] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db")) returned 1 [0244.679] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db")) returned 0xffffffff [0244.679] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="iconcache_768.db", cAlternateFileName="ICAE5D~1.DB")) returned 1 [0244.679] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.680] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.683] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.683] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0244.683] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db")) returned 0x2020 [0244.684] VirtualAlloc (lpAddress=0x2174000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2174000 [0244.685] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.686] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.687] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.689] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.691] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.691] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.691] CloseHandle (hObject=0x1f4) returned 1 [0244.691] CloseHandle (hObject=0x1e4) returned 1 [0244.695] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.696] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.696] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_768.db", cAlternateFileName="ICAE5D~1.DB")) returned 0x55e5d0 [0244.697] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_768.db", cAlternateFileName="ICAE5D~1.DB")) returned 0 [0244.697] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0244.697] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db")) returned 1 [0244.699] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db")) returned 0xffffffff [0244.699] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="iconcache_96.db", cAlternateFileName="IC1070~1.DB")) returned 1 [0244.700] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.700] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.704] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.704] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.704] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0244.705] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db")) returned 0x2020 [0244.705] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.706] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.706] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.708] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.709] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.709] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.709] CloseHandle (hObject=0x1e4) returned 1 [0244.709] CloseHandle (hObject=0x1f4) returned 1 [0244.711] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.712] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.712] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_96.db", cAlternateFileName="IC1070~1.DB")) returned 0x55e410 [0244.712] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_96.db", cAlternateFileName="IC1070~1.DB")) returned 0 [0244.712] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0244.713] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db")) returned 1 [0244.714] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db")) returned 0xffffffff [0244.714] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42072188, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42072188, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42072188, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="iconcache_custom_stream.db", cAlternateFileName="ICA148~1.DB")) returned 1 [0244.715] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.715] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.715] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.715] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0244.715] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db")) returned 0x2020 [0244.716] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.716] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.717] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.719] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.720] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.720] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.720] CloseHandle (hObject=0x1f4) returned 1 [0244.721] CloseHandle (hObject=0x1e4) returned 1 [0244.726] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.727] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.727] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42072188, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42072188, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42072188, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_custom_stream.db", cAlternateFileName="ICA148~1.DB")) returned 0x55e8d0 [0244.727] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42072188, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42072188, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42072188, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_custom_stream.db", cAlternateFileName="ICA148~1.DB")) returned 0 [0244.727] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0244.727] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db")) returned 1 [0244.729] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db")) returned 0xffffffff [0244.729] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="iconcache_exif.db", cAlternateFileName="IC8CEF~1.DB")) returned 1 [0244.729] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.729] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.729] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.729] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0244.729] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db")) returned 0x2020 [0244.730] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.730] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.731] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.732] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.733] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.733] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.733] CloseHandle (hObject=0x1e4) returned 1 [0244.734] CloseHandle (hObject=0x1f4) returned 1 [0244.735] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.735] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.736] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_exif.db", cAlternateFileName="IC8CEF~1.DB")) returned 0x55e410 [0244.736] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_exif.db", cAlternateFileName="IC8CEF~1.DB")) returned 0 [0244.736] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0244.736] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db")) returned 1 [0244.737] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db")) returned 0xffffffff [0244.738] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="iconcache_idx.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0244.738] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.738] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.738] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.738] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0244.738] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db")) returned 0x2020 [0244.739] VirtualAlloc (lpAddress=0x2178000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2178000 [0244.739] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.740] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.740] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.741] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.742] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xcf8, lpOverlapped=0x0) returned 1 [0244.743] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xcf8, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xcf8, lpOverlapped=0x0) returned 1 [0244.743] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.743] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.743] CloseHandle (hObject=0x1f4) returned 1 [0244.743] CloseHandle (hObject=0x1e4) returned 1 [0244.744] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.745] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.745] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_idx.db", cAlternateFileName="ICONCA~1.DB")) returned 0x55e910 [0244.745] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_idx.db", cAlternateFileName="ICONCA~1.DB")) returned 0 [0244.745] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0244.745] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db")) returned 1 [0244.746] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db")) returned 0xffffffff [0244.747] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="iconcache_sr.db", cAlternateFileName="ICC3DF~1.DB")) returned 1 [0244.747] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.747] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.747] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.747] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0244.747] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db")) returned 0x2020 [0244.747] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.748] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.748] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.753] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.754] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.754] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.754] CloseHandle (hObject=0x1e4) returned 1 [0244.754] CloseHandle (hObject=0x1f4) returned 1 [0244.756] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.756] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.756] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_sr.db", cAlternateFileName="ICC3DF~1.DB")) returned 0x55e8d0 [0244.757] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_sr.db", cAlternateFileName="ICC3DF~1.DB")) returned 0 [0244.757] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0244.757] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db")) returned 1 [0244.758] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db")) returned 0xffffffff [0244.758] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="iconcache_wide.db", cAlternateFileName="IC1CB7~1.DB")) returned 1 [0244.758] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.758] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.758] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.758] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0244.759] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db")) returned 0x2020 [0244.759] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.759] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.760] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.761] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.761] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.762] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.762] CloseHandle (hObject=0x1f4) returned 1 [0244.762] CloseHandle (hObject=0x1e4) returned 1 [0244.763] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.763] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.763] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_wide.db", cAlternateFileName="IC1CB7~1.DB")) returned 0x55e710 [0244.763] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_wide.db", cAlternateFileName="IC1CB7~1.DB")) returned 0 [0244.764] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0244.764] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db")) returned 1 [0244.765] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db")) returned 0xffffffff [0244.765] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="iconcache_wide_alternate.db", cAlternateFileName="IC8F8E~1.DB")) returned 1 [0244.765] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.765] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.765] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.765] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.765] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.765] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0244.766] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db")) returned 0x2020 [0244.766] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.766] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.766] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.767] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.768] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.768] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.768] CloseHandle (hObject=0x1e4) returned 1 [0244.768] CloseHandle (hObject=0x1f4) returned 1 [0244.770] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.770] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.770] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_wide_alternate.db", cAlternateFileName="IC8F8E~1.DB")) returned 0x55e750 [0244.770] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4204bd91, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4204bd91, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4204bd91, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iconcache_wide_alternate.db", cAlternateFileName="IC8F8E~1.DB")) returned 0 [0244.770] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0244.771] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db")) returned 1 [0244.772] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db")) returned 0xffffffff [0244.772] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="thumbcache_1280.db", cAlternateFileName="TH2C95~1.DB")) returned 1 [0244.772] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.772] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.772] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.772] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0244.772] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db")) returned 0x2020 [0244.773] VirtualAlloc (lpAddress=0x217c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x217c000 [0244.774] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.774] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.774] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.776] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0244.777] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.777] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0244.777] CloseHandle (hObject=0x1f4) returned 1 [0244.777] CloseHandle (hObject=0x1e4) returned 1 [0244.777] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.778] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.778] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_1280.db", cAlternateFileName="TH2C95~1.DB")) returned 0x55e210 [0244.778] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_1280.db", cAlternateFileName="TH2C95~1.DB")) returned 0 [0244.778] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0244.779] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db")) returned 1 [0244.780] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db")) returned 0xffffffff [0244.781] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8233854e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="thumbcache_16.db", cAlternateFileName="THUMBC~2.DB")) returned 1 [0244.781] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.781] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.781] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.781] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0244.781] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db")) returned 0x2020 [0244.782] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.782] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.782] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.783] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.785] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.785] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.785] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.785] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.786] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.786] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.786] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.786] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.786] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.787] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.787] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.787] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.787] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.787] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.787] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.790] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.790] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.792] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.792] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.792] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.792] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.792] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.792] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.792] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.793] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.793] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.793] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.796] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.796] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.796] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.796] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.796] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.797] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.797] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.797] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.797] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.797] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.797] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.798] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.798] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.798] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.798] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.798] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.798] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.799] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.799] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.799] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.799] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.799] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.799] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.799] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.800] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.800] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.800] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.800] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.800] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.800] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.800] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.801] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.801] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.801] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.801] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.801] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.801] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.802] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.802] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.802] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.802] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.802] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.802] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.802] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.803] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.803] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.803] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.803] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.803] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.803] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.803] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.804] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.804] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.804] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.804] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.804] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.804] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.805] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.805] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.805] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.805] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.805] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.805] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.806] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.808] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.808] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.809] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.809] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.809] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.809] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.809] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.809] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.810] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.810] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.810] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.810] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.810] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.811] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.811] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.811] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.811] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.811] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.812] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.812] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.812] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.812] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.812] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.812] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.812] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.813] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.813] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.813] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.813] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.813] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.813] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.814] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.814] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.814] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.814] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.814] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.814] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.815] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.815] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.815] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.816] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.816] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.816] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.816] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.816] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.816] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.817] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.817] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.817] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.817] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.817] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.817] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.817] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.818] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.818] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.818] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.818] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.818] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.818] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.819] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.819] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.819] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.819] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.819] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.822] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.823] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.823] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.823] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.823] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.824] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.824] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.824] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.824] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.824] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.824] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.825] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.825] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.825] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.825] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.825] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.826] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.826] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.826] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.826] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.826] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.827] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.852] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.852] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.852] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.853] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.853] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.853] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.853] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.853] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.854] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.854] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.854] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.854] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.854] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.855] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.855] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.855] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.855] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.855] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.855] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.856] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.856] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.856] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.856] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.856] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.856] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.856] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.857] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.857] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.857] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.857] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.857] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.857] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.857] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.858] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.858] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.868] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.868] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.868] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.868] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.868] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.868] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.869] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.871] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.871] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.871] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.871] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.871] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.872] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.872] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.872] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.872] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.872] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.872] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.873] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.873] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.873] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.873] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.873] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.873] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.873] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.926] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.926] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.926] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.926] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.927] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.927] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.927] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.927] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.927] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.928] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.928] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.928] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.928] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.928] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.928] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.929] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.929] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.929] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.929] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.930] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.930] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.930] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.930] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.931] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.931] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.931] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.931] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.931] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.931] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.931] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.932] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.932] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.932] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.932] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.932] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.933] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.933] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.933] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.933] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.934] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.934] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.934] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.937] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.937] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.937] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.938] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.938] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.938] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.938] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.938] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.939] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.939] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.939] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.939] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.939] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.939] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.940] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.940] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.940] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.940] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.940] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.940] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.941] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.941] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.941] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.941] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.941] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.941] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.941] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.942] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.942] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.942] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.942] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.942] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.943] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.943] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.943] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.943] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.943] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.943] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.943] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.944] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.944] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.944] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.944] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.944] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.944] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.944] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.945] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.945] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.945] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.945] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.945] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.945] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.945] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.946] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.946] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.946] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.946] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.946] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.946] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.947] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.947] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.947] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.947] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.947] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.949] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.949] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.949] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.950] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.950] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.950] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.950] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.950] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.950] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.950] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.951] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.951] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.951] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.951] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.951] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.952] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.952] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.952] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.952] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.952] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.952] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.953] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.953] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.953] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.953] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.953] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.953] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.954] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.954] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.954] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.954] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.954] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.954] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.954] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.955] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.955] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.955] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.956] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.956] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.956] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.956] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.956] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.957] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.957] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.957] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.957] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.957] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.957] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.957] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.958] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.958] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.958] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.958] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.959] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.959] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.959] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.959] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.959] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.959] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.959] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.960] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.960] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.960] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.960] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.964] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.964] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.964] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.964] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.964] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.964] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.965] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.965] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.965] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.965] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.965] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.965] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.965] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.966] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.966] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.966] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.966] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.967] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.967] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.967] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.967] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.967] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.968] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.968] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.968] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.968] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.969] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.969] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.969] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.969] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.969] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.969] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.969] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.970] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.970] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.970] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.970] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.970] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.970] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.971] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.971] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.971] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.971] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.971] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.971] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.972] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.972] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.972] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.972] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.972] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.972] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.973] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.973] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.973] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.973] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.973] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.973] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.973] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.974] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.974] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.974] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.974] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.974] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.975] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.975] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.975] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.975] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.975] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.975] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.976] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.976] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.976] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.976] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.976] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.976] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.976] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.977] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.977] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.977] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0244.981] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.982] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.982] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8233854e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_16.db", cAlternateFileName="THUMBC~2.DB")) returned 0x55e410 [0244.982] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8233854e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_16.db", cAlternateFileName="THUMBC~2.DB")) returned 0 [0244.982] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0244.982] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db")) returned 1 [0244.992] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db")) returned 0xffffffff [0244.992] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="thumbcache_1920.db", cAlternateFileName="TH1CEC~1.DB")) returned 1 [0244.992] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.992] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.992] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0244.992] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0244.992] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0244.993] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db")) returned 0x2020 [0244.993] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0244.993] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0244.996] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0244.996] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0244.997] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_1920.db", cAlternateFileName="TH1CEC~1.DB")) returned 0x55e5d0 [0244.997] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_1920.db", cAlternateFileName="TH1CEC~1.DB")) returned 0 [0244.997] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0244.997] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db")) returned 1 [0244.998] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db")) returned 0xffffffff [0244.998] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="thumbcache_256.db", cAlternateFileName="TH5A2B~1.DB")) returned 1 [0244.998] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0244.998] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0244.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.000] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.000] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.000] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0245.000] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db")) returned 0x2020 [0245.000] VirtualAlloc (lpAddress=0x2180000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2180000 [0245.001] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.001] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.001] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.003] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.006] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.007] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.007] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.007] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.007] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.007] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.008] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.008] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.008] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.008] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.008] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.008] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.008] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.009] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.009] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.009] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.009] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.009] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.009] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.010] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.010] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.010] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.010] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.010] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.010] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.011] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.011] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.013] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.014] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.014] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.014] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.014] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.014] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.015] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.015] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.015] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.015] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.015] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.016] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.016] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.016] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.016] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.016] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.016] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.016] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.017] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.017] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.017] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.017] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.017] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.017] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.018] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.018] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.018] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.018] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.018] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.018] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.018] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.019] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.019] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.019] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.019] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.019] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.019] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.020] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.020] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.020] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.020] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.020] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.020] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.021] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.021] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.021] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.021] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.022] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.022] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.022] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.023] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.023] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.023] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.023] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.023] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.023] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.023] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.024] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.024] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.024] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.024] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.024] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.027] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.027] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.028] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.028] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.028] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.028] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.028] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.028] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.029] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.029] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.029] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.029] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.029] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.029] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.030] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.030] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.030] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.031] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.031] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.031] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.031] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.031] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.031] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.032] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.032] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.032] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.032] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.032] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.032] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.032] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.033] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.033] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.033] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.033] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.033] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.034] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.034] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.035] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.035] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.035] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.035] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.035] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.035] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.036] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.036] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.036] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.036] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.036] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.036] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.036] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.037] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.037] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.037] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.037] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.037] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.037] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.037] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.038] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.038] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.038] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.038] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.038] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.038] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.039] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.041] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.041] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.042] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.042] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.042] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.042] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.042] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.042] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.043] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.043] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.043] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.043] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.043] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.043] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.043] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.044] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.044] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.044] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.044] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.044] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.044] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.045] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.045] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.045] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.045] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.045] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.046] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.047] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.047] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.047] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.047] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.047] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.048] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.048] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.048] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.048] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.048] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.048] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.049] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.049] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.049] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.049] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.049] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.049] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.050] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.050] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.050] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.050] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.050] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.050] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.050] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.051] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.051] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.051] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.051] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.051] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.051] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.052] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.052] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.052] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.052] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.052] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.052] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.052] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.054] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.054] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.054] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.055] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.055] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.055] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.055] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.055] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.055] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.056] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.056] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.056] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.056] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.056] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.056] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.057] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.057] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.057] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.057] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.057] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.057] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.057] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.058] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.058] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.058] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.058] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.058] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.058] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.059] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.059] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.059] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.059] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.059] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.059] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.059] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.060] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.060] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.061] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.061] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.061] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.061] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.062] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.062] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.062] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.062] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.062] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.062] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.062] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.063] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.063] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.063] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.063] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.063] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.063] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.064] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.064] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.064] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.064] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.064] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.064] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.065] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.065] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.065] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.065] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.068] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.068] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.068] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.068] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.068] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.068] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.069] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.069] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.069] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.069] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.069] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.069] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.070] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.070] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.070] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.070] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.070] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.070] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.071] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.071] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.071] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.071] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.071] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.071] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.071] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.072] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.072] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.072] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.072] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.072] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.072] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.073] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.073] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.073] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.073] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.073] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.073] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.074] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.074] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.074] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.074] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.074] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.074] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.075] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.075] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.075] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.075] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.075] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.075] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.075] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.076] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.076] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.076] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.076] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.076] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.076] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.076] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.077] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.077] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.077] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.077] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.077] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.077] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.078] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.080] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.080] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.080] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.080] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.080] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.081] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.081] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.081] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.081] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.081] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.081] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.081] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.082] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.082] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.082] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.082] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.082] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.082] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.082] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.083] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.083] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.083] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.083] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.083] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.083] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.084] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.084] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.084] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.084] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.084] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.084] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.084] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.085] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.085] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.085] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.085] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.085] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.086] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.086] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.086] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.087] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.087] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.087] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.087] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.087] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.087] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.087] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.088] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.088] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.088] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.088] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.088] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.088] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.089] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.089] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.089] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.089] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.089] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.089] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.089] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.090] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.090] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.090] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.090] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.108] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.108] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.108] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.109] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.109] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.109] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.109] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.110] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.110] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.110] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.110] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.110] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.110] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.111] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.111] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.111] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.111] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.111] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.111] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.112] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.112] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.112] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.112] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.112] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.113] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.113] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.113] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.113] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.113] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.113] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.114] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.114] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.114] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.114] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.114] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.114] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.115] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.115] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.115] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.115] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.115] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.116] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.116] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.116] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.116] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.116] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.116] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.117] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.117] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.117] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.117] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.117] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.117] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.118] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.118] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.118] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.119] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.119] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.119] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.119] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.119] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.119] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.119] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.120] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.120] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.120] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.120] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.121] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.121] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.121] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.121] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.121] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.121] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.122] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.122] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.122] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.122] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.122] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.123] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.123] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.123] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.123] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.123] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.123] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.124] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0245.129] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.132] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0245.132] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_256.db", cAlternateFileName="TH5A2B~1.DB")) returned 0x55e410 [0245.133] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_256.db", cAlternateFileName="TH5A2B~1.DB")) returned 0 [0245.133] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0245.133] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db")) returned 1 [0245.151] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db")) returned 0xffffffff [0245.151] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="thumbcache_2560.db", cAlternateFileName="THDF2D~1.DB")) returned 1 [0245.155] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.156] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.158] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.158] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0245.158] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db")) returned 0x2020 [0245.158] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.159] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.162] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.163] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0245.163] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_2560.db", cAlternateFileName="THDF2D~1.DB")) returned 0x55e610 [0245.163] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_2560.db", cAlternateFileName="THDF2D~1.DB")) returned 0 [0245.163] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0245.163] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db")) returned 1 [0245.164] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db")) returned 0xffffffff [0245.164] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8241d2c5, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="thumbcache_32.db", cAlternateFileName="THUMBC~3.DB")) returned 1 [0245.165] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.165] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.165] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.165] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0245.165] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db")) returned 0x2020 [0245.165] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.166] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.242] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.243] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0245.243] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8241d2c5, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_32.db", cAlternateFileName="THUMBC~3.DB")) returned 0x55e390 [0245.243] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8241d2c5, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_32.db", cAlternateFileName="THUMBC~3.DB")) returned 0 [0245.243] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0245.244] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db")) returned 1 [0245.254] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db")) returned 0xffffffff [0245.254] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x77208290, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="thumbcache_48.db", cAlternateFileName="THUMBC~4.DB")) returned 1 [0245.255] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.255] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.255] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.255] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0245.255] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db")) returned 0x2020 [0245.255] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.256] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.325] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.325] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0245.325] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x77208290, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_48.db", cAlternateFileName="THUMBC~4.DB")) returned 0x55e410 [0245.326] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x77208290, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_48.db", cAlternateFileName="THUMBC~4.DB")) returned 0 [0245.326] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0245.326] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db")) returned 1 [0245.338] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db")) returned 0xffffffff [0245.338] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="thumbcache_768.db", cAlternateFileName="TH9AED~1.DB")) returned 1 [0245.338] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.338] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.339] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.339] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.339] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.339] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0245.339] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db")) returned 0x2020 [0245.339] VirtualAlloc (lpAddress=0x2184000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2184000 [0245.340] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.340] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.345] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.345] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0245.345] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_768.db", cAlternateFileName="TH9AED~1.DB")) returned 0x55e5d0 [0245.345] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_768.db", cAlternateFileName="TH9AED~1.DB")) returned 0 [0245.345] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0245.346] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db")) returned 1 [0245.347] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db")) returned 0xffffffff [0245.347] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="thumbcache_96.db", cAlternateFileName="THB2F1~1.DB")) returned 1 [0245.347] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.347] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.347] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.347] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0245.347] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db")) returned 0x2020 [0245.348] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.348] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.351] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.351] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0245.352] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_96.db", cAlternateFileName="THB2F1~1.DB")) returned 0x55e5d0 [0245.352] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_96.db", cAlternateFileName="THB2F1~1.DB")) returned 0 [0245.352] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0245.352] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db")) returned 1 [0245.353] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db")) returned 0xffffffff [0245.353] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="thumbcache_custom_stream.db", cAlternateFileName="THFBCB~1.DB")) returned 1 [0245.353] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.353] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.353] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.354] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.354] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.354] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0245.354] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db")) returned 0x2020 [0245.354] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.354] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.357] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.358] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0245.358] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_custom_stream.db", cAlternateFileName="THFBCB~1.DB")) returned 0x55e5d0 [0245.359] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_custom_stream.db", cAlternateFileName="THFBCB~1.DB")) returned 0 [0245.359] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0245.359] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db")) returned 1 [0245.360] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db")) returned 0xffffffff [0245.360] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="thumbcache_exif.db", cAlternateFileName="THD0E7~1.DB")) returned 1 [0245.360] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.360] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.361] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.361] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0245.361] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db")) returned 0x2020 [0245.362] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.363] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.365] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.365] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0245.365] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_exif.db", cAlternateFileName="THD0E7~1.DB")) returned 0x55e390 [0245.366] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_exif.db", cAlternateFileName="THD0E7~1.DB")) returned 0 [0245.366] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0245.366] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db")) returned 1 [0245.367] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db")) returned 0xffffffff [0245.367] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="thumbcache_idx.db", cAlternateFileName="THUMBC~1.DB")) returned 1 [0245.367] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.367] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.367] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.367] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0245.368] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db")) returned 0x2020 [0245.368] VirtualAlloc (lpAddress=0x2188000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2188000 [0245.368] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.369] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.371] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.372] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0245.372] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_idx.db", cAlternateFileName="THUMBC~1.DB")) returned 0x55e250 [0245.372] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_idx.db", cAlternateFileName="THUMBC~1.DB")) returned 0 [0245.372] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0245.372] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db")) returned 1 [0245.374] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db")) returned 0xffffffff [0245.376] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="thumbcache_sr.db", cAlternateFileName="TH0F82~1.DB")) returned 1 [0245.376] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.376] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.376] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.376] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0245.377] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db")) returned 0x2020 [0245.377] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.377] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.380] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.381] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0245.381] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_sr.db", cAlternateFileName="TH0F82~1.DB")) returned 0x55e8d0 [0245.381] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_sr.db", cAlternateFileName="TH0F82~1.DB")) returned 0 [0245.381] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0245.381] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db")) returned 1 [0245.382] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db")) returned 0xffffffff [0245.382] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="thumbcache_wide.db", cAlternateFileName="THD793~1.DB")) returned 1 [0245.383] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.383] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.383] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.383] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0245.383] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db")) returned 0x2020 [0245.384] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.384] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.386] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.387] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0245.387] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_wide.db", cAlternateFileName="THD793~1.DB")) returned 0x55e710 [0245.387] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_wide.db", cAlternateFileName="THD793~1.DB")) returned 0 [0245.387] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0245.387] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db")) returned 1 [0245.388] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db")) returned 0xffffffff [0245.389] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="thumbcache_wide_alternate.db", cAlternateFileName="TH4ADE~1.DB")) returned 1 [0245.389] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.389] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.389] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.389] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0245.390] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db")) returned 0x2020 [0245.390] VirtualAlloc (lpAddress=0x218c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x218c000 [0245.390] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.391] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.391] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0245.392] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x18, lpOverlapped=0x0) returned 1 [0245.394] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0245.394] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0245.394] CloseHandle (hObject=0x1f4) returned 1 [0245.394] CloseHandle (hObject=0x1e4) returned 1 [0245.394] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.395] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0245.395] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_wide_alternate.db", cAlternateFileName="TH4ADE~1.DB")) returned 0x55e5d0 [0245.395] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="thumbcache_wide_alternate.db", cAlternateFileName="TH4ADE~1.DB")) returned 0 [0245.395] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0245.395] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db")) returned 1 [0245.396] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db")) returned 0xffffffff [0245.396] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaed678f3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaed678f3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaed678f3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="thumbcache_wide_alternate.db", cAlternateFileName="TH4ADE~1.DB")) returned 0 [0245.397] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0245.397] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f656863, dwReserved1=0x65646977, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0245.397] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\gameexplorer\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0245.397] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0245.397] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0245.397] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0245.397] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f959ee, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f959ee, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f656863, dwReserved1=0x65646977, cFileName="History", cAlternateFileName="")) returned 1 [0245.398] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f959ee, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f959ee, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0245.398] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f959ee, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f959ee, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0245.398] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f959ee, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f959ee, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f959ee, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x82, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0245.398] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.398] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.398] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.398] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.398] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0245.399] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\desktop.ini")) returned 0x20 [0245.399] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.399] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.400] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x82, lpOverlapped=0x0) returned 1 [0245.400] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x82, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x82, lpOverlapped=0x0) returned 1 [0245.401] ReadFile (in: hFile=0x1e4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0245.402] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0245.402] CloseHandle (hObject=0x1e4) returned 1 [0245.402] CloseHandle (hObject=0x1f4) returned 1 [0245.403] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.403] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0245.403] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f959ee, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f959ee, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f959ee, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x82, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e710 [0245.403] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f959ee, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f959ee, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f959ee, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x82, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0245.403] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0245.404] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\desktop.ini")) returned 1 [0245.405] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\desktop.ini")) returned 0xffffffff [0245.405] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xc55598eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc55598eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="History.IE5", cAlternateFileName="")) returned 1 [0245.406] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xc55598eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc55598eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0245.406] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xc55598eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc55598eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0245.406] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4420f43b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4420f43b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4420f43b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0245.406] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.406] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.407] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.407] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.407] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.407] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0245.407] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat")) returned 0x2026 [0245.407] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.407] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0245.408] ReadFile (in: hFile=0x1e4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0245.408] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0245.408] CloseHandle (hObject=0x1e4) returned 1 [0245.408] CloseHandle (hObject=0x1f0) returned 1 [0245.408] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.409] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0245.409] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4420f43b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4420f43b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4420f43b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e910 [0245.409] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4420f43b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4420f43b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4420f43b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0245.409] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0245.409] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat")) returned 1 [0245.409] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat")) returned 0xffffffff [0245.409] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc54e71d8, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc550d394, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc550d394, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="MSHist012022090520220912", cAlternateFileName="MSHIST~1")) returned 1 [0245.410] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022090520220912\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022090520220912\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc54e71d8, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc550d394, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc550d394, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0245.410] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc54e71d8, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc550d394, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc550d394, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0245.410] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc550d394, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc550d394, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc550d394, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0245.410] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.410] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.410] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.410] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0245.410] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022090520220912\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022090520220912\\container.dat")) returned 0x2026 [0245.411] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022090520220912\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022090520220912\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.411] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022090520220912\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022090520220912\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0245.413] ReadFile (in: hFile=0x1e4, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0245.413] WriteFile (in: hFile=0x1f8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0245.413] CloseHandle (hObject=0x1e4) returned 1 [0245.413] CloseHandle (hObject=0x1f8) returned 1 [0245.414] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022090520220912\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022090520220912\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022090520220912\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022090520220912\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.414] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022090520220912\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022090520220912\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0245.414] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022090520220912\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022090520220912\\container.dat"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc550d394, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc550d394, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc550d394, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e710 [0245.414] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc550d394, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc550d394, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc550d394, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0245.414] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0245.415] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022090520220912\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022090520220912\\container.dat")) returned 1 [0245.415] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022090520220912\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022090520220912\\container.dat")) returned 0xffffffff [0245.415] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc550d394, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc550d394, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc550d394, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0245.415] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0245.415] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc54e71d8, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc557fbbb, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc557fbbb, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x557461, cFileName="MSHist012022092020220921", cAlternateFileName="MSHIST~3")) returned 1 [0245.415] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022092020220921\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022092020220921\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc54e71d8, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc557fbbb, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc557fbbb, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0245.415] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc54e71d8, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc557fbbb, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc557fbbb, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.415] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc557fbbb, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc557fbbb, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc557fbbb, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0245.416] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.416] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.416] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.416] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0245.416] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022092020220921\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022092020220921\\container.dat")) returned 0x2026 [0245.416] VirtualAlloc (lpAddress=0x2190000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2190000 [0245.417] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022092020220921\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022092020220921\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0245.417] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022092020220921\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022092020220921\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.419] ReadFile (in: hFile=0x1f8, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0245.419] WriteFile (in: hFile=0x1e4, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0245.419] CloseHandle (hObject=0x1f8) returned 1 [0245.419] CloseHandle (hObject=0x1e4) returned 1 [0245.419] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022092020220921\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022092020220921\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022092020220921\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022092020220921\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.419] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022092020220921\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022092020220921\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0245.419] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022092020220921\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022092020220921\\container.dat"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc557fbbb, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc557fbbb, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc557fbbb, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e910 [0245.420] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc557fbbb, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc557fbbb, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc557fbbb, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0245.420] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0245.420] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022092020220921\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022092020220921\\container.dat")) returned 1 [0245.420] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022092020220921\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022092020220921\\container.dat")) returned 0xffffffff [0245.420] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc557fbbb, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc557fbbb, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc557fbbb, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0245.420] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0245.420] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc54e71d8, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc557fbbb, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc557fbbb, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x557461, cFileName="MSHist012022092020220921", cAlternateFileName="MSHIST~3")) returned 0 [0245.421] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0245.421] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x32303231, dwReserved1=0x32393032, cFileName="Low", cAlternateFileName="")) returned 1 [0245.421] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\low\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x557461, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0245.421] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x557461, cFileName="..", cAlternateFileName="")) returned 1 [0245.421] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x557461, cFileName="..", cAlternateFileName="")) returned 0 [0245.421] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0245.421] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x32303231, dwReserved1=0x32393032, cFileName="Low", cAlternateFileName="")) returned 0 [0245.421] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0245.422] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6e98fe5d, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6e98fe5d, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3545492e, dwReserved1=0x65646977, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1 [0245.422] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6e98fe5d, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6e98fe5d, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x32303231, dwReserved1=0x32393032, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0245.422] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6e98fe5d, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6e98fe5d, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x32303231, dwReserved1=0x32393032, cFileName="..", cAlternateFileName="")) returned 1 [0245.422] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e98fe5d, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6e98fe5d, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6e98fe5d, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x32303231, dwReserved1=0x32393032, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0245.422] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.422] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.422] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.422] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0245.422] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat")) returned 0x2026 [0245.423] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.423] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0245.425] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0245.425] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0245.425] CloseHandle (hObject=0x1f4) returned 1 [0245.425] CloseHandle (hObject=0x1f0) returned 1 [0245.425] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.425] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0245.425] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e98fe5d, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6e98fe5d, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6e98fe5d, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e8d0 [0245.426] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e98fe5d, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6e98fe5d, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6e98fe5d, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0245.426] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0245.426] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat")) returned 1 [0245.426] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat")) returned 0xffffffff [0245.426] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Low", cAlternateFileName="")) returned 1 [0245.426] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0245.426] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0245.426] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0245.426] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0245.427] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Low", cAlternateFileName="")) returned 0 [0245.427] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0245.427] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6e9aff76, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6e9aff76, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x65647461, cFileName="IECompatUaCache", cAlternateFileName="IECOMP~2")) returned 1 [0245.427] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6e9aff76, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6e9aff76, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0245.427] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6e9aff76, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6e9aff76, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0245.427] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e9aff76, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6e9aff76, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6e9aff76, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0245.427] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.427] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.427] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.427] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0245.428] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat")) returned 0x2026 [0245.428] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0245.428] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.430] ReadFile (in: hFile=0x1f0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0245.430] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0245.430] CloseHandle (hObject=0x1f0) returned 1 [0245.430] CloseHandle (hObject=0x1f4) returned 1 [0245.430] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.431] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0245.431] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e9aff76, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6e9aff76, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6e9aff76, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e250 [0245.431] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e9aff76, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6e9aff76, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6e9aff76, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0245.431] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0245.431] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat")) returned 1 [0245.431] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat")) returned 0xffffffff [0245.431] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Low", cAlternateFileName="")) returned 1 [0245.431] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0245.432] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0245.432] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0245.432] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0245.432] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Low", cAlternateFileName="")) returned 0 [0245.432] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0245.432] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7421f977, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7421f977, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7421f977, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x65647461, cFileName="IEDownloadHistory", cAlternateFileName="IEDOWN~1")) returned 1 [0245.432] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7421f977, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7421f977, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7421f977, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0245.432] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7421f977, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7421f977, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7421f977, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0245.432] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7421f977, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7421f977, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7421f977, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0245.432] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0245.433] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x666043d7, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x666043d7, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x65647461, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0245.433] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x666043d7, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x666043d7, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0245.433] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x666043d7, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x666043d7, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0245.433] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x430a0153, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x430a0153, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="Content.IE5", cAlternateFileName="")) returned 1 [0245.433] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.IE5\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.ie5\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1000100, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x2500082d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="\x90äU")) returned 0xffffffff [0245.433] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xa49dfe15, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa49dfe15, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa49dfe15, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="Content.MSO", cAlternateFileName="")) returned 1 [0245.433] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.mso\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xa49dfe15, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa49dfe15, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa49dfe15, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0245.435] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xa49dfe15, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa49dfe15, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa49dfe15, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0245.435] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xa49dfe15, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa49dfe15, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa49dfe15, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0245.435] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0245.435] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6660309e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6660309e, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6660309e, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="Content.Word", cAlternateFileName="CONTEN~1.WOR")) returned 1 [0245.435] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.word\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6660309e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6660309e, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6aa36426, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0245.436] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6660309e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6660309e, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6aa36426, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0245.436] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6660309e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6660309e, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6aa36426, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0245.436] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0245.437] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x430a0153, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x430a0153, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="counters.dat", cAlternateFileName="")) returned 1 [0245.437] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.437] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.437] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.437] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0245.437] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat")) returned 0x20 [0245.437] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.438] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0245.438] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x80, lpOverlapped=0x0) returned 1 [0245.439] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x80, lpOverlapped=0x0) returned 1 [0245.440] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0245.440] WriteFile (in: hFile=0x1f0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0245.440] CloseHandle (hObject=0x1f4) returned 1 [0245.440] CloseHandle (hObject=0x1f0) returned 1 [0245.441] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.441] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0245.441] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x430a0153, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x430a0153, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="counters.dat", cAlternateFileName="")) returned 0x55e390 [0245.441] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x430a0153, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x430a0153, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="counters.dat", cAlternateFileName="")) returned 0 [0245.441] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0245.442] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat")) returned 0 [0245.442] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat")) returned 0x20 [0245.442] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77fe3d01, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="IE", cAlternateFileName="")) returned 1 [0245.442] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77fe3d01, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xe, dwReserved1=0x16, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0245.442] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77fe3d01, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xe, dwReserved1=0x16, cFileName="..", cAlternateFileName="")) returned 1 [0245.442] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77fe3d01, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xe, dwReserved1=0x16, cFileName="8L0123VP", cAlternateFileName="")) returned 1 [0245.442] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L0123VP\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l0123vp\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x789936d6, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0245.442] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x789936d6, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 1 [0245.442] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x789936d6, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x789936d6, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x789b992a, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x16196, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="known_providers_download_v1[1].xml", cAlternateFileName="KNOWN_~1.XML")) returned 1 [0245.443] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x789936d6, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x789936d6, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x789b992a, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x16196, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="known_providers_download_v1[1].xml", cAlternateFileName="KNOWN_~1.XML")) returned 0 [0245.443] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0245.443] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77fe3d01, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69766f72, dwReserved1=0x73726564, cFileName="8L05D5LK", cAlternateFileName="")) returned 1 [0245.443] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L05D5LK\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l05d5lk\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77fe3d01, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x720065, dwReserved1=0x5f0073, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0245.443] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77fe3d01, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x720065, dwReserved1=0x5f0073, cFileName="..", cAlternateFileName="")) returned 1 [0245.443] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x780ef009, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x720065, dwReserved1=0x5f0073, cFileName="favicon[1].ico", cAlternateFileName="FAVICO~1.ICO")) returned 1 [0245.444] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.444] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.444] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.444] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.444] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.444] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0245.444] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L05D5LK\\favicon[1].ico" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l05d5lk\\favicon[1].ico")) returned 0x2020 [0245.444] VirtualAlloc (lpAddress=0x2194000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2194000 [0245.445] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L05D5LK\\favicon[1].ico" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l05d5lk\\favicon[1].ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0245.445] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L05D5LK\\favicon[1].ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l05d5lk\\favicon[1].ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0245.445] ReadFile (in: hFile=0x1e4, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x1000, lpOverlapped=0x0) returned 1 [0245.446] WriteFile (in: hFile=0x1f8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x1000, lpOverlapped=0x0) returned 1 [0245.447] ReadFile (in: hFile=0x1e4, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0xbe, lpOverlapped=0x0) returned 1 [0245.447] WriteFile (in: hFile=0x1f8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0xbe, lpOverlapped=0x0) returned 1 [0245.447] ReadFile (in: hFile=0x1e4, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0245.447] WriteFile (in: hFile=0x1f8, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0245.448] CloseHandle (hObject=0x1e4) returned 1 [0245.448] CloseHandle (hObject=0x1f8) returned 1 [0245.449] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L05D5LK\\favicon[1].ico" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l05d5lk\\favicon[1].ico"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L05D5LK\\favicon[1].ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l05d5lk\\favicon[1].ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.449] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L05D5LK\\favicon[1].ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l05d5lk\\favicon[1].ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0245.449] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L05D5LK\\favicon[1].ico" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l05d5lk\\favicon[1].ico"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x780ef009, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="favicon[1].ico", cAlternateFileName="FAVICO~1.ICO")) returned 0x55e710 [0245.449] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x780ef009, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="favicon[1].ico", cAlternateFileName="FAVICO~1.ICO")) returned 0 [0245.449] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0245.449] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L05D5LK\\favicon[1].ico" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l05d5lk\\favicon[1].ico")) returned 1 [0245.450] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L05D5LK\\favicon[1].ico" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l05d5lk\\favicon[1].ico")) returned 0xffffffff [0245.450] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x780ef009, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x720065, dwReserved1=0x5f0073, cFileName="favicon[1].ico", cAlternateFileName="FAVICO~1.ICO")) returned 0 [0245.451] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0245.451] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77fe3d01, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e5d315b, dwReserved1=0x736f6369, cFileName="97UWYX7N", cAlternateFileName="")) returned 1 [0245.451] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\97UWYX7N\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\97uwyx7n\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0245.451] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0245.451] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31df21d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4700, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="suggestions[1].en-US", cAlternateFileName="SUGGES~1.EN-")) returned 1 [0245.451] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31df21d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4700, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="suggestions[1].en-US", cAlternateFileName="SUGGES~1.EN-")) returned 0 [0245.451] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0245.452] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x43e7bc61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43e7bc61, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43e7bc61, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f69, dwReserved1=0x2e5d315b, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0245.455] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.455] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.455] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.455] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.455] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.455] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0245.455] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat")) returned 0x2026 [0245.456] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.456] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0245.458] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0245.458] WriteFile (in: hFile=0x1f8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0245.458] CloseHandle (hObject=0x1f4) returned 1 [0245.459] CloseHandle (hObject=0x1f8) returned 1 [0245.463] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.463] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0245.463] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x43e7bc61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43e7bc61, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43e7bc61, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e390 [0245.463] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x43e7bc61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43e7bc61, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43e7bc61, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0245.463] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0245.464] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat")) returned 1 [0245.464] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat")) returned 0xffffffff [0245.464] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77fe3d01, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="EVKC1MC8", cAlternateFileName="")) returned 1 [0245.464] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\EVKC1MC8\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\evkc1mc8\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x20f90b56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0245.464] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x20f90b56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0245.464] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20f90b56, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x20f90b56, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2450b25a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12aeda, dwReserved0=0x0, dwReserved1=0x104, cFileName="rules[1].xml", cAlternateFileName="RULES_~1.XML")) returned 1 [0245.465] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20f90b56, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x20f90b56, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2450b25a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12aeda, dwReserved0=0x0, dwReserved1=0x104, cFileName="rules[1].xml", cAlternateFileName="RULES_~1.XML")) returned 0 [0245.465] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0245.465] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77fe3d01, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77fe3d01, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="EVKC1MC8", cAlternateFileName="")) returned 0 [0245.465] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0245.465] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7238, dwReserved1=0x557461, cFileName="Low", cAlternateFileName="")) returned 1 [0245.465] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\low\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x7d4dda3b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d782e5d, dwReserved1=0x200006c, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0245.465] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x7d4dda3b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d782e5d, dwReserved1=0x200006c, cFileName="..", cAlternateFileName="")) returned 1 [0245.465] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d4dda3b, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d4dda3b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d529fd3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x500088, dwReserved0=0x6d782e5d, dwReserved1=0x200006c, cFileName="SuggestedSites.dat", cAlternateFileName="SUGGES~1.DAT")) returned 1 [0245.465] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.466] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.466] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.466] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0245.466] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat")) returned 0x2020 [0245.466] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0245.466] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.467] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.467] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.470] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.471] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.471] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.471] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.471] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.471] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.472] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.472] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.472] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.472] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.472] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.472] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.472] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.473] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.473] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.473] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.473] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.473] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.474] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.474] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.474] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.474] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.474] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.474] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.475] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.475] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.475] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.475] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.475] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.475] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.476] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.476] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.476] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.476] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.476] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.476] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.476] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.477] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.477] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.477] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.477] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.477] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.477] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.478] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.478] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.478] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.478] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.478] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.478] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.479] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.479] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.479] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.479] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.479] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.479] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.480] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.480] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.480] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.480] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.480] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.481] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.481] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.481] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.481] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.481] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.482] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.482] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.482] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.482] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.482] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.482] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.483] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.483] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.483] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.483] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.483] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.484] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.484] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.484] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.484] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.484] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.484] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.485] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.485] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.485] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.485] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.485] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.486] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.486] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.486] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.486] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.486] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.486] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.487] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.487] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.487] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.487] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.487] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.487] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.488] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.488] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.488] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.488] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.488] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.488] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.489] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.489] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.489] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.489] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.489] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.489] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.489] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.490] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.490] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.490] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.490] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.490] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.491] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.491] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.491] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.491] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.491] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.491] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.492] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.492] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.492] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.492] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.493] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.494] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.494] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.494] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.494] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.494] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.494] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.495] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.495] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.495] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.495] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.495] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.495] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.496] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.496] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.496] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.496] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.496] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.496] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.497] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.497] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.497] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.497] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.497] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.497] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.498] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.498] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.498] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.498] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.500] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.500] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.500] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.500] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.500] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.501] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.501] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.501] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.501] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.501] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.501] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.502] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.502] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.502] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.502] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.502] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.502] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.503] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.503] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.503] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.503] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.503] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.503] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.504] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.504] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.504] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.504] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.504] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.504] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.504] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.505] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.505] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.505] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.505] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.505] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.505] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.506] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.506] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.508] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.508] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.508] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.508] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.509] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.509] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.509] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.509] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.509] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.510] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.510] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.510] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.510] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.510] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.511] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.511] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.511] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.511] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.511] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.512] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.512] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.512] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.512] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.512] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.513] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.513] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.513] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.513] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.513] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.513] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.514] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.514] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.514] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.522] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.522] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.523] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.523] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.523] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.523] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.523] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.523] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.524] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.524] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.524] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.524] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.524] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.524] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.525] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.525] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.525] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.525] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.525] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.525] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.526] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.526] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.526] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.526] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.526] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.527] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.527] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.527] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.528] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.529] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.529] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.529] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.529] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.530] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.530] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.530] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.530] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.530] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.531] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.531] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.531] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.531] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.531] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.531] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.532] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.532] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.532] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.532] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.532] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.532] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.532] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.533] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.533] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.533] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.533] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.533] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.533] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.534] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.534] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.534] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.534] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.534] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.535] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.535] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.535] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.535] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.535] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.535] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.536] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.536] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.536] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.536] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.536] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.537] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.537] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.537] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.537] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.537] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.538] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.538] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.538] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.538] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.538] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.538] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.539] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.539] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.539] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.539] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.539] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.539] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.540] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.540] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.540] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.540] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.540] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.541] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.541] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.541] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.541] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.541] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.541] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.542] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.542] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.542] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.542] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.542] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.542] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.543] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.543] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.543] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.543] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.543] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.543] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.544] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.544] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.544] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.544] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.544] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.544] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.545] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.545] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.545] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.545] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.545] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.545] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.551] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.551] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.551] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.551] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.551] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.551] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.552] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.552] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.552] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.552] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.552] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.552] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.553] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.553] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.553] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.553] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.553] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.553] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.554] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.554] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.554] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.554] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.554] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.554] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.555] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.555] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.555] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.555] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.555] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.555] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.555] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.556] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.557] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.557] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.557] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.558] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.558] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.558] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.558] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.558] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.559] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.559] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.559] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.559] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.559] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.559] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.560] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.560] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.560] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.560] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.560] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.561] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.561] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.561] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.563] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.563] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.563] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.563] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.563] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.564] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.564] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.564] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.564] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.564] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.565] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.565] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.565] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.565] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.565] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.566] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.566] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.566] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.566] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.566] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.567] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.567] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.567] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.567] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.567] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.568] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.568] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.568] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.568] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.568] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.569] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.569] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.569] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.569] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.569] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.569] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.570] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.570] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.570] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.570] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.570] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.570] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.571] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.571] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.571] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.571] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.572] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.572] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.572] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.572] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.572] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.572] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.573] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.573] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.573] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.573] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.573] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.573] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.574] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.574] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.574] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.574] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.574] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.574] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.575] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.575] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.575] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.575] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.575] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.575] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.576] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.576] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.576] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.576] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.576] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.576] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.577] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.577] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.577] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.577] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.577] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.578] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.578] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.578] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.578] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.578] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.578] ReadFile (in: hFile=0x1f8, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.579] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0245.978] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.979] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0245.979] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d4dda3b, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d4dda3b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d529fd3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x500088, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="SuggestedSites.dat", cAlternateFileName="SUGGES~1.DAT")) returned 0x55e8d0 [0245.979] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d4dda3b, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d4dda3b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d529fd3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x500088, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="SuggestedSites.dat", cAlternateFileName="SUGGES~1.DAT")) returned 0 [0245.980] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0245.980] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat")) returned 0 [0245.980] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat")) returned 0x2020 [0245.984] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d4dda3b, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d4dda3b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d529fd3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x500088, dwReserved0=0x6d782e5d, dwReserved1=0x200006c, cFileName="SuggestedSites.dat", cAlternateFileName="SUGGES~1.DAT")) returned 0 [0245.984] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0245.984] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69536465, dwReserved1=0x2e736574, cFileName="Virtualized", cAlternateFileName="VIRTUA~1")) returned 1 [0245.984] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\virtualized\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0245.985] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0245.985] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 0 [0245.985] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0245.985] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69536465, dwReserved1=0x2e736574, cFileName="Virtualized", cAlternateFileName="VIRTUA~1")) returned 0 [0245.985] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0245.985] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x20f442c3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x20f442c3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64657a69, dwReserved1=0x65647474, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0245.985] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x20f442c3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x20f442c3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69536465, dwReserved1=0x2e736574, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0245.986] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x20f442c3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x20f442c3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69536465, dwReserved1=0x2e736574, cFileName="..", cAlternateFileName="")) returned 1 [0245.986] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20f442c3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x20f442c3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x20f442c3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x69536465, dwReserved1=0x2e736574, cFileName="3JXOIY6T.txt", cAlternateFileName="")) returned 1 [0245.987] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.987] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.987] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.987] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0245.987] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat")) returned 0x2026 [0245.988] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0245.988] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0245.989] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.990] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0245.990] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x745b61a0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x745b61a0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x745b61a0, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e410 [0245.990] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x745b61a0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x745b61a0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x745b61a0, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0245.990] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0245.990] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat")) returned 1 [0245.991] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat")) returned 0xffffffff [0245.991] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6f27a9c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f27a9c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="DNTException", cAlternateFileName="DNTEXC~1")) returned 1 [0245.991] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6f27a9c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f27a9c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8, dwReserved1=0x16, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0245.991] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6f27a9c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f27a9c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8, dwReserved1=0x16, cFileName="..", cAlternateFileName="")) returned 1 [0245.991] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6f27a9c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f27a9c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f27a9c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8, dwReserved1=0x16, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0245.991] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0245.991] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0245.991] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0245.991] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0245.992] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0245.992] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat")) returned 0x2026 [0245.992] VirtualAlloc (lpAddress=0x2198000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2198000 [0245.992] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0245.993] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0245.998] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0245.998] WriteFile (in: hFile=0x1f8, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0245.998] CloseHandle (hObject=0x1f0) returned 1 [0245.998] CloseHandle (hObject=0x1f8) returned 1 [0245.999] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0245.999] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0245.999] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6f27a9c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f27a9c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f27a9c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e510 [0245.999] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6f27a9c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f27a9c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f27a9c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0245.999] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0246.000] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat")) returned 1 [0246.000] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat")) returned 0xffffffff [0246.000] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Low", cAlternateFileName="")) returned 1 [0246.000] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\low\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x55e9b8, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0246.000] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x55e9b8, cFileName="..", cAlternateFileName="")) returned 1 [0246.000] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x55e9b8, cFileName="..", cAlternateFileName="")) returned 0 [0246.000] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0246.001] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Low", cAlternateFileName="")) returned 0 [0246.001] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0246.001] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x557461, cFileName="Low", cAlternateFileName="")) returned 1 [0246.001] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0246.001] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0246.001] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0246.001] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0246.001] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x557461, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0246.001] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\privacie\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0246.001] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0246.002] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Low", cAlternateFileName="")) returned 1 [0246.002] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\privacie\\low\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0246.002] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 1 [0246.002] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 0 [0246.002] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0246.002] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Low", cAlternateFileName="")) returned 0 [0246.002] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0246.002] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x557461, cFileName="PrivacIE", cAlternateFileName="")) returned 0 [0246.002] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0246.002] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xafc9a821, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xafc9a821, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f697445, dwReserved1=0x6564746e, cFileName="Notifications", cAlternateFileName="NOTIFI~1")) returned 1 [0246.003] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xafc9a821, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xafc9a821, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x557461, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0246.003] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xafc9a821, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xafc9a821, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x557461, cFileName="..", cAlternateFileName="")) returned 1 [0246.003] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xafc9a821, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xafc9a821, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2381020, dwReserved0=0x642e7265, dwReserved1=0x557461, cFileName="appdb.dat", cAlternateFileName="")) returned 1 [0246.003] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0246.003] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0246.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0246.005] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0246.005] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0246.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0246.005] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\appdb.dat")) returned 0x20 [0246.006] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\appdb.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0246.006] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\appdb.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0246.010] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.011] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.012] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.012] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.013] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.013] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.013] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.013] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.013] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.014] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.014] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.014] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.015] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.015] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.015] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.015] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.016] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.016] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.016] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.016] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.016] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.017] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.017] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.017] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.017] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.017] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.017] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.018] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.018] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.018] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.018] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.018] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.018] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.019] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.019] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.019] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.019] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.019] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.020] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.020] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.020] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.020] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.020] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.021] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.021] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.021] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.021] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.021] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.022] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.022] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.022] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.022] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.022] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.023] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.023] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.023] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.023] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.023] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.024] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.024] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.024] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.024] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.024] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.024] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.025] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.025] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.025] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.025] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.025] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.025] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.026] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.026] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.026] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.026] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.027] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.027] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.027] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.027] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.027] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.028] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.028] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.028] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.028] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.028] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.029] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.029] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.029] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.029] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.029] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.030] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.030] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.030] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.030] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.030] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.031] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.033] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.033] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.035] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.036] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.037] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.038] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.038] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.038] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.038] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.038] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.039] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.039] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.039] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.039] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.040] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.040] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.040] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.040] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.040] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.041] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.041] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.041] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.041] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.042] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.042] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.042] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.042] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.042] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.043] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.043] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.043] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.043] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.043] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.043] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.043] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.044] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.045] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.045] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.045] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.045] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.045] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.045] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.049] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.049] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.049] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.050] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.050] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.050] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.050] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.051] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.051] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.051] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.051] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.052] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.052] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.052] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.052] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.052] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.053] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.053] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.053] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.053] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.058] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.058] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.058] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.058] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.059] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.059] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.059] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.059] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.060] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.060] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.060] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.060] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.060] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.061] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.061] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.061] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.061] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.062] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.062] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.062] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.062] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.063] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.063] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.063] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.063] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.063] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.064] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.064] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.064] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.064] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.064] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.065] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.065] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.065] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.065] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.066] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.066] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.066] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.066] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.067] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.067] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.067] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.067] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.067] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.068] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.068] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.068] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.068] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.068] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.069] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.069] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.069] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.069] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.070] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.070] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.070] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.070] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.070] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.071] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.071] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.071] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.071] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.072] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.072] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.073] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.074] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.074] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.074] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.074] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.075] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.075] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.075] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.075] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.075] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.076] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.076] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.076] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.076] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.076] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.076] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.077] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.077] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.077] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.077] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.078] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.078] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.078] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.078] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.078] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.078] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.079] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.079] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.079] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.079] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.079] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.079] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.079] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.080] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.080] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.080] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.080] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.081] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.081] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.081] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.081] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.082] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.082] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.082] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.082] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.082] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.082] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.083] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.083] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.083] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.083] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.083] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.084] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.084] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.084] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.084] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.084] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.085] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.085] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.085] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.085] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.085] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.086] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.086] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.091] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.091] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.091] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.092] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.092] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.092] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.092] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.093] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.093] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.093] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.093] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.094] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.094] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.094] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.094] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.094] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.095] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.095] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.095] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.095] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.095] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.096] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.096] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.096] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.096] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.096] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.097] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.097] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.097] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.097] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.097] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.098] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.098] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.098] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.098] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.099] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.099] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.099] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.099] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.099] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.100] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.100] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.100] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.100] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.100] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.101] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.101] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.101] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.101] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.101] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.102] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.102] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.102] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.102] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.102] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.103] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.103] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.103] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.103] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.103] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.104] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.104] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.104] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.104] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.112] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.112] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.113] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.113] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.113] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.113] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.114] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.114] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.114] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.114] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.114] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.115] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.115] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.115] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.115] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.116] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.116] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.116] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.116] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.116] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.117] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.117] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.117] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.117] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.117] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.118] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.118] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.118] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.118] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.119] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.119] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.119] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.119] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.119] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.120] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.120] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.120] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.121] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.122] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.122] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.122] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.122] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.123] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.123] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.123] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.123] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.123] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.124] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.124] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.124] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.124] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.125] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.125] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.125] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.125] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.125] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.126] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.126] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.126] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.126] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.126] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.127] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.127] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.127] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.128] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.128] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.131] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.131] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.131] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.131] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.132] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.132] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.132] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.132] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.132] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.133] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.133] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.133] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.133] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.134] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.134] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.134] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.134] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.134] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.135] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.135] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.135] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.135] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.135] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.135] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.136] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.136] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.136] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.136] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.136] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.136] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.137] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.137] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.137] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.137] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.137] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.137] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.138] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.138] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.139] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.141] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.142] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.142] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.142] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.142] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.142] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.143] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.143] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.143] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.143] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.144] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.144] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.144] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.144] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.144] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.144] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.145] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.145] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.145] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.145] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.146] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.146] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.146] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.147] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.149] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.149] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.149] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.150] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.150] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.150] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.150] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.151] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.151] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.151] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.151] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.151] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.152] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.152] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.152] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.152] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.153] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.153] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.153] ReadFile (in: hFile=0x1f4, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0246.153] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0248.421] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0248.437] WriteFile (in: hFile=0x1f8, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0250.281] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\appdb.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\appdb.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.282] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\appdb.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.282] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\appdb.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xafc9a821, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xafc9a821, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2381020, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="appdb.dat", cAlternateFileName="")) returned 0x55e8d0 [0250.283] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xafc9a821, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xafc9a821, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2381020, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="appdb.dat", cAlternateFileName="")) returned 0 [0250.283] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0250.284] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\appdb.dat")) returned 0 [0250.284] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\appdb.dat")) returned 0x20 [0250.284] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x7b345900, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8d357b0d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="wpnidm", cAlternateFileName="")) returned 1 [0250.284] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x7b345900, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8d357b0d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc, dwReserved1=0x16, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0250.287] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x7b345900, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8d357b0d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc, dwReserved1=0x16, cFileName="..", cAlternateFileName="")) returned 1 [0250.287] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa19ad400, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa19ad400, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa19ad400, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0xc, dwReserved1=0x16, cFileName="179e8db5.jpg", cAlternateFileName="")) returned 1 [0250.287] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.288] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.288] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.288] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.288] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.288] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0250.288] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg")) returned 0x80 [0250.289] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.289] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.300] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.301] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.301] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa19ad400, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa19ad400, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa19ad400, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="179e8db5.jpg", cAlternateFileName="")) returned 0x55e5d0 [0250.301] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa19ad400, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa19ad400, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa19ad400, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="179e8db5.jpg", cAlternateFileName="")) returned 0 [0250.301] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0250.301] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg")) returned 1 [0250.303] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg")) returned 0xffffffff [0250.303] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x46302a79, ftCreationTime.dwHighDateTime=0x1d70505, ftLastAccessTime.dwLowDateTime=0x46302a79, ftLastAccessTime.dwHighDateTime=0x1d70505, ftLastWriteTime.dwLowDateTime=0x46302a79, ftLastWriteTime.dwHighDateTime=0x1d70505, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="17f70a61.jpg", cAlternateFileName="")) returned 1 [0250.304] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.304] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.304] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.304] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0250.304] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\17f70a61.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\17f70a61.jpg")) returned 0x22 [0250.305] VirtualAlloc (lpAddress=0x219c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x219c000 [0250.306] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\17f70a61.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\17f70a61.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.306] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\17f70a61.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\17f70a61.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.306] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.307] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.307] CloseHandle (hObject=0x1f0) returned 1 [0250.307] CloseHandle (hObject=0x1f4) returned 1 [0250.308] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\17f70a61.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\17f70a61.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\17f70a61.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\17f70a61.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.308] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\17f70a61.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\17f70a61.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.308] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\17f70a61.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\17f70a61.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x46302a79, ftCreationTime.dwHighDateTime=0x1d70505, ftLastAccessTime.dwLowDateTime=0x46302a79, ftLastAccessTime.dwHighDateTime=0x1d70505, ftLastWriteTime.dwLowDateTime=0x46302a79, ftLastWriteTime.dwHighDateTime=0x1d70505, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="17f70a61.jpg", cAlternateFileName="")) returned 0x55e5d0 [0250.308] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x46302a79, ftCreationTime.dwHighDateTime=0x1d70505, ftLastAccessTime.dwLowDateTime=0x46302a79, ftLastAccessTime.dwHighDateTime=0x1d70505, ftLastWriteTime.dwLowDateTime=0x46302a79, ftLastWriteTime.dwHighDateTime=0x1d70505, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="17f70a61.jpg", cAlternateFileName="")) returned 0 [0250.308] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0250.309] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\17f70a61.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\17f70a61.jpg")) returned 1 [0250.309] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\17f70a61.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\17f70a61.jpg")) returned 0xffffffff [0250.309] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9fd11080, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x2045, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="1ba49cb8.jpg", cAlternateFileName="")) returned 1 [0250.309] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.309] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.309] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.309] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.310] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0250.310] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg")) returned 0x80 [0250.310] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.310] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.311] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.312] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.314] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.314] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.315] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x45, lpOverlapped=0x0) returned 1 [0250.315] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x45, lpOverlapped=0x0) returned 1 [0250.315] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.315] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.315] CloseHandle (hObject=0x1f4) returned 1 [0250.315] CloseHandle (hObject=0x1f0) returned 1 [0250.317] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.317] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.317] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9fd11080, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x2045, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="1ba49cb8.jpg", cAlternateFileName="")) returned 0x55e490 [0250.317] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x9fd11080, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x2045, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="1ba49cb8.jpg", cAlternateFileName="")) returned 0 [0250.318] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0250.318] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg")) returned 1 [0250.319] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg")) returned 0xffffffff [0250.319] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9351700, ftCreationTime.dwHighDateTime=0x1d704cd, ftLastAccessTime.dwLowDateTime=0x9351700, ftLastAccessTime.dwHighDateTime=0x1d704cd, ftLastWriteTime.dwLowDateTime=0x9351700, ftLastWriteTime.dwHighDateTime=0x1d704cd, nFileSizeHigh=0x0, nFileSizeLow=0x124c, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="1ced2593.jpg", cAlternateFileName="")) returned 1 [0250.319] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.319] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.320] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.320] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.320] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0250.320] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ced2593.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ced2593.jpg")) returned 0x80 [0250.320] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ced2593.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ced2593.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.320] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ced2593.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ced2593.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.321] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.323] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x24c, lpOverlapped=0x0) returned 1 [0250.324] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x24c, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x24c, lpOverlapped=0x0) returned 1 [0250.324] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.324] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.324] CloseHandle (hObject=0x1f0) returned 1 [0250.324] CloseHandle (hObject=0x1f4) returned 1 [0250.325] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ced2593.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ced2593.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ced2593.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ced2593.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.326] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ced2593.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ced2593.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.326] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ced2593.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ced2593.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9351700, ftCreationTime.dwHighDateTime=0x1d704cd, ftLastAccessTime.dwLowDateTime=0x9351700, ftLastAccessTime.dwHighDateTime=0x1d704cd, ftLastWriteTime.dwLowDateTime=0x9351700, ftLastWriteTime.dwHighDateTime=0x1d704cd, nFileSizeHigh=0x0, nFileSizeLow=0x124c, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="1ced2593.jpg", cAlternateFileName="")) returned 0x55e7d0 [0250.326] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9351700, ftCreationTime.dwHighDateTime=0x1d704cd, ftLastAccessTime.dwLowDateTime=0x9351700, ftLastAccessTime.dwHighDateTime=0x1d704cd, ftLastWriteTime.dwLowDateTime=0x9351700, ftLastWriteTime.dwHighDateTime=0x1d704cd, nFileSizeHigh=0x0, nFileSizeLow=0x124c, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="1ced2593.jpg", cAlternateFileName="")) returned 0 [0250.326] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0250.326] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ced2593.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ced2593.jpg")) returned 1 [0250.327] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ced2593.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ced2593.jpg")) returned 0xffffffff [0250.327] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x70a2c080, ftCreationTime.dwHighDateTime=0x1d7069f, ftLastAccessTime.dwLowDateTime=0x70a2c080, ftLastAccessTime.dwHighDateTime=0x1d7069f, ftLastWriteTime.dwLowDateTime=0x70a2c080, ftLastWriteTime.dwHighDateTime=0x1d7069f, nFileSizeHigh=0x0, nFileSizeLow=0x122f, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="1f83d5ef.jpg", cAlternateFileName="")) returned 1 [0250.328] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.328] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.328] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.328] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.328] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.328] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0250.328] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f83d5ef.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f83d5ef.jpg")) returned 0x80 [0250.328] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f83d5ef.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f83d5ef.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.329] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f83d5ef.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f83d5ef.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.329] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.331] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.332] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x22f, lpOverlapped=0x0) returned 1 [0250.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x22f, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x22f, lpOverlapped=0x0) returned 1 [0250.334] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.334] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.334] CloseHandle (hObject=0x1f4) returned 1 [0250.334] CloseHandle (hObject=0x1f0) returned 1 [0250.336] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f83d5ef.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f83d5ef.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f83d5ef.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f83d5ef.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.336] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f83d5ef.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f83d5ef.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.336] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f83d5ef.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f83d5ef.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x70a2c080, ftCreationTime.dwHighDateTime=0x1d7069f, ftLastAccessTime.dwLowDateTime=0x70a2c080, ftLastAccessTime.dwHighDateTime=0x1d7069f, ftLastWriteTime.dwLowDateTime=0x70a2c080, ftLastWriteTime.dwHighDateTime=0x1d7069f, nFileSizeHigh=0x0, nFileSizeLow=0x122f, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="1f83d5ef.jpg", cAlternateFileName="")) returned 0x55e2d0 [0250.336] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x70a2c080, ftCreationTime.dwHighDateTime=0x1d7069f, ftLastAccessTime.dwLowDateTime=0x70a2c080, ftLastAccessTime.dwHighDateTime=0x1d7069f, ftLastWriteTime.dwLowDateTime=0x70a2c080, ftLastWriteTime.dwHighDateTime=0x1d7069f, nFileSizeHigh=0x0, nFileSizeLow=0x122f, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="1f83d5ef.jpg", cAlternateFileName="")) returned 0 [0250.337] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0250.337] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f83d5ef.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f83d5ef.jpg")) returned 1 [0250.338] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f83d5ef.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f83d5ef.jpg")) returned 0xffffffff [0250.338] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x67a8e500, ftCreationTime.dwHighDateTime=0x1d705f4, ftLastAccessTime.dwLowDateTime=0x67a8e500, ftLastAccessTime.dwHighDateTime=0x1d705f4, ftLastWriteTime.dwLowDateTime=0x67a8e500, ftLastWriteTime.dwHighDateTime=0x1d705f4, nFileSizeHigh=0x0, nFileSizeLow=0x3597, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="27771a56.jpg", cAlternateFileName="")) returned 1 [0250.338] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.338] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.338] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.338] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.338] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.339] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0250.339] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\27771a56.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\27771a56.jpg")) returned 0x80 [0250.339] VirtualAlloc (lpAddress=0x21a0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21a0000 [0250.339] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\27771a56.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\27771a56.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.340] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\27771a56.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\27771a56.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.340] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.342] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.343] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.344] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.344] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.344] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.344] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x597, lpOverlapped=0x0) returned 1 [0250.344] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x597, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x597, lpOverlapped=0x0) returned 1 [0250.344] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.344] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.345] CloseHandle (hObject=0x1f0) returned 1 [0250.345] CloseHandle (hObject=0x1f4) returned 1 [0250.346] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\27771a56.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\27771a56.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\27771a56.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\27771a56.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.347] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\27771a56.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\27771a56.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.347] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\27771a56.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\27771a56.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x67a8e500, ftCreationTime.dwHighDateTime=0x1d705f4, ftLastAccessTime.dwLowDateTime=0x67a8e500, ftLastAccessTime.dwHighDateTime=0x1d705f4, ftLastWriteTime.dwLowDateTime=0x67a8e500, ftLastWriteTime.dwHighDateTime=0x1d705f4, nFileSizeHigh=0x0, nFileSizeLow=0x3597, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="27771a56.jpg", cAlternateFileName="")) returned 0x55e5d0 [0250.347] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x67a8e500, ftCreationTime.dwHighDateTime=0x1d705f4, ftLastAccessTime.dwLowDateTime=0x67a8e500, ftLastAccessTime.dwHighDateTime=0x1d705f4, ftLastWriteTime.dwLowDateTime=0x67a8e500, ftLastWriteTime.dwHighDateTime=0x1d705f4, nFileSizeHigh=0x0, nFileSizeLow=0x3597, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="27771a56.jpg", cAlternateFileName="")) returned 0 [0250.347] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0250.347] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\27771a56.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\27771a56.jpg")) returned 1 [0250.349] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\27771a56.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\27771a56.jpg")) returned 0xffffffff [0250.349] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xefb3b100, ftCreationTime.dwHighDateTime=0x1d70473, ftLastAccessTime.dwLowDateTime=0xefb3b100, ftLastAccessTime.dwHighDateTime=0x1d70473, ftLastWriteTime.dwLowDateTime=0xefb3b100, ftLastWriteTime.dwHighDateTime=0x1d70473, nFileSizeHigh=0x0, nFileSizeLow=0x2429, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="4048cb51.jpg", cAlternateFileName="")) returned 1 [0250.349] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.349] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0250.350] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4048cb51.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4048cb51.jpg")) returned 0x80 [0250.350] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4048cb51.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4048cb51.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.350] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4048cb51.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4048cb51.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.351] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.353] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.354] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.354] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.355] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x429, lpOverlapped=0x0) returned 1 [0250.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x429, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x429, lpOverlapped=0x0) returned 1 [0250.355] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.355] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.355] CloseHandle (hObject=0x1f4) returned 1 [0250.355] CloseHandle (hObject=0x1f0) returned 1 [0250.356] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4048cb51.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4048cb51.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4048cb51.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4048cb51.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.357] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4048cb51.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4048cb51.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.357] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4048cb51.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4048cb51.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xefb3b100, ftCreationTime.dwHighDateTime=0x1d70473, ftLastAccessTime.dwLowDateTime=0xefb3b100, ftLastAccessTime.dwHighDateTime=0x1d70473, ftLastWriteTime.dwLowDateTime=0xefb3b100, ftLastWriteTime.dwHighDateTime=0x1d70473, nFileSizeHigh=0x0, nFileSizeLow=0x2429, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="4048cb51.jpg", cAlternateFileName="")) returned 0x55e750 [0250.357] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xefb3b100, ftCreationTime.dwHighDateTime=0x1d70473, ftLastAccessTime.dwLowDateTime=0xefb3b100, ftLastAccessTime.dwHighDateTime=0x1d70473, ftLastWriteTime.dwLowDateTime=0xefb3b100, ftLastWriteTime.dwHighDateTime=0x1d70473, nFileSizeHigh=0x0, nFileSizeLow=0x2429, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="4048cb51.jpg", cAlternateFileName="")) returned 0 [0250.357] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0250.357] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4048cb51.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4048cb51.jpg")) returned 1 [0250.358] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4048cb51.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4048cb51.jpg")) returned 0xffffffff [0250.358] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa069a700, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa069a700, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa069a700, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0xf5d, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="48415de7.jpg", cAlternateFileName="")) returned 1 [0250.358] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.358] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.359] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.359] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0250.359] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\48415de7.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\48415de7.jpg")) returned 0x80 [0250.359] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\48415de7.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\48415de7.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.360] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\48415de7.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\48415de7.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.360] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xf5d, lpOverlapped=0x0) returned 1 [0250.362] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xf5d, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xf5d, lpOverlapped=0x0) returned 1 [0250.363] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.363] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.363] CloseHandle (hObject=0x1f0) returned 1 [0250.363] CloseHandle (hObject=0x1f4) returned 1 [0250.364] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\48415de7.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\48415de7.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\48415de7.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\48415de7.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.365] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\48415de7.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\48415de7.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.365] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\48415de7.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\48415de7.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa069a700, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa069a700, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa069a700, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0xf5d, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="48415de7.jpg", cAlternateFileName="")) returned 0x55e8d0 [0250.365] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa069a700, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa069a700, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa069a700, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0xf5d, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="48415de7.jpg", cAlternateFileName="")) returned 0 [0250.365] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0250.366] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\48415de7.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\48415de7.jpg")) returned 1 [0250.367] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\48415de7.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\48415de7.jpg")) returned 0xffffffff [0250.367] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x98a83700, ftCreationTime.dwHighDateTime=0x1d7b067, ftLastAccessTime.dwLowDateTime=0x98a83700, ftLastAccessTime.dwHighDateTime=0x1d7b067, ftLastWriteTime.dwLowDateTime=0x98a83700, ftLastWriteTime.dwHighDateTime=0x1d7b067, nFileSizeHigh=0x0, nFileSizeLow=0x1b85, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="6bf71745.jpg", cAlternateFileName="")) returned 1 [0250.367] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.367] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.367] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.367] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0250.368] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6bf71745.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6bf71745.jpg")) returned 0x80 [0250.368] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6bf71745.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6bf71745.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.368] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6bf71745.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6bf71745.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.368] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.372] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.373] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xb85, lpOverlapped=0x0) returned 1 [0250.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xb85, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xb85, lpOverlapped=0x0) returned 1 [0250.373] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.373] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.373] CloseHandle (hObject=0x1f4) returned 1 [0250.374] CloseHandle (hObject=0x1f0) returned 1 [0250.375] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6bf71745.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6bf71745.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6bf71745.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6bf71745.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.375] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6bf71745.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6bf71745.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.375] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6bf71745.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6bf71745.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x98a83700, ftCreationTime.dwHighDateTime=0x1d7b067, ftLastAccessTime.dwLowDateTime=0x98a83700, ftLastAccessTime.dwHighDateTime=0x1d7b067, ftLastWriteTime.dwLowDateTime=0x98a83700, ftLastWriteTime.dwHighDateTime=0x1d7b067, nFileSizeHigh=0x0, nFileSizeLow=0x1b85, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="6bf71745.jpg", cAlternateFileName="")) returned 0x55e2d0 [0250.375] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x98a83700, ftCreationTime.dwHighDateTime=0x1d7b067, ftLastAccessTime.dwLowDateTime=0x98a83700, ftLastAccessTime.dwHighDateTime=0x1d7b067, ftLastWriteTime.dwLowDateTime=0x98a83700, ftLastWriteTime.dwHighDateTime=0x1d7b067, nFileSizeHigh=0x0, nFileSizeLow=0x1b85, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="6bf71745.jpg", cAlternateFileName="")) returned 0 [0250.375] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0250.376] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6bf71745.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6bf71745.jpg")) returned 1 [0250.377] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6bf71745.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6bf71745.jpg")) returned 0xffffffff [0250.377] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x641f6780, ftCreationTime.dwHighDateTime=0x1d706a1, ftLastAccessTime.dwLowDateTime=0x641f6780, ftLastAccessTime.dwHighDateTime=0x1d706a1, ftLastWriteTime.dwLowDateTime=0x641f6780, ftLastWriteTime.dwHighDateTime=0x1d706a1, nFileSizeHigh=0x0, nFileSizeLow=0x3405, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="6f79e4a.jpg", cAlternateFileName="")) returned 1 [0250.377] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.377] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.377] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.377] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0250.377] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6f79e4a.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6f79e4a.jpg")) returned 0x80 [0250.378] VirtualAlloc (lpAddress=0x21a4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21a4000 [0250.378] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6f79e4a.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6f79e4a.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.379] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6f79e4a.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6f79e4a.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.379] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.381] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.382] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.383] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.383] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x405, lpOverlapped=0x0) returned 1 [0250.383] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x405, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x405, lpOverlapped=0x0) returned 1 [0250.383] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.383] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.383] CloseHandle (hObject=0x1f0) returned 1 [0250.384] CloseHandle (hObject=0x1f4) returned 1 [0250.389] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6f79e4a.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6f79e4a.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6f79e4a.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6f79e4a.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.390] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6f79e4a.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6f79e4a.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.390] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6f79e4a.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6f79e4a.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x641f6780, ftCreationTime.dwHighDateTime=0x1d706a1, ftLastAccessTime.dwLowDateTime=0x641f6780, ftLastAccessTime.dwHighDateTime=0x1d706a1, ftLastWriteTime.dwLowDateTime=0x641f6780, ftLastWriteTime.dwHighDateTime=0x1d706a1, nFileSizeHigh=0x0, nFileSizeLow=0x3405, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="6f79e4a.jpg", cAlternateFileName="")) returned 0x55e7d0 [0250.390] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x641f6780, ftCreationTime.dwHighDateTime=0x1d706a1, ftLastAccessTime.dwLowDateTime=0x641f6780, ftLastAccessTime.dwHighDateTime=0x1d706a1, ftLastWriteTime.dwLowDateTime=0x641f6780, ftLastWriteTime.dwHighDateTime=0x1d706a1, nFileSizeHigh=0x0, nFileSizeLow=0x3405, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="6f79e4a.jpg", cAlternateFileName="")) returned 0 [0250.390] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0250.390] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6f79e4a.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6f79e4a.jpg")) returned 1 [0250.392] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6f79e4a.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6f79e4a.jpg")) returned 0xffffffff [0250.392] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xe133b947, ftCreationTime.dwHighDateTime=0x1d7b056, ftLastAccessTime.dwLowDateTime=0xe133b947, ftLastAccessTime.dwHighDateTime=0x1d7b056, ftLastWriteTime.dwLowDateTime=0xe133b947, ftLastWriteTime.dwHighDateTime=0x1d7b056, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="792d17d6.jpg", cAlternateFileName="")) returned 1 [0250.392] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.392] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.392] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.392] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0250.393] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\792d17d6.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\792d17d6.jpg")) returned 0x22 [0250.393] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\792d17d6.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\792d17d6.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.393] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\792d17d6.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\792d17d6.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.394] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.394] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.394] CloseHandle (hObject=0x1f4) returned 1 [0250.394] CloseHandle (hObject=0x1f0) returned 1 [0250.395] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\792d17d6.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\792d17d6.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\792d17d6.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\792d17d6.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.395] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\792d17d6.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\792d17d6.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.395] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\792d17d6.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\792d17d6.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xe133b947, ftCreationTime.dwHighDateTime=0x1d7b056, ftLastAccessTime.dwLowDateTime=0xe133b947, ftLastAccessTime.dwHighDateTime=0x1d7b056, ftLastWriteTime.dwLowDateTime=0xe133b947, ftLastWriteTime.dwHighDateTime=0x1d7b056, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="792d17d6.jpg", cAlternateFileName="")) returned 0x55e490 [0250.395] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xe133b947, ftCreationTime.dwHighDateTime=0x1d7b056, ftLastAccessTime.dwLowDateTime=0xe133b947, ftLastAccessTime.dwHighDateTime=0x1d7b056, ftLastWriteTime.dwLowDateTime=0xe133b947, ftLastWriteTime.dwHighDateTime=0x1d7b056, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="792d17d6.jpg", cAlternateFileName="")) returned 0 [0250.396] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0250.396] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\792d17d6.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\792d17d6.jpg")) returned 1 [0250.396] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\792d17d6.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\792d17d6.jpg")) returned 0xffffffff [0250.396] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xba356000, ftCreationTime.dwHighDateTime=0x1d8a634, ftLastAccessTime.dwLowDateTime=0xba356000, ftLastAccessTime.dwHighDateTime=0x1d8a634, ftLastWriteTime.dwLowDateTime=0xba356000, ftLastWriteTime.dwHighDateTime=0x1d8a634, nFileSizeHigh=0x0, nFileSizeLow=0x210b, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="7a67116a.jpg", cAlternateFileName="")) returned 1 [0250.397] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.397] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.397] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.397] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.397] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.397] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0250.397] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a67116a.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a67116a.jpg")) returned 0x80 [0250.398] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a67116a.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a67116a.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.398] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a67116a.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a67116a.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.398] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.401] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.402] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.403] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x10b, lpOverlapped=0x0) returned 1 [0250.403] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x10b, lpOverlapped=0x0) returned 1 [0250.403] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.403] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.403] CloseHandle (hObject=0x1f0) returned 1 [0250.403] CloseHandle (hObject=0x1f4) returned 1 [0250.404] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a67116a.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a67116a.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a67116a.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a67116a.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.405] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a67116a.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a67116a.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.405] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a67116a.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a67116a.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xba356000, ftCreationTime.dwHighDateTime=0x1d8a634, ftLastAccessTime.dwLowDateTime=0xba356000, ftLastAccessTime.dwHighDateTime=0x1d8a634, ftLastWriteTime.dwLowDateTime=0xba356000, ftLastWriteTime.dwHighDateTime=0x1d8a634, nFileSizeHigh=0x0, nFileSizeLow=0x210b, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="7a67116a.jpg", cAlternateFileName="")) returned 0x55e2d0 [0250.405] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xba356000, ftCreationTime.dwHighDateTime=0x1d8a634, ftLastAccessTime.dwLowDateTime=0xba356000, ftLastAccessTime.dwHighDateTime=0x1d8a634, ftLastWriteTime.dwLowDateTime=0xba356000, ftLastWriteTime.dwHighDateTime=0x1d8a634, nFileSizeHigh=0x0, nFileSizeLow=0x210b, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="7a67116a.jpg", cAlternateFileName="")) returned 0 [0250.405] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0250.405] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a67116a.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a67116a.jpg")) returned 1 [0250.406] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a67116a.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a67116a.jpg")) returned 0xffffffff [0250.406] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x86b2784c, ftCreationTime.dwHighDateTime=0x1d8595e, ftLastAccessTime.dwLowDateTime=0x86b2784c, ftLastAccessTime.dwHighDateTime=0x1d8595e, ftLastWriteTime.dwLowDateTime=0x86b2784c, ftLastWriteTime.dwHighDateTime=0x1d8595e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="7be0bc58.jpg", cAlternateFileName="")) returned 1 [0250.407] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.407] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.407] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.407] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.407] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.407] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0250.407] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7be0bc58.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7be0bc58.jpg")) returned 0x22 [0250.407] VirtualAlloc (lpAddress=0x21a8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21a8000 [0250.408] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7be0bc58.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7be0bc58.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.408] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7be0bc58.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7be0bc58.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.408] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.408] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.408] CloseHandle (hObject=0x1f4) returned 1 [0250.409] CloseHandle (hObject=0x1f0) returned 1 [0250.409] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7be0bc58.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7be0bc58.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7be0bc58.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7be0bc58.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.409] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7be0bc58.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7be0bc58.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.409] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7be0bc58.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7be0bc58.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x86b2784c, ftCreationTime.dwHighDateTime=0x1d8595e, ftLastAccessTime.dwLowDateTime=0x86b2784c, ftLastAccessTime.dwHighDateTime=0x1d8595e, ftLastWriteTime.dwLowDateTime=0x86b2784c, ftLastWriteTime.dwHighDateTime=0x1d8595e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="7be0bc58.jpg", cAlternateFileName="")) returned 0x55e8d0 [0250.409] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x86b2784c, ftCreationTime.dwHighDateTime=0x1d8595e, ftLastAccessTime.dwLowDateTime=0x86b2784c, ftLastAccessTime.dwHighDateTime=0x1d8595e, ftLastWriteTime.dwLowDateTime=0x86b2784c, ftLastWriteTime.dwHighDateTime=0x1d8595e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="7be0bc58.jpg", cAlternateFileName="")) returned 0 [0250.409] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0250.410] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7be0bc58.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7be0bc58.jpg")) returned 1 [0250.410] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7be0bc58.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7be0bc58.jpg")) returned 0xffffffff [0250.410] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc06b5e7d, ftCreationTime.dwHighDateTime=0x1d705cd, ftLastAccessTime.dwLowDateTime=0xc06b5e7d, ftLastAccessTime.dwHighDateTime=0x1d705cd, ftLastWriteTime.dwLowDateTime=0xc06b5e7d, ftLastWriteTime.dwHighDateTime=0x1d705cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="8722e2cf.jpg", cAlternateFileName="")) returned 1 [0250.410] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.410] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.410] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.410] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.411] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0250.411] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8722e2cf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8722e2cf.jpg")) returned 0x22 [0250.411] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8722e2cf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8722e2cf.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.413] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8722e2cf.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8722e2cf.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.414] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.414] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.414] CloseHandle (hObject=0x1f0) returned 1 [0250.414] CloseHandle (hObject=0x1f4) returned 1 [0250.415] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8722e2cf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8722e2cf.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8722e2cf.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8722e2cf.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.415] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8722e2cf.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8722e2cf.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.415] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8722e2cf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8722e2cf.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc06b5e7d, ftCreationTime.dwHighDateTime=0x1d705cd, ftLastAccessTime.dwLowDateTime=0xc06b5e7d, ftLastAccessTime.dwHighDateTime=0x1d705cd, ftLastWriteTime.dwLowDateTime=0xc06b5e7d, ftLastWriteTime.dwHighDateTime=0x1d705cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="8722e2cf.jpg", cAlternateFileName="")) returned 0x55e7d0 [0250.415] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc06b5e7d, ftCreationTime.dwHighDateTime=0x1d705cd, ftLastAccessTime.dwLowDateTime=0xc06b5e7d, ftLastAccessTime.dwHighDateTime=0x1d705cd, ftLastWriteTime.dwLowDateTime=0xc06b5e7d, ftLastWriteTime.dwHighDateTime=0x1d705cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="8722e2cf.jpg", cAlternateFileName="")) returned 0 [0250.415] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0250.415] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8722e2cf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8722e2cf.jpg")) returned 1 [0250.416] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8722e2cf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8722e2cf.jpg")) returned 0xffffffff [0250.416] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x25e93480, ftCreationTime.dwHighDateTime=0x1d70464, ftLastAccessTime.dwLowDateTime=0x25e93480, ftLastAccessTime.dwHighDateTime=0x1d70464, ftLastWriteTime.dwLowDateTime=0x25e93480, ftLastWriteTime.dwHighDateTime=0x1d70464, nFileSizeHigh=0x0, nFileSizeLow=0x18f3, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="8b8a3111.jpg", cAlternateFileName="")) returned 1 [0250.416] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.416] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.416] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.416] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0250.416] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8b8a3111.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8b8a3111.jpg")) returned 0x80 [0250.417] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8b8a3111.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8b8a3111.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.417] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8b8a3111.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8b8a3111.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.417] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.419] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.421] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x8f3, lpOverlapped=0x0) returned 1 [0250.421] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x8f3, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x8f3, lpOverlapped=0x0) returned 1 [0250.422] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.422] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.422] CloseHandle (hObject=0x1f4) returned 1 [0250.422] CloseHandle (hObject=0x1f0) returned 1 [0250.423] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8b8a3111.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8b8a3111.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8b8a3111.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8b8a3111.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.424] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8b8a3111.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8b8a3111.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.424] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8b8a3111.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8b8a3111.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x25e93480, ftCreationTime.dwHighDateTime=0x1d70464, ftLastAccessTime.dwLowDateTime=0x25e93480, ftLastAccessTime.dwHighDateTime=0x1d70464, ftLastWriteTime.dwLowDateTime=0x25e93480, ftLastWriteTime.dwHighDateTime=0x1d70464, nFileSizeHigh=0x0, nFileSizeLow=0x18f3, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="8b8a3111.jpg", cAlternateFileName="")) returned 0x55e1d0 [0250.424] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x25e93480, ftCreationTime.dwHighDateTime=0x1d70464, ftLastAccessTime.dwLowDateTime=0x25e93480, ftLastAccessTime.dwHighDateTime=0x1d70464, ftLastWriteTime.dwLowDateTime=0x25e93480, ftLastWriteTime.dwHighDateTime=0x1d70464, nFileSizeHigh=0x0, nFileSizeLow=0x18f3, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="8b8a3111.jpg", cAlternateFileName="")) returned 0 [0250.424] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0250.424] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8b8a3111.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8b8a3111.jpg")) returned 1 [0250.426] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\8b8a3111.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\8b8a3111.jpg")) returned 0xffffffff [0250.426] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa594b80, ftCreationTime.dwHighDateTime=0x1d7ad1d, ftLastAccessTime.dwLowDateTime=0xa594b80, ftLastAccessTime.dwHighDateTime=0x1d7ad1d, ftLastWriteTime.dwLowDateTime=0xa594b80, ftLastWriteTime.dwHighDateTime=0x1d7ad1d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="a5aa8076.jpg", cAlternateFileName="")) returned 1 [0250.426] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.426] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.426] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.426] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.567] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0250.568] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a5aa8076.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a5aa8076.jpg")) returned 0x80 [0250.568] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a5aa8076.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a5aa8076.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.569] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a5aa8076.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a5aa8076.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.569] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.572] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xfd0, lpOverlapped=0x0) returned 1 [0250.573] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xfd0, lpOverlapped=0x0) returned 1 [0250.573] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.573] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.574] CloseHandle (hObject=0x1f0) returned 1 [0250.574] CloseHandle (hObject=0x1f4) returned 1 [0250.575] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a5aa8076.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a5aa8076.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a5aa8076.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a5aa8076.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.576] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a5aa8076.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a5aa8076.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.576] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a5aa8076.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a5aa8076.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa594b80, ftCreationTime.dwHighDateTime=0x1d7ad1d, ftLastAccessTime.dwLowDateTime=0xa594b80, ftLastAccessTime.dwHighDateTime=0x1d7ad1d, ftLastWriteTime.dwLowDateTime=0xa594b80, ftLastWriteTime.dwHighDateTime=0x1d7ad1d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="a5aa8076.jpg", cAlternateFileName="")) returned 0x55e490 [0250.576] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa594b80, ftCreationTime.dwHighDateTime=0x1d7ad1d, ftLastAccessTime.dwLowDateTime=0xa594b80, ftLastAccessTime.dwHighDateTime=0x1d7ad1d, ftLastWriteTime.dwLowDateTime=0xa594b80, ftLastWriteTime.dwHighDateTime=0x1d7ad1d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="a5aa8076.jpg", cAlternateFileName="")) returned 0 [0250.576] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0250.576] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a5aa8076.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a5aa8076.jpg")) returned 1 [0250.578] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a5aa8076.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a5aa8076.jpg")) returned 0xffffffff [0250.578] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf5a7a180, ftCreationTime.dwHighDateTime=0x1d70508, ftLastAccessTime.dwLowDateTime=0xf5a7a180, ftLastAccessTime.dwHighDateTime=0x1d70508, ftLastWriteTime.dwLowDateTime=0xf5a7a180, ftLastWriteTime.dwHighDateTime=0x1d70508, nFileSizeHigh=0x0, nFileSizeLow=0x1c44, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="ad152324.jpg", cAlternateFileName="")) returned 1 [0250.578] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.578] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.578] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.578] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0250.579] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad152324.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad152324.jpg")) returned 0x80 [0250.579] VirtualAlloc (lpAddress=0x21ac000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21ac000 [0250.580] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad152324.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad152324.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.580] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad152324.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad152324.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.580] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.583] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.584] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xc44, lpOverlapped=0x0) returned 1 [0250.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xc44, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xc44, lpOverlapped=0x0) returned 1 [0250.585] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.585] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.585] CloseHandle (hObject=0x1f4) returned 1 [0250.585] CloseHandle (hObject=0x1f0) returned 1 [0250.591] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad152324.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad152324.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad152324.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad152324.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.592] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad152324.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad152324.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.592] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad152324.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad152324.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf5a7a180, ftCreationTime.dwHighDateTime=0x1d70508, ftLastAccessTime.dwLowDateTime=0xf5a7a180, ftLastAccessTime.dwHighDateTime=0x1d70508, ftLastWriteTime.dwLowDateTime=0xf5a7a180, ftLastWriteTime.dwHighDateTime=0x1d70508, nFileSizeHigh=0x0, nFileSizeLow=0x1c44, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="ad152324.jpg", cAlternateFileName="")) returned 0x55e510 [0250.592] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf5a7a180, ftCreationTime.dwHighDateTime=0x1d70508, ftLastAccessTime.dwLowDateTime=0xf5a7a180, ftLastAccessTime.dwHighDateTime=0x1d70508, ftLastWriteTime.dwLowDateTime=0xf5a7a180, ftLastWriteTime.dwHighDateTime=0x1d70508, nFileSizeHigh=0x0, nFileSizeLow=0x1c44, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="ad152324.jpg", cAlternateFileName="")) returned 0 [0250.592] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0250.592] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad152324.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad152324.jpg")) returned 1 [0250.594] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad152324.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad152324.jpg")) returned 0xffffffff [0250.594] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa3649780, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa3649780, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa3649780, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x2682, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="ad9a3041.jpg", cAlternateFileName="")) returned 1 [0250.594] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.594] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.594] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.594] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0250.595] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad9a3041.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad9a3041.jpg")) returned 0x80 [0250.595] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad9a3041.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad9a3041.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.595] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad9a3041.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad9a3041.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.602] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.604] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.605] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.606] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x682, lpOverlapped=0x0) returned 1 [0250.606] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x682, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x682, lpOverlapped=0x0) returned 1 [0250.606] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.606] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.606] CloseHandle (hObject=0x1f0) returned 1 [0250.607] CloseHandle (hObject=0x1f4) returned 1 [0250.608] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad9a3041.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad9a3041.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad9a3041.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad9a3041.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.608] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad9a3041.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad9a3041.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.609] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad9a3041.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad9a3041.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa3649780, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa3649780, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa3649780, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x2682, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="ad9a3041.jpg", cAlternateFileName="")) returned 0x55e490 [0250.609] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa3649780, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa3649780, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0xa3649780, ftLastWriteTime.dwHighDateTime=0x1d008f6, nFileSizeHigh=0x0, nFileSizeLow=0x2682, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="ad9a3041.jpg", cAlternateFileName="")) returned 0 [0250.609] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0250.609] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad9a3041.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad9a3041.jpg")) returned 1 [0250.610] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\ad9a3041.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\ad9a3041.jpg")) returned 0xffffffff [0250.611] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x810b2080, ftCreationTime.dwHighDateTime=0x1d703ab, ftLastAccessTime.dwLowDateTime=0x810b2080, ftLastAccessTime.dwHighDateTime=0x1d703ab, ftLastWriteTime.dwLowDateTime=0x810b2080, ftLastWriteTime.dwHighDateTime=0x1d703ab, nFileSizeHigh=0x0, nFileSizeLow=0x1ef8, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="b87b2414.jpg", cAlternateFileName="")) returned 1 [0250.611] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.611] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.611] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.611] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0250.611] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\b87b2414.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\b87b2414.jpg")) returned 0x80 [0250.612] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\b87b2414.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\b87b2414.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.612] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\b87b2414.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\b87b2414.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.613] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.615] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.617] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xef8, lpOverlapped=0x0) returned 1 [0250.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xef8, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xef8, lpOverlapped=0x0) returned 1 [0250.617] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.617] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.617] CloseHandle (hObject=0x1f4) returned 1 [0250.617] CloseHandle (hObject=0x1f0) returned 1 [0250.619] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\b87b2414.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\b87b2414.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\b87b2414.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\b87b2414.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.619] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\b87b2414.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\b87b2414.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.619] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\b87b2414.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\b87b2414.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x810b2080, ftCreationTime.dwHighDateTime=0x1d703ab, ftLastAccessTime.dwLowDateTime=0x810b2080, ftLastAccessTime.dwHighDateTime=0x1d703ab, ftLastWriteTime.dwLowDateTime=0x810b2080, ftLastWriteTime.dwHighDateTime=0x1d703ab, nFileSizeHigh=0x0, nFileSizeLow=0x1ef8, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="b87b2414.jpg", cAlternateFileName="")) returned 0x55e490 [0250.620] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x810b2080, ftCreationTime.dwHighDateTime=0x1d703ab, ftLastAccessTime.dwLowDateTime=0x810b2080, ftLastAccessTime.dwHighDateTime=0x1d703ab, ftLastWriteTime.dwLowDateTime=0x810b2080, ftLastWriteTime.dwHighDateTime=0x1d703ab, nFileSizeHigh=0x0, nFileSizeLow=0x1ef8, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="b87b2414.jpg", cAlternateFileName="")) returned 0 [0250.620] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0250.620] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\b87b2414.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\b87b2414.jpg")) returned 1 [0250.621] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\b87b2414.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\b87b2414.jpg")) returned 0xffffffff [0250.621] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x8f6a4280, ftCreationTime.dwHighDateTime=0x1d70466, ftLastAccessTime.dwLowDateTime=0x8f6a4280, ftLastAccessTime.dwHighDateTime=0x1d70466, ftLastWriteTime.dwLowDateTime=0x8f6a4280, ftLastWriteTime.dwHighDateTime=0x1d70466, nFileSizeHigh=0x0, nFileSizeLow=0x1b53, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="c6a29e3f.jpg", cAlternateFileName="")) returned 1 [0250.622] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.622] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.622] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.622] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0250.622] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c6a29e3f.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c6a29e3f.jpg")) returned 0x80 [0250.622] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c6a29e3f.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c6a29e3f.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.623] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c6a29e3f.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c6a29e3f.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.623] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.626] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xb53, lpOverlapped=0x0) returned 1 [0250.627] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xb53, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xb53, lpOverlapped=0x0) returned 1 [0250.627] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.627] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.628] CloseHandle (hObject=0x1f0) returned 1 [0250.628] CloseHandle (hObject=0x1f4) returned 1 [0250.631] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c6a29e3f.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c6a29e3f.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c6a29e3f.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c6a29e3f.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.631] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c6a29e3f.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c6a29e3f.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.631] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c6a29e3f.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c6a29e3f.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x8f6a4280, ftCreationTime.dwHighDateTime=0x1d70466, ftLastAccessTime.dwLowDateTime=0x8f6a4280, ftLastAccessTime.dwHighDateTime=0x1d70466, ftLastWriteTime.dwLowDateTime=0x8f6a4280, ftLastWriteTime.dwHighDateTime=0x1d70466, nFileSizeHigh=0x0, nFileSizeLow=0x1b53, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="c6a29e3f.jpg", cAlternateFileName="")) returned 0x55e510 [0250.632] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x8f6a4280, ftCreationTime.dwHighDateTime=0x1d70466, ftLastAccessTime.dwLowDateTime=0x8f6a4280, ftLastAccessTime.dwHighDateTime=0x1d70466, ftLastWriteTime.dwLowDateTime=0x8f6a4280, ftLastWriteTime.dwHighDateTime=0x1d70466, nFileSizeHigh=0x0, nFileSizeLow=0x1b53, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="c6a29e3f.jpg", cAlternateFileName="")) returned 0 [0250.632] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0250.632] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c6a29e3f.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c6a29e3f.jpg")) returned 1 [0250.633] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c6a29e3f.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c6a29e3f.jpg")) returned 0xffffffff [0250.634] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3ffe4200, ftCreationTime.dwHighDateTime=0x1d7054c, ftLastAccessTime.dwLowDateTime=0x3ffe4200, ftLastAccessTime.dwHighDateTime=0x1d7054c, ftLastWriteTime.dwLowDateTime=0x3ffe4200, ftLastWriteTime.dwHighDateTime=0x1d7054c, nFileSizeHigh=0x0, nFileSizeLow=0xf0c, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="d242e6bf.jpg", cAlternateFileName="")) returned 1 [0250.634] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.634] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.634] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.634] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0250.634] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\d242e6bf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\d242e6bf.jpg")) returned 0x80 [0250.636] VirtualAlloc (lpAddress=0x21b0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21b0000 [0250.637] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\d242e6bf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\d242e6bf.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.637] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\d242e6bf.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\d242e6bf.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.638] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xf0c, lpOverlapped=0x0) returned 1 [0250.645] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xf0c, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xf0c, lpOverlapped=0x0) returned 1 [0250.647] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.647] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.647] CloseHandle (hObject=0x1f4) returned 1 [0250.647] CloseHandle (hObject=0x1f0) returned 1 [0250.651] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\d242e6bf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\d242e6bf.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\d242e6bf.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\d242e6bf.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.651] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\d242e6bf.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\d242e6bf.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.651] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\d242e6bf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\d242e6bf.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3ffe4200, ftCreationTime.dwHighDateTime=0x1d7054c, ftLastAccessTime.dwLowDateTime=0x3ffe4200, ftLastAccessTime.dwHighDateTime=0x1d7054c, ftLastWriteTime.dwLowDateTime=0x3ffe4200, ftLastWriteTime.dwHighDateTime=0x1d7054c, nFileSizeHigh=0x0, nFileSizeLow=0xf0c, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="d242e6bf.jpg", cAlternateFileName="")) returned 0x55e310 [0250.651] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x3ffe4200, ftCreationTime.dwHighDateTime=0x1d7054c, ftLastAccessTime.dwLowDateTime=0x3ffe4200, ftLastAccessTime.dwHighDateTime=0x1d7054c, ftLastWriteTime.dwLowDateTime=0x3ffe4200, ftLastWriteTime.dwHighDateTime=0x1d7054c, nFileSizeHigh=0x0, nFileSizeLow=0xf0c, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="d242e6bf.jpg", cAlternateFileName="")) returned 0 [0250.652] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0250.652] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\d242e6bf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\d242e6bf.jpg")) returned 1 [0250.653] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\d242e6bf.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\d242e6bf.jpg")) returned 0xffffffff [0250.653] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x44d84d2, ftCreationTime.dwHighDateTime=0x1d70505, ftLastAccessTime.dwLowDateTime=0x44d84d2, ftLastAccessTime.dwHighDateTime=0x1d70505, ftLastWriteTime.dwLowDateTime=0x44d84d2, ftLastWriteTime.dwHighDateTime=0x1d70505, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="dcd07dae.jpg", cAlternateFileName="")) returned 1 [0250.654] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.654] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.654] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.654] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.654] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.654] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0250.654] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dcd07dae.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dcd07dae.jpg")) returned 0x22 [0250.655] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dcd07dae.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dcd07dae.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.655] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dcd07dae.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dcd07dae.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.656] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.656] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.656] CloseHandle (hObject=0x1f0) returned 1 [0250.656] CloseHandle (hObject=0x1f4) returned 1 [0250.656] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dcd07dae.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dcd07dae.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dcd07dae.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dcd07dae.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.657] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dcd07dae.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dcd07dae.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.657] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dcd07dae.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dcd07dae.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x44d84d2, ftCreationTime.dwHighDateTime=0x1d70505, ftLastAccessTime.dwLowDateTime=0x44d84d2, ftLastAccessTime.dwHighDateTime=0x1d70505, ftLastWriteTime.dwLowDateTime=0x44d84d2, ftLastWriteTime.dwHighDateTime=0x1d70505, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="dcd07dae.jpg", cAlternateFileName="")) returned 0x55e510 [0250.657] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x44d84d2, ftCreationTime.dwHighDateTime=0x1d70505, ftLastAccessTime.dwLowDateTime=0x44d84d2, ftLastAccessTime.dwHighDateTime=0x1d70505, ftLastWriteTime.dwLowDateTime=0x44d84d2, ftLastWriteTime.dwHighDateTime=0x1d70505, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="dcd07dae.jpg", cAlternateFileName="")) returned 0 [0250.657] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0250.657] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dcd07dae.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dcd07dae.jpg")) returned 1 [0250.658] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dcd07dae.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dcd07dae.jpg")) returned 0xffffffff [0250.658] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x6a54ded2, ftCreationTime.dwHighDateTime=0x1d82a22, ftLastAccessTime.dwLowDateTime=0x6a54ded2, ftLastAccessTime.dwHighDateTime=0x1d82a22, ftLastWriteTime.dwLowDateTime=0x6a54ded2, ftLastWriteTime.dwHighDateTime=0x1d82a22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="e271f8d5.jpg", cAlternateFileName="")) returned 1 [0250.658] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.658] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.658] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.658] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0250.659] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\e271f8d5.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\e271f8d5.jpg")) returned 0x22 [0250.659] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\e271f8d5.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\e271f8d5.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.659] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\e271f8d5.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\e271f8d5.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.660] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.660] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.660] CloseHandle (hObject=0x1f4) returned 1 [0250.660] CloseHandle (hObject=0x1f0) returned 1 [0250.660] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\e271f8d5.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\e271f8d5.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\e271f8d5.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\e271f8d5.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.661] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\e271f8d5.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\e271f8d5.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.661] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\e271f8d5.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\e271f8d5.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x6a54ded2, ftCreationTime.dwHighDateTime=0x1d82a22, ftLastAccessTime.dwLowDateTime=0x6a54ded2, ftLastAccessTime.dwHighDateTime=0x1d82a22, ftLastWriteTime.dwLowDateTime=0x6a54ded2, ftLastWriteTime.dwHighDateTime=0x1d82a22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="e271f8d5.jpg", cAlternateFileName="")) returned 0x55e490 [0250.661] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x6a54ded2, ftCreationTime.dwHighDateTime=0x1d82a22, ftLastAccessTime.dwLowDateTime=0x6a54ded2, ftLastAccessTime.dwHighDateTime=0x1d82a22, ftLastWriteTime.dwLowDateTime=0x6a54ded2, ftLastWriteTime.dwHighDateTime=0x1d82a22, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="e271f8d5.jpg", cAlternateFileName="")) returned 0 [0250.661] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0250.661] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\e271f8d5.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\e271f8d5.jpg")) returned 1 [0250.662] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\e271f8d5.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\e271f8d5.jpg")) returned 0xffffffff [0250.662] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xa1989122, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0xa1989122, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0xa8ff1b3a, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x33ce, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="eaaf57da.jpg", cAlternateFileName="")) returned 1 [0250.662] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.662] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.662] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.662] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.662] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.663] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0250.663] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\eaaf57da.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\eaaf57da.jpg")) returned 0x22 [0250.663] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\eaaf57da.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\eaaf57da.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.663] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\eaaf57da.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\eaaf57da.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.664] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.667] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.669] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.669] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.669] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3ce, lpOverlapped=0x0) returned 1 [0250.670] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3ce, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3ce, lpOverlapped=0x0) returned 1 [0250.670] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.670] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.670] CloseHandle (hObject=0x1f0) returned 1 [0250.670] CloseHandle (hObject=0x1f4) returned 1 [0250.673] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\eaaf57da.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\eaaf57da.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\eaaf57da.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\eaaf57da.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.673] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\eaaf57da.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\eaaf57da.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.673] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\eaaf57da.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\eaaf57da.jpg"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xa1989122, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0xa1989122, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0xa8ff1b3a, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x33ce, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="eaaf57da.jpg", cAlternateFileName="")) returned 0x55e1d0 [0250.673] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xa1989122, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0xa1989122, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0xa8ff1b3a, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x33ce, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="eaaf57da.jpg", cAlternateFileName="")) returned 0 [0250.673] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0250.674] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\eaaf57da.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\eaaf57da.jpg")) returned 1 [0250.675] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\eaaf57da.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\eaaf57da.jpg")) returned 0xffffffff [0250.675] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xa1989122, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0xa1989122, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0xa8ff1b3a, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x33ce, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="eaaf57da.jpg", cAlternateFileName="")) returned 0 [0250.675] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0250.675] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xafc9a821, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xda6712a, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x706a2e61, dwReserved1=0x550267, cFileName="WPNPRMRY.tmp", cAlternateFileName="")) returned 1 [0250.676] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xafc9a821, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xda6712a, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x706a2e61, dwReserved1=0x550267, cFileName="WPNPRMRY.tmp", cAlternateFileName="")) returned 0 [0250.676] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0250.676] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47cd6d9c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x47cd6d9c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d742e59, dwReserved1=0x65647470, cFileName="PowerShell", cAlternateFileName="POWERS~1")) returned 1 [0250.676] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\powershell\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47cd6d9c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x47cd6d9c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x706a0000, dwReserved1=0x550267, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0250.677] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47cd6d9c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x47cd6d9c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x706a0000, dwReserved1=0x550267, cFileName="..", cAlternateFileName="")) returned 1 [0250.677] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb9b6b93d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb9b6b93d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x706a0000, dwReserved1=0x550267, cFileName="CommandAnalysis", cAlternateFileName="COMMAN~1")) returned 1 [0250.677] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb9b6b93d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb9b6b93d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0250.680] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb9b6b93d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb9b6b93d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0250.684] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e2e2ca, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47e2e2ca, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd3549127, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x25a, dwReserved0=0x55a2d0, dwReserved1=0x24000a2e, cFileName="PowerShell_AnalysisCacheEntry_01c28806-e5ae-41cc-b284-e627e1b02beb", cAlternateFileName="PODA56~1")) returned 1 [0250.685] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb93910e6, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb93910e6, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb9394c19, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="PowerShell_AnalysisCacheEntry_1cc363fc-fd33-403d-b8fa-964af616746c", cAlternateFileName="PO8435~1")) returned 1 [0250.686] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92f9afe, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb92f9afe, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb92faecd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="PowerShell_AnalysisCacheEntry_2fb762b4-d05f-41c9-800e-eb1b344a91c2", cAlternateFileName="PO4F91~1")) returned 1 [0250.687] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b6b93d, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb9b6b93d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb9b6ccc5, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="PowerShell_AnalysisCacheEntry_460645de-0b19-4be1-bf3e-f69457b02cf0", cAlternateFileName="PO35F7~1")) returned 1 [0250.688] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e545ef, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47e545ef, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd359552a, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x22ef, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="PowerShell_AnalysisCacheEntry_67a2505d-bf00-4e2f-b010-406d32caddc3", cAlternateFileName="PO4D8E~1")) returned 1 [0250.689] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e0807c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47e0807c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd3522e66, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x662, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="PowerShell_AnalysisCacheEntry_6de40067-cd2a-4666-8cd9-870e0a588215", cAlternateFileName="POD9C8~1")) returned 1 [0250.690] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47cd6d9c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd346453b, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="PowerShell_AnalysisCacheEntry_6fe77092-4798-42ae-bda5-e7f822b580e9", cAlternateFileName="POWERS~1")) returned 1 [0250.691] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92b7c90, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb92b7c90, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb92b7c90, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="PowerShell_AnalysisCacheEntry_8bdd4f74-735f-4cbb-b944-fa23a05b2f05", cAlternateFileName="PO43BC~1")) returned 1 [0250.693] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb925899c, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb925899c, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb9259cc3, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x2b2, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="PowerShell_AnalysisCacheEntry_9fd22d45-e580-4e7f-ba2a-734dfe2d9a2c", cAlternateFileName="PO274D~1")) returned 1 [0250.694] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9341bea, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb9341bea, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb9341bea, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x5a1, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="PowerShell_AnalysisCacheEntry_a2539131-4889-4bfa-9cd2-9c1d6af613cf", cAlternateFileName="PO71AD~1")) returned 1 [0250.695] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47dbbb94, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47dbbb94, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd34b074a, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x717, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="PowerShell_AnalysisCacheEntry_cc38888a-7080-4220-9b7d-de7a9b2167ba", cAlternateFileName="POWERS~4")) returned 1 [0250.696] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d49400, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47d49400, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd346453b, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x2b07, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="PowerShell_AnalysisCacheEntry_da21122d-ae44-4f93-ba1d-c9a978ca5b20", cAlternateFileName="POWERS~3")) returned 1 [0250.697] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e2e2ca, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47e2e2ca, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd3549127, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x25a, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="PowerShell_AnalysisCacheEntry_f9e52a2e-51b0-4ce6-9de0-3959d95ded6e", cAlternateFileName="POE0DC~1")) returned 1 [0250.698] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d23230, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47d23230, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd359552a, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="PowerShell_AnalysisCacheIndex", cAlternateFileName="POWERS~2")) returned 1 [0250.699] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d23230, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47d23230, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd359552a, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="PowerShell_AnalysisCacheIndex", cAlternateFileName="POWERS~2")) returned 0 [0250.699] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0250.700] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb9b6b93d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb9b6b93d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x706a0000, dwReserved1=0x550267, cFileName="CommandAnalysis", cAlternateFileName="COMMAN~1")) returned 0 [0250.700] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0250.700] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x400db452, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xab1ccb9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1ccb9c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c616e41, dwReserved1=0x73697379, cFileName="PRICache", cAlternateFileName="")) returned 1 [0250.700] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x400db452, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xab1ccb9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1ccb9c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f6c6c65, dwReserved1=0x6c616e41, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0250.703] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x400db452, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xab1ccb9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1ccb9c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f6c6c65, dwReserved1=0x6c616e41, cFileName="..", cAlternateFileName="")) returned 1 [0250.703] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab04f553, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab04f553, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab04f553, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f6c6c65, dwReserved1=0x6c616e41, cFileName="559726144", cAlternateFileName="559726~1")) returned 1 [0250.703] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\559726144\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\559726144\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab04f553, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab04f553, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab04f553, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0250.704] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab04f553, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab04f553, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab04f553, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="..", cAlternateFileName="")) returned 1 [0250.704] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab04f553, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab04f553, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab04f553, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="2503989003.pri", cAlternateFileName="250398~1.PRI")) returned 1 [0250.705] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab04f553, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab04f553, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab04f553, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x61006e, dwReserved1=0x79006c, cFileName="2503989003.pri", cAlternateFileName="250398~1.PRI")) returned 0 [0250.705] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0250.705] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544e4aa0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x544e4aa0, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x544e4aa0, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~2.0_N")) returned 1 [0250.706] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544e4aa0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x544e4aa0, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x544e4aa0, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0250.706] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544e4aa0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x544e4aa0, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x544e4aa0, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.706] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544e4aa0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x544e4aa0, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x544e4aa0, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.706] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0250.706] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x610bda33, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x610bda33, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x610bda33, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MIEBA3~1.0_N")) returned 1 [0250.707] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x610bda33, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x610bda33, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x610bda33, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0250.708] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x610bda33, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x610bda33, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x610bda33, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.708] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x610bda33, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x610bda33, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x610bda33, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.708] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0250.708] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e53a45a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e53a45a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e53a45a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0250.708] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e53a45a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e53a45a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e53a45a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0250.709] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e53a45a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e53a45a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e53a45a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.709] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e53a45a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e53a45a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e53a45a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.710] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0250.710] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61e4d0c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61e4d0c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61e4d0c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI747C~1.0_N")) returned 1 [0250.710] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61e4d0c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61e4d0c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61e4d0c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0250.711] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61e4d0c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61e4d0c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61e4d0c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.711] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61e4d0c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61e4d0c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61e4d0c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.711] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0250.711] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x631f85cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x631f85cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x631f85cd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MI8763~1.0_N")) returned 1 [0250.711] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x631f85cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x631f85cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x631f85cd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0250.712] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x631f85cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x631f85cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x631f85cd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.712] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x631f85cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x631f85cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x631f85cd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.712] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0250.717] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x899a80a2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x899a80a2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x899a80a2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIACEB~1.0_N")) returned 1 [0250.717] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x899a80a2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x899a80a2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x899a80a2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0250.717] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x899a80a2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x899a80a2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x899a80a2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.717] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x899a80a2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x899a80a2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x899a80a2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.717] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0250.718] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5575ebd7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5575ebd7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5575ebd7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~3.0_N")) returned 1 [0250.718] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5575ebd7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5575ebd7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5575ebd7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0250.718] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5575ebd7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5575ebd7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5575ebd7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.718] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5575ebd7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5575ebd7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5575ebd7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.718] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0250.718] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a71141d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a71141d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a71141d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIE27B~1.0_N")) returned 1 [0250.719] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a71141d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a71141d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a71141d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0250.719] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a71141d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a71141d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a71141d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.719] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a71141d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a71141d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a71141d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.719] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0250.719] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60164786, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60164786, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60164786, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.52_")) returned 1 [0250.719] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60164786, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60164786, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60164786, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0250.720] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60164786, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60164786, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60164786, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.720] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60164786, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60164786, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60164786, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.720] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0250.720] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc86950, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bc86950, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bc86950, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI1B62~1.0_N")) returned 1 [0250.720] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc86950, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bc86950, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bc86950, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0250.720] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc86950, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bc86950, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bc86950, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.720] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc86950, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bc86950, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bc86950, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.720] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0250.721] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97aa9f6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97aa9f6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97aa9f6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI2456~1.0_N")) returned 1 [0250.721] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97aa9f6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97aa9f6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97aa9f6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0250.721] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97aa9f6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97aa9f6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97aa9f6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.721] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97aa9f6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97aa9f6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97aa9f6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.721] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0250.721] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f31afd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x59f31afd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x59f31afd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~4.0_N")) returned 1 [0250.721] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f31afd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x59f31afd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x59f31afd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0250.722] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f31afd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x59f31afd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x59f31afd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.723] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f31afd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x59f31afd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x59f31afd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.723] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0250.723] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99804de5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99804de5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99804de5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIA2AD~1.0_N")) returned 1 [0250.723] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99804de5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99804de5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99804de5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0250.725] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99804de5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99804de5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99804de5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.725] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99804de5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99804de5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99804de5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.725] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0250.725] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bbee502, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bbee502, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bbee502, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI038B~1.0_N")) returned 1 [0250.725] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bbee502, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bbee502, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bbee502, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0250.726] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bbee502, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bbee502, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bbee502, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.726] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bbee502, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bbee502, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bbee502, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.726] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0250.726] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d39fc1d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d39fc1d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d39fc1d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI4F32~1.0_N")) returned 1 [0250.727] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d39fc1d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d39fc1d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d39fc1d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0250.727] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d39fc1d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d39fc1d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d39fc1d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.727] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d39fc1d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d39fc1d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d39fc1d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.727] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0250.727] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e42a123, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e42a123, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e42a123, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 1 [0250.727] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e42a123, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e42a123, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e42a123, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0250.728] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e42a123, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e42a123, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e42a123, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.728] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e42a123, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e42a123, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e42a123, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 0 [0250.728] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0250.728] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1ccb9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1ccb9c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~2.0_N")) returned 1 [0250.728] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1ccb9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1ccb9c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0250.729] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1ccb9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1ccb9c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="..", cAlternateFileName="")) returned 1 [0250.729] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1f30c2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1f30c2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="559726144", cAlternateFileName="559726~1")) returned 1 [0250.729] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\559726144\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\559726144\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1f30c2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1f30c2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0250.729] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1f30c2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1f30c2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 1 [0250.729] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1f30c2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1f30c2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1f30c2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="2503989003.pri", cAlternateFileName="250398~1.PRI")) returned 1 [0250.730] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1f30c2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1f30c2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1f30c2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="2503989003.pri", cAlternateFileName="250398~1.PRI")) returned 0 [0250.730] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0250.730] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1f30c2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1f30c2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690072, dwReserved1=0x790000, cFileName="559726144", cAlternateFileName="559726~1")) returned 0 [0250.730] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0250.730] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1ccb9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1ccb9c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x6c697270, cFileName="Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~2.0_N")) returned 0 [0250.731] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0250.731] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0250.731] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\ringtones\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333434, dwReserved1=0x6c697270, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0250.731] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333434, dwReserved1=0x6c697270, cFileName="..", cAlternateFileName="")) returned 1 [0250.731] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333434, dwReserved1=0x6c697270, cFileName="..", cAlternateFileName="")) returned 0 [0250.731] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0250.731] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="RoamingTiles", cAlternateFileName="ROAMIN~1")) returned 1 [0250.731] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\roamingtiles\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333434, dwReserved1=0x6c697270, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0250.732] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333434, dwReserved1=0x6c697270, cFileName="..", cAlternateFileName="")) returned 1 [0250.732] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333434, dwReserved1=0x6c697270, cFileName="..", cAlternateFileName="")) returned 0 [0250.732] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0250.732] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9586b313, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95891577, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x95891577, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="SettingSync", cAlternateFileName="SETTIN~1")) returned 1 [0250.732] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9586b313, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95891577, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x95891577, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333434, dwReserved1=0x6c697270, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0250.732] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9586b313, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95891577, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x95891577, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333434, dwReserved1=0x6c697270, cFileName="..", cAlternateFileName="")) returned 1 [0250.733] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95891577, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95f45f8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x95f45f8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333434, dwReserved1=0x6c697270, cFileName="metastore", cAlternateFileName="METAST~1")) returned 1 [0250.733] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95891577, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95f45f8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x96f11a4d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0250.735] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95891577, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95f45f8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x96f11a4d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e333030, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0250.735] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f45f8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95f45f8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x96a7325d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x2e333030, dwReserved1=0x24000a2e, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0250.735] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.735] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.736] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.736] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0250.736] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.chk")) returned 0x20 [0250.736] VirtualAlloc (lpAddress=0x21b4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21b4000 [0250.737] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.chk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.737] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.737] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.749] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.751] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.751] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.752] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.752] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.752] CloseHandle (hObject=0x1f4) returned 1 [0250.752] CloseHandle (hObject=0x1f0) returned 1 [0250.753] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.chk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0250.754] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0250.754] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.chk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f45f8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95f45f8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x96a7325d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb.chk", cAlternateFileName="")) returned 0x55e410 [0250.754] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95f45f8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95f45f8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x96a7325d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb.chk", cAlternateFileName="")) returned 0 [0250.754] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0250.755] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.chk")) returned 1 [0250.756] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.chk")) returned 0xffffffff [0250.756] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95891577, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95891577, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x982bd1ca, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="edb.log", cAlternateFileName="")) returned 1 [0250.757] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0250.757] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.757] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0250.757] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0250.757] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0250.757] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0250.757] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.log")) returned 0x20 [0250.758] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0250.758] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0250.759] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.771] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.773] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.774] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.775] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.775] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.775] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.775] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.776] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.776] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.776] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.777] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.777] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.777] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.777] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.778] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.778] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.779] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.779] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.780] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.780] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.780] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.780] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.780] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.781] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.781] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.783] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.783] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.784] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.784] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.784] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.784] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.785] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.785] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.785] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.786] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.786] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.799] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.800] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.800] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.800] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.801] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.801] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.801] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.801] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.801] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.802] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.802] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.802] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.803] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.803] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.803] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.803] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.804] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.804] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.804] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.804] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.805] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.805] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.805] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.805] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.805] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.806] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.806] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.806] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.806] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.806] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.807] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.807] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.807] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.808] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.808] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.808] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.808] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.808] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.809] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.809] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.809] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.809] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.809] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.811] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.811] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.811] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.812] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.812] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.812] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.812] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.812] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.813] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.813] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.813] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.813] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.813] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.814] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.814] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.815] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.815] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.815] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.815] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.816] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.816] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.816] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.816] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.816] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.817] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.817] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.817] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.818] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.818] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.818] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.818] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.818] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.819] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.819] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.819] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.820] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.820] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.821] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.821] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.821] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.821] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.821] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.822] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.822] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.822] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.822] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.822] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.823] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.823] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.823] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.823] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.823] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.824] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.824] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.824] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.824] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.824] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.825] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.825] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.825] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.829] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.829] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.829] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.829] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.829] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.830] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.830] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.830] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.830] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.830] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.831] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.831] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.831] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.831] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.832] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.832] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.832] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.832] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.832] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.833] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.833] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.833] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.834] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.834] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.834] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.834] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.835] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.835] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.835] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.836] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.836] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.836] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.837] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.837] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.837] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.837] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.837] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.838] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.838] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.838] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.839] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.839] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.839] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.839] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.839] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.840] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.840] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.840] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.841] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.841] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.841] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.841] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.841] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.842] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.842] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.842] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.842] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.843] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.843] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.843] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.843] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.843] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.844] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.844] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.844] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.844] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.844] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.845] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.845] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.845] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.845] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.845] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.846] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.846] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.846] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.846] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.847] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.847] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.847] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.847] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.847] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.848] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.848] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.848] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.848] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.848] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.849] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.849] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0250.850] ReadFile (in: hFile=0x1f0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.850] WriteFile (in: hFile=0x1f4, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0250.850] CloseHandle (hObject=0x1f0) returned 1 [0250.850] CloseHandle (hObject=0x1f4) returned 1 [0251.007] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.008] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.008] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95891577, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95891577, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x982bd1ca, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb.log", cAlternateFileName="")) returned 0x55e510 [0251.008] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95891577, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95891577, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x982bd1ca, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb.log", cAlternateFileName="")) returned 0 [0251.008] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0251.009] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.log")) returned 1 [0251.015] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edb.log")) returned 0xffffffff [0251.015] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e87635, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95e87635, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x95e87635, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0251.015] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e87635, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95e87635, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x95f1fdf9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x72006a, dwReserved1=0x73, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0251.016] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95891577, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95e613d6, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x96a7325d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x72006a, dwReserved1=0x73, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0251.016] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.016] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.016] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.016] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.017] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0251.017] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edbtmp.log")) returned 0x20 [0251.017] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edbtmp.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0251.018] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0251.018] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.021] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.024] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.024] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.024] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.025] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.025] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.026] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.026] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.026] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.026] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.027] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.027] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.027] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.027] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.028] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.028] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.028] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.029] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.029] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.029] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.029] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.030] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.038] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.038] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.039] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.039] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.039] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.039] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.040] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.040] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.040] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.041] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.041] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.041] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.041] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.042] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.042] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.042] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.043] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.043] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.043] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.043] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.044] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.044] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.044] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.045] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.045] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.045] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.045] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.046] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.046] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.046] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.047] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.047] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.047] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.047] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.047] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.048] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.048] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.048] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.048] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.048] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.049] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.049] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.049] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.049] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.050] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.050] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.050] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.050] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.050] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.051] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.051] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.052] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.053] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.053] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.053] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.053] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.054] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.054] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.054] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.054] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.055] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.055] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.055] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.055] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.055] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.056] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.056] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.056] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.056] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.056] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.057] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.057] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.057] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.057] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.057] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.058] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.058] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.058] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.059] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.059] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.059] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.059] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.060] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.060] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.061] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.061] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.062] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.062] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.062] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.062] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.063] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.063] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.063] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.063] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.063] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.064] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.064] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.064] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.064] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.064] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.065] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.065] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.065] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.066] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.066] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.066] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.066] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.067] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.067] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.068] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.068] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.069] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.069] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.069] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.081] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.081] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.081] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.082] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.082] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.082] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.082] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.082] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.083] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.084] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.084] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.084] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.085] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.085] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.085] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.085] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.086] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.086] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.086] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.086] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.086] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.087] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.087] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.087] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.088] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.088] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.088] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.088] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.088] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.089] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.089] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.089] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.090] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.090] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.090] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.090] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.090] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.091] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.091] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.091] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.091] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.091] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.092] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.092] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.092] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.092] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.093] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.093] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.093] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.094] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.095] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.095] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.096] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.096] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.096] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.097] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.097] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.097] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.098] ReadFile (in: hFile=0x1f4, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.098] WriteFile (in: hFile=0x1f0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.106] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edbtmp.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.106] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.106] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edbtmp.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95891577, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95e613d6, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x96a7325d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edbtmp.log", cAlternateFileName="")) returned 0x55e210 [0251.106] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95891577, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95e613d6, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x96a7325d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edbtmp.log", cAlternateFileName="")) returned 0 [0251.107] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0251.107] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edbtmp.log")) returned 1 [0251.113] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\edbtmp.log")) returned 0xffffffff [0251.113] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f11a4d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x96f11a4d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x982bd1ca, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="meta.edb", cAlternateFileName="")) returned 1 [0251.119] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.119] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.120] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.120] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.120] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.120] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0251.120] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS\\UPPS.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\upps\\upps.bin")) returned 0x20 [0251.120] VirtualAlloc (lpAddress=0x21b8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21b8000 [0251.121] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS\\UPPS.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\upps\\upps.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0251.121] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS\\UPPS.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\upps\\upps.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0251.126] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS\\UPPS.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\upps\\upps.bin"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS\\UPPS.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\upps\\upps.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.126] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS\\UPPS.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\upps\\upps.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.126] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS\\UPPS.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\upps\\upps.bin"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6820d400, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6820d400, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6890e1e2, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="UPPS.bin", cAlternateFileName="")) returned 0x55e490 [0251.127] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6820d400, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6820d400, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6890e1e2, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="UPPS.bin", cAlternateFileName="")) returned 0 [0251.127] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0251.127] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS\\UPPS.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\upps\\upps.bin")) returned 1 [0251.128] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS\\UPPS.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\upps\\upps.bin")) returned 0xffffffff [0251.128] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6820d400, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6820d400, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6890e1e2, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x730074, dwReserved1=0x78002e, cFileName="UPPS.bin", cAlternateFileName="")) returned 0 [0251.129] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0251.129] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x3d51879a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60944a5, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x60944a5, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x240000, dwReserved0=0xa000006e, dwReserved1=0x2e737475, cFileName="UsrClass.dat", cAlternateFileName="")) returned 1 [0251.129] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.129] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.129] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.129] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0251.130] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\usrclass.dat")) returned 0x22 [0251.131] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\usrclass.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0251.131] GetLastError () returned 0x20 [0251.131] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\usrclass.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d0 [0251.132] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\usrclass.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\usrclass.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.132] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\usrclass.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.132] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\usrclass.dat"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x3d51879a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60944a5, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x60944a5, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x240000, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="UsrClass.dat", cAlternateFileName="")) returned 0x55e710 [0251.132] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x3d51879a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60944a5, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x60944a5, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x240000, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="UsrClass.dat", cAlternateFileName="")) returned 0 [0251.132] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0251.133] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\usrclass.dat")) returned 0 [0251.133] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\usrclass.dat")) returned 0x22 [0251.133] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d51879a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d51879a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d51879a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x70000, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="UsrClass.dat.LOG1", cAlternateFileName="USRCLA~1.LOG")) returned 1 [0251.134] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d51879a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d51879a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d51879a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="UsrClass.dat.LOG2", cAlternateFileName="USRCLA~2.LOG")) returned 1 [0251.134] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d51879a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d51879a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6345aa97, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="UsrClass.dat{6c1df322-6c5b-11eb-b0a5-00053a318d5c}.TM.blf", cAlternateFileName="USRCLA~1.BLF")) returned 1 [0251.135] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d53e9ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d53e9ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63434853, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x36007b, dwReserved1=0x310063, cFileName="UsrClass.dat{6c1df322-6c5b-11eb-b0a5-00053a318d5c}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="USRCLA~1.REG")) returned 1 [0251.137] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d564ab0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d564ab0, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6345aa97, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x36007b, dwReserved1=0x310063, cFileName="UsrClass.dat{6c1df322-6c5b-11eb-b0a5-00053a318d5c}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="USRCLA~2.REG")) returned 1 [0251.138] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3f28d414, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2b5184a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b5184a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x36007b, dwReserved1=0x310063, cFileName="WebCache", cAlternateFileName="")) returned 1 [0251.138] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3f28d414, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2b5184a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b5184a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0251.139] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3f28d414, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2b5184a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b5184a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0251.139] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43a75b6d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43a75b6d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3521c953, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="V01.chk", cAlternateFileName="")) returned 1 [0251.139] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.139] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.139] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.139] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0251.139] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk")) returned 0x2020 [0251.140] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0251.140] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0251.140] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.142] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.143] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.143] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.143] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.143] WriteFile (in: hFile=0x1f4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.144] CloseHandle (hObject=0x1f8) returned 1 [0251.144] CloseHandle (hObject=0x1f4) returned 1 [0251.147] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.148] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0251.148] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43a75b6d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43a75b6d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3521c953, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="V01.chk", cAlternateFileName="")) returned 0x55e510 [0251.148] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43a75b6d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43a75b6d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3521c953, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="V01.chk", cAlternateFileName="")) returned 0 [0251.149] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0251.149] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk")) returned 1 [0251.152] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk")) returned 0xffffffff [0251.152] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x438f835d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xc847278b, ftLastWriteTime.dwHighDateTime=0x1d87c96, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="V01.log", cAlternateFileName="")) returned 1 [0251.153] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.153] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.153] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.153] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0251.154] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.log")) returned 0x2020 [0251.154] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0251.154] GetLastError () returned 0x20 [0251.154] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f4 [0251.155] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.155] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0251.155] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.log"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x438f835d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xc847278b, ftLastWriteTime.dwHighDateTime=0x1d87c96, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="V01.log", cAlternateFileName="")) returned 0x55e8d0 [0251.156] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x438f835d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xc847278b, ftLastWriteTime.dwHighDateTime=0x1d87c96, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="V01.log", cAlternateFileName="")) returned 0 [0251.156] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0251.156] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.log")) returned 0 [0251.156] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01.log")) returned 0x2020 [0251.156] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x440ceb34, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2b5184a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="V0100006.log", cAlternateFileName="")) returned 1 [0251.157] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.157] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.157] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.157] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0251.157] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V0100006.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v0100006.log")) returned 0x2020 [0251.157] VirtualAlloc (lpAddress=0x21bc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21bc000 [0251.158] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V0100006.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v0100006.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0251.158] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V0100006.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v0100006.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0251.159] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.160] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.161] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.161] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.162] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.162] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.162] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.162] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.162] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.162] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.163] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.163] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.163] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.163] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.163] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.163] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.164] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.164] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.164] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.164] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.164] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.164] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.165] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.165] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.165] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.165] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.165] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.165] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.166] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.166] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.166] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.166] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.166] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.166] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.167] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.167] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.167] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.167] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.167] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.167] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.167] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.168] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.168] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.168] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.168] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.168] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.168] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.169] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.169] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.169] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.169] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.169] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.170] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.170] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.170] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.170] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.170] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.170] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.171] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.171] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.171] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.171] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.171] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.172] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.172] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.172] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.172] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.172] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.173] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.173] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.173] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.173] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.173] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.173] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.173] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.174] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.174] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.174] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.174] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.174] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.174] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.175] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.175] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.175] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.175] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.175] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.175] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.176] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.176] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.176] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.176] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.176] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.176] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.177] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.210] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.210] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.210] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.210] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.211] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.211] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.211] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.211] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.211] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.212] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.212] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.212] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.212] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.212] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.213] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.213] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.213] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.213] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.213] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.213] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.214] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.214] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.214] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.214] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.214] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.214] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.215] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.215] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.215] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.215] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.215] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.215] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.216] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.216] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.216] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.217] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.218] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.218] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.218] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.218] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.219] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.219] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.219] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.219] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.219] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.219] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.220] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.220] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.220] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.220] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.220] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.220] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.221] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.221] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.221] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.221] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.221] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.222] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.222] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.222] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.222] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.222] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.222] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.223] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.223] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.223] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.223] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.223] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.223] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.224] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.224] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.224] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.224] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.224] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.224] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.225] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.225] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.225] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.225] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.225] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.225] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.226] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.226] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.226] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.226] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.226] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.226] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.227] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.227] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.227] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.227] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.227] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.227] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.228] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.228] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.228] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.228] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.228] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.228] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.229] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.229] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.229] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.229] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.229] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.229] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.230] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.230] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.230] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.230] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.230] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.230] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.231] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.231] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.231] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.231] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.231] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.231] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.231] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.232] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.232] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.232] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.232] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.232] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.232] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.233] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.233] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.233] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.233] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.233] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.233] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.234] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.234] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.234] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.234] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.234] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.234] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.235] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.235] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.235] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.235] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.235] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.236] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.236] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.236] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.236] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.236] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.237] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.237] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.237] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.237] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.237] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.238] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.238] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.238] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.238] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.238] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.238] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.239] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.239] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.239] ReadFile (in: hFile=0x1f8, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.239] WriteFile (in: hFile=0x1e4, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.239] CloseHandle (hObject=0x1f8) returned 1 [0251.240] CloseHandle (hObject=0x1e4) returned 1 [0251.288] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V0100006.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v0100006.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V0100006.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v0100006.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.288] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V0100006.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v0100006.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0251.289] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V0100006.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v0100006.log"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x440ceb34, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2b5184a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="V0100006.log", cAlternateFileName="")) returned 0x55e5d0 [0251.289] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x440ceb34, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2b5184a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="V0100006.log", cAlternateFileName="")) returned 0 [0251.289] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0251.289] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V0100006.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v0100006.log")) returned 1 [0251.296] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V0100006.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v0100006.log")) returned 0xffffffff [0251.296] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43a0363d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43a0363d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43a75b6d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="V01res00001.jrs", cAlternateFileName="V01RES~1.JRS")) returned 1 [0251.297] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43a75b6d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43a75b6d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43a75b6d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x72006a, dwReserved1=0x73, cFileName="V01res00002.jrs", cAlternateFileName="V01RES~2.JRS")) returned 1 [0251.297] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x438f835d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x7a5fe247, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x72006a, dwReserved1=0x73, cFileName="V01tmp.log", cAlternateFileName="")) returned 1 [0251.298] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.298] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.298] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.298] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0251.298] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log")) returned 0x2020 [0251.299] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0251.299] GetLastError () returned 0x20 [0251.299] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4 [0251.300] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.300] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0251.300] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x438f835d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x7a5fe247, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="V01tmp.log", cAlternateFileName="")) returned 0x55e8d0 [0251.300] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x438f835d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x7a5fe247, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="V01tmp.log", cAlternateFileName="")) returned 0 [0251.301] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0251.301] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log")) returned 0 [0251.301] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log")) returned 0x2020 [0251.301] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ae82a9, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43ae82a9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x12f45133, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1980000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="WebCacheV01.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 1 [0251.301] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.301] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.302] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.302] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.302] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.302] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0251.302] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat")) returned 0x2020 [0251.302] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0251.302] GetLastError () returned 0x20 [0251.302] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0251.303] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.303] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0251.303] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ae82a9, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43ae82a9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x12f45133, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1980000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="WebCacheV01.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 0x55e390 [0251.303] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ae82a9, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43ae82a9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x12f45133, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1980000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="WebCacheV01.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 0 [0251.303] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0251.304] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat")) returned 0 [0251.304] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat")) returned 0x2020 [0251.304] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ae82a9, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43ae82a9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x12f45133, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1980000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="WebCacheV01.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 0 [0251.304] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0251.304] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3f28d414, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f28d414, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3f28d414, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31305665, dwReserved1=0x7461642e, cFileName="WebCacheLock.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 1 [0251.304] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.304] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.304] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.304] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0251.305] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcachelock.dat")) returned 0x26 [0251.305] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcachelock.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0251.305] GetLastError () returned 0x20 [0251.305] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcachelock.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f0 [0251.305] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcachelock.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcachelock.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.305] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcachelock.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.305] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcachelock.dat"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3f28d414, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f28d414, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3f28d414, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="WebCacheLock.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 0x55e8d0 [0251.305] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3f28d414, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f28d414, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3f28d414, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="WebCacheLock.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 0 [0251.306] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0251.306] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcachelock.dat")) returned 0 [0251.306] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcachelock.dat")) returned 0x26 [0251.306] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="WinX", cAlternateFileName="")) returned 1 [0251.306] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0251.306] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0251.306] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1d13ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName="Group1", cAlternateFileName="")) returned 1 [0251.306] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1d13ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0251.306] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1d13ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf686326, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.306] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0xa, dwReserved1=0x24000a2e, cFileName="1 - Desktop.lnk", cAlternateFileName="1-DESK~1.LNK")) returned 1 [0251.307] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.307] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.307] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.307] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.307] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.307] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0251.307] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk")) returned 0x20 [0251.307] VirtualAlloc (lpAddress=0x21c0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21c0000 [0251.308] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.308] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.308] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0251.310] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x455, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0251.311] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.311] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.312] CloseHandle (hObject=0x204) returned 1 [0251.312] CloseHandle (hObject=0x208) returned 1 [0251.312] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.312] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.312] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="1 - Desktop.lnk", cAlternateFileName="1-DESK~1.LNK")) returned 0x55e5d0 [0251.312] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="1 - Desktop.lnk", cAlternateFileName="1-DESK~1.LNK")) returned 0 [0251.313] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0251.313] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk")) returned 1 [0251.314] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk")) returned 0xffffffff [0251.314] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0251.314] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.314] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.314] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.314] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0251.314] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini")) returned 0x26 [0251.317] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.317] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.324] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x51, lpOverlapped=0x0) returned 1 [0251.325] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x51, lpOverlapped=0x0) returned 1 [0251.326] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.326] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.326] CloseHandle (hObject=0x208) returned 1 [0251.326] CloseHandle (hObject=0x204) returned 1 [0251.327] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.327] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.327] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e2d0 [0251.327] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0251.327] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0251.328] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini")) returned 1 [0251.329] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini")) returned 0xffffffff [0251.329] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0251.329] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0251.329] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1ab059, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6b6e6c2e, cFileName="Group2", cAlternateFileName="")) returned 1 [0251.329] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1ab059, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0251.331] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1ab059, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0251.331] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="1 - Run.lnk", cAlternateFileName="1-RUN~1.LNK")) returned 1 [0251.331] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.331] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.331] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.331] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.332] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0251.332] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk")) returned 0x20 [0251.332] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.332] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.333] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0251.334] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x455, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0251.335] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.335] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.336] CloseHandle (hObject=0x204) returned 1 [0251.336] CloseHandle (hObject=0x208) returned 1 [0251.336] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.336] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.336] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="1 - Run.lnk", cAlternateFileName="1-RUN~1.LNK")) returned 0x55e490 [0251.337] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d15ec85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="1 - Run.lnk", cAlternateFileName="1-RUN~1.LNK")) returned 0 [0251.337] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0251.337] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk")) returned 1 [0251.338] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk")) returned 0xffffffff [0251.338] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="2 - Search.lnk", cAlternateFileName="2-SEAR~1.LNK")) returned 1 [0251.338] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.338] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.338] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.338] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.338] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.338] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0251.339] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk")) returned 0x20 [0251.339] VirtualAlloc (lpAddress=0x21c4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21c4000 [0251.339] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.339] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.340] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0251.343] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x455, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0251.344] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.344] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.344] CloseHandle (hObject=0x208) returned 1 [0251.344] CloseHandle (hObject=0x204) returned 1 [0251.345] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.345] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.345] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="2 - Search.lnk", cAlternateFileName="2-SEAR~1.LNK")) returned 0x55e510 [0251.345] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="2 - Search.lnk", cAlternateFileName="2-SEAR~1.LNK")) returned 0 [0251.345] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0251.346] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk")) returned 1 [0251.347] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk")) returned 0xffffffff [0251.347] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="3 - Windows Explorer.lnk", cAlternateFileName="3-WIND~1.LNK")) returned 1 [0251.347] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.347] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.347] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.347] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0251.347] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk")) returned 0x20 [0251.348] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.348] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.348] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0251.350] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x455, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x455, lpOverlapped=0x0) returned 1 [0251.352] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.352] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.352] CloseHandle (hObject=0x204) returned 1 [0251.352] CloseHandle (hObject=0x208) returned 1 [0251.352] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.353] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.353] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="3 - Windows Explorer.lnk", cAlternateFileName="3-WIND~1.LNK")) returned 0x55e410 [0251.353] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="3 - Windows Explorer.lnk", cAlternateFileName="3-WIND~1.LNK")) returned 0 [0251.353] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0251.353] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk")) returned 1 [0251.354] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk")) returned 0xffffffff [0251.354] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="4 - Control Panel.lnk", cAlternateFileName="4-CONT~1.LNK")) returned 1 [0251.355] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.355] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.355] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.355] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.355] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.355] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0251.355] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk")) returned 0x20 [0251.356] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.356] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.357] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0251.358] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0251.359] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.359] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.359] CloseHandle (hObject=0x208) returned 1 [0251.359] CloseHandle (hObject=0x204) returned 1 [0251.360] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.360] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.360] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="4 - Control Panel.lnk", cAlternateFileName="4-CONT~1.LNK")) returned 0x55e5d0 [0251.360] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d138a8d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d138a8d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="4 - Control Panel.lnk", cAlternateFileName="4-CONT~1.LNK")) returned 0 [0251.360] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0251.360] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk")) returned 1 [0251.361] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk")) returned 0xffffffff [0251.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="5 - Task Manager.lnk", cAlternateFileName="5-TASK~1.LNK")) returned 1 [0251.362] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.362] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.362] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.362] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.362] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.362] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0251.362] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk")) returned 0x20 [0251.363] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.363] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.363] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3fd, lpOverlapped=0x0) returned 1 [0251.368] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3fd, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3fd, lpOverlapped=0x0) returned 1 [0251.369] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.369] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.369] CloseHandle (hObject=0x204) returned 1 [0251.369] CloseHandle (hObject=0x208) returned 1 [0251.370] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.370] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.370] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="5 - Task Manager.lnk", cAlternateFileName="5-TASK~1.LNK")) returned 0x55e710 [0251.370] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="5 - Task Manager.lnk", cAlternateFileName="5-TASK~1.LNK")) returned 0 [0251.371] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0251.371] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk")) returned 1 [0251.372] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk")) returned 0xffffffff [0251.372] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0251.372] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.372] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.372] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.372] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0251.373] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini")) returned 0x26 [0251.373] VirtualAlloc (lpAddress=0x21c8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21c8000 [0251.373] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.373] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.374] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x14c, lpOverlapped=0x0) returned 1 [0251.375] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x14c, lpOverlapped=0x0) returned 1 [0251.376] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.376] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.376] CloseHandle (hObject=0x208) returned 1 [0251.376] CloseHandle (hObject=0x204) returned 1 [0251.376] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.377] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.377] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e8d0 [0251.377] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0251.377] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0251.377] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini")) returned 1 [0251.378] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini")) returned 0xffffffff [0251.378] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0251.378] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0251.378] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6567616e, cFileName="Group3", cAlternateFileName="")) returned 1 [0251.378] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0251.380] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0251.380] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="01 - Command Prompt.lnk", cAlternateFileName="01-COM~1.LNK")) returned 1 [0251.380] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.381] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.381] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.381] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.381] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.381] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0251.381] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk")) returned 0x20 [0251.381] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.381] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.382] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0251.383] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0251.384] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.384] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.384] CloseHandle (hObject=0x204) returned 1 [0251.385] CloseHandle (hObject=0x208) returned 1 [0251.385] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.385] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.385] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="01 - Command Prompt.lnk", cAlternateFileName="01-COM~1.LNK")) returned 0x55e710 [0251.385] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="01 - Command Prompt.lnk", cAlternateFileName="01-COM~1.LNK")) returned 0 [0251.386] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0251.386] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk")) returned 1 [0251.387] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk")) returned 0xffffffff [0251.387] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="01a - Windows PowerShell.lnk", cAlternateFileName="01A-WI~1.LNK")) returned 1 [0251.387] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.387] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.387] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.387] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0251.387] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk")) returned 0x20 [0251.388] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.388] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.389] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x467, lpOverlapped=0x0) returned 1 [0251.390] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x467, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x467, lpOverlapped=0x0) returned 1 [0251.391] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.391] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.391] CloseHandle (hObject=0x208) returned 1 [0251.391] CloseHandle (hObject=0x204) returned 1 [0251.392] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.392] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.392] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x550340, dwReserved1=0x6, cFileName="01a - Windows PowerShell.lnk", cAlternateFileName="01A-WI~1.LNK")) returned 0x55e1d0 [0251.392] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d11281b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d11281b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x550340, dwReserved1=0x6, cFileName="01a - Windows PowerShell.lnk", cAlternateFileName="01A-WI~1.LNK")) returned 0 [0251.392] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0251.392] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk")) returned 1 [0251.393] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk")) returned 0xffffffff [0251.394] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="02 - Command Prompt.lnk", cAlternateFileName="02-COM~1.LNK")) returned 1 [0251.394] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.394] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.394] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.394] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0251.394] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk")) returned 0x20 [0251.394] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.395] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.395] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x423, lpOverlapped=0x0) returned 1 [0251.397] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x423, lpOverlapped=0x0) returned 1 [0251.398] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.398] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.398] CloseHandle (hObject=0x204) returned 1 [0251.398] CloseHandle (hObject=0x208) returned 1 [0251.398] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.399] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.399] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="02 - Command Prompt.lnk", cAlternateFileName="02-COM~1.LNK")) returned 0x55e7d0 [0251.399] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="02 - Command Prompt.lnk", cAlternateFileName="02-COM~1.LNK")) returned 0 [0251.399] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0251.399] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk")) returned 1 [0251.400] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk")) returned 0xffffffff [0251.400] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="02a - Windows PowerShell.lnk", cAlternateFileName="02A-WI~1.LNK")) returned 1 [0251.401] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.401] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.401] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.401] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.401] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.401] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0251.401] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk")) returned 0x20 [0251.401] VirtualAlloc (lpAddress=0x21cc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21cc000 [0251.402] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.402] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.402] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x493, lpOverlapped=0x0) returned 1 [0251.406] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x493, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x493, lpOverlapped=0x0) returned 1 [0251.407] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.407] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.407] CloseHandle (hObject=0x208) returned 1 [0251.407] CloseHandle (hObject=0x204) returned 1 [0251.408] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.408] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.408] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x550340, dwReserved1=0x6, cFileName="02a - Windows PowerShell.lnk", cAlternateFileName="02A-WI~1.LNK")) returned 0x55e8d0 [0251.408] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x550340, dwReserved1=0x6, cFileName="02a - Windows PowerShell.lnk", cAlternateFileName="02A-WI~1.LNK")) returned 0 [0251.408] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0251.408] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk")) returned 1 [0251.409] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk")) returned 0xffffffff [0251.409] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="03 - Computer Management.lnk", cAlternateFileName="03-COM~1.LNK")) returned 1 [0251.410] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.410] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.410] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.410] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0251.410] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk")) returned 0x20 [0251.411] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.411] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.412] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0251.415] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0251.416] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.416] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.416] CloseHandle (hObject=0x204) returned 1 [0251.416] CloseHandle (hObject=0x208) returned 1 [0251.417] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.417] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.417] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x550340, dwReserved1=0x6, cFileName="03 - Computer Management.lnk", cAlternateFileName="03-COM~1.LNK")) returned 0x55e490 [0251.417] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ec645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0ec645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x550340, dwReserved1=0x6, cFileName="03 - Computer Management.lnk", cAlternateFileName="03-COM~1.LNK")) returned 0 [0251.417] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0251.417] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk")) returned 1 [0251.418] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk")) returned 0xffffffff [0251.418] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="04 - Disk Management.lnk", cAlternateFileName="04-DIS~1.LNK")) returned 1 [0251.419] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.419] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.419] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.419] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0251.419] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk")) returned 0x20 [0251.420] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.420] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.422] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0251.424] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0251.425] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.425] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.425] CloseHandle (hObject=0x208) returned 1 [0251.425] CloseHandle (hObject=0x204) returned 1 [0251.425] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.426] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.426] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="04 - Disk Management.lnk", cAlternateFileName="04-DIS~1.LNK")) returned 0x55e490 [0251.426] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="04 - Disk Management.lnk", cAlternateFileName="04-DIS~1.LNK")) returned 0 [0251.426] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0251.426] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk")) returned 1 [0251.427] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk")) returned 0xffffffff [0251.427] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="04-1 - Network Connections.lnk", cAlternateFileName="04-1-N~1.LNK")) returned 1 [0251.428] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.428] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.428] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.428] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0251.428] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk")) returned 0x20 [0251.428] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.429] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.429] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x449, lpOverlapped=0x0) returned 1 [0251.431] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x449, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x449, lpOverlapped=0x0) returned 1 [0251.432] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.432] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.432] CloseHandle (hObject=0x204) returned 1 [0251.432] CloseHandle (hObject=0x208) returned 1 [0251.432] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.433] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.433] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x550370, dwReserved1=0x11, cFileName="04-1 - Network Connections.lnk", cAlternateFileName="04-1-N~1.LNK")) returned 0x55e210 [0251.433] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x550370, dwReserved1=0x11, cFileName="04-1 - Network Connections.lnk", cAlternateFileName="04-1-N~1.LNK")) returned 0 [0251.433] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0251.433] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk")) returned 1 [0251.435] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk")) returned 0xffffffff [0251.435] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="05 - Device Manager.lnk", cAlternateFileName="05-DEV~1.LNK")) returned 1 [0251.435] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.435] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.435] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.435] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0251.436] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk")) returned 0x20 [0251.436] VirtualAlloc (lpAddress=0x21d0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21d0000 [0251.436] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.436] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.437] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x433, lpOverlapped=0x0) returned 1 [0251.438] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x433, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x433, lpOverlapped=0x0) returned 1 [0251.439] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.439] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.439] CloseHandle (hObject=0x208) returned 1 [0251.439] CloseHandle (hObject=0x204) returned 1 [0251.440] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.440] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.440] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="05 - Device Manager.lnk", cAlternateFileName="05-DEV~1.LNK")) returned 0x55e7d0 [0251.440] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="05 - Device Manager.lnk", cAlternateFileName="05-DEV~1.LNK")) returned 0 [0251.441] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0251.441] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk")) returned 1 [0251.442] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk")) returned 0xffffffff [0251.442] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="06 - System.lnk", cAlternateFileName="06-SYS~1.LNK")) returned 1 [0251.443] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.443] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.444] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.444] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.444] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.444] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0251.444] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk")) returned 0x20 [0251.444] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.444] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.445] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x425, lpOverlapped=0x0) returned 1 [0251.446] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x425, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x425, lpOverlapped=0x0) returned 1 [0251.447] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.447] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.447] CloseHandle (hObject=0x204) returned 1 [0251.447] CloseHandle (hObject=0x208) returned 1 [0251.448] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.448] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.448] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="06 - System.lnk", cAlternateFileName="06-SYS~1.LNK")) returned 0x55e5d0 [0251.448] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0c63cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="06 - System.lnk", cAlternateFileName="06-SYS~1.LNK")) returned 0 [0251.448] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0251.448] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk")) returned 1 [0251.449] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk")) returned 0xffffffff [0251.449] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d09ff7f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d09ff7f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="07 - Event Viewer.lnk", cAlternateFileName="07-EVE~1.LNK")) returned 1 [0251.450] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.450] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.450] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.450] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.450] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.450] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0251.450] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk")) returned 0x20 [0251.451] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.451] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.451] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0251.453] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0251.454] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.454] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.454] CloseHandle (hObject=0x208) returned 1 [0251.454] CloseHandle (hObject=0x204) returned 1 [0251.454] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.455] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.455] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d09ff7f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d09ff7f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="07 - Event Viewer.lnk", cAlternateFileName="07-EVE~1.LNK")) returned 0x55e5d0 [0251.455] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d09ff7f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d09ff7f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="07 - Event Viewer.lnk", cAlternateFileName="07-EVE~1.LNK")) returned 0 [0251.455] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0251.455] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk")) returned 1 [0251.456] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk")) returned 0xffffffff [0251.456] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d09ff7f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d09ff7f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="08 - Power Options.lnk", cAlternateFileName="08-POW~1.LNK")) returned 1 [0251.456] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.456] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.457] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.457] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0251.457] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk")) returned 0x20 [0251.457] VirtualAlloc (lpAddress=0x21d4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21d4000 [0251.457] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.458] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.458] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x431, lpOverlapped=0x0) returned 1 [0251.461] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x431, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x431, lpOverlapped=0x0) returned 1 [0251.462] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.462] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.462] CloseHandle (hObject=0x204) returned 1 [0251.462] CloseHandle (hObject=0x208) returned 1 [0251.463] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.463] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.463] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d09ff7f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d09ff7f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="08 - Power Options.lnk", cAlternateFileName="08-POW~1.LNK")) returned 0x55e610 [0251.463] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d09ff7f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d09ff7f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="08 - Power Options.lnk", cAlternateFileName="08-POW~1.LNK")) returned 0 [0251.463] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0251.463] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk")) returned 1 [0251.464] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk")) returned 0xffffffff [0251.464] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="09 - Mobility Center.lnk", cAlternateFileName="09-MOB~1.LNK")) returned 1 [0251.465] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.465] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.465] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.465] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0251.465] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk")) returned 0x20 [0251.465] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.466] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.466] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0251.468] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3f7, lpOverlapped=0x0) returned 1 [0251.469] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.469] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.469] CloseHandle (hObject=0x208) returned 1 [0251.469] CloseHandle (hObject=0x204) returned 1 [0251.469] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.470] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.470] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="09 - Mobility Center.lnk", cAlternateFileName="09-MOB~1.LNK")) returned 0x55e490 [0251.470] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="09 - Mobility Center.lnk", cAlternateFileName="09-MOB~1.LNK")) returned 0 [0251.470] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0251.470] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk")) returned 1 [0251.471] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk")) returned 0xffffffff [0251.471] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="10 - Programs and Features.lnk", cAlternateFileName="10-PRO~1.LNK")) returned 1 [0251.471] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.471] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.472] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.472] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.472] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0251.472] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk")) returned 0x20 [0251.472] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.472] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.473] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x43f, lpOverlapped=0x0) returned 1 [0251.474] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x43f, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x43f, lpOverlapped=0x0) returned 1 [0251.475] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.475] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.475] CloseHandle (hObject=0x204) returned 1 [0251.475] CloseHandle (hObject=0x208) returned 1 [0251.476] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.476] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.476] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x550370, dwReserved1=0x11, cFileName="10 - Programs and Features.lnk", cAlternateFileName="10-PRO~1.LNK")) returned 0x55e710 [0251.476] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x550370, dwReserved1=0x11, cFileName="10 - Programs and Features.lnk", cAlternateFileName="10-PRO~1.LNK")) returned 0 [0251.476] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0251.477] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk")) returned 1 [0251.478] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk")) returned 0xffffffff [0251.478] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0251.478] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.478] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.478] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.478] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0251.478] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini")) returned 0x26 [0251.479] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.479] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.479] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x3bb, lpOverlapped=0x0) returned 1 [0251.482] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x3bb, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x3bb, lpOverlapped=0x0) returned 1 [0251.483] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.483] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.483] CloseHandle (hObject=0x208) returned 1 [0251.483] CloseHandle (hObject=0x204) returned 1 [0251.484] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.484] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.484] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e390 [0251.484] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0251.484] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0251.484] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini")) returned 1 [0251.486] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini")) returned 0xffffffff [0251.486] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d079d10, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d079d10, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0251.486] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0251.486] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d15ec85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xf639e71, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6567616e, cFileName="Group3", cAlternateFileName="")) returned 0 [0251.486] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0251.486] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="WinX", cAlternateFileName="")) returned 0 [0251.486] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0251.486] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87ca06a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x636f4c65, dwReserved1=0x61642e6b, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1 [0251.486] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows live\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87ca06a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0251.487] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87ca06a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0251.487] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Bici", cAlternateFileName="")) returned 1 [0251.487] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows live\\bici\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6120736d, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0251.487] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6120736d, cFileName="..", cAlternateFileName="")) returned 1 [0251.487] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6120736d, cFileName="..", cAlternateFileName="")) returned 0 [0251.487] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0251.487] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Bici", cAlternateFileName="")) returned 0 [0251.487] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0251.487] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x636f4c65, dwReserved1=0x61642e6b, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0251.487] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0251.488] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0251.488] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0251.488] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6120736d, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0251.488] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6120736d, cFileName="..", cAlternateFileName="")) returned 1 [0251.488] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x6120736d, cFileName="..", cAlternateFileName="")) returned 0 [0251.488] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0251.488] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d053a9f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d053a9f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0251.488] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.488] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.489] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.489] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0251.489] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\settings.ini")) returned 0x20 [0251.489] VirtualAlloc (lpAddress=0x21d8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21d8000 [0251.490] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.490] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0251.490] ReadFile (in: hFile=0x1fc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x50, lpOverlapped=0x0) returned 1 [0251.491] WriteFile (in: hFile=0x200, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x50, lpOverlapped=0x0) returned 1 [0251.492] ReadFile (in: hFile=0x1fc, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0251.492] WriteFile (in: hFile=0x200, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0251.492] CloseHandle (hObject=0x1fc) returned 1 [0251.492] CloseHandle (hObject=0x200) returned 1 [0251.493] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.493] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.493] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d053a9f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d053a9f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="settings.ini", cAlternateFileName="")) returned 0x55e310 [0251.493] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d053a9f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d053a9f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="settings.ini", cAlternateFileName="")) returned 0 [0251.493] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0251.494] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\settings.ini")) returned 1 [0251.495] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\settings.ini")) returned 0xffffffff [0251.495] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d053a9f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d053a9f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="settings.ini", cAlternateFileName="")) returned 0 [0251.495] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0251.495] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d0c63cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x377dee7, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x636f4c65, dwReserved1=0x61642e6b, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0251.495] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0251.495] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b344cd, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64695320, dwReserved1=0x72616265, cFileName="Microsoft Help", cAlternateFileName="MICROS~3")) returned 1 [0251.495] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft Help\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft help\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b344cd, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e73, dwReserved1=0x61642e69, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0251.496] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b344cd, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e73, dwReserved1=0x61642e69, cFileName="..", cAlternateFileName="")) returned 1 [0251.496] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b344cd, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e73, dwReserved1=0x61642e69, cFileName="..", cAlternateFileName="")) returned 0 [0251.496] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0251.496] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64695320, dwReserved1=0x72616265, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1 [0251.496] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4278a87, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e73, dwReserved1=0x61642e69, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0251.496] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4278a87, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e73, dwReserved1=0x61642e69, cFileName="..", cAlternateFileName="")) returned 1 [0251.496] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4278a87, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e73, dwReserved1=0x61642e69, cFileName="SharedCacheContainers", cAlternateFileName="SHARED~1")) returned 1 [0251.496] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x435d739, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0251.497] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x435d739, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0251.497] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4278a87, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="MicrosoftEdge_iecompat", cAlternateFileName="MICROS~1")) returned 1 [0251.497] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4278a87, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0251.497] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4278a87, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 1 [0251.497] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4278a87, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0251.497] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.497] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.497] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.497] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0251.497] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat")) returned 0x2026 [0251.498] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.498] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.498] ReadFile (in: hFile=0x1fc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.498] WriteFile (in: hFile=0x204, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.498] CloseHandle (hObject=0x1fc) returned 1 [0251.499] CloseHandle (hObject=0x204) returned 1 [0251.499] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.499] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0251.499] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4278a87, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e190 [0251.499] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4278a87, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0251.500] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0251.500] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat")) returned 1 [0251.500] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat")) returned 0xffffffff [0251.500] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4278a87, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0251.500] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0251.504] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x435d739, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43f61d3, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43f61d3, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x2007461, cFileName="MicrosoftEdge_iecompatua", cAlternateFileName="MICROS~2")) returned 1 [0251.504] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x435d739, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43f61d3, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43f61d3, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0251.505] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x435d739, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43f61d3, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43f61d3, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0251.505] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x43f61d3, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43f61d3, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43f61d3, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0251.505] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.505] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.505] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.505] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.505] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.506] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0251.506] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat")) returned 0x2026 [0251.506] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.506] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.510] ReadFile (in: hFile=0x204, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.510] WriteFile (in: hFile=0x1fc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.510] CloseHandle (hObject=0x204) returned 1 [0251.510] CloseHandle (hObject=0x1fc) returned 1 [0251.510] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.511] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0251.511] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x43f61d3, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43f61d3, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43f61d3, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e8d0 [0251.511] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x43f61d3, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43f61d3, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43f61d3, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0251.511] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0251.511] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat")) returned 1 [0251.512] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat")) returned 0xffffffff [0251.512] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x43f61d3, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43f61d3, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43f61d3, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0251.512] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0251.512] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x435d739, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43f61d3, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43f61d3, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x2007461, cFileName="MicrosoftEdge_iecompatua", cAlternateFileName="MICROS~2")) returned 0 [0251.512] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0251.512] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4278a87, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e692e73, dwReserved1=0x61642e69, cFileName="SharedCacheContainers", cAlternateFileName="SHARED~1")) returned 0 [0251.512] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0251.512] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xddb04c43, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xddb04c43, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65686361, dwReserved1=0x746e6f43, cFileName="Packages", cAlternateFileName="")) returned 1 [0251.512] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xdecc0441, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdecc0441, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64457466, dwReserved1=0x695f6567, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0251.513] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xdecc0441, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdecc0441, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64457466, dwReserved1=0x695f6567, cFileName="..", cAlternateFileName="")) returned 1 [0251.513] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64457466, dwReserved1=0x695f6567, cFileName="Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy", cAlternateFileName="MICROS~1.BRO")) returned 1 [0251.513] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x23000c2f, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0251.513] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 1 [0251.513] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x23000c2f, cFileName="AC", cAlternateFileName="")) returned 1 [0251.513] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0251.514] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 1 [0251.514] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0251.515] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0251.516] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.516] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.516] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0251.516] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0251.517] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0251.517] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.517] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.517] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0251.518] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0251.518] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0251.518] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.518] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.518] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0251.518] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="Temp", cAlternateFileName="")) returned 1 [0251.518] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0251.518] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.519] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.519] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0251.519] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="Temp", cAlternateFileName="")) returned 0 [0251.519] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0251.519] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547933c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x23000c2f, cFileName="AppData", cAlternateFileName="")) returned 1 [0251.519] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547933c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0251.519] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547933c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 1 [0251.519] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547933c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 0 [0251.519] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0251.519] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5476d1ac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x23000c2f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0251.519] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5476d1ac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0251.520] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5476d1ac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 1 [0251.520] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5476d1ac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 0 [0251.521] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0251.521] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54746ebf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54746ebf, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x23000c2f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0251.521] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54746ebf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54746ebf, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0251.521] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54746ebf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54746ebf, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 1 [0251.521] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54746ebf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54746ebf, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 0 [0251.521] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0251.521] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x23000c2f, cFileName="Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0251.521] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0251.522] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 1 [0251.522] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0251.522] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0251.535] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.535] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54936dab, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54936dab, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0251.535] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.535] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.535] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.536] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0251.536] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0251.537] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.538] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.539] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.541] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.543] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.543] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.543] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.544] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.544] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.544] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.544] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.544] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.544] CloseHandle (hObject=0x204) returned 1 [0251.544] CloseHandle (hObject=0x208) returned 1 [0251.546] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.547] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.547] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54936dab, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54936dab, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x554c0c, dwReserved1=0xc2, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e7d0 [0251.547] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54936dab, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54936dab, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x554c0c, dwReserved1=0xc2, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0251.547] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0251.548] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 1 [0251.549] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0xffffffff [0251.549] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0251.549] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0251.550] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0251.550] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0251.550] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x23000c2f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0251.550] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0251.551] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54746ebf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54746ebf, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0251.551] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54746ebf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54746ebf, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0251.551] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54746ebf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54746ebf, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0251.551] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54746ebf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54746ebf, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0251.551] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0251.551] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547933c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0251.551] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x903edf7e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0251.553] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x903edf7e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0251.553] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547933c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0251.553] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9056b602, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9056b602, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0251.553] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.553] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.554] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.554] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0251.554] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0251.554] VirtualAlloc (lpAddress=0x21dc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21dc000 [0251.555] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.555] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.555] ReadFile (in: hFile=0x1fc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.557] WriteFile (in: hFile=0x208, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.558] ReadFile (in: hFile=0x1fc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.559] WriteFile (in: hFile=0x208, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.559] ReadFile (in: hFile=0x1fc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.559] WriteFile (in: hFile=0x208, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.559] CloseHandle (hObject=0x1fc) returned 1 [0251.559] CloseHandle (hObject=0x208) returned 1 [0251.560] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.561] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.561] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9056b602, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9056b602, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e410 [0251.561] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9056b602, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9056b602, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0251.561] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0251.561] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0251.562] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0251.562] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9035563d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9035563d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9035563d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0251.563] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9037b75e, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9037b75e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9037b75e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0251.563] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9037b75e, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9037b75e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9037b75e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0251.563] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0251.563] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547933c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0251.563] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547933c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0251.563] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547933c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.564] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547933c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0251.564] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0251.564] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5476d1ac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0251.564] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5476d1ac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0251.564] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5476d1ac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.564] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5476d1ac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0251.564] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0251.564] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5476d1ac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0251.564] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0251.564] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x422e6174, cFileName="Microsoft.AccountsControl_cw5n1h2txyewy", cAlternateFileName="MICROS~1.ACC")) returned 1 [0251.565] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0251.566] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0251.566] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0251.566] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0251.568] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 1 [0251.568] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0251.568] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0251.569] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.569] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.569] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0251.569] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0251.569] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0251.570] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.570] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.570] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0251.570] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0251.570] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0251.570] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.570] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.570] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0251.570] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="Temp", cAlternateFileName="")) returned 1 [0251.571] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0251.571] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.571] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.571] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0251.571] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="Temp", cAlternateFileName="")) returned 0 [0251.571] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0251.571] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0251.571] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0251.573] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 1 [0251.573] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 0 [0251.573] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0251.573] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0251.573] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0251.574] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 1 [0251.574] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 0 [0251.574] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0251.574] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0251.574] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0251.574] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 1 [0251.574] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 0 [0251.574] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0251.574] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0251.575] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0251.575] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="..", cAlternateFileName="")) returned 1 [0251.575] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0251.575] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0251.577] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.577] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6131ff94, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6131ff94, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0251.577] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.577] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.578] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.578] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0251.578] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0251.578] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.578] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.582] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.584] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.586] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.587] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.587] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.587] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.587] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.587] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.588] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.588] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.588] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.588] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.588] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.588] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.589] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.589] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.589] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.589] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.589] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.589] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.590] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.590] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.590] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.590] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.590] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.590] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.591] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.591] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.591] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.591] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.591] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.591] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.592] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.592] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.592] CloseHandle (hObject=0x1fc) returned 1 [0251.592] CloseHandle (hObject=0x204) returned 1 [0251.594] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.595] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.596] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6131ff94, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6131ff94, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x554c0c, dwReserved1=0xc5, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e710 [0251.596] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6131ff94, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6131ff94, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x554c0c, dwReserved1=0xc5, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0251.596] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0251.596] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 1 [0251.604] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0xffffffff [0251.604] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0251.606] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0251.607] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0251.607] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0251.608] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x23000c2f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0251.608] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0251.608] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0251.609] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0251.609] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0251.609] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0251.609] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0251.610] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0251.610] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x90d2b129, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0251.613] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x90d2b129, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0251.613] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x611a2928, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611a2928, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611a2928, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0251.614] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9104c20e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9104c20e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0251.614] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.614] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.614] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.614] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0251.615] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0251.615] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.615] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.616] ReadFile (in: hFile=0x208, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.620] WriteFile (in: hFile=0x204, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.621] ReadFile (in: hFile=0x208, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.621] WriteFile (in: hFile=0x204, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.621] ReadFile (in: hFile=0x208, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.622] WriteFile (in: hFile=0x204, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.622] CloseHandle (hObject=0x208) returned 1 [0251.622] CloseHandle (hObject=0x204) returned 1 [0251.623] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.624] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.624] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9104c20e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9104c20e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e490 [0251.624] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9104c20e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9104c20e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0251.624] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0251.624] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0251.626] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0251.626] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x90bada42, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x90bada42, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x90bada42, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0251.626] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x90bada42, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x90bada42, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x90bada42, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0251.627] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x90bada42, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x90bada42, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x90bada42, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0251.627] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0251.628] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0251.628] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0251.628] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.628] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0251.628] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0251.628] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0251.628] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0251.628] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.628] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0251.628] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0251.629] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0251.629] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0251.629] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7503f8, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x756f6174, cFileName="Microsoft.BioEnrollment_cw5n1h2txyewy", cAlternateFileName="MICROS~1.BIO")) returned 1 [0251.629] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7503f8, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0d99c3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0251.631] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7503f8, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0d99c3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0251.631] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0251.631] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0251.633] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.633] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0251.633] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0251.633] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.634] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.634] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0251.634] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0251.634] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0251.634] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.634] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.634] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0251.634] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0251.634] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0251.634] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.635] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.635] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0251.635] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 1 [0251.635] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0251.635] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.635] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.635] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0251.635] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 0 [0251.635] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0251.635] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e8352ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e8352ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e8352ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0251.636] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e8352ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e8352ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e8352ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0251.636] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e8352ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e8352ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e8352ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.636] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e8352ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e8352ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e8352ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0251.636] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0251.636] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e79c89b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e79c89b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e79c89b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0251.636] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e79c89b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e79c89b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e79c89b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0251.637] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e79c89b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e79c89b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e79c89b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.637] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e79c89b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e79c89b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e79c89b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0251.637] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0251.637] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7503f8, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e7503f8, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e7503f8, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0251.637] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7503f8, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e7503f8, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e7503f8, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0251.637] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7503f8, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e7503f8, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e7503f8, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.637] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7503f8, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e7503f8, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e7503f8, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0251.637] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0251.638] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0d99c3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0d99c3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0251.638] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0d99c3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0d99c3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0251.638] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0d99c3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0d99c3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.638] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0ffcee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0ffcee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0251.638] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0ffcee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0ffcee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0251.640] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0ffcee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0ffcee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.640] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f1e4a00, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f1e4a00, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0251.640] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.640] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.640] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.640] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.640] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.640] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0251.640] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0251.641] VirtualAlloc (lpAddress=0x21e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21e0000 [0251.641] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.641] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.642] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.644] WriteFile (in: hFile=0x1fc, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.645] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.645] WriteFile (in: hFile=0x1fc, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.645] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.646] WriteFile (in: hFile=0x1fc, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.646] CloseHandle (hObject=0x208) returned 1 [0251.646] CloseHandle (hObject=0x1fc) returned 1 [0251.651] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.652] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.652] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f1e4a00, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f1e4a00, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x554c0c, dwReserved1=0xc6, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e310 [0251.652] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f1e4a00, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f1e4a00, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x554c0c, dwReserved1=0xc6, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0251.652] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0251.653] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 1 [0251.655] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0xffffffff [0251.655] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4f0ffcee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0ffcee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0ffcee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0251.656] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4f0ffcee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0ffcee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0ffcee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0251.657] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4f0ffcee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0ffcee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0ffcee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0251.657] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0251.658] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0ffcee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0ffcee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0251.658] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0251.658] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e77658a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0251.658] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e77658a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0251.659] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e77658a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0251.659] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e77658a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0251.659] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0251.659] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7c2b0c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e8352ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e8352ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0251.659] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7c2b0c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e8352ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x91215d9d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0251.665] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7c2b0c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e8352ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x91215d9d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0251.665] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e8352ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e8352ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e8352ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0251.665] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e8352ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x916b486a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x916b486a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0251.665] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.665] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.665] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.666] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.666] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.666] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0251.666] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0251.666] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.667] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.668] ReadFile (in: hFile=0x204, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.669] WriteFile (in: hFile=0x1fc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.671] ReadFile (in: hFile=0x204, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.671] WriteFile (in: hFile=0x1fc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.671] ReadFile (in: hFile=0x204, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.671] WriteFile (in: hFile=0x1fc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.671] CloseHandle (hObject=0x204) returned 1 [0251.671] CloseHandle (hObject=0x1fc) returned 1 [0251.675] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.675] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.675] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e8352ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x916b486a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x916b486a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e490 [0251.675] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e8352ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x916b486a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x916b486a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0251.675] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0251.676] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0251.677] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0251.677] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x91131126, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x91131126, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x91131126, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0251.678] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9115737d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9115737d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9115737d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0251.678] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9115737d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9115737d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9115737d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0251.678] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0251.678] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e80efb1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e80efb1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e80efb1, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0251.679] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e80efb1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e80efb1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e80efb1, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0251.679] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e80efb1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e80efb1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e80efb1, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.679] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e80efb1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e80efb1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e80efb1, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0251.679] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0251.679] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e77658a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0251.679] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e77658a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0251.679] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e77658a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.679] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e77658a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0251.680] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0251.680] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e77658a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0251.680] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0251.680] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6e456174, cFileName="Microsoft.LockApp_cw5n1h2txyewy", cAlternateFileName="MICROS~1.LOC")) returned 1 [0251.680] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0251.682] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0251.682] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0251.682] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0251.684] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.684] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0251.684] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0251.685] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.685] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0251.685] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0251.685] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0251.685] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0251.686] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.686] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0251.686] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0251.686] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0251.687] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0251.687] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.687] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0251.687] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0251.687] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 1 [0251.687] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0251.687] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.687] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0251.687] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0251.688] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 0 [0251.688] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0251.688] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62717b51, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0251.688] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62717b51, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0251.688] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62717b51, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.688] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62717b51, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0251.688] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0251.688] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6259a316, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6259a316, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6259a316, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0251.688] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6259a316, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6259a316, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6259a316, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0251.689] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6259a316, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6259a316, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6259a316, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.689] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6259a316, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6259a316, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6259a316, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0251.689] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0251.689] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62527d6a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62527d6a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0251.689] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62527d6a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62527d6a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0251.690] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62527d6a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62527d6a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.690] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62527d6a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62527d6a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0251.690] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0251.690] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0251.690] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0251.690] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.690] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0251.690] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0251.693] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.693] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6289529c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6289529c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0251.693] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.693] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.693] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.693] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.693] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.693] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0251.693] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0251.694] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.694] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.694] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.697] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.698] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.698] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.698] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.698] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.699] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.699] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0251.699] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.699] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0251.699] CloseHandle (hObject=0x204) returned 1 [0251.699] CloseHandle (hObject=0x208) returned 1 [0251.700] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.701] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.701] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6289529c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6289529c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x5503c4, dwReserved1=0x15, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e650 [0251.701] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6289529c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6289529c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x5503c4, dwReserved1=0x15, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0251.701] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0251.702] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 1 [0251.703] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0xffffffff [0251.703] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0251.703] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0251.704] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0251.704] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0251.704] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0251.704] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0251.704] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62527d6a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62527d6a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0251.704] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62527d6a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62527d6a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0251.704] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62527d6a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62527d6a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0251.704] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62527d6a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62527d6a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0251.705] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0251.709] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62658fa1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62717b51, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0251.709] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62658fa1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x91e019c3, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0251.711] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62658fa1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x91e019c3, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0251.711] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6273dda0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6273dda0, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6273dda0, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0251.711] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9246a026, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9246a026, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0251.711] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.711] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.712] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.712] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0251.712] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0251.712] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.713] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0251.714] ReadFile (in: hFile=0x1fc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.716] WriteFile (in: hFile=0x208, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.717] ReadFile (in: hFile=0x1fc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.718] WriteFile (in: hFile=0x208, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0251.718] ReadFile (in: hFile=0x1fc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.718] WriteFile (in: hFile=0x208, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0251.718] CloseHandle (hObject=0x1fc) returned 1 [0251.718] CloseHandle (hObject=0x208) returned 1 [0251.720] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.720] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0251.720] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9246a026, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9246a026, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0x11, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e710 [0251.720] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x9246a026, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9246a026, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0x11, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0251.720] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0251.721] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0251.722] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0251.722] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x91cf695a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x91cf695a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x91cf695a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0251.722] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x91cf695a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x91cf695a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x91cf695a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0251.723] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x91cf695a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x91cf695a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x91cf695a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0251.723] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0251.723] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62717b51, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0251.723] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62717b51, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0251.723] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62717b51, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.723] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62717b51, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0251.723] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0251.724] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62574156, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62574156, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62574156, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0251.724] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62574156, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62574156, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62574156, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0251.724] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62574156, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62574156, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62574156, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.724] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62574156, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62574156, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62574156, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0251.724] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0251.724] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62574156, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62574156, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62574156, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0251.724] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0251.725] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x416b6174, cFileName="Microsoft.MicrosoftEdge_8wekyb3d8bbwe", cAlternateFileName="MICROS~1.MIC")) returned 1 [0251.725] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888ab4e8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x888ab4e8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0251.725] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888ab4e8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x888ab4e8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0251.725] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x4da5bc3, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4da5bc3, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0251.725] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x4da5bc3, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4da5bc3, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0251.725] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x4da5bc3, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4da5bc3, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0251.725] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4da5bc3, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="#!001", cAlternateFileName="")) returned 1 [0251.725] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4da5bc3, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0251.727] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4da5bc3, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.727] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0251.727] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\inetcache\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0251.728] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 1 [0251.728] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 0 [0251.728] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0251.728] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0251.728] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\inetcookies\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0251.729] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 1 [0251.729] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 0 [0251.729] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0251.729] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0251.729] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\inethistory\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0251.729] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 1 [0251.729] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 0 [0251.729] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0251.729] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0251.729] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\localstate\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0251.730] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 1 [0251.730] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 0 [0251.730] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0251.730] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="Temp", cAlternateFileName="")) returned 1 [0251.730] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\temp\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0251.730] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 1 [0251.730] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 0 [0251.730] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0251.731] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0251.731] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\tempstate\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0251.731] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 1 [0251.731] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 0 [0251.731] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0251.731] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0251.731] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0251.731] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79656574, dwReserved1=0x67006f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0251.731] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0251.732] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.732] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.732] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0251.732] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79656574, dwReserved1=0x67006f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0251.732] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0251.733] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.733] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.733] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0251.733] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79656574, dwReserved1=0x67006f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0251.734] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0251.734] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.734] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 0 [0251.734] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0251.734] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3ff025b, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79656574, dwReserved1=0x67006f, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0251.734] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3ff025b, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0251.735] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3ff025b, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.735] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3ff025b, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="Windows", cAlternateFileName="")) returned 1 [0251.735] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\windows\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3ff025b, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0251.735] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3ff025b, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 1 [0251.735] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3ff025b, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 0 [0251.735] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0251.735] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3ff025b, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="Windows", cAlternateFileName="")) returned 0 [0251.736] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0251.736] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x473d6c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x473d6c9, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79656574, dwReserved1=0x67006f, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1 [0251.736] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x473d6c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x473d6c9, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0251.737] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x473d6c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x473d6c9, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="..", cAlternateFileName="")) returned 1 [0251.737] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x24000a2e, cFileName="Cache", cAlternateFileName="")) returned 1 [0251.737] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0251.737] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="..", cAlternateFileName="")) returned 1 [0251.737] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0251.737] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.737] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.738] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.738] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0251.738] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat")) returned 0x2026 [0251.738] VirtualAlloc (lpAddress=0x21e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21e4000 [0251.739] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.739] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0251.740] ReadFile (in: hFile=0x204, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0251.740] WriteFile (in: hFile=0x20c, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0251.740] CloseHandle (hObject=0x204) returned 1 [0251.740] CloseHandle (hObject=0x20c) returned 1 [0251.740] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.741] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0251.741] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e790 [0251.741] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0251.741] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0251.741] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat")) returned 1 [0251.742] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat")) returned 0xffffffff [0251.742] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4252734, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2500082d, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0251.742] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0251.742] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x422c7d8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x422c7d8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x24007461, cFileName="Cookies", cAlternateFileName="")) returned 1 [0251.742] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x422c7d8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x422c7d8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0251.742] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x422c7d8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x422c7d8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="..", cAlternateFileName="")) returned 1 [0251.742] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x422c7d8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x422c7d8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="..", cAlternateFileName="")) returned 0 [0251.742] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0251.742] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x422c7d8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x422c7d8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x24007461, cFileName="History", cAlternateFileName="")) returned 1 [0251.743] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x422c7d8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x422c7d8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0251.743] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x422c7d8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x422c7d8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="..", cAlternateFileName="")) returned 1 [0251.743] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x422c7d8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x422c7d8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="..", cAlternateFileName="")) returned 0 [0251.743] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0251.743] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x429ee5c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x24007461, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1 [0251.743] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x429ee5c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0251.743] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x429ee5c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="..", cAlternateFileName="")) returned 1 [0251.743] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x429ee5c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0251.744] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.744] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.744] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.744] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0251.744] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat")) returned 0x2026 [0251.745] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0251.745] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.745] ReadFile (in: hFile=0x20c, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0251.745] WriteFile (in: hFile=0x204, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0251.745] CloseHandle (hObject=0x20c) returned 1 [0251.746] CloseHandle (hObject=0x204) returned 1 [0251.746] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.746] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0251.747] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x429ee5c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e710 [0251.747] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x429ee5c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0251.747] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0251.747] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat")) returned 1 [0251.747] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat")) returned 0xffffffff [0251.748] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x429ee5c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0251.748] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0251.748] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x45274d0, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x45274d0, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x24007461, cFileName="IECompatUaCache", cAlternateFileName="IECOMP~2")) returned 1 [0251.748] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x45274d0, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x45274d0, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0251.750] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x45274d0, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x45274d0, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.750] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x43374eb, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x45274d0, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x45274d0, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0251.750] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.750] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.750] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.750] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0251.751] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat")) returned 0x2026 [0251.751] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.751] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0251.752] ReadFile (in: hFile=0x204, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0251.752] WriteFile (in: hFile=0x20c, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0251.752] CloseHandle (hObject=0x204) returned 1 [0251.752] CloseHandle (hObject=0x20c) returned 1 [0251.752] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.753] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0251.753] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x43374eb, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x45274d0, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x45274d0, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5503c4, dwReserved1=0x1e, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e250 [0251.753] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x43374eb, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x45274d0, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x45274d0, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5503c4, dwReserved1=0x1e, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0251.753] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0251.753] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat")) returned 1 [0251.754] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat")) returned 0xffffffff [0251.754] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x43374eb, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x45274d0, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x45274d0, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0251.754] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0251.754] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473d6c9, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x473d6c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x473d6c9, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x24007461, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1 [0251.754] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\playready\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473d6c9, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x473d6c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x473d6c9, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0251.754] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473d6c9, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x473d6c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x473d6c9, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.754] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473d6c9, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x473d6c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x473d6c9, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0251.755] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0251.755] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x46a4cef, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x46a4cef, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x46a4cef, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x24007461, cFileName="UrlBlock", cAlternateFileName="")) returned 1 [0251.755] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\UrlBlock\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\urlblock\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x46a4cef, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x46a4cef, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x46a4cef, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0251.755] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x46a4cef, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x46a4cef, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x46a4cef, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.755] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x46a4cef, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x46a4cef, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x46a4cef, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0251.755] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0251.756] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x429ee5c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x24007461, cFileName="User", cAlternateFileName="")) returned 1 [0251.756] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x429ee5c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0251.756] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x429ee5c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.756] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4cc0d69, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4cc0d69, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0251.756] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4cc0d69, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4cc0d69, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0251.758] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4cc0d69, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4cc0d69, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0251.758] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="DataStore", cAlternateFileName="DATAST~1")) returned 1 [0251.758] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0065, dwReserved1=0x730055, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0251.758] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0065, dwReserved1=0x730055, cFileName="..", cAlternateFileName="")) returned 1 [0251.758] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0065, dwReserved1=0x730055, cFileName="Data", cAlternateFileName="")) returned 1 [0251.758] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\*.*"), lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0065, dwReserved1=0x730055, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0251.759] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0065, dwReserved1=0x730055, cFileName="..", cAlternateFileName="")) returned 1 [0251.759] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0065, dwReserved1=0x730055, cFileName="nouser1", cAlternateFileName="")) returned 1 [0251.759] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\*.*"), lpFindFileData=0x19e060 | out: lpFindFileData=0x19e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x582ea0, dwReserved1=0x429, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0251.759] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e060 | out: lpFindFileData=0x19e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x582ea0, dwReserved1=0x429, cFileName="..", cAlternateFileName="")) returned 1 [0251.759] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e060 | out: lpFindFileData=0x19e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4311257, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x582ea0, dwReserved1=0x429, cFileName="120712-0049", cAlternateFileName="120712~1")) returned 1 [0251.759] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\*.*"), lpFindFileData=0x19ddf8 | out: lpFindFileData=0x19ddf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4311257, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0065, dwReserved1=0x730055, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0251.760] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ddf8 | out: lpFindFileData=0x19ddf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4311257, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0065, dwReserved1=0x730055, cFileName="..", cAlternateFileName="")) returned 1 [0251.760] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ddf8 | out: lpFindFileData=0x19ddf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43374eb, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43374eb, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0065, dwReserved1=0x730055, cFileName="DBStore", cAlternateFileName="")) returned 1 [0251.760] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\*.*"), lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43374eb, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43374eb, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x584eb0, dwReserved1=0x427, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0251.761] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43374eb, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43374eb, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x584eb0, dwReserved1=0x427, cFileName="..", cAlternateFileName="")) returned 1 [0251.761] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43374eb, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43374eb, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4a5e718, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x584eb0, dwReserved1=0x427, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0251.762] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.762] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.762] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.762] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0251.762] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk")) returned 0x2020 [0251.762] VirtualAlloc (lpAddress=0x21e8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21e8000 [0251.763] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0251.763] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0251.763] ReadFile (in: hFile=0x220, lpBuffer=0x19b968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b6b4, lpOverlapped=0x0 | out: lpBuffer=0x19b968*, lpNumberOfBytesRead=0x19b6b4*=0x1000, lpOverlapped=0x0) returned 1 [0251.765] WriteFile (in: hFile=0x224, lpBuffer=0x19c968*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b6b4, lpOverlapped=0x0 | out: lpBuffer=0x19c968*, lpNumberOfBytesWritten=0x19b6b4*=0x1000, lpOverlapped=0x0) returned 1 [0251.766] ReadFile (in: hFile=0x220, lpBuffer=0x19b968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b6b4, lpOverlapped=0x0 | out: lpBuffer=0x19b968*, lpNumberOfBytesRead=0x19b6b4*=0x1000, lpOverlapped=0x0) returned 1 [0251.766] WriteFile (in: hFile=0x224, lpBuffer=0x19c968*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b6b4, lpOverlapped=0x0 | out: lpBuffer=0x19c968*, lpNumberOfBytesWritten=0x19b6b4*=0x1000, lpOverlapped=0x0) returned 1 [0251.767] ReadFile (in: hFile=0x220, lpBuffer=0x19b968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b6b4, lpOverlapped=0x0 | out: lpBuffer=0x19b968*, lpNumberOfBytesRead=0x19b6b4*=0x0, lpOverlapped=0x0) returned 1 [0251.767] WriteFile (in: hFile=0x224, lpBuffer=0x19c968*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19b6b4, lpOverlapped=0x0 | out: lpBuffer=0x19c968*, lpNumberOfBytesWritten=0x19b6b4*=0x0, lpOverlapped=0x0) returned 1 [0251.767] CloseHandle (hObject=0x220) returned 1 [0251.767] CloseHandle (hObject=0x224) returned 1 [0251.771] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.771] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0251.771] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk"), lpFindFileData=0x19d804 | out: lpFindFileData=0x19d804*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43374eb, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43374eb, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4a5e718, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x16000016, dwReserved1=0x16, cFileName="edb.chk", cAlternateFileName="")) returned 0x55e710 [0251.772] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19d804 | out: lpFindFileData=0x19d804*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43374eb, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43374eb, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4a5e718, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x16000016, dwReserved1=0x16, cFileName="edb.chk", cAlternateFileName="")) returned 0 [0251.772] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0251.772] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk")) returned 1 [0251.773] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk")) returned 0xffffffff [0251.773] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4311257, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogFiles", cAlternateFileName="")) returned 1 [0251.773] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\*.*"), lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43374eb, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0251.774] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43374eb, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0251.774] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4a5e718, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x104, cFileName="edb.log", cAlternateFileName="")) returned 1 [0251.774] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.774] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.775] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.775] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0251.775] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log")) returned 0x2020 [0251.775] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0251.776] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x228 [0251.778] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.779] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.781] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.781] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.782] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.782] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.783] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.783] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.783] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.783] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.783] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.783] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.784] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.784] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.784] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.784] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.784] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.784] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.785] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.785] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.785] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.785] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.785] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.786] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.786] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.786] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.787] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.787] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.787] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.788] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.788] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.788] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.789] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.790] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.790] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.790] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.790] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.790] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.791] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.791] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.791] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.791] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.791] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.791] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.792] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.792] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.792] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.792] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.792] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.792] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.793] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.793] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.793] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.793] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.793] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.794] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.794] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.794] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.794] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.794] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.794] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.795] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.795] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.795] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.795] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.795] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.795] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.796] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.796] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.796] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.796] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.796] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.797] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.797] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.797] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.797] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.797] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.797] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.798] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.798] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.798] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.798] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.798] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.798] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.799] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.799] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.799] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.799] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.799] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.799] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.800] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.800] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.800] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.801] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.801] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.802] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.864] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.864] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.865] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.865] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.865] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.865] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.866] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.866] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.866] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.866] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.867] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.867] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.867] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.867] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.867] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.868] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.868] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.868] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.868] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.868] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.869] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.869] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.870] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.870] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.870] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.870] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.871] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.871] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.881] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.881] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.882] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.882] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.882] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.882] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.883] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.884] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.884] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.884] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.884] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.885] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.885] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.885] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.885] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.885] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.886] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.886] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.886] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.886] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.887] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.887] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.887] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.887] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.887] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.888] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.888] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.888] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.888] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.888] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.889] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.889] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.889] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.894] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.894] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.894] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.895] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.895] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.895] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.895] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.896] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.896] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.896] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.896] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.897] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.897] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.897] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.897] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.898] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.898] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.898] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.898] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.899] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.899] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.899] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.899] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.899] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.900] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.900] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.900] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.900] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.900] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.901] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.901] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.901] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.901] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.902] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.902] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.902] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.902] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.903] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.903] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.903] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.903] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.904] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.904] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.904] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.904] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.904] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.905] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.905] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.905] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.905] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.905] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.906] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.906] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.906] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.906] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.907] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.907] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.907] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.907] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.907] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.908] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.908] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.908] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.908] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.909] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.909] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.909] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.909] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.909] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.910] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.910] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.910] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.910] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.911] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.911] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.923] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.923] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.923] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.923] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.924] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.924] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.924] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.924] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.924] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.925] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.925] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.925] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.925] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.925] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.926] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.926] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.926] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.926] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.926] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.927] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.927] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.927] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.927] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.928] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.928] ReadFile (in: hFile=0x220, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x0, lpOverlapped=0x0) returned 1 [0251.928] WriteFile (in: hFile=0x228, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x0, lpOverlapped=0x0) returned 1 [0251.928] CloseHandle (hObject=0x220) returned 1 [0251.928] CloseHandle (hObject=0x228) returned 1 [0251.981] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0251.982] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0251.982] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log"), lpFindFileData=0x19d59c | out: lpFindFileData=0x19d59c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4a5e718, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x554c0c, dwReserved1=0xc7, cFileName="edb.log", cAlternateFileName="")) returned 0x55e710 [0251.982] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19d59c | out: lpFindFileData=0x19d59c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4a5e718, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x554c0c, dwReserved1=0xc7, cFileName="edb.log", cAlternateFileName="")) returned 0 [0251.982] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0251.983] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log")) returned 1 [0251.987] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log")) returned 0xffffffff [0251.987] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4311257, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0251.988] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43374eb, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43374eb, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43374eb, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x72006a, dwReserved1=0x73, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0251.988] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4a5e718, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x72006a, dwReserved1=0x73, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0251.989] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0251.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0251.989] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0251.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0251.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0251.989] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log")) returned 0x2020 [0251.990] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x228 [0251.990] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0251.991] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.993] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.994] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.995] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.995] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.996] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.996] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.996] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.996] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.996] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.996] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.997] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.997] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.997] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.997] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.997] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.997] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.998] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.998] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.998] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.998] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.998] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.998] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.999] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.999] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.999] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.999] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0251.999] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.000] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.001] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.002] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.002] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.002] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.002] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.002] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.002] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.003] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.003] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.003] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.003] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.003] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.003] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.004] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.004] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.004] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.004] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.004] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.004] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.005] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.005] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.005] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.005] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.006] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.006] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.006] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.006] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.006] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.006] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.007] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.007] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.007] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.007] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.007] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.007] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.008] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.008] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.008] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.008] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.008] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.008] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.008] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.009] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.009] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.009] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.009] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.009] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.010] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.010] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.010] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.010] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.010] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.010] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.011] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.011] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.011] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.011] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.011] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.011] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.012] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.012] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.012] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.012] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.012] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.015] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.015] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.015] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.015] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.015] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.015] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.016] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.016] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.016] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.016] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.016] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.017] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.017] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.017] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.017] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.017] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.017] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.017] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.018] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.018] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.018] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.018] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.018] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.019] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.019] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.019] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.019] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.019] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.019] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.020] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.020] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.020] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.020] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.020] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.020] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.021] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.021] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.022] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.022] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.022] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.022] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.022] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.023] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.023] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.023] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.023] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.023] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.023] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.024] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.024] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.024] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.024] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.024] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.024] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.024] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.025] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.025] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.025] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.025] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.025] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.025] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.026] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.026] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.026] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.027] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.027] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.027] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.027] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.028] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.028] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.028] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.028] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.028] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.029] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.029] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.029] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.029] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.029] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.029] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.030] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.030] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.030] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.030] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.030] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.030] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.031] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.031] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.031] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.031] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.031] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.031] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.032] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.032] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.032] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.032] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.032] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.032] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.033] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.033] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.033] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.033] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.033] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.033] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.034] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.034] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.034] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.034] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.035] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.035] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.035] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.035] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.035] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.035] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.036] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.036] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.036] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.036] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.037] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.037] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.037] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.037] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.037] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.037] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.038] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.038] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.038] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.038] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.038] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.039] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.039] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.039] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.039] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.039] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.039] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.040] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.040] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.040] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.040] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.040] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.040] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.041] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.041] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.041] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.041] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.041] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.041] ReadFile (in: hFile=0x228, lpBuffer=0x19b700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19b700*, lpNumberOfBytesRead=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.042] WriteFile (in: hFile=0x220, lpBuffer=0x19c700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19b44c, lpOverlapped=0x0 | out: lpBuffer=0x19c700*, lpNumberOfBytesWritten=0x19b44c*=0x1000, lpOverlapped=0x0) returned 1 [0252.046] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.046] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.046] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log"), lpFindFileData=0x19d59c | out: lpFindFileData=0x19d59c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4a5e718, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x554c0c, dwReserved1=0xc7, cFileName="edbtmp.log", cAlternateFileName="")) returned 0x55e490 [0252.046] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19d59c | out: lpFindFileData=0x19d59c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4a5e718, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x554c0c, dwReserved1=0xc7, cFileName="edbtmp.log", cAlternateFileName="")) returned 0 [0252.047] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0252.048] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log")) returned 1 [0252.055] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log")) returned 0xffffffff [0252.056] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4a5e718, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x72006a, dwReserved1=0x73, cFileName="edbtmp.log", cAlternateFileName="")) returned 0 [0252.056] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0252.056] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43374eb, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43374eb, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x48e101d, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x32676f6c, dwReserved1=0x73726a2e, cFileName="spartan.edb", cAlternateFileName="")) returned 1 [0252.063] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.063] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.064] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.064] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.064] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.064] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0252.064] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{44F17EF9-7053-11EB-B0AC-0050F0B0FFDB}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{44f17ef9-7053-11eb-b0ac-0050f0b0ffdb}.dat")) returned 0x2020 [0252.064] VirtualAlloc (lpAddress=0x21ec000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21ec000 [0252.065] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{44F17EF9-7053-11EB-B0AC-0050F0B0FFDB}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{44f17ef9-7053-11eb-b0ac-0050f0b0ffdb}.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0252.065] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{44F17EF9-7053-11EB-B0AC-0050F0B0FFDB}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{44f17ef9-7053-11eb-b0ac-0050f0b0ffdb}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0252.071] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{44F17EF9-7053-11EB-B0AC-0050F0B0FFDB}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{44f17ef9-7053-11eb-b0ac-0050f0b0ffdb}.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{44F17EF9-7053-11EB-B0AC-0050F0B0FFDB}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{44f17ef9-7053-11eb-b0ac-0050f0b0ffdb}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.072] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{44F17EF9-7053-11EB-B0AC-0050F0B0FFDB}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{44f17ef9-7053-11eb-b0ac-0050f0b0ffdb}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.072] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{44F17EF9-7053-11EB-B0AC-0050F0B0FFDB}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{44f17ef9-7053-11eb-b0ac-0050f0b0ffdb}.dat"), lpFindFileData=0x19df3c | out: lpFindFileData=0x19df3c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x78c7a52, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x78c7a52, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x7d19e41, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x554c0c, dwReserved1=0xc4, cFileName="RecoveryStore.{44F17EF9-7053-11EB-B0AC-0050F0B0FFDB}.dat", cAlternateFileName="RECOVE~2.DAT")) returned 0x55e8d0 [0252.072] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19df3c | out: lpFindFileData=0x19df3c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x78c7a52, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x78c7a52, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x7d19e41, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x554c0c, dwReserved1=0xc4, cFileName="RecoveryStore.{44F17EF9-7053-11EB-B0AC-0050F0B0FFDB}.dat", cAlternateFileName="RECOVE~2.DAT")) returned 0 [0252.072] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0252.073] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{44F17EF9-7053-11EB-B0AC-0050F0B0FFDB}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{44f17ef9-7053-11eb-b0ac-0050f0b0ffdb}.dat")) returned 1 [0252.074] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{44F17EF9-7053-11EB-B0AC-0050F0B0FFDB}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{44f17ef9-7053-11eb-b0ac-0050f0b0ffdb}.dat")) returned 0xffffffff [0252.074] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d19e41, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x7d19e41, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x7d19e41, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat", cAlternateFileName="{44F17~1.DAT")) returned 1 [0252.074] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.074] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.075] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.075] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.075] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.075] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0252.075] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{44f17efb-7053-11eb-b0ac-0050f0b0ffdb}.dat")) returned 0x2020 [0252.075] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{44f17efb-7053-11eb-b0ac-0050f0b0ffdb}.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0252.076] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{44f17efb-7053-11eb-b0ac-0050f0b0ffdb}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0252.080] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{44f17efb-7053-11eb-b0ac-0050f0b0ffdb}.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{44f17efb-7053-11eb-b0ac-0050f0b0ffdb}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.081] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{44f17efb-7053-11eb-b0ac-0050f0b0ffdb}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.081] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{44f17efb-7053-11eb-b0ac-0050f0b0ffdb}.dat"), lpFindFileData=0x19df3c | out: lpFindFileData=0x19df3c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d19e41, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x7d19e41, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x7d19e41, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x5503c4, dwReserved1=0x14, cFileName="{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat", cAlternateFileName="{44F17~1.DAT")) returned 0x55e650 [0252.081] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19df3c | out: lpFindFileData=0x19df3c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d19e41, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x7d19e41, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x7d19e41, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x5503c4, dwReserved1=0x14, cFileName="{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat", cAlternateFileName="{44F17~1.DAT")) returned 0 [0252.081] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0252.081] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{44f17efb-7053-11eb-b0ac-0050f0b0ffdb}.dat")) returned 1 [0252.083] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{44f17efb-7053-11eb-b0ac-0050f0b0ffdb}.dat")) returned 0xffffffff [0252.083] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d19e41, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x7d19e41, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x7d19e41, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat", cAlternateFileName="{44F17~1.DAT")) returned 0 [0252.083] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0252.084] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x47fc06f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x78edcc8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x78edcc8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0065, dwReserved1=0x730055, cFileName="Active", cAlternateFileName="")) returned 0 [0252.084] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0252.084] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x47fc06f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x47fc06f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x47fc06f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="Recovery", cAlternateFileName="")) returned 0 [0252.084] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0252.084] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4cc0d69, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4cc0d69, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 0 [0252.084] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0252.084] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x429ee5c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x24007461, cFileName="User", cAlternateFileName="")) returned 0 [0252.085] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.085] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x934dcb8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x934dcb8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4361796b, dwReserved1=0x65686361, cFileName="Temp", cAlternateFileName="")) returned 1 [0252.085] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x934dcb8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x934dcb8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x24007461, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0252.085] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x934dcb8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x934dcb8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x24007461, cFileName="..", cAlternateFileName="")) returned 1 [0252.085] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x934dcb8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x934dcb8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x24007461, cFileName="..", cAlternateFileName="")) returned 0 [0252.085] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0252.086] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x934dcb8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x934dcb8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4361796b, dwReserved1=0x65686361, cFileName="Temp", cAlternateFileName="")) returned 0 [0252.086] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0252.086] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8802cde8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8802cde8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8802cde8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64457466, dwReserved1=0x4f4c6567, cFileName="AppData", cAlternateFileName="")) returned 1 [0252.086] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8802cde8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8802cde8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8802cde8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4361796b, dwReserved1=0x65686361, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0252.086] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8802cde8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8802cde8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8802cde8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4361796b, dwReserved1=0x65686361, cFileName="..", cAlternateFileName="")) returned 1 [0252.086] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8802cde8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8802cde8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8802cde8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4361796b, dwReserved1=0x65686361, cFileName="..", cAlternateFileName="")) returned 0 [0252.086] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.087] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88006be9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88006be9, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64457466, dwReserved1=0x4f4c6567, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0252.087] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88006be9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88006be9, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4361796b, dwReserved1=0x65686361, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0252.087] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88006be9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88006be9, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4361796b, dwReserved1=0x65686361, cFileName="..", cAlternateFileName="")) returned 1 [0252.087] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88006be9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88006be9, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4361796b, dwReserved1=0x65686361, cFileName="..", cAlternateFileName="")) returned 0 [0252.087] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0252.087] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87fe09a0, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x87fe09a0, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64457466, dwReserved1=0x4f4c6567, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0252.088] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87fe09a0, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x87fe09a0, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4361796b, dwReserved1=0x65686361, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0252.088] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87fe09a0, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x87fe09a0, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4361796b, dwReserved1=0x65686361, cFileName="..", cAlternateFileName="")) returned 1 [0252.088] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87fe09a0, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x87fe09a0, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4361796b, dwReserved1=0x65686361, cFileName="..", cAlternateFileName="")) returned 0 [0252.088] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.088] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888ab4e8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x888ab4e8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64457466, dwReserved1=0x4f4c6567, cFileName="Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_N")) returned 1 [0252.088] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888ab4e8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x888ab4e8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4361796b, dwReserved1=0x65686361, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0252.089] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888ab4e8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x888ab4e8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4361796b, dwReserved1=0x65686361, cFileName="..", cAlternateFileName="")) returned 1 [0252.089] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888d1750, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x888d1750, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4361796b, dwReserved1=0x65686361, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0252.089] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888d1750, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x888d1750, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x1e00140a, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0252.091] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888d1750, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x888d1750, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x1e00140a, cFileName="..", cAlternateFileName="")) returned 1 [0252.091] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x934dcb8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x88a4ee47, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x642e7265, dwReserved1=0x1e00140a, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0252.091] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.091] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.091] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.091] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.091] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.092] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0252.092] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat")) returned 0x20 [0252.092] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.092] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0252.102] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.102] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.103] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x934dcb8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x88a4ee47, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x554c0c, dwReserved1=0xc6, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e610 [0252.103] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x934dcb8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x88a4ee47, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x554c0c, dwReserved1=0xc6, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0252.103] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0252.103] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat")) returned 1 [0252.105] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat")) returned 0xffffffff [0252.105] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x888d1750, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888d1750, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x888d1750, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0252.110] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.110] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.110] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.110] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.110] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.110] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0252.110] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat")) returned 0x20 [0252.116] VirtualAlloc (lpAddress=0x21f0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21f0000 [0252.116] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.117] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0252.121] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.122] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.122] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x70956fc, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x70956fc, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e390 [0252.122] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x70956fc, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x70956fc, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0252.122] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0252.123] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat")) returned 1 [0252.124] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat")) returned 0xffffffff [0252.124] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9259b185, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9259b185, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9259b185, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0252.137] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.137] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.137] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.137] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0252.137] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\settings\\settings.dat")) returned 0x20 [0252.138] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0252.138] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.147] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.147] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.147] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ebddfa, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e290 [0252.147] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ebddfa, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0252.148] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0252.148] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\settings\\settings.dat")) returned 1 [0252.149] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\settings\\settings.dat")) returned 0xffffffff [0252.149] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5d8cca0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d8cca0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d8cca0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0252.162] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.162] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.163] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.163] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.163] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.163] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0252.163] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\settings\\settings.dat")) returned 0x20 [0252.163] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.164] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0252.169] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.169] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.170] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b508d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e510 [0252.170] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b508d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0252.170] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0252.170] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\settings\\settings.dat")) returned 1 [0252.171] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\settings\\settings.dat")) returned 0xffffffff [0252.172] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5ade105, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ade105, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5ade105, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0252.182] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.182] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.182] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.182] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.182] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.183] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0252.183] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat")) returned 0x20 [0252.183] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0252.183] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.192] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.193] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.193] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbc77a0e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbe8daed, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e710 [0252.193] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbc77a0e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbe8daed, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0252.193] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0252.194] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat")) returned 1 [0252.195] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat")) returned 0xffffffff [0252.195] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdbd82a85, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbd82a85, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbd82a85, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0252.206] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.206] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.206] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.206] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.206] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.206] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0252.206] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0252.207] VirtualAlloc (lpAddress=0x21f4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21f4000 [0252.207] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0252.211] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.216] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.216] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0xffffffff [0252.217] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c56a54, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89e92d07, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89e92d07, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e650 [0252.217] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c56a54, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89e92d07, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89e92d07, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0252.217] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0252.218] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 1 [0252.219] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0xffffffff [0252.219] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x89ca2f32, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89ca2f32, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89ca2f32, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x571610, dwReserved1=0x2000002, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0252.220] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x89ca2f32, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89ca2f32, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89ca2f32, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0252.220] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x89ca2f32, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89ca2f32, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89ca2f32, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0252.220] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0252.221] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89c56a54, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89ca2f32, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89ca2f32, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0252.221] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0252.221] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a1a852, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0252.221] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a1a852, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0252.221] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a1a852, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0252.222] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a1a852, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0252.222] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0252.222] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a40a93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0252.222] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x92954bae, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0252.226] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x92954bae, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0252.226] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a40a93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0252.226] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x92c4fc93, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92c4fc93, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0252.227] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.227] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.227] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.227] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.227] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.227] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0252.227] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0252.227] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.228] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.228] ReadFile (in: hFile=0x208, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0252.235] WriteFile (in: hFile=0x1fc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0252.236] ReadFile (in: hFile=0x208, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0252.236] WriteFile (in: hFile=0x1fc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0252.237] ReadFile (in: hFile=0x208, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0252.237] WriteFile (in: hFile=0x1fc, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0252.237] CloseHandle (hObject=0x208) returned 1 [0252.237] CloseHandle (hObject=0x1fc) returned 1 [0252.239] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.265] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.265] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x92c4fc93, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92c4fc93, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xb, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e710 [0252.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x92c4fc93, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92c4fc93, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xb, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0252.265] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0252.266] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0252.267] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0252.267] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92849c84, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92849c84, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92849c84, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0252.268] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92849c84, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92849c84, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92849c84, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0252.268] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92849c84, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92849c84, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92849c84, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0252.269] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0252.269] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a40a93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0252.269] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a40a93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0252.269] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a40a93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0252.269] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a40a93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0252.269] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0252.270] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a1a852, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0252.270] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a1a852, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0252.270] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a1a852, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0252.270] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a1a852, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0252.270] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0252.270] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a1a852, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0252.271] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.271] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557f750e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", cAlternateFileName="MICROS~1.CLO")) returned 1 [0252.271] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557f750e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0252.271] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557f750e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0252.272] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0252.272] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0252.273] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.273] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0252.273] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0252.274] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.274] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0252.274] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0252.274] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0252.274] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0252.275] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.275] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0252.275] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.275] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0252.275] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0252.275] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.275] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0252.275] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0252.276] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="Temp", cAlternateFileName="")) returned 1 [0252.276] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0252.276] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.276] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0252.276] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0252.276] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="Temp", cAlternateFileName="")) returned 0 [0252.276] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0252.277] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0252.277] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0252.277] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.277] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0252.277] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0252.281] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0252.281] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0252.282] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.282] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0252.282] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0252.283] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557f750e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x557f750e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x557f750e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0252.283] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557f750e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x557f750e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x557f750e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0252.283] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557f750e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x557f750e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x557f750e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.283] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557f750e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x557f750e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x557f750e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0252.283] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0252.283] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0252.283] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0252.284] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.284] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0252.285] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0252.287] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.287] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x55a59bef, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x55a59bef, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0252.287] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.287] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.287] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.287] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.287] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.287] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0252.288] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0252.288] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.288] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0252.289] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.291] WriteFile (in: hFile=0x20c, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.293] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.293] WriteFile (in: hFile=0x20c, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.293] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.293] WriteFile (in: hFile=0x20c, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.294] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.294] WriteFile (in: hFile=0x20c, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.294] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.294] WriteFile (in: hFile=0x20c, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.295] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.295] WriteFile (in: hFile=0x20c, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.295] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.295] WriteFile (in: hFile=0x20c, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.295] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.296] WriteFile (in: hFile=0x20c, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.296] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0252.296] WriteFile (in: hFile=0x20c, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0252.296] CloseHandle (hObject=0x208) returned 1 [0252.296] CloseHandle (hObject=0x20c) returned 1 [0252.298] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.299] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.299] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x55a59bef, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x55a59bef, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x554c0c, dwReserved1=0xbd, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e510 [0252.299] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x55a59bef, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x55a59bef, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x554c0c, dwReserved1=0xbd, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0252.299] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0252.300] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 1 [0252.301] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0xffffffff [0252.301] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x556ed0, dwReserved1=0x55492c, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0252.345] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0252.346] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0252.346] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0252.347] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0252.347] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0252.347] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5581d776, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0252.347] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5581d776, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0252.347] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5581d776, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0252.347] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5581d776, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0252.347] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0252.348] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0252.348] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x92cc2437, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0252.350] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x92cc2437, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0252.350] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0252.351] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x930098c6, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x930098c6, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0252.351] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.351] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.351] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.351] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.351] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.351] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0252.351] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0252.351] VirtualAlloc (lpAddress=0x21f8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21f8000 [0252.352] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.352] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0252.353] ReadFile (in: hFile=0x1fc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0252.355] WriteFile (in: hFile=0x20c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0252.357] ReadFile (in: hFile=0x1fc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0252.357] WriteFile (in: hFile=0x20c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0252.357] ReadFile (in: hFile=0x1fc, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0252.357] WriteFile (in: hFile=0x20c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0252.357] CloseHandle (hObject=0x1fc) returned 1 [0252.357] CloseHandle (hObject=0x20c) returned 1 [0252.359] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.359] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.359] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x930098c6, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x930098c6, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e410 [0252.360] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x930098c6, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x930098c6, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0252.360] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.360] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0252.361] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0252.361] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92c4fc93, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92c4fc93, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92c4fc93, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0252.362] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92c4fc93, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92c4fc93, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92c4fc93, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0252.363] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92c4fc93, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92c4fc93, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92c4fc93, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0252.363] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0252.363] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0252.363] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0252.363] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0252.364] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0252.364] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0252.364] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5581d776, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0252.364] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5581d776, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0252.366] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5581d776, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0252.366] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5581d776, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0252.366] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0252.366] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5581d776, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0252.366] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0252.366] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9bfe3d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy", cAlternateFileName="MICROS~1.CON")) returned 1 [0252.366] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9bfe3d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0252.367] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9bfe3d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0252.367] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0252.367] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0252.367] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.367] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9ef3472c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9ef3472c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="BackgroundTransferApi", cAlternateFileName="BACKGR~1")) returned 1 [0252.367] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\backgroundtransferapi\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9ef3472c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9ef3472c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0079, dwReserved1=0x2e002a, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0252.370] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9ef3472c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9ef3472c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0079, dwReserved1=0x2e002a, cFileName="..", cAlternateFileName="")) returned 1 [0252.371] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16097cd3, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x16097cd3, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x16097cd3, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0079, dwReserved1=0x2e002a, cFileName="09d16dcf-26b1-4e4c-b45c-f1d5b865d3a2.up_meta_body", cAlternateFileName="09D16D~2.UP_")) returned 1 [0252.372] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x479f5585, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x479f5585, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x479f5585, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0031, dwReserved1=0x650034, cFileName="35ee283b-d7b2-4171-b8a7-0ffb7cca7d28.up_meta_body", cAlternateFileName="35EE28~2.UP_")) returned 1 [0252.373] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x479f5585, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x479f5585, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x479f5585, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0031, dwReserved1=0x650034, cFileName="35ee283b-d7b2-4171-b8a7-0ffb7cca7d28.up_meta_body", cAlternateFileName="35EE28~2.UP_")) returned 0 [0252.373] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0252.374] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9fb3dbdb, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x9fb3dbdb, ftLastWriteTime.dwHighDateTime=0x1d8596d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x37642d62, dwReserved1=0x342d3262, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0252.374] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9fb3dbdb, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x9fb3dbdb, ftLastWriteTime.dwHighDateTime=0x1d8596d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0032, dwReserved1=0x310034, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0252.375] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9fb3dbdb, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x9fb3dbdb, ftLastWriteTime.dwHighDateTime=0x1d8596d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0032, dwReserved1=0x310034, cFileName="..", cAlternateFileName="")) returned 1 [0252.375] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x735b21f3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x735b21f3, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x735b21f3, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0032, dwReserved1=0x310034, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0252.375] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.376] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.376] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.376] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0252.376] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat")) returned 0x2026 [0252.376] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.377] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.378] ReadFile (in: hFile=0x1fc, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0252.378] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0252.378] CloseHandle (hObject=0x1fc) returned 1 [0252.379] CloseHandle (hObject=0x208) returned 1 [0252.379] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.379] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.380] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x735b21f3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x735b21f3, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x735b21f3, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e750 [0252.380] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x735b21f3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x735b21f3, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x735b21f3, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.380] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0252.380] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat")) returned 1 [0252.381] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat")) returned 0xffffffff [0252.381] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9fb3c83b, ftCreationTime.dwHighDateTime=0x1d8596d, ftLastAccessTime.dwLowDateTime=0x9e0ebd59, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9e0ebd59, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EJNCOSRA", cAlternateFileName="")) returned 1 [0252.381] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\EJNCOSRA\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\ejncosra\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9fb3c83b, ftCreationTime.dwHighDateTime=0x1d8596d, ftLastAccessTime.dwLowDateTime=0x9e0ebd59, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9e1f26b8, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0252.381] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9fb3c83b, ftCreationTime.dwHighDateTime=0x1d8596d, ftLastAccessTime.dwLowDateTime=0x9e0ebd59, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9e1f26b8, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0252.381] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9fb3c83b, ftCreationTime.dwHighDateTime=0x1d8596d, ftLastAccessTime.dwLowDateTime=0x9e0ebd59, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9e1f26b8, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0252.381] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0252.381] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9fb3c83b, ftCreationTime.dwHighDateTime=0x1d8596d, ftLastAccessTime.dwLowDateTime=0x9e0ebd59, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9e0ebd59, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EJNCOSRA", cAlternateFileName="")) returned 0 [0252.382] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0252.382] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x736247ce, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x736247ce, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7241, dwReserved1=0x342d7461, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0252.382] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x736247ce, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x736247ce, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0252.382] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x736247ce, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x736247ce, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.382] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x736247ce, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x736247ce, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x736247ce, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0252.382] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.382] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.383] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.383] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0252.383] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat")) returned 0x2026 [0252.383] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.384] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.384] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0252.384] WriteFile (in: hFile=0x1fc, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0252.384] CloseHandle (hObject=0x208) returned 1 [0252.384] CloseHandle (hObject=0x1fc) returned 1 [0252.385] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.385] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.385] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x736247ce, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x736247ce, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x736247ce, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5503c4, dwReserved1=0x1e, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e410 [0252.385] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x736247ce, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x736247ce, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x736247ce, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5503c4, dwReserved1=0x1e, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.385] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.386] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat")) returned 1 [0252.386] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat")) returned 0xffffffff [0252.386] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x736247ce, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x736247ce, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x736247ce, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.386] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0252.386] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x342d7461, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0252.386] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0252.387] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.387] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x75bd797b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BackgroundTransferApi", cAlternateFileName="BACKGR~1")) returned 1 [0252.387] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x75bd797b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0252.387] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x75bd797b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0252.387] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0252.387] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.387] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.388] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.388] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.388] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.388] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0252.388] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat")) returned 0x2026 [0252.388] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.388] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0252.389] ReadFile (in: hFile=0x208, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0252.389] WriteFile (in: hFile=0x204, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0252.389] CloseHandle (hObject=0x208) returned 1 [0252.389] CloseHandle (hObject=0x204) returned 1 [0252.390] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.390] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.390] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5503c4, dwReserved1=0x19, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e490 [0252.390] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5503c4, dwReserved1=0x19, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.390] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0252.391] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat")) returned 1 [0252.391] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat")) returned 0xffffffff [0252.391] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.391] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0252.391] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x7461, cFileName="BackgroundTransferApiGroup", cAlternateFileName="BACKGR~2")) returned 1 [0252.391] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0252.392] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0252.392] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0252.392] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0252.392] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x7461, cFileName="BackgroundTransferApiGroup", cAlternateFileName="BACKGR~2")) returned 0 [0252.392] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.392] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7396bab9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54646e75, dwReserved1=0x736e6172, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0252.392] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7396bab9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x7461, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0252.393] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7396bab9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x7461, cFileName="..", cAlternateFileName="")) returned 1 [0252.393] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7396bab9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x7461, cFileName="Windows", cAlternateFileName="")) returned 1 [0252.393] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\windows\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7396bab9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0252.393] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7396bab9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0252.393] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7396bab9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0252.393] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0252.393] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7396bab9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x7461, cFileName="Windows", cAlternateFileName="")) returned 0 [0252.393] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.394] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7f62ab, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54646e75, dwReserved1=0x736e6172, cFileName="Temp", cAlternateFileName="")) returned 1 [0252.394] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7f62ab, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x7461, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0252.394] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7f62ab, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x7461, cFileName="..", cAlternateFileName="")) returned 1 [0252.394] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7f62ab, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x7461, cFileName="..", cAlternateFileName="")) returned 0 [0252.394] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0252.394] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7f62ab, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54646e75, dwReserved1=0x736e6172, cFileName="Temp", cAlternateFileName="")) returned 0 [0252.394] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0252.394] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7d0053, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79727466, dwReserved1=0x736e6172, cFileName="AppData", cAlternateFileName="")) returned 1 [0252.395] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7d0053, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54646e75, dwReserved1=0x736e6172, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0252.395] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7d0053, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54646e75, dwReserved1=0x736e6172, cFileName="..", cAlternateFileName="")) returned 1 [0252.395] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7d0053, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54646e75, dwReserved1=0x736e6172, cFileName="..", cAlternateFileName="")) returned 0 [0252.395] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0252.395] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79727466, dwReserved1=0x736e6172, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0252.395] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54646e75, dwReserved1=0x736e6172, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0252.405] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54646e75, dwReserved1=0x736e6172, cFileName="..", cAlternateFileName="")) returned 1 [0252.405] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54646e75, dwReserved1=0x736e6172, cFileName="..", cAlternateFileName="")) returned 0 [0252.405] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0252.405] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x1205e7f4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1205e7f4, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79727466, dwReserved1=0x736e6172, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0252.406] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x1205e7f4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1205e7f4, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54646e75, dwReserved1=0x736e6172, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0252.406] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x1205e7f4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1205e7f4, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54646e75, dwReserved1=0x736e6172, cFileName="..", cAlternateFileName="")) returned 1 [0252.406] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72848ccf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9f1bcfcd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9f1bcfcd, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54646e75, dwReserved1=0x736e6172, cFileName="Assets", cAlternateFileName="")) returned 1 [0252.406] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72848ccf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9f1bcfcd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9f1bcfcd, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x7461, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0252.408] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72848ccf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9f1bcfcd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9f1bcfcd, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x7461, cFileName="..", cAlternateFileName="")) returned 1 [0252.409] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9155d1de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9155d1de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9259b185, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xd5d0, dwReserved0=0x642e7265, dwReserved1=0x7461, cFileName="17babfd54fdf4809aa9630faf6e0bb5e2ed3436ae4e34b458c9754cc06c14aea", cAlternateFileName="17BABF~1")) returned 1 [0252.410] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9161bed5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9161bed5, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9259b185, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x9cf9, dwReserved0=0x380034, dwReserved1=0x390030, cFileName="24c2b0732aff4f44b3c61ce6b30608d9c4122c719d4bd400e1a9516f85cd10ed", cAlternateFileName="24C2B0~1")) returned 1 [0252.411] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9da31bbd, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x9da31bbd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9e394f8b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x86ef6, dwReserved0=0x660034, dwReserved1=0x340034, cFileName="5a3c0019c63fce8b1e335b2bf9a2488d6cbcde2482f680e4d4cae384284dfdf1", cAlternateFileName="5A3C00~1")) returned 1 [0252.412] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f36cad, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f36cad, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7afe28de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x5b9, dwReserved0=0x650063, dwReserved1=0x620038, cFileName="6b7dd9dad158021e2c664e8b60be0b1711e94c497879b603276f90f91602c813", cAlternateFileName="6B7DD9~1")) returned 1 [0252.413] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16d42383, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x16d42383, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x189de896, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x45abc, dwReserved0=0x320030, dwReserved1=0x650031, cFileName="7eba64f56aad18c10e357973056c3caf6ef35fb7f7100d252c77f5fd6e020b0b", cAlternateFileName="7EBA64~1")) returned 1 [0252.414] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16e999f7, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x16e999f7, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x189de896, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5c2b, dwReserved0=0x380031, dwReserved1=0x310063, cFileName="a1326e26a9c75c2fad448d7456cf554d9d5972e95ca085fc3b1758b94f8b3c3a", cAlternateFileName="A1326E~1")) returned 1 [0252.415] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76eea7aa, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76eea7aa, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7af9631d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x630035, dwReserved1=0x660032, cFileName="b71dabef83821ac1436c6e54eed36510be63ff7e106437b4f3d5fa2b5880d0ea", cAlternateFileName="B71DAB~1")) returned 1 [0252.416] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f36cad, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f36cad, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7af9631d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x1736, dwReserved0=0x610031, dwReserved1=0x310063, cFileName="be98ffca3056276ead4f2650d3e81096031e3b87ef1da0c6573ae133cd6e9c90", cAlternateFileName="BE98FF~1")) returned 1 [0252.417] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b587918, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b587918, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1bd6d6ca, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x8af46, dwReserved0=0x370032, dwReserved1=0x650036, cFileName="c20a563add1da520b325d5e8931c544186b28de2119ed5fc89f1574be77a3785", cAlternateFileName="C20A56~1")) returned 1 [0252.418] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ddacdb, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x16ddacdb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x189de896, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4293, dwReserved0=0x350061, dwReserved1=0x300032, cFileName="ce014256b9924bf1ec3c8dfb7fcbf7d586f9e2f90f6b8a92bd78b31eb8125a7c", cAlternateFileName="CE0142~1")) returned 1 [0252.419] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916682d6, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x916682d6, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9259b185, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x40a1, dwReserved0=0x620034, dwReserved1=0x310066, cFileName="d027c5cef9dc76de02d35ff5ba3b53e776c0c260af04c923ad7204ea18aeb0b8", cAlternateFileName="D027C5~1")) returned 1 [0252.420] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16c5d686, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x16c5d686, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x189de896, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x360037, dwReserved1=0x650064, cFileName="d6fd9626a9f1a7203e5570760d3b44b59cf06b72d33599f7dee7974ef60354b7", cAlternateFileName="D6FD96~1")) returned 1 [0252.421] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b561887, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b561887, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1bd6d6ca, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x8b755, dwReserved0=0x370061, dwReserved1=0x300032, cFileName="d9b1cc42d6555e7d87dc3f3c82bbffb16ebccd3e1f7f0e4c61d277939b3b2bdd", cAlternateFileName="D9B1CC~1")) returned 1 [0252.422] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9da31bbd, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x9da31bbd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9e394f8b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x70fa2, dwReserved0=0x650035, dwReserved1=0x640037, cFileName="e15fc565de1c80d66442b842e697ef31627957ef7d2e44997799f242b375c789", cAlternateFileName="E15FC5~1")) returned 1 [0252.423] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9da31bbd, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x9da31bbd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9e394f8b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x70fa2, dwReserved0=0x650035, dwReserved1=0x640037, cFileName="e15fc565de1c80d66442b842e697ef31627957ef7d2e44997799f242b375c789", cAlternateFileName="E15FC5~1")) returned 0 [0252.424] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0252.425] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x728bb373, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x728bb373, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31656435, dwReserved1=0x64303863, cFileName="ContentManagementSDK", cAlternateFileName="CONTEN~1")) returned 1 [0252.425] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x728bb373, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x728bb373, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300038, dwReserved1=0x360064, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0252.425] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x728bb373, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x728bb373, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300038, dwReserved1=0x360064, cFileName="..", cAlternateFileName="")) returned 1 [0252.425] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x773af2d3, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x773af2d3, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300038, dwReserved1=0x360064, cFileName="Creatives", cAlternateFileName="CREATI~1")) returned 1 [0252.426] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x773af2d3, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x773af2d3, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0079, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0252.426] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x773af2d3, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x773af2d3, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0079, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.426] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77126bb1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x77126bb1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x77126bb1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0079, dwReserved1=0x1d00160b, cFileName="202911", cAlternateFileName="")) returned 1 [0252.426] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77126bb1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x77126bb1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x77126bb1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0079, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0252.426] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77126bb1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x77126bb1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x77126bb1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0079, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.426] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77126bb1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x77126bb1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbfb915, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0079, dwReserved1=0x1d00160b, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 1 [0252.427] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.427] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.427] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.427] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0252.427] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\eventbeacons.dat")) returned 0x20 [0252.428] VirtualAlloc (lpAddress=0x21fc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x21fc000 [0252.428] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.429] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.435] ReadFile (in: hFile=0x208, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.435] WriteFile (in: hFile=0x210, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.435] CloseHandle (hObject=0x208) returned 1 [0252.435] CloseHandle (hObject=0x210) returned 1 [0252.435] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\eventbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.436] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.436] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\eventbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77126bb1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x77126bb1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbfb915, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0x55e410 [0252.436] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77126bb1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x77126bb1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbfb915, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0 [0252.436] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.436] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\eventbeacons.dat")) returned 1 [0252.437] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\eventbeacons.dat")) returned 0xffffffff [0252.437] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77126bb1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x77126bb1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbfb915, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 1 [0252.437] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.437] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.437] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.437] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0252.438] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\imprbeacons.dat")) returned 0x20 [0252.438] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.438] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.439] ReadFile (in: hFile=0x210, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.439] WriteFile (in: hFile=0x208, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.439] CloseHandle (hObject=0x210) returned 1 [0252.439] CloseHandle (hObject=0x208) returned 1 [0252.440] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\imprbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.440] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.440] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\imprbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77126bb1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x77126bb1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbfb915, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0x55e410 [0252.441] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77126bb1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x77126bb1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbfb915, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.441] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.441] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\imprbeacons.dat")) returned 1 [0252.441] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\imprbeacons.dat")) returned 0xffffffff [0252.441] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77126bb1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x77126bb1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbfb915, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.441] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0252.442] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77231c7c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xf58dc2a4, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf58dc2a4, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="202914", cAlternateFileName="")) returned 1 [0252.442] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77231c7c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xf58dc2a4, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf58dc2a4, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0252.459] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77231c7c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xf58dc2a4, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf58dc2a4, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="..", cAlternateFileName="")) returned 1 [0252.459] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bc0725, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf1bc0725, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf1c7f1c3, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0xc80, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="1613478815", cAlternateFileName="161347~1")) returned 1 [0252.460] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77231c7c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x77231c7c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc47e01, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 1 [0252.460] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.460] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.460] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.460] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0252.461] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\eventbeacons.dat")) returned 0x20 [0252.461] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.462] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.462] ReadFile (in: hFile=0x208, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.462] WriteFile (in: hFile=0x210, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.463] CloseHandle (hObject=0x208) returned 1 [0252.463] CloseHandle (hObject=0x210) returned 1 [0252.463] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\eventbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.464] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.464] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\eventbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77231c7c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x77231c7c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc47e01, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0x55e890 [0252.464] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77231c7c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x77231c7c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc47e01, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0 [0252.464] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0252.464] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\eventbeacons.dat")) returned 1 [0252.465] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\eventbeacons.dat")) returned 0xffffffff [0252.465] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77231c7c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xf583fee6, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x9dc47e01, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 1 [0252.465] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.465] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.465] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.465] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0252.465] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\imprbeacons.dat")) returned 0x20 [0252.466] VirtualAlloc (lpAddress=0x2200000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2200000 [0252.466] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.467] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.467] ReadFile (in: hFile=0x210, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.467] WriteFile (in: hFile=0x208, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.467] CloseHandle (hObject=0x210) returned 1 [0252.467] CloseHandle (hObject=0x208) returned 1 [0252.468] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\imprbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.468] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.468] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\imprbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77231c7c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xf583fee6, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x9dc47e01, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0x55e490 [0252.469] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77231c7c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xf583fee6, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x9dc47e01, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.469] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0252.469] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\imprbeacons.dat")) returned 1 [0252.469] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\imprbeacons.dat")) returned 0xffffffff [0252.469] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77231c7c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xf583fee6, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x9dc47e01, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.469] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0252.470] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771bf51a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9c8c2b0a, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9c8c2b0a, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="209562", cAlternateFileName="")) returned 1 [0252.470] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771bf51a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9c8c2b0a, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9c8c2b0a, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0252.471] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771bf51a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9c8c2b0a, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9c8c2b0a, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="..", cAlternateFileName="")) returned 1 [0252.471] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1826b35f, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1826b35f, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x18624c83, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4640, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="1613045947", cAlternateFileName="161304~1")) returned 1 [0252.472] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36536e, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x9c3d7a51, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9c47044e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x484c, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="1662368714", cAlternateFileName="166236~1")) returned 1 [0252.472] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771bf51a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771bf51a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc21d7e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 1 [0252.473] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.473] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.473] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.473] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.473] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.473] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0252.473] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat")) returned 0x20 [0252.475] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.475] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.476] ReadFile (in: hFile=0x208, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.476] WriteFile (in: hFile=0x210, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.476] CloseHandle (hObject=0x208) returned 1 [0252.476] CloseHandle (hObject=0x210) returned 1 [0252.477] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.477] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.477] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771bf51a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771bf51a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc21d7e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0x55e650 [0252.477] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771bf51a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771bf51a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc21d7e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0 [0252.478] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0252.478] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat")) returned 1 [0252.478] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat")) returned 0xffffffff [0252.478] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771bf51a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771bf51a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc21d7e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 1 [0252.479] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.479] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.479] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.479] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0252.479] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat")) returned 0x20 [0252.480] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.480] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.480] ReadFile (in: hFile=0x210, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.480] WriteFile (in: hFile=0x208, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.480] CloseHandle (hObject=0x210) returned 1 [0252.481] CloseHandle (hObject=0x208) returned 1 [0252.481] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.481] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.482] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771bf51a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771bf51a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc21d7e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0x55e890 [0252.482] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771bf51a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771bf51a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc21d7e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.482] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0252.482] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat")) returned 1 [0252.482] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat")) returned 0xffffffff [0252.483] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771bf51a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771bf51a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc21d7e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.483] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0252.483] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771e56f1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771e56f1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x771e56f1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="209776", cAlternateFileName="")) returned 1 [0252.483] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771e56f1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771e56f1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x771e56f1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0252.483] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771e56f1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771e56f1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x771e56f1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="..", cAlternateFileName="")) returned 1 [0252.483] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771e56f1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771e56f1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc47e01, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 1 [0252.483] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.484] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.484] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.484] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0252.484] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat")) returned 0x20 [0252.484] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.485] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.487] ReadFile (in: hFile=0x208, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.487] WriteFile (in: hFile=0x210, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.487] CloseHandle (hObject=0x208) returned 1 [0252.487] CloseHandle (hObject=0x210) returned 1 [0252.487] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.488] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.488] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771e56f1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771e56f1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc47e01, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0x55e410 [0252.488] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771e56f1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771e56f1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc47e01, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0 [0252.488] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.488] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat")) returned 1 [0252.489] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat")) returned 0xffffffff [0252.489] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771e56f1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771e56f1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc47e01, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 1 [0252.489] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.489] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.490] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.490] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0252.490] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat")) returned 0x20 [0252.490] VirtualAlloc (lpAddress=0x2204000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2204000 [0252.491] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.491] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.491] ReadFile (in: hFile=0x210, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.491] WriteFile (in: hFile=0x208, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.491] CloseHandle (hObject=0x210) returned 1 [0252.491] CloseHandle (hObject=0x208) returned 1 [0252.492] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.492] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.492] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771e56f1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771e56f1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc47e01, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0x55e750 [0252.493] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771e56f1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771e56f1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc47e01, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.493] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0252.493] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat")) returned 1 [0252.493] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat")) returned 0xffffffff [0252.494] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x771e56f1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x771e56f1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc47e01, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.494] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0252.494] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773af2d3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9bdf9b8e, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9bdf9b8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="209809", cAlternateFileName="")) returned 1 [0252.494] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773af2d3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9bdf9b8e, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9bdf9b8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0252.495] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773af2d3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9bdf9b8e, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9bdf9b8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="..", cAlternateFileName="")) returned 1 [0252.495] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31be3083, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0x31bef467, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x31cc45c2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="1659532139", cAlternateFileName="165953~1")) returned 1 [0252.496] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x997ade47, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x997ade47, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x998467f6, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="1662368709", cAlternateFileName="166236~1")) returned 1 [0252.496] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773af2d3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x773af2d3, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc6df8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 1 [0252.497] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.497] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.497] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.497] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0252.497] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat")) returned 0x20 [0252.497] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.498] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.498] ReadFile (in: hFile=0x208, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.498] WriteFile (in: hFile=0x210, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.498] CloseHandle (hObject=0x208) returned 1 [0252.499] CloseHandle (hObject=0x210) returned 1 [0252.499] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.499] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.500] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773af2d3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x773af2d3, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc6df8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0x55e890 [0252.500] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773af2d3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x773af2d3, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc6df8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0 [0252.500] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0252.500] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat")) returned 1 [0252.500] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat")) returned 0xffffffff [0252.501] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773af2d3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9bd61157, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9dc6df8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 1 [0252.501] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.501] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.501] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.501] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0252.501] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat")) returned 0x20 [0252.519] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.519] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.520] ReadFile (in: hFile=0x210, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.520] WriteFile (in: hFile=0x208, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.520] CloseHandle (hObject=0x210) returned 1 [0252.520] CloseHandle (hObject=0x208) returned 1 [0252.521] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.521] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.522] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773af2d3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9bd61157, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9dc6df8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0x55e490 [0252.522] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773af2d3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9bd61157, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9dc6df8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.522] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0252.522] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat")) returned 1 [0252.522] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat")) returned 0xffffffff [0252.523] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773af2d3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9bd61157, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9dc6df8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.523] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.523] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x772f065b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x4e1040c2, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x4e1040c2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="209857", cAlternateFileName="")) returned 1 [0252.523] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x772f065b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x4e1040c2, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x4e1040c2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0252.524] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x772f065b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x4e1040c2, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x4e1040c2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="..", cAlternateFileName="")) returned 1 [0252.524] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x151d75c6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x151d75c6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x153086e5, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x2d0a, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="1613045942", cAlternateFileName="161304~1")) returned 1 [0252.525] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772f065b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x772f065b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc6df8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 1 [0252.525] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.525] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.535] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.536] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0252.536] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat")) returned 0x20 [0252.536] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.537] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.538] ReadFile (in: hFile=0x208, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.538] WriteFile (in: hFile=0x210, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.538] CloseHandle (hObject=0x208) returned 1 [0252.538] CloseHandle (hObject=0x210) returned 1 [0252.539] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.539] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.539] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772f065b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x772f065b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc6df8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0x55e410 [0252.540] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772f065b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x772f065b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc6df8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0 [0252.540] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.540] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat")) returned 1 [0252.540] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat")) returned 0xffffffff [0252.540] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772f065b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x772f065b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc6df8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 1 [0252.541] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.541] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.541] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.541] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.541] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.541] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0252.541] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat")) returned 0x20 [0252.541] VirtualAlloc (lpAddress=0x2208000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2208000 [0252.542] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.542] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.543] ReadFile (in: hFile=0x210, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.543] WriteFile (in: hFile=0x208, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.543] CloseHandle (hObject=0x210) returned 1 [0252.543] CloseHandle (hObject=0x208) returned 1 [0252.543] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.544] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.544] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772f065b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x772f065b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc6df8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0x55e710 [0252.544] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772f065b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x772f065b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc6df8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.544] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0252.544] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat")) returned 1 [0252.545] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat")) returned 0xffffffff [0252.545] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772f065b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x772f065b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dc6df8e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.545] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0252.545] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x98dc3f87, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x98dc3f87, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="210469", cAlternateFileName="")) returned 1 [0252.545] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x98dc3f87, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x98dc3f87, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0252.546] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x98dc3f87, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x98dc3f87, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="..", cAlternateFileName="")) returned 1 [0252.546] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d3122, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x738d3122, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x738d3122, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xd4b4, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="1613044382", cAlternateFileName="161304~1")) returned 1 [0252.547] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x97553dd9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbd5692, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 1 [0252.547] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.547] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.547] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.547] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.547] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.547] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0252.548] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat")) returned 0x20 [0252.548] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.548] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.549] ReadFile (in: hFile=0x208, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.549] WriteFile (in: hFile=0x210, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.549] CloseHandle (hObject=0x208) returned 1 [0252.549] CloseHandle (hObject=0x210) returned 1 [0252.549] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.550] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.550] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x97553dd9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbd5692, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0x55e410 [0252.550] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x97553dd9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbd5692, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0 [0252.550] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.550] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat")) returned 1 [0252.551] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat")) returned 0xffffffff [0252.551] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x98d9db87, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbd5692, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 1 [0252.551] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.551] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.551] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.551] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.552] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0252.564] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat")) returned 0x20 [0252.564] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.565] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.565] ReadFile (in: hFile=0x210, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.566] WriteFile (in: hFile=0x208, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.566] CloseHandle (hObject=0x210) returned 1 [0252.566] CloseHandle (hObject=0x208) returned 1 [0252.566] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.567] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.567] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x98d9db87, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbd5692, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0x55e510 [0252.567] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x98d9db87, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbd5692, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.567] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0252.567] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat")) returned 1 [0252.568] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat")) returned 0xffffffff [0252.568] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x98d9db87, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbd5692, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.568] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0252.568] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770da6a8, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9a33918c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9a33918c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="210509", cAlternateFileName="")) returned 1 [0252.568] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770da6a8, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9a33918c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9a33918c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0252.569] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770da6a8, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9a33918c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9a33918c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="..", cAlternateFileName="")) returned 1 [0252.569] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7af4a068, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7af4a068, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7af70297, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x7702, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="1613044395", cAlternateFileName="161304~1")) returned 1 [0252.570] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x770da6a8, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9a16f532, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbfb915, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 1 [0252.570] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.570] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.571] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.571] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0252.571] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat")) returned 0x20 [0252.575] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.576] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.577] ReadFile (in: hFile=0x208, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.577] WriteFile (in: hFile=0x210, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.577] CloseHandle (hObject=0x208) returned 1 [0252.577] CloseHandle (hObject=0x210) returned 1 [0252.577] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.578] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.578] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x770da6a8, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9a16f532, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbfb915, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0x55e650 [0252.578] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x770da6a8, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9a16f532, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbfb915, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0 [0252.578] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0252.578] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat")) returned 1 [0252.579] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat")) returned 0xffffffff [0252.579] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x770da6a8, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9a33918c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbfb915, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 1 [0252.579] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.579] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.579] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.579] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0252.580] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat")) returned 0x20 [0252.580] VirtualAlloc (lpAddress=0x220c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x220c000 [0252.580] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.581] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.581] ReadFile (in: hFile=0x210, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.581] WriteFile (in: hFile=0x208, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.581] CloseHandle (hObject=0x210) returned 1 [0252.581] CloseHandle (hObject=0x208) returned 1 [0252.582] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.582] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.582] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x770da6a8, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9a33918c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbfb915, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0x55e2d0 [0252.583] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x770da6a8, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9a33918c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbfb915, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.583] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0252.710] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat")) returned 1 [0252.711] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat")) returned 0xffffffff [0252.711] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x770da6a8, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9a33918c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9dbfb915, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.711] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0252.712] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f36cad, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f5cee9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x76f5cee9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="214513", cAlternateFileName="")) returned 1 [0252.712] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f36cad, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f5cee9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x76f5cee9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0252.713] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f36cad, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f5cee9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x76f5cee9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="..", cAlternateFileName="")) returned 1 [0252.713] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f5cee9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f5cee9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9db630db, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 1 [0252.713] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.713] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.713] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.713] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0252.713] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat")) returned 0x20 [0252.714] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.714] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.717] ReadFile (in: hFile=0x208, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.717] WriteFile (in: hFile=0x210, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.717] CloseHandle (hObject=0x208) returned 1 [0252.717] CloseHandle (hObject=0x210) returned 1 [0252.717] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.718] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.718] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f5cee9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f5cee9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9db630db, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0x55e790 [0252.718] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f5cee9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f5cee9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9db630db, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="eventbeacons.dat", cAlternateFileName="EVENTB~1.DAT")) returned 0 [0252.718] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0252.719] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat")) returned 1 [0252.719] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat")) returned 0xffffffff [0252.719] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f5cee9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f5cee9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9db630db, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 1 [0252.719] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.719] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.720] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.720] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0252.720] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat")) returned 0x20 [0252.720] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.720] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.721] ReadFile (in: hFile=0x210, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.721] WriteFile (in: hFile=0x208, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.721] CloseHandle (hObject=0x210) returned 1 [0252.721] CloseHandle (hObject=0x208) returned 1 [0252.722] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.722] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.722] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f5cee9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f5cee9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9db630db, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0x55e790 [0252.722] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f5cee9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f5cee9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9db630db, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.722] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0252.723] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat")) returned 1 [0252.723] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat")) returned 0xffffffff [0252.723] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f5cee9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f5cee9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9db630db, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x559b08, dwReserved1=0x55028c, cFileName="imprbeacons.dat", cAlternateFileName="IMPRBE~1.DAT")) returned 0 [0252.723] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0252.724] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f36cad, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f5cee9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x76f5cee9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="214513", cAlternateFileName="")) returned 0 [0252.724] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0252.724] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x773af2d3, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x773af2d3, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300038, dwReserved1=0x360064, cFileName="Creatives", cAlternateFileName="CREATI~1")) returned 0 [0252.724] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0252.724] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7480620a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9f1bcfcd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9f1bcfcd, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31657365, dwReserved1=0x64303863, cFileName="StagedAssets", cAlternateFileName="STAGED~1")) returned 1 [0252.724] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\StagedAssets\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\stagedassets\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7480620a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9f1bcfcd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9f1bcfcd, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300038, dwReserved1=0x360064, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0252.725] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7480620a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9f1bcfcd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9f1bcfcd, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300038, dwReserved1=0x360064, cFileName="..", cAlternateFileName="")) returned 1 [0252.725] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7480620a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9f1bcfcd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9f1bcfcd, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300038, dwReserved1=0x360064, cFileName="..", cAlternateFileName="")) returned 0 [0252.725] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0252.725] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11fc5e23, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13c38283, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x13c38283, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31657365, dwReserved1=0x64303863, cFileName="Tips", cAlternateFileName="")) returned 1 [0252.725] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Tips\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\tips\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11fc5e23, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13c38283, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x13c38283, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300038, dwReserved1=0x360064, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0252.725] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11fc5e23, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13c38283, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x13c38283, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300038, dwReserved1=0x360064, cFileName="..", cAlternateFileName="")) returned 1 [0252.725] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b2d0b9, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x13b2d0b9, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x189de896, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5c2b, dwReserved0=0x300038, dwReserved1=0x360064, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", cAlternateFileName="E9D217~1.XML")) returned 1 [0252.726] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c38283, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x13c38283, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x189de896, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4293, dwReserved0=0x2d0039, dwReserved1=0x370034, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", cAlternateFileName="E9D217~2.XML")) returned 1 [0252.727] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c38283, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x13c38283, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x189de896, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4293, dwReserved0=0x2d0039, dwReserved1=0x370034, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", cAlternateFileName="E9D217~2.XML")) returned 0 [0252.727] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0252.727] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11fc5e23, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13c38283, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x13c38283, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31657365, dwReserved1=0x64303863, cFileName="Tips", cAlternateFileName="")) returned 0 [0252.728] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0252.728] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9bfe3d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9bfe3d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74657373, dwReserved1=0x656d6573, cFileName="Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0252.728] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9bfe3d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9bfe3d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x66382d32, dwReserved1=0x342d3963, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0252.728] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9bfe3d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9bfe3d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x66382d32, dwReserved1=0x342d3963, cFileName="..", cAlternateFileName="")) returned 1 [0252.728] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9bfe3d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9e6062, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x66382d32, dwReserved1=0x342d3963, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0252.728] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9bfe3d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9e6062, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0039, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0252.729] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9bfe3d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9e6062, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0039, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.729] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x69ef5b53, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x8ab89962, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x2d0039, dwReserved1=0x1d00160b, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0252.729] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.729] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.729] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.729] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0252.729] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0252.730] VirtualAlloc (lpAddress=0x2210000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2210000 [0252.730] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0252.731] GetLastError () returned 0x20 [0252.731] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.731] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.732] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0xffffffff [0252.732] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x69ef5b53, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x8ab89962, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e790 [0252.732] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x69ef5b53, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x8ab89962, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0252.732] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0252.732] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0 [0252.732] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0252.732] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8a9e6062, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9e6062, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9e6062, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x571610, dwReserved1=0x2000002, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0252.733] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8a9e6062, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9e6062, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9e6062, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0252.734] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8a9e6062, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9e6062, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9e6062, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0252.734] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.734] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9bfe3d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9e6062, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x66382d32, dwReserved1=0x342d3963, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0252.734] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0252.734] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0252.735] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0252.735] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0252.735] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0252.735] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0252.735] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9b1cc602, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0252.735] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9b1cc602, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0252.736] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9b1cc602, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0252.736] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7d0053, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0252.736] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa0fdae76, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa0fdae76, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0252.736] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.736] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.737] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.737] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0252.737] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0252.737] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0252.737] GetLastError () returned 0x20 [0252.737] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0252.738] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.738] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.738] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa0fdae76, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa0fdae76, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x550370, dwReserved1=0xb, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e190 [0252.739] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa0fdae76, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa0fdae76, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x550370, dwReserved1=0xb, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0252.739] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0252.739] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat")) returned 0 [0252.744] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0252.744] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9b1cc602, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9b1cc602, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9b1cc602, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0252.745] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9b1cc602, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9b1cc602, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9b1cc602, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0252.746] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9b1cc602, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9b1cc602, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9b1cc602, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0252.746] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0252.746] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7d0053, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0252.746] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7d0053, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0252.747] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7d0053, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0252.747] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7d0053, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0252.747] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.747] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0252.747] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0252.747] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0252.747] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0252.747] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0252.748] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0252.748] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0252.748] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60629330, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60629330, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.Windows.Cortana_cw5n1h2txyewy", cAlternateFileName="MICROS~1.COR")) returned 1 [0252.748] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x607a6a92, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x607a6a92, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0252.748] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x607a6a92, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x607a6a92, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0252.748] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6e10e7a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e10e7a9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0252.748] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6e10e7a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e10e7a9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0252.749] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6e10e7a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e10e7a9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.749] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e10e7a9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e10e7a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e134a22, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="AppCache", cAlternateFileName="")) returned 1 [0252.749] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e10e7a9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e10e7a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e134a22, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0252.749] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e10e7a9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e10e7a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e134a22, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.749] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e134a22, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb4ccdcc, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0xb4ccdcc, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="C1J92J4X", cAlternateFileName="")) returned 1 [0252.749] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e134a22, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb4ccdcc, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0xb4ccdcc, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0252.749] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e134a22, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb4ccdcc, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0xb4ccdcc, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.750] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e180f7d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x989e4279, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x989e4279, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="1", cAlternateFileName="")) returned 1 [0252.750] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\1\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\1\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e180f7d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x989e4279, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x989e4279, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0252.753] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e180f7d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x989e4279, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x989e4279, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.753] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e180f7d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e180f7d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x59ebb0a5, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x42840, dwReserved0=0x2a002e, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_2[1].txt", cAlternateFileName="C__WIN~1.TXT")) returned 1 [0252.754] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e180f7d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e180f7d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x59ebb0a5, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x42840, dwReserved0=0x2a002e, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_2[1].txt", cAlternateFileName="C__WIN~1.TXT")) returned 0 [0252.754] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0252.756] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e28c015, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e2b228d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e2b228d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f73776f, dwReserved1=0x74737953, cFileName="2", cAlternateFileName="")) returned 1 [0252.756] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e28c015, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e2b228d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e2b228d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730079, dwReserved1=0x650074, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0252.758] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e28c015, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e2b228d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e2b228d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="..", cAlternateFileName="")) returned 1 [0252.758] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e28c015, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e28c015, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e28c015, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="appcache[1].man", cAlternateFileName="APPCAC~1.MAN")) returned 1 [0252.758] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e28c015, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e28c015, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e28c015, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61006d, dwReserved1=0x6e, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0252.759] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.759] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.759] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.759] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0252.759] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\container.dat")) returned 0x2026 [0252.760] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0252.761] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0252.767] ReadFile (in: hFile=0x214, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.767] WriteFile (in: hFile=0x218, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.767] CloseHandle (hObject=0x214) returned 1 [0252.767] CloseHandle (hObject=0x218) returned 1 [0252.768] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.769] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.769] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\container.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e28c015, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e28c015, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e28c015, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0xb, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e610 [0252.769] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e28c015, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e28c015, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e28c015, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0xb, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.769] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0252.769] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\container.dat")) returned 1 [0252.770] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\container.dat")) returned 0xffffffff [0252.770] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e28c015, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e28c015, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x64ab274a, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x4760, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_COOBE[1].html", cAlternateFileName="C__WIN~1.HTM")) returned 1 [0252.771] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.771] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.771] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.771] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0252.772] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_COOBE[1].html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_coobe[1].html")) returned 0x2020 [0252.772] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_COOBE[1].html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_coobe[1].html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0252.772] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_COOBE[1].html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_coobe[1].html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0252.773] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.775] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.777] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.778] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.779] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.779] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.779] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.779] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.779] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x760, lpOverlapped=0x0) returned 1 [0252.779] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x760, lpOverlapped=0x0) returned 1 [0252.780] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.780] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.780] CloseHandle (hObject=0x218) returned 1 [0252.780] CloseHandle (hObject=0x214) returned 1 [0252.783] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_COOBE[1].html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_coobe[1].html"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_COOBE[1].html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_coobe[1].html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.783] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_COOBE[1].html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_coobe[1].html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.783] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_COOBE[1].html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_coobe[1].html"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e28c015, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e28c015, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x64ab274a, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x4760, dwReserved0=0x554c0c, dwReserved1=0xc2, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_COOBE[1].html", cAlternateFileName="C__WIN~1.HTM")) returned 0x55e610 [0252.784] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e28c015, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e28c015, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x64ab274a, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x4760, dwReserved0=0x554c0c, dwReserved1=0xc2, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_COOBE[1].html", cAlternateFileName="C__WIN~1.HTM")) returned 0 [0252.784] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0252.784] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_COOBE[1].html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_coobe[1].html")) returned 1 [0252.786] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_COOBE[1].html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_coobe[1].html")) returned 0xffffffff [0252.786] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e2b228d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e2b228d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x39619610, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x19c2, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_CortanaIcon[1].png", cAlternateFileName="C__WIN~1.PNG")) returned 1 [0252.793] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.793] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.793] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.793] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.794] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0252.794] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_CortanaIcon[1].png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_cortanaicon[1].png")) returned 0x2020 [0252.794] VirtualAlloc (lpAddress=0x2214000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2214000 [0252.795] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_CortanaIcon[1].png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_cortanaicon[1].png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0252.795] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_CortanaIcon[1].png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_cortanaicon[1].png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0252.796] ReadFile (in: hFile=0x214, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.798] WriteFile (in: hFile=0x218, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.799] ReadFile (in: hFile=0x214, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x9c2, lpOverlapped=0x0) returned 1 [0252.799] WriteFile (in: hFile=0x218, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x9c2, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x9c2, lpOverlapped=0x0) returned 1 [0252.800] ReadFile (in: hFile=0x214, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.800] WriteFile (in: hFile=0x218, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.800] CloseHandle (hObject=0x214) returned 1 [0252.800] CloseHandle (hObject=0x218) returned 1 [0252.803] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_CortanaIcon[1].png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_cortanaicon[1].png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_CortanaIcon[1].png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_cortanaicon[1].png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.803] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_CortanaIcon[1].png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_cortanaicon[1].png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.804] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_CortanaIcon[1].png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_cortanaicon[1].png"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e2b228d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e2b228d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x39619610, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x19c2, dwReserved0=0x554c0c, dwReserved1=0xc0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_CortanaIcon[1].png", cAlternateFileName="C__WIN~1.PNG")) returned 0x55e910 [0252.804] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e2b228d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e2b228d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x39619610, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x19c2, dwReserved0=0x554c0c, dwReserved1=0xc0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_CortanaIcon[1].png", cAlternateFileName="C__WIN~1.PNG")) returned 0 [0252.804] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0252.804] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_CortanaIcon[1].png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_cortanaicon[1].png")) returned 1 [0252.806] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_CortanaIcon[1].png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\c__windows_systemapps_microsoft.windows.cortana_cw5n1h2txyewy_cache_coobe_cortanaicon[1].png")) returned 0xffffffff [0252.806] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e2b228d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e2b228d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x39619610, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x19c2, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_CortanaIcon[1].png", cAlternateFileName="C__WIN~1.PNG")) returned 0 [0252.806] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0252.806] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebd9357f, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec173241, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xec173241, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f73776f, dwReserved1=0x74737953, cFileName="6", cAlternateFileName="")) returned 1 [0252.806] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\6\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\6\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebd9357f, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec173241, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xec173241, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0252.807] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebd9357f, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec173241, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xec173241, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0252.807] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebd9357f, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebd9357f, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xebd9357f, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x1046, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="appcache[1].man", cAlternateFileName="APPCAC~1.MAN")) returned 1 [0252.807] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xebd9357f, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebd9357f, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xebd9357f, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61006d, dwReserved1=0x6e, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0252.808] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.808] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.808] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.808] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0252.808] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\6\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\6\\container.dat")) returned 0x2026 [0252.809] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\6\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\6\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0252.809] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\6\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\6\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0252.810] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.810] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.810] CloseHandle (hObject=0x218) returned 1 [0252.810] CloseHandle (hObject=0x214) returned 1 [0252.810] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\6\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\6\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\6\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\6\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.811] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\6\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\6\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.811] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\6\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\6\\container.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xebd9357f, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebd9357f, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xebd9357f, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0xb, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e490 [0252.811] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xebd9357f, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebd9357f, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xebd9357f, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0xb, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.811] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0252.811] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\6\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\6\\container.dat")) returned 1 [0252.812] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\6\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\6\\container.dat")) returned 0xffffffff [0252.812] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebf36f47, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebf36f47, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f07586, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x38ed, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_10[1].txt", cAlternateFileName="C_D0E0~1.TXT")) returned 1 [0252.813] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebf5d218, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebf5d218, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f07586, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x12639, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_11[1].txt", cAlternateFileName="C_647E~1.TXT")) returned 1 [0252.815] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec041f56, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec041f56, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f2d924, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x135cb, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_12[1].txt", cAlternateFileName="C_EAA3~1.TXT")) returned 1 [0252.816] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec041f56, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec041f56, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f2d924, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x3826, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_13[1].txt", cAlternateFileName="C_F04C~1.TXT")) returned 1 [0252.818] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0681fa, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0681fa, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f2d924, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x6a1a, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_14[1].txt", cAlternateFileName="C_988E~1.TXT")) returned 1 [0252.819] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec08e559, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec08e559, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f53a34, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x382fa, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_15[1].txt", cAlternateFileName="C_82F5~1.TXT")) returned 1 [0252.820] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec08e559, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec08e559, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f79c92, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x19226, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_16[1].txt", cAlternateFileName="C_2306~1.TXT")) returned 1 [0252.821] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec08e559, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec08e559, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f79c92, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x31194, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_17[1].txt", cAlternateFileName="C_399E~1.TXT")) returned 1 [0252.823] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0b4810, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0b4810, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x397bcfe8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d9, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_18[1].txt", cAlternateFileName="C_503C~1.TXT")) returned 1 [0252.824] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0b4810, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0b4810, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x397bcfe8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x381, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_19[1].txt", cAlternateFileName="C_4A93~1.TXT")) returned 1 [0252.825] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0b4810, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0b4810, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_20[1].txt", cAlternateFileName="C_1F20~1.TXT")) returned 1 [0252.827] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0b4810, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0b4810, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x651, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_21[1].txt", cAlternateFileName="C_EA37~1.TXT")) returned 1 [0252.828] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0da981, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0da981, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_22[1].txt", cAlternateFileName="C_6402~1.TXT")) returned 1 [0252.830] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0da981, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0da981, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_23[1].txt", cAlternateFileName="C_EDCC~1.TXT")) returned 1 [0252.831] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0da981, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0da981, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_24[1].txt", cAlternateFileName="C_5782~1.TXT")) returned 1 [0252.833] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec100dd1, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec100dd1, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_25[1].txt", cAlternateFileName="C_6D1B~1.TXT")) returned 1 [0252.836] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec100dd1, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec100dd1, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xfaa, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_26[1].txt", cAlternateFileName="C_2CAF~1.TXT")) returned 1 [0252.837] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec173241, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec173241, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x67d, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_27[1].txt", cAlternateFileName="C_1617~1.TXT")) returned 1 [0252.838] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec173241, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec173241, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59ee1314, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x1eabf, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_28[1].txt", cAlternateFileName="C_2F38~1.TXT")) returned 1 [0252.839] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebd9357f, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebd9357f, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59ebb0a5, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x42840, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_2[1].txt", cAlternateFileName="C__WIN~1.TXT")) returned 1 [0252.840] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdbc8f6, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebdbc8f6, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59e94e30, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x3e1eb, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_3[1].txt", cAlternateFileName="C__WIN~2.TXT")) returned 1 [0252.841] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdbc8f6, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebdbc8f6, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59e94e30, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_4[1].txt", cAlternateFileName="C__WIN~3.TXT")) returned 1 [0252.843] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdbc8f6, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebdbc8f6, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59e6ebec, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x581f, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_5[1].txt", cAlternateFileName="C__WIN~4.TXT")) returned 1 [0252.844] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebf36f47, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebf36f47, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59e6ebec, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x4bc7, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_6[1].txt", cAlternateFileName="C_345C~1.TXT")) returned 1 [0252.845] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebf36f47, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebf36f47, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x740, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_7[1].txt", cAlternateFileName="C_BD17~1.TXT")) returned 1 [0252.846] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebf36f47, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebf36f47, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59e48999, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0xc20d, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_8[1].txt", cAlternateFileName="C_37E1~1.TXT")) returned 1 [0252.847] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebf36f47, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebf36f47, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59e48999, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x59e8, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_9[1].txt", cAlternateFileName="C_0E6D~1.TXT")) returned 1 [0252.849] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebf36f47, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebf36f47, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59e48999, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x59e8, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_9[1].txt", cAlternateFileName="C_0E6D~1.TXT")) returned 0 [0252.849] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0252.850] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74be545, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x74e4667, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x74e4667, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f73776f, dwReserved1=0x74737953, cFileName="8", cAlternateFileName="")) returned 1 [0252.850] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74be545, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x74e4667, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x75c698a, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730079, dwReserved1=0x650074, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0252.851] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74be545, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x74e4667, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x75c698a, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="..", cAlternateFileName="")) returned 1 [0252.851] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74e4667, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x74e4667, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x74e4667, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x3c, dwReserved0=0x730079, dwReserved1=0x650074, cFileName="appcache[1].man", cAlternateFileName="APPCAC~1.MAN")) returned 1 [0252.851] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x74e4667, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x74e4667, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x74e4667, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61006d, dwReserved1=0x6e, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0252.852] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.852] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.852] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.852] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0252.852] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\container.dat")) returned 0x2026 [0252.852] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0252.853] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0252.856] ReadFile (in: hFile=0x214, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.856] WriteFile (in: hFile=0x218, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.856] CloseHandle (hObject=0x214) returned 1 [0252.856] CloseHandle (hObject=0x218) returned 1 [0252.856] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.857] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.857] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\container.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x74e4667, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x74e4667, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x74e4667, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0xb, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e910 [0252.857] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x74e4667, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x74e4667, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x74e4667, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0xb, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.857] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0252.858] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\container.dat")) returned 1 [0252.858] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\container.dat")) returned 0xffffffff [0252.858] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75c698a, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x75c698a, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x75eca26, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x1fcb6, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="zinc[1].htm", cAlternateFileName="ZINC_1~1.HTM")) returned 1 [0252.859] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.859] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.859] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.859] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0252.859] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\zinc[1].htm" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\zinc[1].htm")) returned 0x2020 [0252.860] VirtualAlloc (lpAddress=0x2218000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2218000 [0252.860] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\zinc[1].htm" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\zinc[1].htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0252.861] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\zinc[1].htm.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\zinc[1].htm.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0252.861] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.863] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.866] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.866] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.866] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.866] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.867] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.867] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.867] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.867] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.867] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.868] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.868] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.868] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.868] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.868] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.869] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.869] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.869] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.869] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.869] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.870] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.870] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.870] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.870] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.870] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.871] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.871] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.871] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.871] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.871] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.872] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.872] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.872] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.872] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.872] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.873] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.873] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.873] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.873] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.874] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.874] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.874] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.874] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.874] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.875] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.875] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.875] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.876] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.876] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.876] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.876] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.876] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.877] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.877] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.877] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.877] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.877] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.878] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.878] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.878] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.878] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x1000, lpOverlapped=0x0) returned 1 [0252.878] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0xcb6, lpOverlapped=0x0) returned 1 [0252.879] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0xcb6, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0xcb6, lpOverlapped=0x0) returned 1 [0252.879] ReadFile (in: hFile=0x218, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.879] WriteFile (in: hFile=0x214, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.879] CloseHandle (hObject=0x218) returned 1 [0252.879] CloseHandle (hObject=0x214) returned 1 [0252.891] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\zinc[1].htm" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\zinc[1].htm"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\zinc[1].htm.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\zinc[1].htm.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.891] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\zinc[1].htm.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\zinc[1].htm.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.891] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\zinc[1].htm" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\zinc[1].htm"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75c698a, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x75c698a, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x75eca26, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x1fcb6, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="zinc[1].htm", cAlternateFileName="ZINC_1~1.HTM")) returned 0x55e490 [0252.892] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75c698a, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x75c698a, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x75eca26, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x1fcb6, dwReserved0=0x777968c7, dwReserved1=0xec0ab8a1, cFileName="zinc[1].htm", cAlternateFileName="ZINC_1~1.HTM")) returned 0 [0252.892] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0252.892] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\zinc[1].htm" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\zinc[1].htm")) returned 1 [0252.894] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\zinc[1].htm" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\zinc[1].htm")) returned 0xffffffff [0252.894] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x75c698a, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x75c698a, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x75eca26, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x1fcb6, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="zinc[1].htm", cAlternateFileName="ZINC_1~1.HTM")) returned 0 [0252.894] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0252.895] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e134a22, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e134a22, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e134a22, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d74682e, dwReserved1=0x6e617461, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0252.895] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.895] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.896] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.896] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0252.896] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\container.dat")) returned 0x2026 [0252.896] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.897] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0252.900] ReadFile (in: hFile=0x210, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0252.900] WriteFile (in: hFile=0x214, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0252.900] CloseHandle (hObject=0x210) returned 1 [0252.900] CloseHandle (hObject=0x214) returned 1 [0252.900] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.901] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.901] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\container.dat"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e134a22, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e134a22, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e134a22, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e310 [0252.901] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e134a22, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e134a22, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e134a22, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.901] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0252.901] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\container.dat")) returned 1 [0252.902] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\container.dat")) returned 0xffffffff [0252.902] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e134a22, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e134a22, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e134a22, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d74682e, dwReserved1=0x6e617461, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.902] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0252.902] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e134a22, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e134a22, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e134a22, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x1d007461, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0252.903] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.903] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.903] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.903] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.903] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.903] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0252.903] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat")) returned 0x2026 [0252.904] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.904] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0252.904] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0252.904] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0252.904] CloseHandle (hObject=0x208) returned 1 [0252.905] CloseHandle (hObject=0x214) returned 1 [0252.905] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.905] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.906] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e134a22, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e134a22, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e134a22, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e710 [0252.906] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e134a22, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e134a22, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e134a22, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.906] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0252.906] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat")) returned 1 [0252.906] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat")) returned 0xffffffff [0252.906] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e134a22, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e134a22, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e134a22, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x1d007461, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.907] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0252.907] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x15392beb, ftLastAccessTime.dwHighDateTime=0x1d705f0, ftLastWriteTime.dwLowDateTime=0x15392beb, ftLastWriteTime.dwHighDateTime=0x1d705f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x1d007461, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0252.907] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x15392beb, ftLastAccessTime.dwHighDateTime=0x1d705f0, ftLastWriteTime.dwLowDateTime=0x15392beb, ftLastWriteTime.dwHighDateTime=0x1d705f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0252.908] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x15392beb, ftLastAccessTime.dwHighDateTime=0x1d705f0, ftLastWriteTime.dwLowDateTime=0x15392beb, ftLastWriteTime.dwHighDateTime=0x1d705f0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0252.908] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6f7db06f, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f7db06f, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f7db06f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0252.908] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.908] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.908] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.909] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.909] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0252.909] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat")) returned 0x2026 [0252.909] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0252.909] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.910] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0252.910] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0252.910] CloseHandle (hObject=0x214) returned 1 [0252.910] CloseHandle (hObject=0x208) returned 1 [0252.911] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.911] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.912] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6f7db06f, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f7db06f, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f7db06f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e490 [0252.912] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6f7db06f, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f7db06f, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f7db06f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0xe, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.912] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0252.912] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat")) returned 1 [0252.912] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat")) returned 0xffffffff [0252.912] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6f7db06f, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f7db06f, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f7db06f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.912] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0252.913] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x13c62218, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x13c62218, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7265, dwReserved1=0x1d007461, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0252.913] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x13c62218, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x13c62218, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0252.913] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x13c62218, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x13c62218, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0252.913] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e10e7a9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e10e7a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e10e7a9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0252.913] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.913] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.914] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.914] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.914] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0252.914] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat")) returned 0x2026 [0252.914] VirtualAlloc (lpAddress=0x221c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x221c000 [0252.914] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.915] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0252.917] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0252.917] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0252.917] CloseHandle (hObject=0x208) returned 1 [0252.917] CloseHandle (hObject=0x214) returned 1 [0252.917] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.918] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.918] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e10e7a9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e10e7a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e10e7a9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e510 [0252.918] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e10e7a9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e10e7a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e10e7a9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.918] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0252.918] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat")) returned 1 [0252.919] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat")) returned 0xffffffff [0252.919] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13c62218, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x13c62218, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x13c62218, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x23b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF12VF9D.txt", cAlternateFileName="")) returned 1 [0252.920] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13c62218, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x13c62218, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x13c62218, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x64, dwReserved0=0x0, dwReserved1=0x0, cFileName="OB349RDS.txt", cAlternateFileName="")) returned 1 [0252.920] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13c62218, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x13c62218, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x13c62218, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x64, dwReserved0=0x0, dwReserved1=0x0, cFileName="OB349RDS.txt", cAlternateFileName="")) returned 0 [0252.920] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0252.920] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6064f492, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6064f492, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78742e53, dwReserved1=0x1d007474, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0252.920] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6064f492, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6064f492, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0252.921] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6064f492, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6064f492, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.921] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6064f492, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6064f492, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0252.921] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0252.921] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa3d60b, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78742e53, dwReserved1=0x1d007474, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0252.921] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa3d60b, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0252.921] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa3d60b, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.921] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa3d60b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa3d60b, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0252.921] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa3d60b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa3d60b, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0252.922] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa3d60b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa3d60b, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0252.922] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa3d60b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0252.922] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa3d60b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e002a, dwReserved1=0x2a, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0252.922] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa3d60b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e002a, dwReserved1=0x2a, cFileName="..", cAlternateFileName="")) returned 1 [0252.922] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa3d60b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa3d60b, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e002a, dwReserved1=0x2a, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0252.922] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.922] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.922] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.923] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.923] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0252.923] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat")) returned 0x2026 [0252.923] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0252.923] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0252.926] ReadFile (in: hFile=0x210, lpBuffer=0x19c570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19c570*, lpNumberOfBytesRead=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.926] WriteFile (in: hFile=0x218, lpBuffer=0x19d570*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c2bc, lpOverlapped=0x0 | out: lpBuffer=0x19d570*, lpNumberOfBytesWritten=0x19c2bc*=0x0, lpOverlapped=0x0) returned 1 [0252.926] CloseHandle (hObject=0x210) returned 1 [0252.926] CloseHandle (hObject=0x218) returned 1 [0252.926] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.929] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0252.929] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat"), lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa3d60b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa3d60b, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5503c4, dwReserved1=0x1c, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0x55e610 [0252.929] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e40c | out: lpFindFileData=0x19e40c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa3d60b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa3d60b, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5503c4, dwReserved1=0x1c, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0252.929] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0252.930] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat")) returned 1 [0252.930] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat")) returned 0xffffffff [0252.930] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a7a8, dwReserved1=0x550288, cFileName="G04B9NC8", cAlternateFileName="")) returned 1 [0252.930] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\G04B9NC8\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\g04b9nc8\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0252.931] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0252.931] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 0 [0252.931] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0252.931] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a7a8, dwReserved1=0x550288, cFileName="KPTCCOJ4", cAlternateFileName="")) returned 1 [0252.931] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\KPTCCOJ4\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\kptccoj4\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0252.931] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0252.931] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 0 [0252.932] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0252.932] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a7a8, dwReserved1=0x550288, cFileName="V1VIG64D", cAlternateFileName="")) returned 1 [0252.932] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\V1VIG64D\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\v1vig64d\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0252.932] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0252.932] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x70ea6faa, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0xe25, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="www.bing[1].xml", cAlternateFileName="WWWBIN~1.XML")) returned 1 [0252.933] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x70ea6faa, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0xe25, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="www.bing[1].xml", cAlternateFileName="WWWBIN~1.XML")) returned 0 [0252.933] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0252.933] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5d315b67, dwReserved1=0x6c6d782e, cFileName="WTR48WZB", cAlternateFileName="")) returned 1 [0252.933] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\WTR48WZB\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\wtr48wzb\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0252.933] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="..", cAlternateFileName="")) returned 1 [0252.934] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d0078, dwReserved1=0x6c, cFileName="..", cAlternateFileName="")) returned 0 [0252.934] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0252.934] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5d315b67, dwReserved1=0x6c6d782e, cFileName="WTR48WZB", cAlternateFileName="")) returned 0 [0252.934] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0252.934] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa3d60b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="DOMStore", cAlternateFileName="")) returned 0 [0252.934] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0252.934] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6da0d9db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0252.935] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6da0d9db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7242, dwReserved1=0x1d007461, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0252.935] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6da0d9db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7242, dwReserved1=0x1d007461, cFileName="..", cAlternateFileName="")) returned 1 [0252.935] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6da0d9db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x642e7242, dwReserved1=0x1d007461, cFileName="..", cAlternateFileName="")) returned 0 [0252.935] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0252.935] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6da0d9db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0252.935] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0252.935] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60629330, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60629330, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName="Temp", cAlternateFileName="")) returned 1 [0252.936] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60629330, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60629330, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0252.936] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60629330, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60629330, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.936] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60629330, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60629330, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0252.936] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0252.936] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60629330, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60629330, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName="Temp", cAlternateFileName="")) returned 0 [0252.936] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.936] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xcb208e81, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xcb208e81, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79727466, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0252.937] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xcb208e81, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xcb208e81, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0252.937] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xcb208e81, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xcb208e81, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName="..", cAlternateFileName="")) returned 1 [0252.937] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb208e81, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x71252fcd, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8bd2c4bd, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName="Indexed DB", cAlternateFileName="INDEXE~1")) returned 1 [0252.937] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb208e81, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x8bd2c4bd, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8bd2c4bd, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0252.937] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb208e81, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x8bd2c4bd, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8bd2c4bd, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.937] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb27b58d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xcb27b58d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x68df8f14, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x65, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0252.937] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.937] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.938] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.938] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0252.938] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk")) returned 0x20 [0252.938] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0252.939] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.939] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.940] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.942] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.942] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.943] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0252.943] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0252.943] CloseHandle (hObject=0x214) returned 1 [0252.943] CloseHandle (hObject=0x208) returned 1 [0252.947] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0252.947] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0252.948] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb27b58d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xcb27b58d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x68df8f14, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xe, cFileName="edb.chk", cAlternateFileName="")) returned 0x55e410 [0252.948] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb27b58d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xcb27b58d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x68df8f14, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xe, cFileName="edb.chk", cAlternateFileName="")) returned 0 [0252.948] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0252.948] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk")) returned 1 [0252.950] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk")) returned 0xffffffff [0252.950] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x71188568, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x68df8f14, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="edb.log", cAlternateFileName="")) returned 1 [0252.950] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0252.950] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0252.951] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0252.951] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0252.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0252.951] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log")) returned 0x20 [0252.951] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0252.952] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0252.952] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.954] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.955] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.955] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.955] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.956] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.956] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.956] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.956] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.956] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.957] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.957] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.957] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.957] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.958] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.959] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.959] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.960] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.960] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.961] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.961] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.961] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.962] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.962] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.962] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.963] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.963] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.963] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.963] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.964] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.964] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.964] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.965] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.965] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.965] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.966] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.966] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.966] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.966] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.966] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.966] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.967] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.967] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.967] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.967] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.967] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.968] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.968] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.968] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.968] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.968] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.969] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.969] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.969] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.969] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.969] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.969] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.970] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.970] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.970] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.970] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.970] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.970] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.971] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.971] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.971] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.971] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.971] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.972] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.972] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.972] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.972] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.972] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.972] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.973] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.973] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.973] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.973] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.973] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.973] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.975] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.976] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.976] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.976] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.976] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.976] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.976] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.977] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.977] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.977] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.977] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.977] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.977] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.978] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.978] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.978] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.978] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.978] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.979] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.979] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.979] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.979] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.979] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.979] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.980] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.980] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.980] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.980] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.980] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.981] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.981] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.981] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.981] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.981] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.981] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.982] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.982] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.982] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.982] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.982] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.982] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.983] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.983] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.983] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.983] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.983] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.983] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.984] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.984] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.985] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.986] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.986] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.987] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.987] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.987] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.987] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.988] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.988] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.988] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.988] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.988] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.989] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.989] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.989] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.991] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.991] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.992] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.992] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.992] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.992] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.992] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.993] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.993] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.993] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.993] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.993] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.993] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.994] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.994] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.994] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.994] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.994] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.995] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.995] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.995] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.995] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.995] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.996] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.996] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.996] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.996] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.996] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.997] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.997] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.997] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.997] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.997] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.998] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.998] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.998] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.998] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.998] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.999] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.999] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.999] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.999] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.999] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0252.999] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.000] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.000] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.000] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.000] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.000] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.001] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.001] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.001] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.001] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.001] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.001] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.002] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.002] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.002] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.002] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.002] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.003] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.003] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.003] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.003] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.003] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.004] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.004] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.004] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.004] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.004] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.004] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.005] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.005] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.005] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.005] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.005] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.006] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.006] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.006] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.006] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.006] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.006] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.007] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.007] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.007] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.007] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.007] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.008] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.008] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.008] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.008] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.008] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.008] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.009] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.009] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.009] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.009] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.009] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.009] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.010] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.010] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.010] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.010] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.010] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.010] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.011] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.011] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.011] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.011] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.011] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.011] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.012] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.012] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0253.012] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0253.012] CloseHandle (hObject=0x208) returned 1 [0253.012] CloseHandle (hObject=0x214) returned 1 [0253.121] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0253.121] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0253.121] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x71188568, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x68df8f14, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x550370, dwReserved1=0xe, cFileName="edb.log", cAlternateFileName="")) returned 0x55e750 [0253.121] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x71188568, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x68df8f14, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x550370, dwReserved1=0xe, cFileName="edb.log", cAlternateFileName="")) returned 0 [0253.121] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0253.123] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log")) returned 1 [0253.128] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log")) returned 0xffffffff [0253.128] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x63e5a3b7, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6df588cf, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="edb0003C.log", cAlternateFileName="")) returned 1 [0253.129] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0253.129] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0253.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0253.129] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0253.129] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0253.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0253.129] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log")) returned 0x20 [0253.130] VirtualAlloc (lpAddress=0x2220000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2220000 [0253.131] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0253.131] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0253.132] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.169] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.170] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.180] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.180] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.181] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.181] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.181] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.183] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.183] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.183] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.184] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.184] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.184] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.184] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.184] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.184] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.185] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.185] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.185] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.185] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.185] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.185] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.186] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.186] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.186] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.186] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.186] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.186] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.187] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.187] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.187] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.187] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.187] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.188] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.188] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.188] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.188] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.188] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.189] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.189] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.189] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.189] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.189] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.190] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.190] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.190] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.190] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.190] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.190] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.191] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.191] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.191] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.191] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.191] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.192] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.192] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.192] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.192] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.193] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.193] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.193] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.193] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.193] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.194] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.209] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.210] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.210] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.211] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.211] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.211] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.212] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.212] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.212] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.212] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.213] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.213] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.213] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.214] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.214] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.214] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.215] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.215] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.216] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.216] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.216] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.217] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.217] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.218] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.218] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.218] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.218] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.219] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.219] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.219] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.219] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.219] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.241] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.242] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.242] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.242] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.242] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.242] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.243] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.243] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.243] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.243] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.243] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.243] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.244] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.244] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.244] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.244] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.244] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.244] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.245] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.245] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.245] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.245] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.245] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.245] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.246] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.246] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.246] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.246] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.246] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.246] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.247] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.247] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.247] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.253] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.254] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.254] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.254] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.255] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.255] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.255] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.255] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.256] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.256] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.256] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.256] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.256] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.256] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.257] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.257] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.257] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.257] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.257] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.257] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.258] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.258] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.258] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.258] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.258] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.258] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.259] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.259] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.259] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.259] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.259] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.271] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.271] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.272] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.272] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.274] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.274] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.274] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.275] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.275] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.276] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.277] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.277] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.277] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.278] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.278] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.278] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.278] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.278] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.279] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.279] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.279] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.279] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.279] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.280] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.280] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.280] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.281] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.282] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.282] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.282] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.282] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.282] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.282] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.283] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.283] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.283] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.283] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.283] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.283] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.284] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.284] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.284] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.284] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.284] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.284] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.285] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.285] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.285] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.285] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.285] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.285] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.286] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.286] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.286] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.286] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.287] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.287] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.287] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.287] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.287] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.287] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.288] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.288] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.288] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.288] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.288] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.288] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.289] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.289] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.289] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.289] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.289] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.289] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.290] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.290] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.290] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.290] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.290] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.290] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.291] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.291] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.291] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.291] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.291] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.291] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.292] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.292] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.292] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.292] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.292] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.292] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.293] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.293] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.293] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.293] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.293] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0253.293] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0253.293] CloseHandle (hObject=0x214) returned 1 [0253.293] CloseHandle (hObject=0x208) returned 1 [0253.326] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0253.327] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0253.327] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x63e5a3b7, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6df588cf, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb0003C.log", cAlternateFileName="")) returned 0x55e310 [0253.327] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x63e5a3b7, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6df588cf, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb0003C.log", cAlternateFileName="")) returned 0 [0253.327] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0253.328] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log")) returned 1 [0253.332] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log")) returned 0xffffffff [0253.332] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x64cb0e05, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6eb614db, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="edb0003D.log", cAlternateFileName="")) returned 1 [0253.336] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0253.336] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0253.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0253.336] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0253.336] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0253.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0253.336] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003D.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003d.log")) returned 0x20 [0253.342] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003D.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003d.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0253.342] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003D.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003d.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0253.343] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.390] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.391] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.439] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.525] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.525] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.525] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.525] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.526] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.526] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.526] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.526] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.526] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.527] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.527] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.527] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.527] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.527] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.528] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.528] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.528] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.528] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.528] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.529] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.529] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.529] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.529] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.530] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.530] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.543] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.543] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.543] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.544] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.544] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.544] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.544] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.544] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.545] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.545] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.545] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.545] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.545] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.546] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.546] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.546] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.546] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.547] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.547] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.547] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.547] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.547] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.548] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.548] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.548] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.548] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.549] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.549] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.549] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.549] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.549] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.550] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.550] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.550] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.550] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.551] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.551] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.551] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.551] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.552] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.553] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.554] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.554] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.554] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.554] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.554] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.555] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.555] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.555] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.555] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.555] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.556] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.556] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.556] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.556] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.556] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.557] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.557] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.557] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.557] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.557] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.558] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.558] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.558] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.559] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.559] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.559] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.559] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.560] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.560] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.560] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.560] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.560] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.561] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.561] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.561] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.561] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.561] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.562] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.562] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.562] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.563] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.563] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.563] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.563] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.564] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.564] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.564] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.564] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.564] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.565] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.565] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.565] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.565] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.565] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.566] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.566] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.566] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.566] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.566] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.566] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.568] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.568] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.568] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.568] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.569] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.569] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.569] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.569] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.569] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.569] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.570] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.570] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.570] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.570] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.571] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.571] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.571] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.571] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.571] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.572] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.572] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.572] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.572] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.572] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.573] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.573] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.573] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.573] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.573] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.574] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.574] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.593] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.594] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.594] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.594] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.594] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.595] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.595] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.595] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.595] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.595] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.596] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.596] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.596] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.596] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.597] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.597] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.597] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.597] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.597] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.598] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.598] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.598] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.598] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.599] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.599] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.599] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.599] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.600] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.600] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.600] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.600] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.601] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.601] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.601] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.601] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.601] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.602] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.602] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.602] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.602] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.602] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.603] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.603] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.603] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.603] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.604] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.604] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.604] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.604] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.604] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.604] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.605] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.605] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.605] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.605] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.606] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.606] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.606] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.610] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.610] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.610] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.610] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.610] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.611] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.615] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.615] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.615] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.616] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.616] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.616] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.616] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.616] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.617] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.617] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.617] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.617] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.618] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.618] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.618] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.618] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.618] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.619] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.619] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.619] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.619] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.619] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.620] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.620] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.620] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.620] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.620] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.621] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.621] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.621] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.621] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.622] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0253.622] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0253.622] CloseHandle (hObject=0x208) returned 1 [0253.622] CloseHandle (hObject=0x214) returned 1 [0253.622] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003D.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003d.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003D.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003d.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0253.623] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003D.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003d.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0253.623] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003D.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003d.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x64cb0e05, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6eb614db, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb0003D.log", cAlternateFileName="")) returned 0x55e190 [0253.623] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x64cb0e05, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6eb614db, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb0003D.log", cAlternateFileName="")) returned 0 [0253.623] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0253.623] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003D.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003d.log")) returned 1 [0253.629] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003D.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003d.log")) returned 0xffffffff [0253.629] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x6df4b218, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6ee0cd9d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="edb0003E.log", cAlternateFileName="")) returned 1 [0253.630] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0253.630] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0253.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0253.631] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0253.631] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0253.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0253.631] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003E.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003e.log")) returned 0x20 [0253.631] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003E.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003e.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0253.632] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003E.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003e.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0253.632] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.640] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.642] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.649] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.650] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.650] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.650] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.650] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.650] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.651] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.651] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.651] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.651] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.651] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.652] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.652] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.652] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.652] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.653] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.653] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.653] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.653] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.653] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.654] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.654] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.654] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.654] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.655] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.655] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.655] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.655] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.655] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.656] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.656] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.656] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.656] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.656] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.656] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.657] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.657] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.657] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.657] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.658] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.658] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.658] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.658] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.658] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.659] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.659] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.659] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.659] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.659] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.660] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.660] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.660] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.660] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.660] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.661] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.661] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.663] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.663] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.663] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.663] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.664] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.664] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.677] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.678] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.678] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.678] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.678] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.679] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.679] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.679] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.679] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.679] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.680] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.680] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.680] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.680] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.680] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.681] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.681] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.681] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.681] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.681] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.682] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.682] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.682] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.682] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.682] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.683] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.683] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.683] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.684] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.685] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.685] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.685] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.685] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.686] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.686] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.689] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.690] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.690] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.690] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.690] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.690] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.691] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.691] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.691] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.691] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.691] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.691] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.691] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.692] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.692] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.692] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.692] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.692] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.693] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.693] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.693] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.693] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.693] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.693] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.694] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.694] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.694] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.694] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.694] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.694] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.695] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.695] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.696] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.696] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.696] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.696] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.696] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.696] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.696] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.697] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.697] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.697] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.697] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.697] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.697] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.698] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.698] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.698] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.698] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.698] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.698] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.698] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.699] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.699] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.699] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.699] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.699] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.703] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.703] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.703] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.704] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.704] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.704] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.704] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.704] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.705] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.705] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.705] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.705] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.705] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.705] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.706] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.706] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.706] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.706] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.706] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.706] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.707] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.707] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.707] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.707] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.707] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.707] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.707] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.708] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.708] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.710] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.711] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.711] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.711] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.711] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.712] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.712] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.712] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.712] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.712] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.713] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.713] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.713] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.713] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.713] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.714] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.714] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.714] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.714] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.715] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.715] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.715] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.715] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.715] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.716] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.716] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.716] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.716] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.717] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.717] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.717] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.717] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.717] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.718] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.718] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.718] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.718] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.718] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.719] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.719] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.719] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.719] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.719] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.720] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.720] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.720] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.720] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.720] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.721] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.721] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.721] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.721] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.722] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.722] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.722] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.722] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.722] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.723] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.723] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.723] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.725] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.725] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.725] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.725] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.725] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.726] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.726] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.726] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.726] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.726] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.727] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0253.727] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0253.727] CloseHandle (hObject=0x214) returned 1 [0253.727] CloseHandle (hObject=0x208) returned 1 [0253.727] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003E.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003e.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003E.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003e.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0253.728] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003E.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003e.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0253.728] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003E.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003e.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x6df4b218, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6ee0cd9d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb0003E.log", cAlternateFileName="")) returned 0x55e890 [0253.728] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x6df4b218, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6ee0cd9d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb0003E.log", cAlternateFileName="")) returned 0 [0253.728] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0253.728] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003E.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003e.log")) returned 1 [0253.733] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003E.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003e.log")) returned 0xffffffff [0253.733] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xb6a6fabe, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x6f837fb2, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="edb0003F.log", cAlternateFileName="")) returned 1 [0253.734] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0253.734] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0253.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0253.734] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0253.734] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0253.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0253.734] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003F.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003f.log")) returned 0x20 [0253.736] VirtualAlloc (lpAddress=0x2224000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2224000 [0253.736] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003F.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003f.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0253.737] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003F.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003f.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0253.737] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.749] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.750] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.779] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.779] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.779] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.779] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.779] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.780] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.780] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.780] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.780] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.780] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.780] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.781] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.781] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.781] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.781] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.781] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.781] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.782] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.782] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.782] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.782] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.782] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.783] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.783] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.783] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.783] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.783] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.784] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.784] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.784] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.784] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.784] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.784] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.784] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.785] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.785] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.785] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.785] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.785] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.786] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.786] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.786] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.786] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.786] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.786] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.787] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.787] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.787] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.787] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.787] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.787] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.788] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.788] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.788] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.788] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.788] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.788] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.789] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.789] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.789] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.789] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.789] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.811] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.811] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.811] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.811] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.812] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.812] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.812] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.812] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.812] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.813] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.813] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.813] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.813] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.813] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.813] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.816] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.816] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.816] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.816] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.817] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.817] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.817] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.817] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.817] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.817] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.817] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.818] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.818] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.818] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.818] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.819] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.819] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.831] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.831] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.831] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.831] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.832] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.832] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.832] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.832] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.832] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.832] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.833] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.833] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.833] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.833] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.833] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.833] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.834] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.834] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.834] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.834] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.834] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.835] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.835] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.835] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.835] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.835] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.835] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.836] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.836] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.836] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.836] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.836] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.837] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.837] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.838] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.838] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.838] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.838] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.838] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.838] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.839] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.839] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.839] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.839] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.839] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.839] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.840] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.840] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.840] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.840] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.840] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.840] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.841] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.841] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.841] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.841] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.841] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.842] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.842] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.842] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.842] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.842] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.842] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.843] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.847] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.847] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.847] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.848] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.848] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.848] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.848] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.848] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.848] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.849] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.849] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.849] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.849] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.849] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.849] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.850] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.850] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.850] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.850] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.851] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.851] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.851] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.851] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.851] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.852] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.852] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.852] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.852] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.852] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.852] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.852] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.853] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.853] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.853] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.853] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.853] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.853] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.854] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.854] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.854] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.854] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.855] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.855] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.855] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.855] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.856] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.856] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.856] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.856] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.856] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.857] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.857] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.857] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.857] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.857] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.858] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.858] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.858] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.858] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.858] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.859] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.859] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.859] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.859] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.866] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.866] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.866] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.866] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.867] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.867] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.867] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.867] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.867] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.868] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.868] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.868] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.868] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.869] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.869] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.869] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.869] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.869] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.870] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.870] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.870] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.870] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.870] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.871] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.871] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.871] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.871] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.872] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.872] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.872] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.872] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.872] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0253.872] WriteFile (in: hFile=0x214, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0253.872] CloseHandle (hObject=0x208) returned 1 [0253.873] CloseHandle (hObject=0x214) returned 1 [0253.873] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003F.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003f.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003F.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003f.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0253.873] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003F.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003f.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0253.874] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003F.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003f.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xb6a6fabe, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x6f837fb2, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb0003F.log", cAlternateFileName="")) returned 0x55e610 [0253.874] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xb6a6fabe, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x6f837fb2, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb0003F.log", cAlternateFileName="")) returned 0 [0253.874] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0253.874] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003F.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003f.log")) returned 1 [0253.883] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003F.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003f.log")) returned 0xffffffff [0253.883] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x6edff742, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6fdcb677, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="edb00040.log", cAlternateFileName="")) returned 1 [0253.884] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0253.884] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0253.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0253.884] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0253.884] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0253.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0253.884] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00040.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00040.log")) returned 0x20 [0253.885] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00040.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00040.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0253.885] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00040.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00040.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0253.886] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.924] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.925] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.976] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.977] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.977] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.977] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.977] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.977] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.978] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.978] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.978] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.978] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.979] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.979] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.979] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.979] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.979] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.980] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.980] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.980] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.980] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.980] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.981] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.981] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.981] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.981] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.981] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.982] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.982] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.982] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.982] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.982] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.983] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.983] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.983] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.983] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.984] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.984] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.984] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.984] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.984] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.985] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.985] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.985] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.985] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.986] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.986] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.986] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.986] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.987] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.987] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.987] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.987] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.987] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.988] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.988] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.988] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.988] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.988] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.989] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.989] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.989] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.989] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0253.989] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.014] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.014] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.015] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.018] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.018] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.018] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.019] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.019] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.019] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.019] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.019] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.020] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.020] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.020] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.020] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.020] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.021] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.021] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.021] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.021] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.021] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.022] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.022] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.022] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.022] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.022] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.023] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.023] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.023] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.024] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.024] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.024] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.024] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.025] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.025] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.025] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.025] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.025] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.026] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.026] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.026] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.026] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.026] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.027] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.027] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.027] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.027] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.028] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.028] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.028] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.028] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.028] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.028] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.029] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.029] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.029] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.029] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.029] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.030] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.030] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.030] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.030] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.030] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.031] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.031] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.032] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.032] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.038] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.038] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.039] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.039] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.039] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.039] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.040] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.040] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.040] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.040] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.040] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.041] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.041] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.041] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.041] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.041] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.042] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.042] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.042] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.042] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.042] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.043] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.043] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.043] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.043] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.043] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.044] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.044] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.044] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.134] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.134] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.134] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.134] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.135] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.135] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.135] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.135] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.135] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.136] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.136] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.136] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.136] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.136] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.137] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.137] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.137] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.137] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.137] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.138] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.138] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.138] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.138] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.138] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.139] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.139] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.139] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.139] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.139] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.140] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.140] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.140] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.140] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.140] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.141] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.141] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.141] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.141] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.141] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.142] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.142] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.142] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.143] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.143] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.143] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.143] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.143] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.144] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.144] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.144] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.144] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.144] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.145] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.145] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.145] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.145] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.145] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.146] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.146] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.146] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.146] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.147] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.147] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.147] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.147] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.147] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.148] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.148] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.148] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.148] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.148] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.149] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.149] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.149] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.149] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.149] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.150] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.150] ReadFile (in: hFile=0x214, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.150] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0254.155] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00040.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00040.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00040.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00040.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0254.155] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00040.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00040.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0254.155] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00040.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00040.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x6edff742, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6fdcb677, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb00040.log", cAlternateFileName="")) returned 0x55e7d0 [0254.155] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x6edff742, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6fdcb677, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb00040.log", cAlternateFileName="")) returned 0 [0254.156] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0254.156] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00040.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00040.log")) returned 1 [0254.162] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00040.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00040.log")) returned 0xffffffff [0254.162] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x6f82cf2e, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x70c1da0f, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="edb00041.log", cAlternateFileName="")) returned 1 [0254.163] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0254.163] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.163] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0254.163] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0254.163] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.163] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0254.163] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00041.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00041.log")) returned 0x20 [0254.164] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00041.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00041.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0254.164] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00041.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00041.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0254.424] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00041.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00041.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00041.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00041.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0254.430] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00041.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00041.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0254.430] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00041.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00041.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x6f82cf2e, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x70c1da0f, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb00041.log", cAlternateFileName="")) returned 0x55e710 [0254.430] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x6f82cf2e, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x70c1da0f, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb00041.log", cAlternateFileName="")) returned 0 [0254.430] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0254.430] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00041.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00041.log")) returned 1 [0254.436] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00041.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00041.log")) returned 0xffffffff [0254.436] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x6fdc0607, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x70f85413, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="edb00042.log", cAlternateFileName="")) returned 1 [0254.438] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0254.438] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0254.441] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0254.441] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0254.441] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00042.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00042.log")) returned 0x20 [0254.446] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00042.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00042.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0254.447] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00042.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00042.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0254.490] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00042.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00042.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00042.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00042.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0254.491] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00042.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00042.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0254.491] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00042.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00042.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x6fdc0607, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x70f85413, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb00042.log", cAlternateFileName="")) returned 0x55e510 [0254.491] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x6fdc0607, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x70f85413, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb00042.log", cAlternateFileName="")) returned 0 [0254.491] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0254.491] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00042.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00042.log")) returned 1 [0254.497] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00042.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00042.log")) returned 0xffffffff [0254.497] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x70bdf5e0, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x7102db26, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="edb00043.log", cAlternateFileName="")) returned 1 [0254.498] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0254.498] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.498] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0254.498] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0254.498] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.498] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0254.498] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00043.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00043.log")) returned 0x20 [0254.499] VirtualAlloc (lpAddress=0x2228000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2228000 [0254.499] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00043.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00043.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0254.500] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00043.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00043.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0254.586] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00043.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00043.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00043.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00043.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0254.586] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00043.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00043.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0254.587] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00043.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00043.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x70bdf5e0, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x7102db26, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb00043.log", cAlternateFileName="")) returned 0x55e290 [0254.587] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x70bdf5e0, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x7102db26, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb00043.log", cAlternateFileName="")) returned 0 [0254.587] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0254.587] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00043.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00043.log")) returned 1 [0254.593] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00043.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00043.log")) returned 0xffffffff [0254.593] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x70f79029, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x710d4e65, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="edb00044.log", cAlternateFileName="")) returned 1 [0254.594] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0254.594] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0254.594] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0254.594] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0254.594] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00044.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00044.log")) returned 0x20 [0254.603] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00044.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00044.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0254.604] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00044.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00044.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0254.645] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00044.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00044.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00044.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00044.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0254.645] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00044.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00044.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0254.645] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00044.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00044.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x70f79029, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x710d4e65, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb00044.log", cAlternateFileName="")) returned 0x55e8d0 [0254.646] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x70f79029, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x710d4e65, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb00044.log", cAlternateFileName="")) returned 0 [0254.646] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0254.646] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00044.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00044.log")) returned 1 [0254.652] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00044.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00044.log")) returned 0xffffffff [0254.652] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x710216f9, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x71190e1d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="edb00045.log", cAlternateFileName="")) returned 1 [0254.653] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0254.653] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.653] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0254.653] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0254.653] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.653] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0254.653] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00045.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00045.log")) returned 0x20 [0254.664] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00045.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00045.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0254.664] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00045.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00045.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0254.733] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00045.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00045.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00045.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00045.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0254.734] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00045.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00045.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0254.734] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00045.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00045.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x710216f9, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x71190e1d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb00045.log", cAlternateFileName="")) returned 0x55e610 [0254.734] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x710216f9, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x71190e1d, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb00045.log", cAlternateFileName="")) returned 0 [0254.734] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0254.734] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00045.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00045.log")) returned 1 [0254.744] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00045.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00045.log")) returned 0xffffffff [0254.744] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x710c9ea1, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x71a39152, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="edb00046.log", cAlternateFileName="")) returned 1 [0254.745] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0254.745] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0254.745] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0254.745] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0254.745] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00046.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00046.log")) returned 0x20 [0254.745] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00046.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00046.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0254.746] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00046.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00046.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0254.800] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00046.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00046.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00046.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00046.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0254.800] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00046.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00046.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0254.800] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00046.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00046.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x710c9ea1, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x71a39152, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb00046.log", cAlternateFileName="")) returned 0x55e790 [0254.800] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x710c9ea1, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x71a39152, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edb00046.log", cAlternateFileName="")) returned 0 [0254.800] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0254.801] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00046.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00046.log")) returned 1 [0254.806] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00046.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00046.log")) returned 0xffffffff [0254.807] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb25521c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xcb25521c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xcb25521c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0254.808] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0254.808] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0254.809] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0254.809] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.809] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0254.809] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log")) returned 0x20 [0254.812] VirtualAlloc (lpAddress=0x222c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x222c000 [0254.812] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0254.813] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0254.864] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0254.864] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0254.864] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x71252fcd, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x715617f1, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edbtmp.log", cAlternateFileName="")) returned 0x55e610 [0254.864] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb22efaa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x71252fcd, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x715617f1, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="edbtmp.log", cAlternateFileName="")) returned 0 [0254.865] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0254.865] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log")) returned 1 [0254.870] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log")) returned 0xffffffff [0254.871] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb27b58d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xcb27b58d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x6895a622, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1680000, dwReserved0=0x0, dwReserved1=0x0, cFileName="IndexedDB.edb", cAlternateFileName="INDEXE~1.EDB")) returned 1 [0254.902] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0254.902] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.902] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0254.902] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0254.902] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.903] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0254.903] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin")) returned 0x20 [0254.903] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0254.904] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0254.909] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0254.910] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0254.910] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98b617a5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3b4aada0, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x3b4aada0, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="speech_onecorereg.bin", cAlternateFileName="SPEECH~1.BIN")) returned 0x55e710 [0254.910] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98b617a5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3b4aada0, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x3b4aada0, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="speech_onecorereg.bin", cAlternateFileName="SPEECH~1.BIN")) returned 0 [0254.910] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0254.910] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin")) returned 1 [0254.912] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin")) returned 0xffffffff [0254.912] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x98b617a5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x98b617a5, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x98b617a5, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="speech_onecorereg.bin.LOG1", cAlternateFileName="SPEECH~1.LOG")) returned 1 [0254.914] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0254.914] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.914] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0254.914] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0254.914] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.914] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0254.915] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0254.915] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0254.915] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0254.935] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0254.935] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0254.935] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x607a6a92, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1138dbe9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6092423b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x554c0c, dwReserved1=0xc4, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e890 [0254.935] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x607a6a92, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1138dbe9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6092423b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x554c0c, dwReserved1=0xc4, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0254.935] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0254.935] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0 [0254.936] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0254.936] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x607ccd2e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x607ccd2e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x607ccd2e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0254.938] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0254.938] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0254.938] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0254.938] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0254.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0254.940] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0254.940] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0254.941] GetLastError () returned 0x20 [0254.941] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x214 [0254.941] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0254.942] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0254.942] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x321682d, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x321682d, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e7d0 [0254.942] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x321682d, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x321682d, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0254.942] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0254.942] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat")) returned 0 [0254.942] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0254.942] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6d738e58, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6d738e58, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6d738e58, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0254.943] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6d738e58, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6d738e58, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6d738e58, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0254.944] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6d738e58, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6d738e58, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6d738e58, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0254.944] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0254.944] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x605b6c25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x605b6c25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0254.944] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x605b6c25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x605b6c25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0254.944] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x605b6c25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x605b6c25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0254.944] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x605b6c25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x605b6c25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0254.944] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0254.944] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6056a7b2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6056a7b2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0254.944] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6056a7b2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6056a7b2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0254.945] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6056a7b2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6056a7b2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0254.945] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6056a7b2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6056a7b2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0254.945] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0254.945] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6056a7b2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6056a7b2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0254.945] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0254.945] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd4522e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.Windows.ParentalControls_cw5n1h2txyewy", cAlternateFileName="MICROS~1.PAR")) returned 1 [0254.945] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9420a0c8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0255.073] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9420a0c8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0255.073] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd4522e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0255.073] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd6b4d3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0255.150] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd6b4d3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.150] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd4522e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0255.150] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd4522e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0255.151] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd4522e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.151] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd4522e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.151] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0255.151] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd6b4d3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd6b4d3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd6b4d3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0255.151] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd6b4d3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd6b4d3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd6b4d3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0255.152] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd6b4d3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd6b4d3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd6b4d3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.152] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd6b4d3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd6b4d3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd6b4d3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.152] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0255.152] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd6b4d3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd6b4d3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd6b4d3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0255.152] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd6b4d3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd6b4d3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd6b4d3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0255.152] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd6b4d3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd6b4d3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd6b4d3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.152] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd6b4d3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd6b4d3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd6b4d3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.152] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0255.152] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd4522e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 1 [0255.152] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd4522e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0255.153] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd4522e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.153] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd4522e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.153] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0255.153] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd4522e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 0 [0255.153] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0255.153] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd1f071, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0255.153] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd1f071, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0255.154] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd1f071, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.154] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd1f071, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0255.154] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0255.154] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0255.154] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0255.154] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.154] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0255.154] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0255.155] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0255.155] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0255.155] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.155] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0255.155] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0255.155] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9420a0c8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9420a0c8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0255.155] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9420a0c8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9420a0c8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0255.156] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9420a0c8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9420a0c8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.156] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9420a0c8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9420a0c8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0255.156] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9420a0c8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x942565a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0255.192] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9420a0c8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x942565a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.193] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x945c3bb3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x945c3bb3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0255.193] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0255.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0255.193] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0255.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0255.193] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0255.194] VirtualAlloc (lpAddress=0x2230000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2230000 [0255.194] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0255.195] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0255.195] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.211] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.213] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.213] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.213] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.213] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.213] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.214] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.214] ReadFile (in: hFile=0x204, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0255.214] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0255.214] CloseHandle (hObject=0x204) returned 1 [0255.214] CloseHandle (hObject=0x218) returned 1 [0255.214] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0255.215] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0255.215] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x945c3bb3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x945c3bb3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x554c0c, dwReserved1=0xbe, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e210 [0255.215] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x945c3bb3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x945c3bb3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x554c0c, dwReserved1=0xbe, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0255.215] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0255.215] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 1 [0255.216] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0xffffffff [0255.216] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x942565a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x942565a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x942565a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x6e006f, dwReserved1=0x740053, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0255.217] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x942565a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x942565a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x942565a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0255.217] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x942565a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x942565a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x942565a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0255.217] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0255.217] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9420a0c8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9420a0c8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0255.217] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0255.217] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0255.217] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0255.217] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0255.218] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0255.218] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0255.218] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd1f071, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0255.218] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x93186f59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0255.221] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x93186f59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0255.221] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd1f071, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0255.222] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x93291fd5, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93291fd5, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0255.222] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0255.222] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.222] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0255.222] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0255.222] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.222] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0255.222] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0255.223] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0255.223] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0255.224] ReadFile (in: hFile=0x208, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.231] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.232] ReadFile (in: hFile=0x208, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.244] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.245] ReadFile (in: hFile=0x208, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0255.245] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0255.245] CloseHandle (hObject=0x208) returned 1 [0255.245] CloseHandle (hObject=0x218) returned 1 [0255.245] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0255.246] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0255.246] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x93291fd5, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93291fd5, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e410 [0255.246] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x93291fd5, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93291fd5, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0255.246] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0255.246] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0255.248] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0255.248] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93186f59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93186f59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93186f59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0255.248] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93186f59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93186f59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93186f59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0255.249] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93186f59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93186f59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93186f59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0255.249] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0255.249] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd1f071, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0255.249] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd1f071, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0255.250] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd1f071, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.250] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd1f071, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0255.250] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0255.250] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0255.250] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0255.250] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.250] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0255.250] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0255.250] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0255.251] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0255.251] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a85f54c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1c2a8e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.Windows.Photos_8wekyb3d8bbwe", cAlternateFileName="MICROS~1.PHO")) returned 1 [0255.251] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a85f54c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1c2a8e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0255.264] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a85f54c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1c2a8e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0255.264] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0255.264] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0255.283] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.283] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0255.283] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0255.284] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.284] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.285] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0255.285] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0255.285] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0255.285] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.285] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.285] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0255.286] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0255.286] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0255.286] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.286] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.286] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0255.286] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 1 [0255.286] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0255.286] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.286] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.286] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0255.287] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 0 [0255.287] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0255.287] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0255.287] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0255.288] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.288] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0255.288] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0255.288] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0255.288] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0255.288] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.288] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0255.288] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0255.288] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a85f54c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x215572b2, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2ca3f5b7, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0255.288] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a85f54c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x215572b2, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2ca3f5b7, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0255.290] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a85f54c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x215572b2, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2ca3f5b7, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.290] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bf29d64, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6bf29d64, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6bfc26e7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="MediaDb.v1.sqlite", cAlternateFileName="MEDIAD~1.SQL")) returned 1 [0255.291] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c00eae9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6c00eae9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x417dbadb, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x6c0071, dwReserved1=0x740069, cFileName="MediaDb.v1.sqlite-shm", cAlternateFileName="MEDIAD~3.SQL")) returned 1 [0255.292] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c00eae9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6c00eae9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2da3edc7, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x60920, dwReserved0=0x6c0071, dwReserved1=0x740069, cFileName="MediaDb.v1.sqlite-wal", cAlternateFileName="MEDIAD~2.SQL")) returned 1 [0255.292] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ca3f5b7, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2ca3f5b7, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2ca3f5b7, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c0071, dwReserved1=0x740069, cFileName="PhotosAppTile", cAlternateFileName="PHOTOS~1")) returned 1 [0255.292] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTile\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptile\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ca3f5b7, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2ca3f5b7, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2ca3f5b7, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0255.294] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ca3f5b7, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2ca3f5b7, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2ca3f5b7, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.294] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ca3f5b7, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2ca3f5b7, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2ca3f5b7, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.294] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0255.294] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65a97266, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x65a97266, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x42e9e1ac, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x6c0071, dwReserved1=0x740069, cFileName="PhotosAppTracing_BGTask.etl", cAlternateFileName="PHOTOS~1.ETL")) returned 1 [0255.295] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x215572b2, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x215572b2, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x1cd824f7, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x690063, dwReserved1=0x67006e, cFileName="PhotosAppTracing_BGTask.last.etl", cAlternateFileName="PHOTOS~2.ETL")) returned 1 [0255.295] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x215572b2, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x215572b2, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x1cd824f7, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x690063, dwReserved1=0x67006e, cFileName="PhotosAppTracing_BGTask.last.etl", cAlternateFileName="PHOTOS~2.ETL")) returned 0 [0255.295] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0255.296] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1c2a8e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1c2a8e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72547070, dwReserved1=0x6e696361, cFileName="Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_X")) returned 1 [0255.296] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1c2a8e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1c2a8e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690063, dwReserved1=0x67006e, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0255.296] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1c2a8e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1c2a8e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690063, dwReserved1=0x67006e, cFileName="..", cAlternateFileName="")) returned 1 [0255.297] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1c2a8e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1e8cc4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690063, dwReserved1=0x67006e, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0255.297] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1c2a8e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1e8cc4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0255.348] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1c2a8e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1e8cc4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.348] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x42e9a6c5, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x5b471528, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0255.348] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0255.348] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0255.349] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0255.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0255.349] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat")) returned 0x20 [0255.349] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0255.350] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0255.351] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.353] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.355] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.401] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.401] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.401] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.401] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.402] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.402] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.402] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.402] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.402] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.403] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.403] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.403] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.403] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.403] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.404] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.404] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.404] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.404] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.405] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.405] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.405] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.405] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.405] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.406] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.406] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.406] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.406] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.406] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.407] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.407] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.407] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.407] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.408] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.408] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.408] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.408] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.408] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.409] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.409] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.409] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.409] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.409] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.410] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.410] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.410] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.410] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.410] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.411] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.411] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.411] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.411] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.411] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.412] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.412] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.412] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.412] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.412] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.413] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.413] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.413] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.413] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.413] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.472] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.472] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.472] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.472] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.473] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.473] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.473] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.473] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.473] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.473] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.474] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.474] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.474] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.474] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.474] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.474] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.475] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.475] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.475] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.475] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.475] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.475] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.476] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.476] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.476] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.476] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.476] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.476] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.477] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.477] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.477] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.477] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.477] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.478] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.478] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.478] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.478] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.478] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.478] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.479] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.479] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.479] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.479] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.480] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.480] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.480] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.480] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.480] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.480] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.481] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.481] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.481] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.481] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.481] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.482] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.482] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.482] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.482] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.482] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.482] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.483] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.483] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.483] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.483] ReadFile (in: hFile=0x208, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0255.483] WriteFile (in: hFile=0x204, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0255.483] CloseHandle (hObject=0x208) returned 1 [0255.483] CloseHandle (hObject=0x204) returned 1 [0255.484] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0255.484] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0255.484] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x42e9a6c5, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x5b471528, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x554c0c, dwReserved1=0xc6, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e7d0 [0255.484] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x42e9a6c5, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x5b471528, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x554c0c, dwReserved1=0xc6, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0255.484] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0255.485] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat")) returned 1 [0255.487] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat")) returned 0xffffffff [0255.487] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5b1e8cc4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1e8cc4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1e8cc4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0255.488] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5b1e8cc4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1e8cc4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1e8cc4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0255.488] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5b1e8cc4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1e8cc4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1e8cc4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0255.488] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0255.488] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1c2a8e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1e8cc4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690063, dwReserved1=0x67006e, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0255.488] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0255.488] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0255.489] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0255.489] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0255.489] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0255.489] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0255.489] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67b05aac, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0255.489] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67b05aac, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0255.490] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67b05aac, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0255.490] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a8abac1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a8abac1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a8abac1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0255.491] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x42eac495, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x42eac495, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0255.491] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0255.491] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0255.491] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0255.491] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0255.491] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat")) returned 0x20 [0255.492] VirtualAlloc (lpAddress=0x2234000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2234000 [0255.492] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0255.492] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0255.493] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.495] WriteFile (in: hFile=0x204, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.496] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.496] WriteFile (in: hFile=0x204, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.496] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0255.496] WriteFile (in: hFile=0x204, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0255.496] CloseHandle (hObject=0x218) returned 1 [0255.496] CloseHandle (hObject=0x204) returned 1 [0255.496] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0255.497] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0255.497] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x42eac495, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x42eac495, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e7d0 [0255.497] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x42eac495, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x42eac495, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0255.497] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0255.497] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat")) returned 1 [0255.498] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat")) returned 0xffffffff [0255.498] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x67a6d241, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67a6d241, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67a6d241, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0255.499] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x67a6d241, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67a6d241, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67a6d241, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0255.499] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x67a6d241, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67a6d241, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67a6d241, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0255.499] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0255.499] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0255.499] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0255.499] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.500] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0255.500] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0255.500] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1cd84bfb, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x1cd84bfb, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0255.500] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1cd84bfb, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x42eaeb21, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0255.542] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1cd84bfb, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x42eaeb21, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.542] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d5bb6bd, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2d5bb6bd, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2d5bb6bd, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="ShareCache", cAlternateFileName="SHAREC~1")) returned 1 [0255.542] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState\\ShareCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\tempstate\\sharecache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d5bb6bd, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2d5bb6bd, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2d5bb6bd, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0255.543] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d5bb6bd, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2d5bb6bd, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2d5bb6bd, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.543] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d5bb6bd, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2d5bb6bd, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2d5bb6bd, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xc, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.543] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0255.543] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d5bb6bd, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2d5bb6bd, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2d5bb6bd, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="ShareCache", cAlternateFileName="SHAREC~1")) returned 0 [0255.543] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0255.543] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1cd84bfb, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x1cd84bfb, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0255.544] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0255.544] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97d7ec6c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy", cAlternateFileName="MICROS~1.SEC")) returned 1 [0255.544] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97d7ec6c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9866f95d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61656863, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0255.545] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97d7ec6c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9866f95d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61656863, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0255.545] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61656863, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0255.545] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0255.547] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.547] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0255.547] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790077, dwReserved1=0x2a005c, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0255.548] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790077, dwReserved1=0x2a005c, cFileName="..", cAlternateFileName="")) returned 1 [0255.548] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790077, dwReserved1=0x2a005c, cFileName="..", cAlternateFileName="")) returned 0 [0255.548] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0255.548] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0255.548] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790077, dwReserved1=0x2a005c, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0255.549] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790077, dwReserved1=0x2a005c, cFileName="..", cAlternateFileName="")) returned 1 [0255.549] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790077, dwReserved1=0x2a005c, cFileName="..", cAlternateFileName="")) returned 0 [0255.549] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0255.549] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0255.549] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790077, dwReserved1=0x2a005c, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0255.549] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790077, dwReserved1=0x2a005c, cFileName="..", cAlternateFileName="")) returned 1 [0255.549] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790077, dwReserved1=0x2a005c, cFileName="..", cAlternateFileName="")) returned 0 [0255.549] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0255.549] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 1 [0255.549] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790077, dwReserved1=0x2a005c, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0255.549] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790077, dwReserved1=0x2a005c, cFileName="..", cAlternateFileName="")) returned 1 [0255.549] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790077, dwReserved1=0x2a005c, cFileName="..", cAlternateFileName="")) returned 0 [0255.549] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0255.549] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 0 [0255.549] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0255.550] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e89cc4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0255.550] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e89cc4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0255.550] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e89cc4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.550] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e89cc4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0255.550] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0255.550] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0255.550] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0255.551] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.551] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0255.551] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0255.551] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97dcaeaa, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97dcaeaa, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97dcaeaa, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0255.551] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97dcaeaa, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97dcaeaa, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97dcaeaa, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0255.551] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97dcaeaa, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97dcaeaa, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97dcaeaa, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.551] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97dcaeaa, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97dcaeaa, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97dcaeaa, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0255.551] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0255.551] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9866f95d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9866f95d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0255.551] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9866f95d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9866f95d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0255.552] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9866f95d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9866f95d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.552] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9866f95d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9866f95d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0255.552] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9866f95d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x986e1f11, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790077, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0255.554] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9866f95d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x986e1f11, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790077, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.554] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x98a031ac, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x98a031ac, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x790077, dwReserved1=0x1d00160b, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0255.554] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0255.554] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0255.554] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0255.554] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0255.554] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0255.554] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0255.555] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0255.555] ReadFile (in: hFile=0x218, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.557] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.558] ReadFile (in: hFile=0x218, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.558] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0255.559] ReadFile (in: hFile=0x218, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0255.559] WriteFile (in: hFile=0x208, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0255.559] CloseHandle (hObject=0x218) returned 1 [0255.559] CloseHandle (hObject=0x208) returned 1 [0255.559] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0255.559] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0255.560] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x98a031ac, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x98a031ac, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x554c0c, dwReserved1=0xbe, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e610 [0255.560] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x98a031ac, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x98a031ac, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x554c0c, dwReserved1=0xbe, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0255.560] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0255.560] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 1 [0255.561] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0xffffffff [0255.561] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x986e1f11, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x986e1f11, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x986e1f11, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x6f0069, dwReserved1=0x53006e, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0255.561] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x986e1f11, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x986e1f11, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x986e1f11, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0255.562] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x986e1f11, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x986e1f11, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x986e1f11, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0255.562] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0255.562] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9866f95d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9866f95d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0255.562] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0255.562] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0255.562] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0255.562] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0255.562] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0255.562] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0255.562] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e89cc4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0255.562] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9332a8a0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0255.665] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9332a8a0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0255.665] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e89cc4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0255.668] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9345bc4f, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9345bc4f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0255.668] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0255.668] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.671] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0255.671] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0255.671] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.671] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0255.671] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0255.672] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0255.673] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0255.674] ReadFile (in: hFile=0x204, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.678] WriteFile (in: hFile=0x208, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.679] ReadFile (in: hFile=0x204, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.679] WriteFile (in: hFile=0x208, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.680] ReadFile (in: hFile=0x204, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0255.680] WriteFile (in: hFile=0x208, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0255.680] CloseHandle (hObject=0x204) returned 1 [0255.680] CloseHandle (hObject=0x208) returned 1 [0255.680] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0255.680] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0255.681] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9345bc4f, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9345bc4f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xb, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e7d0 [0255.681] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9345bc4f, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9345bc4f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xb, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0255.681] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0255.681] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0255.682] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0255.682] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9332a8a0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9332a8a0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9332a8a0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0255.683] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9332a8a0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9332a8a0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9332a8a0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0255.683] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9332a8a0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9332a8a0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9332a8a0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0255.683] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0255.683] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e89cc4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0255.683] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e89cc4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0255.684] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e89cc4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.684] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e89cc4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0255.684] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0255.684] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0255.684] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0255.684] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.684] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0255.684] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0255.684] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0255.684] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0255.684] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy", cAlternateFileName="MICROS~1.SHE")) returned 1 [0255.685] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e3e36ea, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e3e36ea, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0255.685] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e3e36ea, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e3e36ea, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0255.685] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0255.685] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0255.686] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.686] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0255.686] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0255.687] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.687] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.687] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0255.687] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a19402a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a19402a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a19402a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0255.687] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a19402a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a19402a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a19402a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0255.687] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a19402a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a19402a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a19402a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.687] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a19402a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a19402a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a19402a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.687] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0255.687] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0255.687] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0255.688] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.688] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.688] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0255.688] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0255.688] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0255.688] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.688] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="Windows", cAlternateFileName="")) returned 1 [0255.688] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0043, dwReserved1=0x2e002a, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0255.689] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0043, dwReserved1=0x2e002a, cFileName="..", cAlternateFileName="")) returned 1 [0255.689] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5c0043, dwReserved1=0x2e002a, cFileName="..", cAlternateFileName="")) returned 0 [0255.689] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0255.689] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="Windows", cAlternateFileName="")) returned 0 [0255.689] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0255.693] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="Temp", cAlternateFileName="")) returned 1 [0255.693] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0255.693] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.693] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.694] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0255.694] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="Temp", cAlternateFileName="")) returned 0 [0255.694] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0255.694] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0fb669, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79727466, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0255.694] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0fb669, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0255.694] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0fb669, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.694] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0fb669, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.694] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0255.694] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0fb669, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79727466, dwReserved1=0x4f4c2e74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0255.694] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0fb669, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0255.694] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0fb669, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.694] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0fb669, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.694] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0255.694] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0d549b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0d549b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79727466, dwReserved1=0x4f4c2e74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0255.695] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0d549b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0d549b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0255.695] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0d549b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0d549b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.695] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0d549b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0d549b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0255.695] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0255.695] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e3e36ea, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e3e36ea, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79727466, dwReserved1=0x4f4c2e74, cFileName="Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0255.695] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e3e36ea, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e3e36ea, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0255.695] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e3e36ea, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e3e36ea, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.695] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e409927, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e409927, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0255.695] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e409927, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e409927, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0255.695] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e409927, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e409927, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0255.696] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e7e520, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x5e455d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x2a002e, dwReserved1=0x1d00160b, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0255.696] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0255.696] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0255.696] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0255.696] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0255.696] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0255.696] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0255.696] GetLastError () returned 0x20 [0255.696] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0255.697] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0255.697] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0255.698] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e7e520, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x5e455d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x554c0c, dwReserved1=0xbd, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e790 [0255.698] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e7e520, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x5e455d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x554c0c, dwReserved1=0xbd, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0255.698] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0255.698] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0 [0255.698] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0255.698] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5e409927, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e409927, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e409927, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x556ed0, dwReserved1=0x55492c, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0255.699] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5e409927, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e409927, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e409927, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0255.699] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5e409927, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e409927, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e409927, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0255.699] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0255.699] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e409927, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e409927, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0255.699] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0255.699] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0d549b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0d549b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0255.699] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0d549b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0d549b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0255.700] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0d549b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0d549b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0255.700] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0d549b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0d549b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0255.700] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0255.700] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x7060301e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0255.700] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x7060301e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7060301e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0255.700] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x7060301e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7060301e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0255.700] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1218aa, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a1218aa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a1218aa, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0255.700] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e7e520, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0xbd752228, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0255.701] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0255.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0255.701] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0255.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0255.701] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0255.701] VirtualAlloc (lpAddress=0x2238000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2238000 [0255.702] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0255.702] GetLastError () returned 0x20 [0255.702] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0255.707] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0255.707] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0255.707] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e7e520, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0xbd752228, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e190 [0255.707] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e7e520, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0xbd752228, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0255.707] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0255.707] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat")) returned 0 [0255.707] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0255.708] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7060301e, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7060301e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7060301e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x558568, dwReserved1=0x550288, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0255.708] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7060301e, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7060301e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7060301e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0255.708] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7060301e, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7060301e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7060301e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0255.708] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0255.709] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0fb669, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0255.709] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0fb669, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0255.709] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0fb669, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0255.712] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0255.712] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0255.712] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0255.712] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0255.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0255.712] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin")) returned 0x2020 [0255.713] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0255.713] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0255.715] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.716] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.717] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.718] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.718] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.718] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.718] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.718] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.718] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.719] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.719] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.719] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.719] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.719] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.719] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.720] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.721] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.722] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.722] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.722] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.722] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.722] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.723] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.796] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.797] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.884] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.884] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.884] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.885] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.885] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.885] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.886] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.886] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.886] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.886] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.886] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.887] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.887] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.887] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.887] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.887] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.888] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.888] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.888] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.888] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.888] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.889] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.889] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.889] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.889] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.889] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.889] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.890] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.890] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.890] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.890] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.890] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.891] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.891] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.891] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.891] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.891] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.892] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.894] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.894] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.895] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.895] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.895] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.895] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.895] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.896] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.896] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.896] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.896] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.896] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.897] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.897] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.897] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.897] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.897] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.898] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.898] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.898] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.898] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.898] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.899] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.899] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.899] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.899] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.899] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.900] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.900] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.900] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.900] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.900] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.901] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.901] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.901] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.901] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.976] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.976] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.976] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.976] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.977] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.977] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.977] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.977] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.977] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.977] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.978] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.978] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.978] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.978] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.978] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.979] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.979] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.979] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.979] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.979] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.979] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.980] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.980] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.980] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.980] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.980] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.981] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.981] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.981] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.981] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.981] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.982] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.982] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.983] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.983] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.983] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.983] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.983] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.983] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.984] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.984] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.984] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.984] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.984] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.984] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.985] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.985] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.985] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.985] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.985] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.986] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.986] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.986] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.986] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.987] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.987] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.987] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.987] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.988] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.989] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.989] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.989] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.990] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.990] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.990] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.990] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.991] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.991] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.991] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.991] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.991] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.992] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.992] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.992] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.992] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.992] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.992] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.992] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.993] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.993] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.993] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.993] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.993] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.993] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.994] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.994] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.994] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.994] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.994] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.994] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.994] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.995] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.995] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.995] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.995] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.995] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.995] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.996] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.996] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.996] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.996] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.996] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.996] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.997] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.997] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.997] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.997] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.997] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.997] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.997] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.998] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.998] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.998] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.998] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.998] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.998] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.999] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.999] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.999] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.999] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.999] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.999] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0255.999] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.000] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.000] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.000] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.000] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.000] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.001] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.001] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.001] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.001] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.001] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.002] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.002] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.002] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.002] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.002] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.041] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.042] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.042] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.042] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.042] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.043] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.043] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.043] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.043] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.043] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.044] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.044] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.044] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.044] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.044] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.045] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.045] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.045] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.045] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.046] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.046] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.047] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.047] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.058] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.058] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.059] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.059] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.059] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.059] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.059] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.060] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.060] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.060] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.060] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.060] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.060] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.061] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.061] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.061] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.061] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.061] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.061] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.062] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.062] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.062] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.062] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.062] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.063] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.063] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.063] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.063] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.063] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.063] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.064] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.064] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.064] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.064] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.064] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.064] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.065] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.065] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.065] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.065] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.065] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.066] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.066] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.066] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.066] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.066] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.066] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.067] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.067] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.067] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.067] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.067] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.068] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.068] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.068] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.080] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.080] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.081] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.081] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.081] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.081] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.081] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.082] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.082] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.082] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.082] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.082] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.082] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.083] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.083] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.083] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.083] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.083] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.083] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.084] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.084] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.084] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.084] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.084] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.084] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.085] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.085] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.085] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.085] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.085] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.086] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.086] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.086] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.086] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.086] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.086] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.087] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.087] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.103] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.104] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.104] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.104] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.104] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.104] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.105] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.105] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.105] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.105] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.105] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.106] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.106] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.106] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.106] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.106] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.106] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.107] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.107] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.107] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.107] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.107] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.107] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.108] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.108] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.108] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.108] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.108] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.109] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.109] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.109] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.109] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.109] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.110] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.110] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.111] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.111] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.111] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.111] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.111] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.112] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.112] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.112] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.112] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.112] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.112] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.113] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.113] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.113] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.113] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.113] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.113] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.114] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.114] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.114] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.114] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.114] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.114] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.115] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.115] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.115] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.115] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.115] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.115] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.139] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.139] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.139] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.140] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.140] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.140] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.140] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.140] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.141] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.141] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.141] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.141] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.141] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.142] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.142] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.142] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.143] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.143] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.143] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.143] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.143] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.143] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.144] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.144] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.144] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.144] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.144] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.145] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.145] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.146] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.147] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.147] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.147] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.147] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.147] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.148] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.148] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.148] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.148] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.148] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.149] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.149] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.149] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.149] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.149] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.149] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.150] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.150] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.150] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.150] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.150] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.151] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.151] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.151] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.151] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.151] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.151] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.152] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.152] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.152] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.154] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.154] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.154] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.155] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.155] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.155] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.155] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.155] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.155] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.156] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.156] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.156] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.156] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.156] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.156] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.157] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.157] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.157] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.157] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.157] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.158] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.526] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0256.526] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0256.526] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8505eedb, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8505eedb, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x17e58369, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x204244, dwReserved0=0x5503c4, dwReserved1=0x1e, cFileName="TileCache_100_0_Data.bin", cAlternateFileName="TILECA~2.BIN")) returned 0x55e390 [0256.527] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0256.527] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0256.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0256.527] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0256.527] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0256.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0256.527] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin")) returned 0x2020 [0256.528] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0256.528] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0256.532] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0256.543] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0256.543] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85038b9a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x85038b9a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9503da57, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x1d00001d, dwReserved1=0x1d, cFileName="TileCache_100_0_Header.bin", cAlternateFileName="TILECA~1.BIN")) returned 0x55e1d0 [0256.747] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0256.747] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0256.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0256.747] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0256.747] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0256.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0256.747] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat")) returned 0x20 [0256.748] VirtualAlloc (lpAddress=0x223c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x223c000 [0256.748] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0256.749] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.753] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0256.754] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0256.754] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56afae31, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56e8eb1e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56e8eb1e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x554c0c, dwReserved1=0xc4, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e210 [0256.754] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56afae31, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56e8eb1e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56e8eb1e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x554c0c, dwReserved1=0xc4, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0256.754] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0256.754] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat")) returned 1 [0256.755] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat")) returned 0xffffffff [0256.755] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x56b47287, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b47287, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b47287, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0256.757] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0256.757] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0256.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0256.758] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0256.758] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0256.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0256.758] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat")) returned 0x20 [0256.758] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0256.759] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.763] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0256.764] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0256.764] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563f9f12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xe, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e510 [0256.764] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563f9f12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xe, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0256.764] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0256.764] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat")) returned 1 [0256.765] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat")) returned 0xffffffff [0256.765] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563f9f12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0256.765] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0256.766] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563f9f12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563f9f12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x65726f74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0256.766] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563f9f12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563f9f12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0256.766] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563f9f12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563f9f12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0256.766] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563f9f12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563f9f12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0256.766] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0256.766] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563d3cec, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x65726f74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0256.766] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563d3cec, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0256.766] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563d3cec, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0256.766] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563d3cec, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0256.766] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0256.766] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563d3cec, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x65726f74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0256.766] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0256.766] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9993618c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9993618c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.WindowsFeedback_cw5n1h2txyewy", cAlternateFileName="MICROS~1.WIN")) returned 1 [0256.766] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9993618c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99e6d249, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0256.885] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9993618c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99e6d249, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0256.885] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9993618c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9993618c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9993618c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x65726f74, cFileName="AC", cAlternateFileName="")) returned 1 [0256.885] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9993618c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9993618c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0256.890] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9993618c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9993618c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.890] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0256.890] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0256.891] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.891] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0256.891] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0256.891] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0256.892] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0256.892] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.892] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0256.893] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0256.893] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0256.893] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0256.893] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.893] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0256.893] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0256.893] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="Temp", cAlternateFileName="")) returned 1 [0256.893] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0256.893] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.893] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0256.893] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0256.894] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="Temp", cAlternateFileName="")) returned 0 [0256.894] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0256.894] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x65726f74, cFileName="AppData", cAlternateFileName="")) returned 1 [0256.894] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0256.894] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.894] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0256.894] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0256.894] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x65726f74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0256.894] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0256.895] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.895] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0256.895] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0256.895] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9989d823, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9989d823, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x65726f74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0256.895] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9989d823, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9989d823, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0256.895] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9989d823, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9989d823, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.895] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9989d823, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9989d823, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0256.895] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0256.895] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99e6d249, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99e6d249, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x65726f74, cFileName="Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0256.896] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99e6d249, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99e6d249, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0256.896] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99e6d249, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99e6d249, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.896] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99e6d249, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99e6d249, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0256.896] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99e6d249, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99f5217e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0256.900] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99e6d249, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99f5217e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.900] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9a4af6a9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9a4af6a9, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0256.901] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0256.901] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0256.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0256.901] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0256.901] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0256.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0256.902] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0256.902] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0256.903] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0256.904] ReadFile (in: hFile=0x218, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.907] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.908] ReadFile (in: hFile=0x218, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.909] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.909] ReadFile (in: hFile=0x218, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.909] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.909] ReadFile (in: hFile=0x218, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.909] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.910] ReadFile (in: hFile=0x218, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0256.910] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0256.910] CloseHandle (hObject=0x218) returned 1 [0256.910] CloseHandle (hObject=0x210) returned 1 [0256.910] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0256.911] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0256.911] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9a4af6a9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9a4af6a9, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x554c0c, dwReserved1=0xc3, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e390 [0256.911] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9a4af6a9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9a4af6a9, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x554c0c, dwReserved1=0xc3, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0256.911] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0256.911] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 1 [0256.912] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0xffffffff [0256.912] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x99f5217e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99f5217e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99f5217e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0256.913] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x99f5217e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99f5217e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99f5217e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0256.913] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x99f5217e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99f5217e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99f5217e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0256.913] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0256.913] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99e6d249, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99e6d249, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0256.913] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0256.913] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9989d823, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9989d823, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0256.913] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9989d823, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9989d823, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0256.914] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9989d823, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9989d823, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0256.914] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9989d823, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9989d823, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0256.914] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0256.914] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0256.914] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x93887d0c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0256.917] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x93887d0c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0256.917] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0256.918] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x93a51a44, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93a51a44, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0256.918] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0256.918] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0256.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0256.918] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0256.918] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0256.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0256.919] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0256.919] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.919] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0256.920] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.921] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.923] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.924] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.924] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0256.925] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0256.925] CloseHandle (hObject=0x21c) returned 1 [0256.925] CloseHandle (hObject=0x210) returned 1 [0256.925] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0256.925] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0256.925] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x93a51a44, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93a51a44, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e710 [0256.925] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x93a51a44, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93a51a44, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xf, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0256.926] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0256.926] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0256.927] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0256.927] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93887d0c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93887d0c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93887d0c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0256.927] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93887d0c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93887d0c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93887d0c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0256.928] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93887d0c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93887d0c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93887d0c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0256.928] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0256.928] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0256.928] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0256.928] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0256.928] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0256.928] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0256.928] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0256.928] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0256.928] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0256.928] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0256.928] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0256.929] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0256.929] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0256.929] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9783e1e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.WindowsStore_8wekyb3d8bbwe", cAlternateFileName="MICROS~4.WIN")) returned 1 [0256.929] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9783e1e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0256.933] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9783e1e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0256.933] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9416799, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0256.933] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9416799, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0256.939] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9416799, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0256.939] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0256.939] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0256.940] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.940] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0256.941] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0256.941] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9416799, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9416799, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9416799, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0256.941] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9416799, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9416799, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9416799, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0256.942] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9416799, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9416799, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9416799, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.942] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9416799, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9416799, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9416799, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0256.942] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0256.942] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0256.942] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0256.942] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.942] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0256.942] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0256.942] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 1 [0256.942] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0256.942] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.943] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0256.943] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0256.943] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 0 [0256.943] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0256.943] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0256.943] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0256.943] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0256.943] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0256.943] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0256.943] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0256.943] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0256.944] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0256.944] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0256.944] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0256.944] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0256.944] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0256.945] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0256.945] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0256.945] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0256.945] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9783e1e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9783e1e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_X")) returned 1 [0256.945] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9783e1e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9783e1e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0256.945] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9783e1e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9783e1e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0256.945] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9783e1e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x97f6443, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0256.945] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9783e1e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x97f6443, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0256.949] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9783e1e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x97f6443, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0256.949] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1cef5ca8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9bd630c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0256.949] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0256.949] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0256.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0256.949] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0256.949] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0256.950] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0256.950] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat")) returned 0x20 [0256.950] VirtualAlloc (lpAddress=0x2240000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2240000 [0256.950] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0256.951] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0256.952] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.955] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.958] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.958] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.958] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.958] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.959] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.959] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.959] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.959] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.959] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.959] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.960] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.960] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.960] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.960] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.960] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.961] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.961] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.961] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.961] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.961] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.961] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.962] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.962] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.962] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.962] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.962] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.962] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.963] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.963] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.963] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.963] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.963] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.963] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.964] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.964] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.964] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.964] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.964] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.964] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.965] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.965] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.965] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.965] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.965] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.965] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.966] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.966] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.966] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.966] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.966] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.966] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.967] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.967] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.967] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.967] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.967] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.967] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.968] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.968] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.968] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.968] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.968] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0256.968] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0256.968] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0256.968] CloseHandle (hObject=0x21c) returned 1 [0256.969] CloseHandle (hObject=0x218) returned 1 [0256.969] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0256.969] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0256.969] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1cef5ca8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9bd630c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x554c0c, dwReserved1=0xc7, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e390 [0256.969] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1cef5ca8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9bd630c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x554c0c, dwReserved1=0xc7, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0256.969] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0256.970] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat")) returned 1 [0256.971] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat")) returned 0xffffffff [0256.972] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97f6443, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x97f6443, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x97f6443, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0256.972] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97f6443, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x97f6443, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x97f6443, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0256.973] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97f6443, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x97f6443, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x97f6443, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0256.973] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0256.973] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9783e1e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x97f6443, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0256.973] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0256.973] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0256.973] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0256.973] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0256.973] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0256.973] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0256.973] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0256.973] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0256.974] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0256.974] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0256.974] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0256.974] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0256.974] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0256.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0256.974] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0256.975] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0256.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0256.975] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat")) returned 0x20 [0256.975] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0256.975] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0256.984] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.988] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.990] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.990] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0256.991] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0256.991] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0256.991] CloseHandle (hObject=0x210) returned 1 [0256.991] CloseHandle (hObject=0x218) returned 1 [0256.991] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0256.991] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0256.992] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e8d0 [0256.992] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0256.992] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0256.992] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat")) returned 1 [0256.993] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat")) returned 0xffffffff [0256.993] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0256.993] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0256.993] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x65726f74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0256.994] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0256.994] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0256.994] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0256.994] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0256.994] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x65726f74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0256.994] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0256.994] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0256.995] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0256.995] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0256.995] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x65726f74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0256.995] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0256.995] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.XboxGameCallableUI_cw5n1h2txyewy", cAlternateFileName="MICROS~1.XBO")) returned 1 [0256.995] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c2a33a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0256.998] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c2a33a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0256.998] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x65726f74, cFileName="AC", cAlternateFileName="")) returned 1 [0256.998] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be76e20, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0257.003] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be76e20, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.003] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0257.003] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0257.004] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.005] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0257.005] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0257.005] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0257.005] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0257.005] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.005] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0257.005] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0257.005] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0257.005] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0257.006] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.006] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0257.006] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0257.006] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="Temp", cAlternateFileName="")) returned 1 [0257.006] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0257.006] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.006] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0257.006] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0257.007] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="Temp", cAlternateFileName="")) returned 0 [0257.007] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0257.007] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be2a715, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x65726f74, cFileName="AppData", cAlternateFileName="")) returned 1 [0257.007] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be2a715, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0257.008] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be2a715, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.008] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be2a715, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0257.008] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0257.015] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be0462f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be0462f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be0462f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x65726f74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0257.015] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be0462f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be0462f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be0462f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0257.015] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be0462f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be0462f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be0462f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.015] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be0462f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be0462f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be0462f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0257.015] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0257.016] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x65726f74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0257.016] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0257.016] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.016] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0257.016] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0257.016] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c2a33a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c2a33a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x65726f74, cFileName="Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0257.016] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c2a33a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c2a33a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0257.017] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c2a33a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c2a33a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.017] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c2a33a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c2a33a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0257.017] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c2a33a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c31594e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0257.021] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c2a33a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c31594e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.021] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c551adc, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c551adc, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0257.022] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0257.022] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.022] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0257.022] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0257.022] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.022] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0257.022] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0257.023] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0257.023] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0257.024] ReadFile (in: hFile=0x210, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.026] WriteFile (in: hFile=0x21c, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.028] ReadFile (in: hFile=0x210, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.028] WriteFile (in: hFile=0x21c, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.028] ReadFile (in: hFile=0x210, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.029] WriteFile (in: hFile=0x21c, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.029] ReadFile (in: hFile=0x210, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.029] WriteFile (in: hFile=0x21c, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.029] ReadFile (in: hFile=0x210, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0257.029] WriteFile (in: hFile=0x21c, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0257.029] CloseHandle (hObject=0x210) returned 1 [0257.030] CloseHandle (hObject=0x21c) returned 1 [0257.030] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0257.030] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0257.030] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c551adc, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c551adc, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x554c0c, dwReserved1=0xc1, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e910 [0257.031] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c551adc, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c551adc, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x554c0c, dwReserved1=0xc1, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0257.031] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0257.031] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 1 [0257.032] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0xffffffff [0257.033] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9c31594e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c31594e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c31594e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0257.034] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9c31594e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c31594e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c31594e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0257.034] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9c31594e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c31594e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c31594e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0257.034] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0257.035] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c2a33a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c2a33a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0257.035] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0257.035] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0257.035] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0257.035] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0257.035] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0257.035] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0257.035] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be0462f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be2a715, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0257.035] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be0462f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x93b82c39, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0257.039] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be0462f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x93b82c39, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0257.039] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be2a715, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0257.040] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x93c418e8, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93c418e8, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0257.040] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0257.040] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0257.041] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0257.041] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0257.041] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0257.041] VirtualAlloc (lpAddress=0x2244000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2244000 [0257.042] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0257.042] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0257.044] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.046] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.047] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.048] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.048] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0257.048] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0257.048] CloseHandle (hObject=0x218) returned 1 [0257.048] CloseHandle (hObject=0x21c) returned 1 [0257.049] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0257.049] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0257.049] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x93c418e8, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93c418e8, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xe, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e250 [0257.049] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x93c418e8, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93c418e8, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xe, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0257.049] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0257.050] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0257.051] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0257.051] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93b82c39, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93b82c39, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93b82c39, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0257.052] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93b82c39, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93b82c39, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93b82c39, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0257.052] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93b82c39, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93b82c39, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93b82c39, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0257.052] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0257.053] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be2a715, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0257.053] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be2a715, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0257.053] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be2a715, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0257.053] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be2a715, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0257.053] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0257.053] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0257.053] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0257.053] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0257.053] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0257.053] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0257.054] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0257.054] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0257.054] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d759694, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x47786174, cFileName="Microsoft.XboxIdentityProvider_cw5n1h2txyewy", cAlternateFileName="MICROS~2.XBO")) returned 1 [0257.054] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d759694, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d759694, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0257.054] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d759694, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d759694, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0257.054] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0257.054] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0257.055] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.056] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0257.056] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0257.057] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.057] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0257.057] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0257.057] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0257.057] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0257.057] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.057] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0257.057] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0257.058] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0257.058] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0257.058] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.058] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0257.058] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0257.058] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="Temp", cAlternateFileName="")) returned 1 [0257.058] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0257.058] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.058] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0257.059] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0257.059] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="Temp", cAlternateFileName="")) returned 0 [0257.059] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0257.059] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d4383e5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0257.059] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d4383e5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0257.059] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d4383e5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.059] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d4383e5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0257.059] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0257.059] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0257.059] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0257.060] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.060] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0257.060] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0257.060] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0257.061] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0257.061] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.061] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0257.061] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0257.061] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d759694, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d759694, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0257.061] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d759694, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d759694, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0257.061] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d759694, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d759694, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.062] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d759694, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d759694, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0257.062] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d759694, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d77f879, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0257.064] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d759694, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d77f879, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.064] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9da2e714, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9da2e714, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0257.064] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0257.064] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.068] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0257.069] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0257.069] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0257.069] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0257.070] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0257.070] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0257.071] ReadFile (in: hFile=0x218, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.073] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.083] ReadFile (in: hFile=0x218, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.083] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.083] ReadFile (in: hFile=0x218, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.083] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.084] ReadFile (in: hFile=0x218, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.084] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.084] ReadFile (in: hFile=0x218, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0257.084] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0257.084] CloseHandle (hObject=0x218) returned 1 [0257.085] CloseHandle (hObject=0x210) returned 1 [0257.085] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0257.086] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0257.086] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9da2e714, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9da2e714, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x554c0c, dwReserved1=0xc0, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e750 [0257.086] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9da2e714, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9da2e714, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x554c0c, dwReserved1=0xc0, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0257.086] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0257.086] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 1 [0257.088] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0xffffffff [0257.088] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9d77f879, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d77f879, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d77f879, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0257.089] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9d77f879, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d77f879, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d77f879, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0257.089] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9d77f879, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d77f879, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d77f879, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0257.089] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0257.089] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d759694, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d759694, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x1d00160b, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0257.090] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0257.090] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0257.090] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0257.090] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0257.090] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 0 [0257.090] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0257.090] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d4383e5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Settings", cAlternateFileName="")) returned 1 [0257.090] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9404784f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0257.093] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9404784f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0257.094] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d4383e5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0257.094] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x941c4e32, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x941c4e32, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x536e0000, dwReserved1=0x65726f74, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0257.094] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0257.094] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.095] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0257.095] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0257.095] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.095] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0257.095] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0257.096] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0257.096] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0257.097] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.099] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.101] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.102] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.102] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0257.102] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0257.102] CloseHandle (hObject=0x21c) returned 1 [0257.102] CloseHandle (hObject=0x210) returned 1 [0257.103] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0257.103] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0257.103] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x941c4e32, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x941c4e32, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xe, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e390 [0257.103] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x941c4e32, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x941c4e32, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xe, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0257.103] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0257.103] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0257.105] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0257.105] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93faeefa, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93faeefa, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93faeefa, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0257.106] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93faeefa, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93faeefa, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93faeefa, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0257.106] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93faeefa, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93faeefa, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93faeefa, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0257.106] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0257.106] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d4383e5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0257.107] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d4383e5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0257.107] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d4383e5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0257.107] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d4383e5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0257.107] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0257.107] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0257.107] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0257.107] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0257.107] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0257.107] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0257.108] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0257.108] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0257.108] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x49786174, cFileName="Windows.ContactSupport_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.CON")) returned 1 [0257.108] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e8c896c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0257.112] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e8c896c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0257.112] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0257.112] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0257.123] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0257.124] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0257.124] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0257.125] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.125] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0257.125] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0257.125] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0257.125] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0257.125] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.125] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0257.125] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0257.125] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0257.125] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0257.126] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.126] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0257.126] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0257.126] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 1 [0257.126] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0257.127] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0257.128] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0257.128] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0257.128] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 0 [0257.128] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0257.128] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0257.128] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0257.128] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0257.128] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0257.128] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0257.128] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0257.128] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0257.129] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0257.129] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0257.129] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0257.129] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0257.129] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0257.152] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0257.152] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0257.152] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0257.152] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0257.152] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0257.153] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0257.153] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0257.154] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.157] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.159] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.160] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.160] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0257.160] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0257.160] CloseHandle (hObject=0x210) returned 1 [0257.160] CloseHandle (hObject=0x21c) returned 1 [0257.161] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0257.161] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0257.161] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x94722408, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94722408, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e510 [0257.169] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0257.169] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0257.170] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0257.170] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0257.170] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0257.170] VirtualAlloc (lpAddress=0x2248000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2248000 [0257.171] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0257.171] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0257.172] ReadFile (in: hFile=0x210, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.175] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.176] ReadFile (in: hFile=0x210, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.177] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.177] ReadFile (in: hFile=0x210, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.177] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.177] ReadFile (in: hFile=0x210, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.178] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0257.178] ReadFile (in: hFile=0x210, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0257.178] WriteFile (in: hFile=0x218, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0257.178] CloseHandle (hObject=0x210) returned 1 [0257.178] CloseHandle (hObject=0x218) returned 1 [0257.178] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0257.179] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0257.179] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e8c896c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9eca8840, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9eca8840, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x554c0c, dwReserved1=0xc5, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e890 [0257.188] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0257.188] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.188] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0257.188] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0257.188] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.203] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0257.203] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0257.204] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0257.204] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0257.205] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.208] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.209] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.210] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.210] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0257.210] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0257.210] CloseHandle (hObject=0x21c) returned 1 [0257.210] CloseHandle (hObject=0x218) returned 1 [0257.210] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0257.211] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0257.211] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xc37ec85c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x11d3fb2a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e710 [0257.984] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0257.984] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0257.984] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0257.984] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0257.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0257.984] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0257.985] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0257.986] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0257.987] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.989] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.990] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.991] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0257.991] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0257.991] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0257.991] CloseHandle (hObject=0x218) returned 1 [0257.991] CloseHandle (hObject=0x21c) returned 1 [0257.991] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0257.992] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0257.992] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5efcf224, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x94a69826, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94a69826, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xe, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e8d0 [0257.992] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5efcf224, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x94a69826, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94a69826, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x550370, dwReserved1=0xe, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0257.992] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0257.992] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0257.994] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0257.994] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x94794b2d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94794b2d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94794b2d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0257.995] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x947bac6a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x947bac6a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x947bac6a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0257.995] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x947bac6a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x947bac6a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x947bac6a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0257.995] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0257.995] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efa8e98, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0257.995] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efa8e98, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0257.996] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efa8e98, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0257.996] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efa8e98, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0257.996] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0257.996] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efa8e98, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0257.996] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efa8e98, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0257.996] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efa8e98, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0257.996] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efa8e98, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0257.996] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0257.996] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efa8e98, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0257.997] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0257.997] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x74636174, cFileName="Windows.MiracastView_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.MIR")) returned 1 [0257.997] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0258.000] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0258.000] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0258.000] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0258.001] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.001] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.001] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0258.004] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0258.004] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0258.005] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.005] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.005] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0258.005] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0258.005] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0258.005] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.005] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.005] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0258.005] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0258.005] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0258.006] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.006] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.006] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0258.006] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0258.006] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0258.006] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.006] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.006] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0258.006] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="Settings", cAlternateFileName="")) returned 1 [0258.006] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x94e232ee, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0258.009] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x94e232ee, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.009] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0258.009] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x94f7a65b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94f7a65b, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x6c0000, dwReserved1=0x67006f, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0258.010] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.010] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.010] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.010] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.010] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.010] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0258.010] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0258.010] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.011] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0258.011] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0258.014] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0258.015] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0258.015] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0258.016] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0258.016] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0258.016] CloseHandle (hObject=0x21c) returned 1 [0258.016] CloseHandle (hObject=0x218) returned 1 [0258.016] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.017] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.017] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x94f7a65b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94f7a65b, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e8d0 [0258.017] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x94f7a65b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94f7a65b, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0258.017] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0258.017] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0258.018] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0258.018] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x94d8a887, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94d8a887, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94d8a887, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0258.019] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x94d8a887, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94d8a887, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94d8a887, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0258.020] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x94d8a887, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94d8a887, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94d8a887, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0258.020] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0258.020] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0258.020] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0258.020] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.020] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.021] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0258.021] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0258.021] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0258.021] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.021] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.021] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0258.021] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0258.021] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0258.021] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x74636174, cFileName="Windows.PrintDialog_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.PRI")) returned 1 [0258.021] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0258.026] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0258.026] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0258.026] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0258.027] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.027] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.027] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0258.027] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0258.027] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0258.028] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.028] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.028] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0258.028] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0258.028] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0258.029] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.029] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.029] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0258.029] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0258.030] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0258.030] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.030] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.030] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0258.030] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0258.030] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0258.030] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.030] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.030] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0258.030] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="Settings", cAlternateFileName="")) returned 1 [0258.031] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x950391b1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0258.033] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x950391b1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.033] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa05d73cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05d73cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05d73cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0258.034] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x952291bd, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x952291bd, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x6c0000, dwReserved1=0x67006f, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0258.034] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.034] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.034] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.035] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.035] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0258.035] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0258.035] VirtualAlloc (lpAddress=0x224c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x224c000 [0258.035] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0258.036] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.037] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0258.039] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0258.041] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0258.041] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0258.041] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0258.042] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0258.042] CloseHandle (hObject=0x218) returned 1 [0258.042] CloseHandle (hObject=0x21c) returned 1 [0258.042] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.042] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.042] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x952291bd, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x952291bd, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e410 [0258.043] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x952291bd, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x952291bd, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0258.043] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0258.043] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0258.044] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0258.044] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x950391b1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x950391b1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x950391b1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0258.045] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x950391b1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x950391b1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x950391b1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0258.045] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x950391b1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x950391b1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x950391b1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0258.045] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0258.046] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0258.046] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0258.046] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.046] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.046] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0258.046] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0258.046] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0258.046] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.046] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.047] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0258.047] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0258.047] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0258.047] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3706b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab58681a, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab58681a, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x74636174, cFileName="Windows.PurchaseDialog_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.PUR")) returned 1 [0258.047] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3706b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab58681a, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabc1516c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0258.051] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3706b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab58681a, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabc1516c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="..", cAlternateFileName="")) returned 1 [0258.051] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xab58681a, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab58681a, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab58681a, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="AC", cAlternateFileName="")) returned 1 [0258.051] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xab58681a, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab58681a, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0258.054] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xab58681a, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab58681a, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.054] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0258.055] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0258.056] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0258.056] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0258.056] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0258.056] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0258.056] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0258.057] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0258.057] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0258.057] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0258.058] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0258.058] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0258.058] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0258.058] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0258.058] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0258.058] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 1 [0258.058] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0258.058] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0258.059] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0258.059] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0258.059] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="Temp", cAlternateFileName="")) returned 0 [0258.059] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0258.059] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab409029, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="AppData", cAlternateFileName="")) returned 1 [0258.059] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab409029, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0258.060] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab409029, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.060] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab409029, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.060] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0258.060] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3e2e5c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab3e2e5c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab3e2e5c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0258.060] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3e2e5c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab3e2e5c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab3e2e5c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0258.061] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3e2e5c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab3e2e5c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab3e2e5c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.062] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3e2e5c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab3e2e5c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab3e2e5c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.062] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0258.062] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3706b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab3706b2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab3706b2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0258.062] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3706b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab3706b2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab3706b2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0258.062] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3706b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab3706b2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab3706b2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.062] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3706b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab3706b2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab3706b2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.062] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0258.062] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab396ad7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab396ad7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab396ad7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0258.062] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab396ad7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab396ad7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab396ad7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0258.063] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab396ad7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab396ad7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab396ad7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.063] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab396ad7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab396ad7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab396ad7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.063] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0258.063] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3e2e5c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab409029, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x4f4c2e74, cFileName="Settings", cAlternateFileName="")) returned 1 [0258.063] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3e2e5c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9557058c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0258.066] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3e2e5c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9557058c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.066] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab409029, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0258.066] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9562f21c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9562f21c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x6c0000, dwReserved1=0x67006f, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0258.067] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.067] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.067] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.067] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.067] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.067] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0258.067] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat")) returned 0x20 [0258.068] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.068] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0258.069] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0258.073] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0258.075] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0258.075] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0258.075] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0258.075] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0258.075] CloseHandle (hObject=0x21c) returned 1 [0258.076] CloseHandle (hObject=0x218) returned 1 [0258.076] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.076] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.076] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9562f21c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9562f21c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="settings.dat", cAlternateFileName="")) returned 0x55e610 [0258.076] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9562f21c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9562f21c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0258.077] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0258.077] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat")) returned 1 [0258.078] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat")) returned 0xffffffff [0258.078] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9554a342, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9554a342, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9554a342, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0258.079] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9554a342, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9554a342, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9554a342, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0258.079] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9554a342, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9554a342, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9554a342, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0258.079] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0258.080] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab409029, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0258.080] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab409029, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0258.080] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab409029, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.080] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab409029, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.080] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0258.080] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab396ad7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab396ad7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab396ad7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0258.080] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab396ad7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab396ad7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab396ad7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0258.080] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab396ad7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab396ad7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab396ad7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.080] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab396ad7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab396ad7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab396ad7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 0 [0258.081] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0258.081] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabc1516c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabc1516c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 1 [0258.081] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabc1516c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabc1516c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0258.081] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabc1516c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabc1516c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="..", cAlternateFileName="")) returned 1 [0258.081] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabc1516c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabc1516c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0258.081] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabc1516c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabd6c431, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0258.083] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabc1516c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabd6c431, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0258.084] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xac14c25e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xac14c25e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0258.084] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.084] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.084] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.084] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0258.084] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0x20 [0258.085] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0258.085] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0258.086] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0258.088] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0258.090] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0258.090] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0258.090] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0258.091] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0258.091] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0258.091] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0258.091] ReadFile (in: hFile=0x21c, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0258.091] WriteFile (in: hFile=0x210, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0258.092] CloseHandle (hObject=0x21c) returned 1 [0258.092] CloseHandle (hObject=0x210) returned 1 [0258.092] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.092] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.092] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xac14c25e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xac14c25e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x554c0c, dwReserved1=0xc6, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0x55e610 [0258.093] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xac14c25e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xac14c25e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x554c0c, dwReserved1=0xc6, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 0 [0258.093] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0258.093] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 1 [0258.094] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat")) returned 0xffffffff [0258.094] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xabd46105, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabd46105, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabd46105, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0258.095] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xabd6c431, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabd6c431, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabd6c431, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0258.096] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xabd6c431, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabd6c431, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabd6c431, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72006f, dwReserved1=0x2e0065, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0258.096] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0258.096] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabc1516c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabc1516c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c002e, dwReserved1=0x67006f, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 0 [0258.096] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0258.096] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabc1516c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabc1516c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 0 [0258.097] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0258.097] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="windows_ie_ac_001", cAlternateFileName="WINDOW~1")) returned 1 [0258.097] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0258.098] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0258.098] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="AC", cAlternateFileName="")) returned 1 [0258.098] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0258.100] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="..", cAlternateFileName="")) returned 1 [0258.100] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0258.100] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0258.100] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0258.100] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0258.100] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0258.100] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0258.100] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0258.101] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0258.101] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0258.101] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0258.101] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0258.101] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0258.101] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0258.101] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0258.101] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0258.102] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Temp", cAlternateFileName="")) returned 1 [0258.102] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0258.102] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0258.102] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0258.102] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0258.102] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="Temp", cAlternateFileName="")) returned 0 [0258.102] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0258.102] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="AC", cAlternateFileName="")) returned 0 [0258.102] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0258.102] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="windows_ie_ac_001", cAlternateFileName="WINDOW~1")) returned 0 [0258.102] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0258.102] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73f4dcd0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73f4dcd0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73f4dcd0, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f65695f, dwReserved1=0x305f6361, cFileName="PeerDistRepub", cAlternateFileName="PEERDI~1")) returned 1 [0258.103] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\PeerDistRepub\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\peerdistrepub\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73f4dcd0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73f4dcd0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73f4dcd0, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0258.103] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73f4dcd0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73f4dcd0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73f4dcd0, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="..", cAlternateFileName="")) returned 1 [0258.103] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73f4dcd0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73f4dcd0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73f4dcd0, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="..", cAlternateFileName="")) returned 0 [0258.103] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0258.103] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdc699b5c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc699b5c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f65695f, dwReserved1=0x305f6361, cFileName="Publishers", cAlternateFileName="PUBLIS~1")) returned 1 [0258.103] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Publishers\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\publishers\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdc699b5c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc699b5c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0258.104] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdc699b5c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc699b5c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="..", cAlternateFileName="")) returned 1 [0258.104] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd5c81f26, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5c81f26, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="8wekyb3d8bbwe", cAlternateFileName="8WEKYB~1")) returned 1 [0258.104] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Publishers\\8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\publishers\\8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd5c81f26, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd828181e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0258.104] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd5c81f26, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd828181e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0258.104] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd5c81f26, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd828181e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0258.104] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0258.104] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd5c81f26, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5c81f26, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="8wekyb3d8bbwe", cAlternateFileName="8WEKYB~1")) returned 0 [0258.104] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0258.104] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xdbeab755, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdbeab755, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x62623864, dwReserved1=0x305f6577, cFileName="Temp", cAlternateFileName="")) returned 1 [0258.105] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xdbeab755, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x3c5faf66, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0258.105] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xdbeab755, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x3c5faf66, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="..", cAlternateFileName="")) returned 1 [0258.105] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e66c7b0, ftCreationTime.dwHighDateTime=0x1d8b51b, ftLastAccessTime.dwLowDateTime=0x770860b0, ftLastAccessTime.dwHighDateTime=0x1d8b828, ftLastWriteTime.dwLowDateTime=0x770860b0, ftLastWriteTime.dwHighDateTime=0x1d8b828, nFileSizeHigh=0x0, nFileSizeLow=0x2b2a, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="- MwW4XZp67E_9pAqsu.m4a", cAlternateFileName="-MWW4X~1.M4A")) returned 1 [0258.106] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd301d090, ftCreationTime.dwHighDateTime=0x1d8b193, ftLastAccessTime.dwLowDateTime=0x488a63a0, ftLastAccessTime.dwHighDateTime=0x1d8b30f, ftLastWriteTime.dwLowDateTime=0x488a63a0, ftLastWriteTime.dwHighDateTime=0x1d8b30f, nFileSizeHigh=0x0, nFileSizeLow=0x23a3, dwReserved0=0x39005f, dwReserved1=0x610070, cFileName="05bOxrW8gBe90jfUA.jpg", cAlternateFileName="05BOXR~1.JPG")) returned 1 [0258.106] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.106] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.106] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.106] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0258.106] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\05bOxrW8gBe90jfUA.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\05boxrw8gbe90jfua.jpg")) returned 0x20 [0258.107] VirtualAlloc (lpAddress=0x2250000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2250000 [0258.107] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\05bOxrW8gBe90jfUA.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\05boxrw8gbe90jfua.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.108] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\05bOxrW8gBe90jfUA.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\05boxrw8gbe90jfua.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.108] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.110] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.112] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.112] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.112] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x3a3, lpOverlapped=0x0) returned 1 [0258.112] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x3a3, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x3a3, lpOverlapped=0x0) returned 1 [0258.112] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.113] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.113] CloseHandle (hObject=0x1d4) returned 1 [0258.113] CloseHandle (hObject=0x200) returned 1 [0258.113] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\05bOxrW8gBe90jfUA.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\05boxrw8gbe90jfua.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\05bOxrW8gBe90jfUA.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\05boxrw8gbe90jfua.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.115] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\05bOxrW8gBe90jfUA.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\05boxrw8gbe90jfua.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.115] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\05bOxrW8gBe90jfUA.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\05boxrw8gbe90jfua.jpg"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd301d090, ftCreationTime.dwHighDateTime=0x1d8b193, ftLastAccessTime.dwLowDateTime=0x488a63a0, ftLastAccessTime.dwHighDateTime=0x1d8b30f, ftLastWriteTime.dwLowDateTime=0x488a63a0, ftLastWriteTime.dwHighDateTime=0x1d8b30f, nFileSizeHigh=0x0, nFileSizeLow=0x23a3, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="05bOxrW8gBe90jfUA.jpg", cAlternateFileName="05BOXR~1.JPG")) returned 0x55e490 [0258.115] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd301d090, ftCreationTime.dwHighDateTime=0x1d8b193, ftLastAccessTime.dwLowDateTime=0x488a63a0, ftLastAccessTime.dwHighDateTime=0x1d8b30f, ftLastWriteTime.dwLowDateTime=0x488a63a0, ftLastWriteTime.dwHighDateTime=0x1d8b30f, nFileSizeHigh=0x0, nFileSizeLow=0x23a3, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="05bOxrW8gBe90jfUA.jpg", cAlternateFileName="05BOXR~1.JPG")) returned 0 [0258.115] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0258.116] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\05bOxrW8gBe90jfUA.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\05boxrw8gbe90jfua.jpg")) returned 1 [0258.117] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\05bOxrW8gBe90jfUA.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\05boxrw8gbe90jfua.jpg")) returned 0xffffffff [0258.117] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ce89390, ftCreationTime.dwHighDateTime=0x1d8b873, ftLastAccessTime.dwLowDateTime=0x76516130, ftLastAccessTime.dwHighDateTime=0x1d8baa3, ftLastWriteTime.dwLowDateTime=0x76516130, ftLastWriteTime.dwHighDateTime=0x1d8baa3, nFileSizeHigh=0x0, nFileSizeLow=0x5d3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3jT5vTaXObsO6ly.csv", cAlternateFileName="3JT5VT~1.CSV")) returned 1 [0258.117] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.117] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.118] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.118] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.118] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0258.118] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\3jT5vTaXObsO6ly.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\3jt5vtaxobso6ly.csv")) returned 0x20 [0258.118] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\3jT5vTaXObsO6ly.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\3jt5vtaxobso6ly.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.118] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\3jT5vTaXObsO6ly.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\3jt5vtaxobso6ly.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.119] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.120] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.122] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.122] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.122] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.123] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.123] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.123] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.123] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.123] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.124] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xd3b, lpOverlapped=0x0) returned 1 [0258.124] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xd3b, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xd3b, lpOverlapped=0x0) returned 1 [0258.124] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.124] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.124] CloseHandle (hObject=0x200) returned 1 [0258.124] CloseHandle (hObject=0x1d4) returned 1 [0258.125] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\3jT5vTaXObsO6ly.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\3jt5vtaxobso6ly.csv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\3jT5vTaXObsO6ly.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\3jt5vtaxobso6ly.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.125] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\3jT5vTaXObsO6ly.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\3jt5vtaxobso6ly.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.125] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\3jT5vTaXObsO6ly.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\3jt5vtaxobso6ly.csv"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ce89390, ftCreationTime.dwHighDateTime=0x1d8b873, ftLastAccessTime.dwLowDateTime=0x76516130, ftLastAccessTime.dwHighDateTime=0x1d8baa3, ftLastWriteTime.dwLowDateTime=0x76516130, ftLastWriteTime.dwHighDateTime=0x1d8baa3, nFileSizeHigh=0x0, nFileSizeLow=0x5d3b, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="3jT5vTaXObsO6ly.csv", cAlternateFileName="3JT5VT~1.CSV")) returned 0x55e510 [0258.125] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ce89390, ftCreationTime.dwHighDateTime=0x1d8b873, ftLastAccessTime.dwLowDateTime=0x76516130, ftLastAccessTime.dwHighDateTime=0x1d8baa3, ftLastWriteTime.dwLowDateTime=0x76516130, ftLastWriteTime.dwHighDateTime=0x1d8baa3, nFileSizeHigh=0x0, nFileSizeLow=0x5d3b, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="3jT5vTaXObsO6ly.csv", cAlternateFileName="3JT5VT~1.CSV")) returned 0 [0258.125] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0258.125] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\3jT5vTaXObsO6ly.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\3jt5vtaxobso6ly.csv")) returned 1 [0258.129] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\3jT5vTaXObsO6ly.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\3jt5vtaxobso6ly.csv")) returned 0xffffffff [0258.129] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d01610, ftCreationTime.dwHighDateTime=0x1d8c0d0, ftLastAccessTime.dwLowDateTime=0xc0ef89f0, ftLastAccessTime.dwHighDateTime=0x1d8c0e4, ftLastWriteTime.dwLowDateTime=0xc0ef89f0, ftLastWriteTime.dwHighDateTime=0x1d8c0e4, nFileSizeHigh=0x0, nFileSizeLow=0x12980, dwReserved0=0x0, dwReserved1=0x0, cFileName="4iw-n1TVRQ.png", cAlternateFileName="4IW-N1~1.PNG")) returned 1 [0258.129] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.129] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.130] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.130] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.130] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0258.130] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\4iw-n1TVRQ.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\4iw-n1tvrq.png")) returned 0x20 [0258.130] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\4iw-n1TVRQ.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\4iw-n1tvrq.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.131] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\4iw-n1TVRQ.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\4iw-n1tvrq.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.131] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.132] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.133] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.134] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.134] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.134] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.134] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.135] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.135] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.135] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.135] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.136] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.136] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.136] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.136] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.136] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.137] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.137] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.137] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.137] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.138] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.138] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.138] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.138] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.138] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.139] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.139] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.139] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.139] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.140] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.140] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.140] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.140] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.140] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.141] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.141] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.141] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x980, lpOverlapped=0x0) returned 1 [0258.141] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x980, lpOverlapped=0x0) returned 1 [0258.141] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.142] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.142] CloseHandle (hObject=0x1d4) returned 1 [0258.142] CloseHandle (hObject=0x200) returned 1 [0258.142] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\4iw-n1TVRQ.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\4iw-n1tvrq.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\4iw-n1TVRQ.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\4iw-n1tvrq.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.143] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\4iw-n1TVRQ.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\4iw-n1tvrq.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.143] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\4iw-n1TVRQ.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\4iw-n1tvrq.png"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d01610, ftCreationTime.dwHighDateTime=0x1d8c0d0, ftLastAccessTime.dwLowDateTime=0xc0ef89f0, ftLastAccessTime.dwHighDateTime=0x1d8c0e4, ftLastWriteTime.dwLowDateTime=0xc0ef89f0, ftLastWriteTime.dwHighDateTime=0x1d8c0e4, nFileSizeHigh=0x0, nFileSizeLow=0x12980, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="4iw-n1TVRQ.png", cAlternateFileName="4IW-N1~1.PNG")) returned 0x55e5d0 [0258.143] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d01610, ftCreationTime.dwHighDateTime=0x1d8c0d0, ftLastAccessTime.dwLowDateTime=0xc0ef89f0, ftLastAccessTime.dwHighDateTime=0x1d8c0e4, ftLastWriteTime.dwLowDateTime=0xc0ef89f0, ftLastWriteTime.dwHighDateTime=0x1d8c0e4, nFileSizeHigh=0x0, nFileSizeLow=0x12980, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="4iw-n1TVRQ.png", cAlternateFileName="4IW-N1~1.PNG")) returned 0 [0258.143] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0258.143] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\4iw-n1TVRQ.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\4iw-n1tvrq.png")) returned 1 [0258.145] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\4iw-n1TVRQ.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\4iw-n1tvrq.png")) returned 0xffffffff [0258.145] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7564dfd0, ftCreationTime.dwHighDateTime=0x1d8b207, ftLastAccessTime.dwLowDateTime=0x1b696d0, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0x1b696d0, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0x1273f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6C9LmWx4ZweRH-N8MVgc.m4a", cAlternateFileName="6C9LMW~1.M4A")) returned 1 [0258.146] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad857ea0, ftCreationTime.dwHighDateTime=0x1d8b893, ftLastAccessTime.dwLowDateTime=0xab7a55f0, ftLastAccessTime.dwHighDateTime=0x1d8bee1, ftLastWriteTime.dwLowDateTime=0xab7a55f0, ftLastWriteTime.dwHighDateTime=0x1d8bee1, nFileSizeHigh=0x0, nFileSizeLow=0x6616, dwReserved0=0x2d0068, dwReserved1=0x38006e, cFileName="7QOD-nDkCpDtF.avi", cAlternateFileName="7QOD-N~1.AVI")) returned 1 [0258.146] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.146] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.146] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.146] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.146] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.146] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0258.146] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\7QOD-nDkCpDtF.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\7qod-ndkcpdtf.avi")) returned 0x20 [0258.147] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\7QOD-nDkCpDtF.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\7qod-ndkcpdtf.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.147] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\7QOD-nDkCpDtF.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\7qod-ndkcpdtf.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.148] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.149] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.150] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.151] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.151] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.151] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.151] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.151] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.152] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.152] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.152] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.152] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.153] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x616, lpOverlapped=0x0) returned 1 [0258.153] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x616, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x616, lpOverlapped=0x0) returned 1 [0258.153] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.153] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.153] CloseHandle (hObject=0x200) returned 1 [0258.153] CloseHandle (hObject=0x1d4) returned 1 [0258.153] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\7QOD-nDkCpDtF.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\7qod-ndkcpdtf.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\7QOD-nDkCpDtF.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\7qod-ndkcpdtf.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.154] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\7QOD-nDkCpDtF.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\7qod-ndkcpdtf.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.154] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\7QOD-nDkCpDtF.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\7qod-ndkcpdtf.avi"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad857ea0, ftCreationTime.dwHighDateTime=0x1d8b893, ftLastAccessTime.dwLowDateTime=0xab7a55f0, ftLastAccessTime.dwHighDateTime=0x1d8bee1, ftLastWriteTime.dwLowDateTime=0xab7a55f0, ftLastWriteTime.dwHighDateTime=0x1d8bee1, nFileSizeHigh=0x0, nFileSizeLow=0x6616, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="7QOD-nDkCpDtF.avi", cAlternateFileName="7QOD-N~1.AVI")) returned 0x55e510 [0258.154] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad857ea0, ftCreationTime.dwHighDateTime=0x1d8b893, ftLastAccessTime.dwLowDateTime=0xab7a55f0, ftLastAccessTime.dwHighDateTime=0x1d8bee1, ftLastWriteTime.dwLowDateTime=0xab7a55f0, ftLastWriteTime.dwHighDateTime=0x1d8bee1, nFileSizeHigh=0x0, nFileSizeLow=0x6616, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="7QOD-nDkCpDtF.avi", cAlternateFileName="7QOD-N~1.AVI")) returned 0 [0258.154] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0258.155] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\7QOD-nDkCpDtF.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\7qod-ndkcpdtf.avi")) returned 1 [0258.156] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\7QOD-nDkCpDtF.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\7qod-ndkcpdtf.avi")) returned 0xffffffff [0258.156] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe553fa30, ftCreationTime.dwHighDateTime=0x1d8b3b8, ftLastAccessTime.dwLowDateTime=0xae145f70, ftLastAccessTime.dwHighDateTime=0x1d8bde9, ftLastWriteTime.dwLowDateTime=0xae145f70, ftLastWriteTime.dwHighDateTime=0x1d8bde9, nFileSizeHigh=0x0, nFileSizeLow=0x16c89, dwReserved0=0x0, dwReserved1=0x0, cFileName="AKF5RMVuL.bmp", cAlternateFileName="AKF5RM~1.BMP")) returned 1 [0258.156] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.156] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.156] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.157] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.157] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0258.157] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\AKF5RMVuL.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\akf5rmvul.bmp")) returned 0x20 [0258.157] VirtualAlloc (lpAddress=0x2254000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2254000 [0258.160] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\AKF5RMVuL.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\akf5rmvul.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.161] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\AKF5RMVuL.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\akf5rmvul.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.161] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.163] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.164] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.164] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.164] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.164] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.165] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.165] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.165] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.165] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.166] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.166] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.166] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.166] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.166] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.167] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.167] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.167] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.167] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.168] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.168] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.168] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.168] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.168] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.169] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.169] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.169] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.169] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.170] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.170] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.170] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.170] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.170] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.171] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.171] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.171] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.171] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.172] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.172] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.172] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.172] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.172] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.173] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.173] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.173] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xc89, lpOverlapped=0x0) returned 1 [0258.174] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xc89, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xc89, lpOverlapped=0x0) returned 1 [0258.174] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.174] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.174] CloseHandle (hObject=0x1d4) returned 1 [0258.174] CloseHandle (hObject=0x200) returned 1 [0258.174] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\AKF5RMVuL.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\akf5rmvul.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\AKF5RMVuL.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\akf5rmvul.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.175] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\AKF5RMVuL.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\akf5rmvul.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.175] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\AKF5RMVuL.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\akf5rmvul.bmp"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe553fa30, ftCreationTime.dwHighDateTime=0x1d8b3b8, ftLastAccessTime.dwLowDateTime=0xae145f70, ftLastAccessTime.dwHighDateTime=0x1d8bde9, ftLastWriteTime.dwLowDateTime=0xae145f70, ftLastWriteTime.dwHighDateTime=0x1d8bde9, nFileSizeHigh=0x0, nFileSizeLow=0x16c89, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="AKF5RMVuL.bmp", cAlternateFileName="AKF5RM~1.BMP")) returned 0x55e1d0 [0258.175] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe553fa30, ftCreationTime.dwHighDateTime=0x1d8b3b8, ftLastAccessTime.dwLowDateTime=0xae145f70, ftLastAccessTime.dwHighDateTime=0x1d8bde9, ftLastWriteTime.dwLowDateTime=0xae145f70, ftLastWriteTime.dwHighDateTime=0x1d8bde9, nFileSizeHigh=0x0, nFileSizeLow=0x16c89, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="AKF5RMVuL.bmp", cAlternateFileName="AKF5RM~1.BMP")) returned 0 [0258.175] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0258.175] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\AKF5RMVuL.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\akf5rmvul.bmp")) returned 1 [0258.177] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\AKF5RMVuL.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\akf5rmvul.bmp")) returned 0xffffffff [0258.177] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebded90, ftCreationTime.dwHighDateTime=0x1d8b4e2, ftLastAccessTime.dwLowDateTime=0x2a781350, ftLastAccessTime.dwHighDateTime=0x1d8bf79, ftLastWriteTime.dwLowDateTime=0x2a781350, ftLastWriteTime.dwHighDateTime=0x1d8bf79, nFileSizeHigh=0x0, nFileSizeLow=0x2a6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="aST1NNRiNs.avi", cAlternateFileName="AST1NN~1.AVI")) returned 1 [0258.177] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.177] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.178] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.178] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.178] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.178] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0258.178] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\aST1NNRiNs.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\ast1nnrins.avi")) returned 0x20 [0258.178] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\aST1NNRiNs.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\ast1nnrins.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.179] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\aST1NNRiNs.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\ast1nnrins.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.183] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.185] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.186] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.186] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.186] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xa6d, lpOverlapped=0x0) returned 1 [0258.187] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xa6d, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xa6d, lpOverlapped=0x0) returned 1 [0258.187] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.187] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.187] CloseHandle (hObject=0x200) returned 1 [0258.187] CloseHandle (hObject=0x1d4) returned 1 [0258.187] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\aST1NNRiNs.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\ast1nnrins.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\aST1NNRiNs.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\ast1nnrins.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.188] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\aST1NNRiNs.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\ast1nnrins.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.188] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\aST1NNRiNs.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\ast1nnrins.avi"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebded90, ftCreationTime.dwHighDateTime=0x1d8b4e2, ftLastAccessTime.dwLowDateTime=0x2a781350, ftLastAccessTime.dwHighDateTime=0x1d8bf79, ftLastWriteTime.dwLowDateTime=0x2a781350, ftLastWriteTime.dwHighDateTime=0x1d8bf79, nFileSizeHigh=0x0, nFileSizeLow=0x2a6d, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="aST1NNRiNs.avi", cAlternateFileName="AST1NN~1.AVI")) returned 0x55e510 [0258.188] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ebded90, ftCreationTime.dwHighDateTime=0x1d8b4e2, ftLastAccessTime.dwLowDateTime=0x2a781350, ftLastAccessTime.dwHighDateTime=0x1d8bf79, ftLastWriteTime.dwLowDateTime=0x2a781350, ftLastWriteTime.dwHighDateTime=0x1d8bf79, nFileSizeHigh=0x0, nFileSizeLow=0x2a6d, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="aST1NNRiNs.avi", cAlternateFileName="AST1NN~1.AVI")) returned 0 [0258.188] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0258.188] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\aST1NNRiNs.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\ast1nnrins.avi")) returned 1 [0258.190] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\aST1NNRiNs.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\ast1nnrins.avi")) returned 0xffffffff [0258.190] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf40b650, ftCreationTime.dwHighDateTime=0x1d8b306, ftLastAccessTime.dwLowDateTime=0x45e312f0, ftLastAccessTime.dwHighDateTime=0x1d8bd37, ftLastWriteTime.dwLowDateTime=0x45e312f0, ftLastWriteTime.dwHighDateTime=0x1d8bd37, nFileSizeHigh=0x0, nFileSizeLow=0x147bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bCEmh opLek6-VR.bmp", cAlternateFileName="BCEMHO~1.BMP")) returned 1 [0258.190] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.190] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.190] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.190] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.191] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.191] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0258.191] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\bCEmh opLek6-VR.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\bcemh oplek6-vr.bmp")) returned 0x20 [0258.191] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\bCEmh opLek6-VR.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\bcemh oplek6-vr.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.192] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\bCEmh opLek6-VR.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\bcemh oplek6-vr.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.192] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.193] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.194] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.195] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.195] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.195] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.195] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.196] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.196] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.196] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.196] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.196] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.197] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.197] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.197] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.197] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.197] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.198] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.198] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.198] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.198] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.198] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.199] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.199] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.199] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.199] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.200] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.200] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.200] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.200] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.200] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.201] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.201] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.201] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.201] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.201] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.202] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.202] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.202] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.202] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.203] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x7bf, lpOverlapped=0x0) returned 1 [0258.203] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x7bf, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x7bf, lpOverlapped=0x0) returned 1 [0258.203] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.203] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.203] CloseHandle (hObject=0x1d4) returned 1 [0258.203] CloseHandle (hObject=0x200) returned 1 [0258.203] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\bCEmh opLek6-VR.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\bcemh oplek6-vr.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\bCEmh opLek6-VR.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\bcemh oplek6-vr.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.204] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\bCEmh opLek6-VR.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\bcemh oplek6-vr.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.204] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\bCEmh opLek6-VR.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\bcemh oplek6-vr.bmp"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf40b650, ftCreationTime.dwHighDateTime=0x1d8b306, ftLastAccessTime.dwLowDateTime=0x45e312f0, ftLastAccessTime.dwHighDateTime=0x1d8bd37, ftLastWriteTime.dwLowDateTime=0x45e312f0, ftLastWriteTime.dwHighDateTime=0x1d8bd37, nFileSizeHigh=0x0, nFileSizeLow=0x147bf, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="bCEmh opLek6-VR.bmp", cAlternateFileName="BCEMHO~1.BMP")) returned 0x55e910 [0258.204] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf40b650, ftCreationTime.dwHighDateTime=0x1d8b306, ftLastAccessTime.dwLowDateTime=0x45e312f0, ftLastAccessTime.dwHighDateTime=0x1d8bd37, ftLastWriteTime.dwLowDateTime=0x45e312f0, ftLastWriteTime.dwHighDateTime=0x1d8bd37, nFileSizeHigh=0x0, nFileSizeLow=0x147bf, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="bCEmh opLek6-VR.bmp", cAlternateFileName="BCEMHO~1.BMP")) returned 0 [0258.206] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0258.206] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\bCEmh opLek6-VR.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\bcemh oplek6-vr.bmp")) returned 1 [0258.208] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\bCEmh opLek6-VR.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\bcemh oplek6-vr.bmp")) returned 0xffffffff [0258.208] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19221a00, ftCreationTime.dwHighDateTime=0x1d8b3fe, ftLastAccessTime.dwLowDateTime=0x4636f3f0, ftLastAccessTime.dwHighDateTime=0x1d8baf5, ftLastWriteTime.dwLowDateTime=0x4636f3f0, ftLastWriteTime.dwHighDateTime=0x1d8baf5, nFileSizeHigh=0x0, nFileSizeLow=0x11f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C_ZwX4AeKy.mkv", cAlternateFileName="C_ZWX4~1.MKV")) returned 1 [0258.209] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.209] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.209] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.209] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.209] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.209] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0258.209] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\C_ZwX4AeKy.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\c_zwx4aeky.mkv")) returned 0x20 [0258.209] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\C_ZwX4AeKy.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\c_zwx4aeky.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.210] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\C_ZwX4AeKy.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\c_zwx4aeky.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.210] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.212] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.213] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1f4, lpOverlapped=0x0) returned 1 [0258.213] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1f4, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1f4, lpOverlapped=0x0) returned 1 [0258.214] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.214] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.214] CloseHandle (hObject=0x200) returned 1 [0258.214] CloseHandle (hObject=0x1d4) returned 1 [0258.214] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\C_ZwX4AeKy.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\c_zwx4aeky.mkv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\C_ZwX4AeKy.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\c_zwx4aeky.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.214] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\C_ZwX4AeKy.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\c_zwx4aeky.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.215] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\C_ZwX4AeKy.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\c_zwx4aeky.mkv"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19221a00, ftCreationTime.dwHighDateTime=0x1d8b3fe, ftLastAccessTime.dwLowDateTime=0x4636f3f0, ftLastAccessTime.dwHighDateTime=0x1d8baf5, ftLastWriteTime.dwLowDateTime=0x4636f3f0, ftLastWriteTime.dwHighDateTime=0x1d8baf5, nFileSizeHigh=0x0, nFileSizeLow=0x11f4, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="C_ZwX4AeKy.mkv", cAlternateFileName="C_ZWX4~1.MKV")) returned 0x55e410 [0258.215] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19221a00, ftCreationTime.dwHighDateTime=0x1d8b3fe, ftLastAccessTime.dwLowDateTime=0x4636f3f0, ftLastAccessTime.dwHighDateTime=0x1d8baf5, ftLastWriteTime.dwLowDateTime=0x4636f3f0, ftLastWriteTime.dwHighDateTime=0x1d8baf5, nFileSizeHigh=0x0, nFileSizeLow=0x11f4, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="C_ZwX4AeKy.mkv", cAlternateFileName="C_ZWX4~1.MKV")) returned 0 [0258.215] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0258.215] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\C_ZwX4AeKy.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\c_zwx4aeky.mkv")) returned 1 [0258.216] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\C_ZwX4AeKy.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\c_zwx4aeky.mkv")) returned 0xffffffff [0258.216] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b53103, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0x31b53103, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xaf8be050, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x56d, dwReserved0=0x0, dwReserved1=0x0, cFileName="dd_ndp462-kb3151800-x86-x64-allos-enu_decompression_log.txt", cAlternateFileName="DD_NDP~1.TXT")) returned 1 [0258.217] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dd81185, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0x5dd81185, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xaecaedbe, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x310033, dwReserved1=0x310035, cFileName="dd_SetupUtility.txt", cAlternateFileName="DD_SET~1.TXT")) returned 1 [0258.218] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca79040, ftCreationTime.dwHighDateTime=0x1d8b2c4, ftLastAccessTime.dwLowDateTime=0xe2c16a10, ftLastAccessTime.dwHighDateTime=0x1d8b83a, ftLastWriteTime.dwLowDateTime=0xe2c16a10, ftLastWriteTime.dwHighDateTime=0x1d8b83a, nFileSizeHigh=0x0, nFileSizeLow=0x127c9, dwReserved0=0x740069, dwReserved1=0x2e0079, cFileName="D_XMRLdD7KxOJRgiMu.xls", cAlternateFileName="D_XMRL~1.XLS")) returned 1 [0258.219] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244a11c0, ftCreationTime.dwHighDateTime=0x1d8b288, ftLastAccessTime.dwLowDateTime=0x806dfcd0, ftLastAccessTime.dwHighDateTime=0x1d8b9c4, ftLastWriteTime.dwLowDateTime=0x806dfcd0, ftLastWriteTime.dwHighDateTime=0x1d8b9c4, nFileSizeHigh=0x0, nFileSizeLow=0x6c0d, dwReserved0=0x72006a, dwReserved1=0x690067, cFileName="e2D-jErkU.mp3", cAlternateFileName="E2D-JE~1.MP3")) returned 1 [0258.219] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.219] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.219] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.219] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0258.220] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\e2D-jErkU.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\e2d-jerku.mp3")) returned 0x20 [0258.220] VirtualAlloc (lpAddress=0x2258000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2258000 [0258.221] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\e2D-jErkU.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\e2d-jerku.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.221] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\e2D-jErkU.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\e2d-jerku.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.222] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.223] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.225] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.225] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.225] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.225] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.225] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.226] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.226] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.226] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.226] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.227] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.227] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xc0d, lpOverlapped=0x0) returned 1 [0258.227] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xc0d, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xc0d, lpOverlapped=0x0) returned 1 [0258.227] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.227] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.227] CloseHandle (hObject=0x1d4) returned 1 [0258.227] CloseHandle (hObject=0x200) returned 1 [0258.228] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\e2D-jErkU.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\e2d-jerku.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\e2D-jErkU.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\e2d-jerku.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.228] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\e2D-jErkU.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\e2d-jerku.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.228] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\e2D-jErkU.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\e2d-jerku.mp3"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244a11c0, ftCreationTime.dwHighDateTime=0x1d8b288, ftLastAccessTime.dwLowDateTime=0x806dfcd0, ftLastAccessTime.dwHighDateTime=0x1d8b9c4, ftLastWriteTime.dwLowDateTime=0x806dfcd0, ftLastWriteTime.dwHighDateTime=0x1d8b9c4, nFileSizeHigh=0x0, nFileSizeLow=0x6c0d, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="e2D-jErkU.mp3", cAlternateFileName="E2D-JE~1.MP3")) returned 0x55e5d0 [0258.228] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x244a11c0, ftCreationTime.dwHighDateTime=0x1d8b288, ftLastAccessTime.dwLowDateTime=0x806dfcd0, ftLastAccessTime.dwHighDateTime=0x1d8b9c4, ftLastWriteTime.dwLowDateTime=0x806dfcd0, ftLastWriteTime.dwHighDateTime=0x1d8b9c4, nFileSizeHigh=0x0, nFileSizeLow=0x6c0d, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="e2D-jErkU.mp3", cAlternateFileName="E2D-JE~1.MP3")) returned 0 [0258.228] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0258.228] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\e2D-jErkU.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\e2d-jerku.mp3")) returned 1 [0258.230] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\e2D-jErkU.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\e2d-jerku.mp3")) returned 0xffffffff [0258.230] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245b510, ftCreationTime.dwHighDateTime=0x1d8b491, ftLastAccessTime.dwLowDateTime=0xbd8e1720, ftLastAccessTime.dwHighDateTime=0x1d8bd0d, ftLastWriteTime.dwLowDateTime=0xbd8e1720, ftLastWriteTime.dwHighDateTime=0x1d8bd0d, nFileSizeHigh=0x0, nFileSizeLow=0x1085, dwReserved0=0x0, dwReserved1=0x0, cFileName="G8GELb-MmZg8jqw2.mkv", cAlternateFileName="G8GELB~1.MKV")) returned 1 [0258.230] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.230] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.231] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.231] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0258.231] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\G8GELb-MmZg8jqw2.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\g8gelb-mmzg8jqw2.mkv")) returned 0x20 [0258.231] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\G8GELb-MmZg8jqw2.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\g8gelb-mmzg8jqw2.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.232] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\G8GELb-MmZg8jqw2.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\g8gelb-mmzg8jqw2.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.232] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.233] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.234] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x85, lpOverlapped=0x0) returned 1 [0258.235] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x85, lpOverlapped=0x0) returned 1 [0258.235] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.235] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.235] CloseHandle (hObject=0x200) returned 1 [0258.235] CloseHandle (hObject=0x1d4) returned 1 [0258.235] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\G8GELb-MmZg8jqw2.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\g8gelb-mmzg8jqw2.mkv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\G8GELb-MmZg8jqw2.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\g8gelb-mmzg8jqw2.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.236] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\G8GELb-MmZg8jqw2.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\g8gelb-mmzg8jqw2.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.236] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\G8GELb-MmZg8jqw2.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\g8gelb-mmzg8jqw2.mkv"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245b510, ftCreationTime.dwHighDateTime=0x1d8b491, ftLastAccessTime.dwLowDateTime=0xbd8e1720, ftLastAccessTime.dwHighDateTime=0x1d8bd0d, ftLastWriteTime.dwLowDateTime=0xbd8e1720, ftLastWriteTime.dwHighDateTime=0x1d8bd0d, nFileSizeHigh=0x0, nFileSizeLow=0x1085, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="G8GELb-MmZg8jqw2.mkv", cAlternateFileName="G8GELB~1.MKV")) returned 0x55e710 [0258.236] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x245b510, ftCreationTime.dwHighDateTime=0x1d8b491, ftLastAccessTime.dwLowDateTime=0xbd8e1720, ftLastAccessTime.dwHighDateTime=0x1d8bd0d, ftLastWriteTime.dwLowDateTime=0xbd8e1720, ftLastWriteTime.dwHighDateTime=0x1d8bd0d, nFileSizeHigh=0x0, nFileSizeLow=0x1085, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="G8GELb-MmZg8jqw2.mkv", cAlternateFileName="G8GELB~1.MKV")) returned 0 [0258.236] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0258.236] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\G8GELb-MmZg8jqw2.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\g8gelb-mmzg8jqw2.mkv")) returned 1 [0258.238] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\G8GELb-MmZg8jqw2.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\g8gelb-mmzg8jqw2.mkv")) returned 0xffffffff [0258.238] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac4db6d0, ftCreationTime.dwHighDateTime=0x1d8b0d0, ftLastAccessTime.dwLowDateTime=0x45c39930, ftLastAccessTime.dwHighDateTime=0x1d8bc28, ftLastWriteTime.dwLowDateTime=0x45c39930, ftLastWriteTime.dwHighDateTime=0x1d8bc28, nFileSizeHigh=0x0, nFileSizeLow=0xf76a, dwReserved0=0x0, dwReserved1=0x0, cFileName="gBzoOVFo6qkp3vNYJyM.m4a", cAlternateFileName="GBZOOV~1.M4A")) returned 1 [0258.238] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x760033, dwReserved1=0x79006e, cFileName="gen_py", cAlternateFileName="")) returned 1 [0258.239] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0258.239] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0258.239] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="3.8", cAlternateFileName="")) returned 1 [0258.239] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xba168966, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0258.239] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xba168966, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0258.239] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0xba168966, dwReserved1=0x1d00160b, cFileName="dicts.dat", cAlternateFileName="")) returned 1 [0258.239] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.239] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.241] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.242] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.242] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.242] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0258.242] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\dicts.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\dicts.dat")) returned 0x20 [0258.242] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\dicts.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\dicts.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0258.243] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\dicts.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\dicts.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0258.243] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xa, lpOverlapped=0x0) returned 1 [0258.244] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xa, lpOverlapped=0x0) returned 1 [0258.245] ReadFile (in: hFile=0x218, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0258.245] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0258.245] CloseHandle (hObject=0x218) returned 1 [0258.245] CloseHandle (hObject=0x210) returned 1 [0258.246] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\dicts.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\dicts.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\dicts.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\dicts.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.246] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\dicts.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\dicts.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.246] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\dicts.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\dicts.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="dicts.dat", cAlternateFileName="")) returned 0x55e710 [0258.246] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="dicts.dat", cAlternateFileName="")) returned 0 [0258.246] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0258.247] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\dicts.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\dicts.dat")) returned 1 [0258.248] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\dicts.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\dicts.dat")) returned 0xffffffff [0258.248] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__init__.py", cAlternateFileName="")) returned 1 [0258.248] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.248] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.249] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.249] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.249] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.249] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0258.249] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\__init__.py" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\__init__.py")) returned 0x20 [0258.249] VirtualAlloc (lpAddress=0x225c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x225c000 [0258.250] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\__init__.py" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\__init__.py"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0258.250] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\__init__.py.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\__init__.py.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0258.355] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xb0, lpOverlapped=0x0) returned 1 [0258.356] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xb0, lpOverlapped=0x0) returned 1 [0258.358] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0258.358] WriteFile (in: hFile=0x218, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0258.358] CloseHandle (hObject=0x210) returned 1 [0258.358] CloseHandle (hObject=0x218) returned 1 [0258.358] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\__init__.py" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\__init__.py"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\__init__.py.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\__init__.py.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.359] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\__init__.py.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\__init__.py.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.359] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\__init__.py" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\__init__.py"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="__init__.py", cAlternateFileName="")) returned 0x55e890 [0258.359] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="__init__.py", cAlternateFileName="")) returned 0 [0258.359] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0258.359] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\__init__.py" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\__init__.py")) returned 1 [0258.361] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\__init__.py" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\__init__.py")) returned 0xffffffff [0258.361] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="__init__.py", cAlternateFileName="")) returned 0 [0258.361] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0258.361] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="3.8", cAlternateFileName="")) returned 0 [0258.361] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0258.361] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5cdc860, ftCreationTime.dwHighDateTime=0x1d8bdf5, ftLastAccessTime.dwLowDateTime=0x16c5b570, ftLastAccessTime.dwHighDateTime=0x1d8c01d, ftLastWriteTime.dwLowDateTime=0x16c5b570, ftLastWriteTime.dwHighDateTime=0x1d8c01d, nFileSizeHigh=0x0, nFileSizeLow=0x7da4, dwReserved0=0x760033, dwReserved1=0x79006e, cFileName="HJwVLZ3PSHquOb.rtf", cAlternateFileName="HJWVLZ~1.RTF")) returned 1 [0258.362] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.362] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.362] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.362] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.362] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.362] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0258.363] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\HJwVLZ3PSHquOb.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\hjwvlz3pshquob.rtf")) returned 0x20 [0258.363] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\HJwVLZ3PSHquOb.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\hjwvlz3pshquob.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.363] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\HJwVLZ3PSHquOb.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\hjwvlz3pshquob.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.364] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.365] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.366] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.367] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.367] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.367] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.367] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.367] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.368] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.368] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.368] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.368] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.369] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.369] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.374] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xda4, lpOverlapped=0x0) returned 1 [0258.375] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xda4, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xda4, lpOverlapped=0x0) returned 1 [0258.375] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.375] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.375] CloseHandle (hObject=0x1d4) returned 1 [0258.375] CloseHandle (hObject=0x200) returned 1 [0258.375] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\HJwVLZ3PSHquOb.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\hjwvlz3pshquob.rtf"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\HJwVLZ3PSHquOb.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\hjwvlz3pshquob.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.376] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\HJwVLZ3PSHquOb.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\hjwvlz3pshquob.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.376] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\HJwVLZ3PSHquOb.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\hjwvlz3pshquob.rtf"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5cdc860, ftCreationTime.dwHighDateTime=0x1d8bdf5, ftLastAccessTime.dwLowDateTime=0x16c5b570, ftLastAccessTime.dwHighDateTime=0x1d8c01d, ftLastWriteTime.dwLowDateTime=0x16c5b570, ftLastWriteTime.dwHighDateTime=0x1d8c01d, nFileSizeHigh=0x0, nFileSizeLow=0x7da4, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="HJwVLZ3PSHquOb.rtf", cAlternateFileName="HJWVLZ~1.RTF")) returned 0x55e710 [0258.376] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5cdc860, ftCreationTime.dwHighDateTime=0x1d8bdf5, ftLastAccessTime.dwLowDateTime=0x16c5b570, ftLastAccessTime.dwHighDateTime=0x1d8c01d, ftLastWriteTime.dwLowDateTime=0x16c5b570, ftLastWriteTime.dwHighDateTime=0x1d8c01d, nFileSizeHigh=0x0, nFileSizeLow=0x7da4, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="HJwVLZ3PSHquOb.rtf", cAlternateFileName="HJWVLZ~1.RTF")) returned 0 [0258.376] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0258.376] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\HJwVLZ3PSHquOb.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\hjwvlz3pshquob.rtf")) returned 1 [0258.378] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\HJwVLZ3PSHquOb.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\hjwvlz3pshquob.rtf")) returned 0xffffffff [0258.378] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad0ac941, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb20d7af2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb40bb1bf, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hsperfdata_RDhJ0CNFevzX", cAlternateFileName="HSPERF~1")) returned 1 [0258.378] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\hsperfdata_RDhJ0CNFevzX\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\hsperfdata_rdhj0cnfevzx\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad0ac941, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb20d7af2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb40bb1bf, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0258.379] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad0ac941, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb20d7af2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb40bb1bf, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0258.379] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad0ac941, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb20d7af2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb40bb1bf, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0258.379] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0258.379] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae96901f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xae96901f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb40e155a, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x30e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaDeployReg.log", cAlternateFileName="JAVADE~1.LOG")) returned 1 [0258.379] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.379] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.380] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.380] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0258.380] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\JavaDeployReg.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\javadeployreg.log")) returned 0x20 [0258.380] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\JavaDeployReg.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\javadeployreg.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.381] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\JavaDeployReg.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\javadeployreg.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.381] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.384] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.386] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.386] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.386] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.387] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.387] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xe5, lpOverlapped=0x0) returned 1 [0258.387] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xe5, lpOverlapped=0x0) returned 1 [0258.387] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.387] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.387] CloseHandle (hObject=0x200) returned 1 [0258.387] CloseHandle (hObject=0x1d4) returned 1 [0258.388] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\JavaDeployReg.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\javadeployreg.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\JavaDeployReg.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\javadeployreg.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.388] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\JavaDeployReg.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\javadeployreg.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.388] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\JavaDeployReg.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\javadeployreg.log"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae96901f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xae96901f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb40e155a, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x30e5, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="JavaDeployReg.log", cAlternateFileName="JAVADE~1.LOG")) returned 0x55e290 [0258.388] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae96901f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xae96901f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb40e155a, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x30e5, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="JavaDeployReg.log", cAlternateFileName="JAVADE~1.LOG")) returned 0 [0258.388] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0258.388] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\JavaDeployReg.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\javadeployreg.log")) returned 1 [0258.390] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\JavaDeployReg.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\javadeployreg.log")) returned 0xffffffff [0258.390] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0081f23, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0081f23, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0081f23, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawshtml.html", cAlternateFileName="JAWSHT~1.HTM")) returned 1 [0258.390] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.390] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.390] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.391] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.391] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.391] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0258.391] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jawshtml.html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jawshtml.html")) returned 0x20 [0258.392] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jawshtml.html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jawshtml.html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.392] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jawshtml.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jawshtml.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.508] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xd, lpOverlapped=0x0) returned 1 [0258.509] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xd, lpOverlapped=0x0) returned 1 [0258.510] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.510] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.511] CloseHandle (hObject=0x1d4) returned 1 [0258.511] CloseHandle (hObject=0x200) returned 1 [0258.511] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jawshtml.html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jawshtml.html"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jawshtml.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jawshtml.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.511] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jawshtml.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jawshtml.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.511] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jawshtml.html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jawshtml.html"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0081f23, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0081f23, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0081f23, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="jawshtml.html", cAlternateFileName="JAWSHT~1.HTM")) returned 0x55e390 [0258.512] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0081f23, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0081f23, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0081f23, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="jawshtml.html", cAlternateFileName="JAWSHT~1.HTM")) returned 0 [0258.512] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0258.512] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jawshtml.html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jawshtml.html")) returned 1 [0258.513] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jawshtml.html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jawshtml.html")) returned 0xffffffff [0258.513] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12d626d, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa12d626d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb530f5c3, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x10a17, dwReserved0=0x0, dwReserved1=0x0, cFileName="jusched.log", cAlternateFileName="")) returned 1 [0258.514] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.514] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.514] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.514] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.514] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.514] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0258.514] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jusched.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jusched.log")) returned 0x20 [0258.514] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x1) returned 0x2260000 [0258.515] VirtualAlloc (lpAddress=0x2260000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2260000 [0258.515] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jusched.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jusched.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.516] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jusched.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jusched.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.517] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.587] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.589] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.621] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.621] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.622] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.622] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.622] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.622] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.623] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.623] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.623] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.623] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.623] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.623] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.623] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.624] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.624] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.624] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.624] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.624] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.624] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.625] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.625] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.625] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.625] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.625] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.625] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.625] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.626] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.626] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.626] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.626] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xa17, lpOverlapped=0x0) returned 1 [0258.626] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xa17, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xa17, lpOverlapped=0x0) returned 1 [0258.627] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.627] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.627] CloseHandle (hObject=0x200) returned 1 [0258.627] CloseHandle (hObject=0x1d4) returned 1 [0258.627] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jusched.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jusched.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jusched.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jusched.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.627] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jusched.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jusched.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.627] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jusched.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jusched.log"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12d626d, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa12d626d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb530f5c3, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x10a17, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="jusched.log", cAlternateFileName="")) returned 0x55e890 [0258.628] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12d626d, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa12d626d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb530f5c3, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x10a17, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="jusched.log", cAlternateFileName="")) returned 0 [0258.628] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0258.628] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jusched.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jusched.log")) returned 1 [0258.629] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\jusched.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\jusched.log")) returned 0xffffffff [0258.629] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991d080, ftCreationTime.dwHighDateTime=0x1d8be03, ftLastAccessTime.dwLowDateTime=0xd809e380, ftLastAccessTime.dwHighDateTime=0x1d8bfa7, ftLastWriteTime.dwLowDateTime=0xd809e380, ftLastWriteTime.dwHighDateTime=0x1d8bfa7, nFileSizeHigh=0x0, nFileSizeLow=0x5a0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="k0Yt5beXz5AeRkPE.mkv", cAlternateFileName="K0YT5B~1.MKV")) returned 1 [0258.632] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.632] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.633] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.633] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0258.633] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\k0Yt5beXz5AeRkPE.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\k0yt5bexz5aerkpe.mkv")) returned 0x20 [0258.633] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\k0Yt5beXz5AeRkPE.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\k0yt5bexz5aerkpe.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.634] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\k0Yt5beXz5AeRkPE.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\k0yt5bexz5aerkpe.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.634] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.635] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.636] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.636] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.636] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.636] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.637] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.637] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.637] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.637] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.637] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xa0b, lpOverlapped=0x0) returned 1 [0258.637] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xa0b, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xa0b, lpOverlapped=0x0) returned 1 [0258.638] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.638] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.638] CloseHandle (hObject=0x1d4) returned 1 [0258.638] CloseHandle (hObject=0x200) returned 1 [0258.638] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\k0Yt5beXz5AeRkPE.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\k0yt5bexz5aerkpe.mkv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\k0Yt5beXz5AeRkPE.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\k0yt5bexz5aerkpe.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.638] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\k0Yt5beXz5AeRkPE.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\k0yt5bexz5aerkpe.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.638] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\k0Yt5beXz5AeRkPE.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\k0yt5bexz5aerkpe.mkv"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991d080, ftCreationTime.dwHighDateTime=0x1d8be03, ftLastAccessTime.dwLowDateTime=0xd809e380, ftLastAccessTime.dwHighDateTime=0x1d8bfa7, ftLastWriteTime.dwLowDateTime=0xd809e380, ftLastWriteTime.dwHighDateTime=0x1d8bfa7, nFileSizeHigh=0x0, nFileSizeLow=0x5a0b, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="k0Yt5beXz5AeRkPE.mkv", cAlternateFileName="K0YT5B~1.MKV")) returned 0x55e390 [0258.639] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x991d080, ftCreationTime.dwHighDateTime=0x1d8be03, ftLastAccessTime.dwLowDateTime=0xd809e380, ftLastAccessTime.dwHighDateTime=0x1d8bfa7, ftLastWriteTime.dwLowDateTime=0xd809e380, ftLastWriteTime.dwHighDateTime=0x1d8bfa7, nFileSizeHigh=0x0, nFileSizeLow=0x5a0b, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="k0Yt5beXz5AeRkPE.mkv", cAlternateFileName="K0YT5B~1.MKV")) returned 0 [0258.639] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0258.639] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\k0Yt5beXz5AeRkPE.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\k0yt5bexz5aerkpe.mkv")) returned 1 [0258.640] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\k0Yt5beXz5AeRkPE.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\k0yt5bexz5aerkpe.mkv")) returned 0xffffffff [0258.640] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd415f4a0, ftCreationTime.dwHighDateTime=0x1d8b7b2, ftLastAccessTime.dwLowDateTime=0x416b0ba0, ftLastAccessTime.dwHighDateTime=0x1d8bd74, ftLastWriteTime.dwLowDateTime=0x416b0ba0, ftLastWriteTime.dwHighDateTime=0x1d8bd74, nFileSizeHigh=0x0, nFileSizeLow=0xe653, dwReserved0=0x0, dwReserved1=0x0, cFileName="kaG-RU.bmp", cAlternateFileName="")) returned 1 [0258.640] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.640] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.640] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.640] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.640] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.640] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0258.640] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\kaG-RU.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\kag-ru.bmp")) returned 0x20 [0258.641] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\kaG-RU.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\kag-ru.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.641] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\kaG-RU.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\kag-ru.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.641] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.643] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.644] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.644] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.644] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.644] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.644] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.644] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.645] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.645] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.645] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.645] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.645] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.645] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.646] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.646] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.646] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.646] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.646] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.646] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.647] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.647] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.647] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.647] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.647] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.647] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.647] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.648] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.648] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x653, lpOverlapped=0x0) returned 1 [0258.648] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x653, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x653, lpOverlapped=0x0) returned 1 [0258.648] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.648] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.648] CloseHandle (hObject=0x200) returned 1 [0258.648] CloseHandle (hObject=0x1d4) returned 1 [0258.648] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\kaG-RU.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\kag-ru.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\kaG-RU.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\kag-ru.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.649] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\kaG-RU.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\kag-ru.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.649] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\kaG-RU.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\kag-ru.bmp"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd415f4a0, ftCreationTime.dwHighDateTime=0x1d8b7b2, ftLastAccessTime.dwLowDateTime=0x416b0ba0, ftLastAccessTime.dwHighDateTime=0x1d8bd74, ftLastWriteTime.dwLowDateTime=0x416b0ba0, ftLastWriteTime.dwHighDateTime=0x1d8bd74, nFileSizeHigh=0x0, nFileSizeLow=0xe653, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="kaG-RU.bmp", cAlternateFileName="")) returned 0x55e610 [0258.649] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd415f4a0, ftCreationTime.dwHighDateTime=0x1d8b7b2, ftLastAccessTime.dwLowDateTime=0x416b0ba0, ftLastAccessTime.dwHighDateTime=0x1d8bd74, ftLastWriteTime.dwLowDateTime=0x416b0ba0, ftLastWriteTime.dwHighDateTime=0x1d8bd74, nFileSizeHigh=0x0, nFileSizeLow=0xe653, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="kaG-RU.bmp", cAlternateFileName="")) returned 0 [0258.649] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0258.649] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\kaG-RU.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\kag-ru.bmp")) returned 1 [0258.650] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\kaG-RU.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\kag-ru.bmp")) returned 0xffffffff [0258.651] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4446530, ftCreationTime.dwHighDateTime=0x1d8b4d3, ftLastAccessTime.dwLowDateTime=0xfcea84a0, ftLastAccessTime.dwHighDateTime=0x1d8b9fa, ftLastWriteTime.dwLowDateTime=0xfcea84a0, ftLastWriteTime.dwHighDateTime=0x1d8b9fa, nFileSizeHigh=0x0, nFileSizeLow=0x17c0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="kRqTUciydxV.swf", cAlternateFileName="KRQTUC~1.SWF")) returned 1 [0258.651] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb838ffb0, ftCreationTime.dwHighDateTime=0x1d8b51a, ftLastAccessTime.dwLowDateTime=0xb96422a0, ftLastAccessTime.dwHighDateTime=0x1d8b661, ftLastWriteTime.dwLowDateTime=0xb96422a0, ftLastWriteTime.dwHighDateTime=0x1d8b661, nFileSizeHigh=0x0, nFileSizeLow=0x5f7c, dwReserved0=0x770073, dwReserved1=0x66, cFileName="lLZnbDqDVS9oAn0Blc.gif", cAlternateFileName="LLZNBD~1.GIF")) returned 1 [0258.651] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.651] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.651] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.652] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.652] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0258.652] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lLZnbDqDVS9oAn0Blc.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\llznbdqdvs9oan0blc.gif")) returned 0x20 [0258.652] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lLZnbDqDVS9oAn0Blc.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\llznbdqdvs9oan0blc.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.652] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lLZnbDqDVS9oAn0Blc.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\llznbdqdvs9oan0blc.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.653] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.653] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.654] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.654] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.655] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.655] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.655] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.655] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.655] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.655] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.656] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xf7c, lpOverlapped=0x0) returned 1 [0258.656] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xf7c, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xf7c, lpOverlapped=0x0) returned 1 [0258.656] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.656] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.656] CloseHandle (hObject=0x1d4) returned 1 [0258.656] CloseHandle (hObject=0x200) returned 1 [0258.656] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lLZnbDqDVS9oAn0Blc.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\llznbdqdvs9oan0blc.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lLZnbDqDVS9oAn0Blc.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\llznbdqdvs9oan0blc.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.656] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lLZnbDqDVS9oAn0Blc.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\llznbdqdvs9oan0blc.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.657] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lLZnbDqDVS9oAn0Blc.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\llznbdqdvs9oan0blc.gif"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb838ffb0, ftCreationTime.dwHighDateTime=0x1d8b51a, ftLastAccessTime.dwLowDateTime=0xb96422a0, ftLastAccessTime.dwHighDateTime=0x1d8b661, ftLastWriteTime.dwLowDateTime=0xb96422a0, ftLastWriteTime.dwHighDateTime=0x1d8b661, nFileSizeHigh=0x0, nFileSizeLow=0x5f7c, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="lLZnbDqDVS9oAn0Blc.gif", cAlternateFileName="LLZNBD~1.GIF")) returned 0x55e410 [0258.657] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb838ffb0, ftCreationTime.dwHighDateTime=0x1d8b51a, ftLastAccessTime.dwLowDateTime=0xb96422a0, ftLastAccessTime.dwHighDateTime=0x1d8b661, ftLastWriteTime.dwLowDateTime=0xb96422a0, ftLastWriteTime.dwHighDateTime=0x1d8b661, nFileSizeHigh=0x0, nFileSizeLow=0x5f7c, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="lLZnbDqDVS9oAn0Blc.gif", cAlternateFileName="LLZNBD~1.GIF")) returned 0 [0258.657] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0258.657] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lLZnbDqDVS9oAn0Blc.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\llznbdqdvs9oan0blc.gif")) returned 1 [0258.659] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lLZnbDqDVS9oAn0Blc.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\llznbdqdvs9oan0blc.gif")) returned 0xffffffff [0258.659] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6f22e454, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f22e454, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f22e454, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0258.659] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\low\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6f22e454, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f22e454, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f22e454, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0258.659] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6f22e454, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f22e454, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f22e454, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0258.659] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6f22e454, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f22e454, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f22e454, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 0 [0258.659] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0258.659] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d1edf0, ftCreationTime.dwHighDateTime=0x1d8bc01, ftLastAccessTime.dwLowDateTime=0x84c085d0, ftLastAccessTime.dwHighDateTime=0x1d8bf9d, ftLastWriteTime.dwLowDateTime=0x84c085d0, ftLastWriteTime.dwHighDateTime=0x1d8bf9d, nFileSizeHigh=0x0, nFileSizeLow=0xfc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="lwhKV0RLG.flv", cAlternateFileName="LWHKV0~1.FLV")) returned 1 [0258.660] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.660] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.660] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.660] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0258.660] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lwhKV0RLG.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\lwhkv0rlg.flv")) returned 0x20 [0258.660] VirtualAlloc (lpAddress=0x2264000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2264000 [0258.660] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lwhKV0RLG.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\lwhkv0rlg.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.661] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lwhKV0RLG.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\lwhkv0rlg.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.661] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.662] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.663] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.663] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.663] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.664] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.664] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.664] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.664] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.664] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.664] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.664] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.665] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.665] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.665] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.665] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.665] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.665] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.666] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.666] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.666] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.666] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.666] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.667] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.667] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.667] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.667] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.667] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.667] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.667] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.668] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xc48, lpOverlapped=0x0) returned 1 [0258.668] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xc48, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xc48, lpOverlapped=0x0) returned 1 [0258.668] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.668] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.668] CloseHandle (hObject=0x200) returned 1 [0258.668] CloseHandle (hObject=0x1d4) returned 1 [0258.668] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lwhKV0RLG.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\lwhkv0rlg.flv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lwhKV0RLG.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\lwhkv0rlg.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.669] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lwhKV0RLG.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\lwhkv0rlg.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.669] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lwhKV0RLG.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\lwhkv0rlg.flv"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d1edf0, ftCreationTime.dwHighDateTime=0x1d8bc01, ftLastAccessTime.dwLowDateTime=0x84c085d0, ftLastAccessTime.dwHighDateTime=0x1d8bf9d, ftLastWriteTime.dwLowDateTime=0x84c085d0, ftLastWriteTime.dwHighDateTime=0x1d8bf9d, nFileSizeHigh=0x0, nFileSizeLow=0xfc48, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="lwhKV0RLG.flv", cAlternateFileName="LWHKV0~1.FLV")) returned 0x55e190 [0258.669] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d1edf0, ftCreationTime.dwHighDateTime=0x1d8bc01, ftLastAccessTime.dwLowDateTime=0x84c085d0, ftLastAccessTime.dwHighDateTime=0x1d8bf9d, ftLastWriteTime.dwLowDateTime=0x84c085d0, ftLastWriteTime.dwHighDateTime=0x1d8bf9d, nFileSizeHigh=0x0, nFileSizeLow=0xfc48, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="lwhKV0RLG.flv", cAlternateFileName="LWHKV0~1.FLV")) returned 0 [0258.669] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0258.669] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lwhKV0RLG.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\lwhkv0rlg.flv")) returned 1 [0258.670] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\lwhKV0RLG.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\lwhkv0rlg.flv")) returned 0xffffffff [0258.670] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20658f10, ftCreationTime.dwHighDateTime=0x1d8b82f, ftLastAccessTime.dwLowDateTime=0xb6754c80, ftLastAccessTime.dwHighDateTime=0x1d8bf27, ftLastWriteTime.dwLowDateTime=0xb6754c80, ftLastWriteTime.dwHighDateTime=0x1d8bf27, nFileSizeHigh=0x0, nFileSizeLow=0xcca1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDJNfXn-rR8zF.pps", cAlternateFileName="MDJNFX~1.PPS")) returned 1 [0258.671] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.671] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.671] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.671] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.671] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0258.672] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\MDJNfXn-rR8zF.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\mdjnfxn-rr8zf.pps")) returned 0x20 [0258.672] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\MDJNfXn-rR8zF.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\mdjnfxn-rr8zf.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.672] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\MDJNfXn-rR8zF.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\mdjnfxn-rr8zf.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.674] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.675] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.676] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.676] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.676] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.676] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.677] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.677] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.677] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.677] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.677] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.678] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.678] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.678] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.678] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.678] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.679] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.679] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.679] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.679] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.679] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.680] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.680] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.680] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.680] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xca1, lpOverlapped=0x0) returned 1 [0258.680] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xca1, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xca1, lpOverlapped=0x0) returned 1 [0258.680] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.681] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.681] CloseHandle (hObject=0x1d4) returned 1 [0258.681] CloseHandle (hObject=0x200) returned 1 [0258.681] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\MDJNfXn-rR8zF.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\mdjnfxn-rr8zf.pps"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\MDJNfXn-rR8zF.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\mdjnfxn-rr8zf.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.681] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\MDJNfXn-rR8zF.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\mdjnfxn-rr8zf.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.681] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\MDJNfXn-rR8zF.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\mdjnfxn-rr8zf.pps"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20658f10, ftCreationTime.dwHighDateTime=0x1d8b82f, ftLastAccessTime.dwLowDateTime=0xb6754c80, ftLastAccessTime.dwHighDateTime=0x1d8bf27, ftLastWriteTime.dwLowDateTime=0xb6754c80, ftLastWriteTime.dwHighDateTime=0x1d8bf27, nFileSizeHigh=0x0, nFileSizeLow=0xcca1, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="MDJNfXn-rR8zF.pps", cAlternateFileName="MDJNFX~1.PPS")) returned 0x55e710 [0258.682] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20658f10, ftCreationTime.dwHighDateTime=0x1d8b82f, ftLastAccessTime.dwLowDateTime=0xb6754c80, ftLastAccessTime.dwHighDateTime=0x1d8bf27, ftLastWriteTime.dwLowDateTime=0xb6754c80, ftLastWriteTime.dwHighDateTime=0x1d8bf27, nFileSizeHigh=0x0, nFileSizeLow=0xcca1, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="MDJNfXn-rR8zF.pps", cAlternateFileName="MDJNFX~1.PPS")) returned 0 [0258.682] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0258.682] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\MDJNfXn-rR8zF.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\mdjnfxn-rr8zf.pps")) returned 1 [0258.683] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\MDJNfXn-rR8zF.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\mdjnfxn-rr8zf.pps")) returned 0xffffffff [0258.683] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf4598a0, ftCreationTime.dwHighDateTime=0x1d8b414, ftLastAccessTime.dwLowDateTime=0xf1c30860, ftLastAccessTime.dwHighDateTime=0x1d8bead, ftLastWriteTime.dwLowDateTime=0xf1c30860, ftLastWriteTime.dwHighDateTime=0x1d8bead, nFileSizeHigh=0x0, nFileSizeLow=0xf430, dwReserved0=0x0, dwReserved1=0x0, cFileName="mEKNibmQaSlD xF.bmp", cAlternateFileName="MEKNIB~1.BMP")) returned 1 [0258.683] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.683] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.684] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.684] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.684] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0258.684] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\mEKNibmQaSlD xF.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\meknibmqasld xf.bmp")) returned 0x20 [0258.684] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\mEKNibmQaSlD xF.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\meknibmqasld xf.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.684] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\mEKNibmQaSlD xF.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\meknibmqasld xf.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.685] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.686] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.687] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.687] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.687] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.687] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.687] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.687] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.688] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.688] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.688] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.688] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.688] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.688] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.689] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.689] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.689] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.689] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.689] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.689] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.690] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.690] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.690] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.690] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.690] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.690] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.691] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.691] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.691] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.691] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.691] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x430, lpOverlapped=0x0) returned 1 [0258.691] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x430, lpOverlapped=0x0) returned 1 [0258.691] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.692] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.692] CloseHandle (hObject=0x200) returned 1 [0258.692] CloseHandle (hObject=0x1d4) returned 1 [0258.692] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\mEKNibmQaSlD xF.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\meknibmqasld xf.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\mEKNibmQaSlD xF.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\meknibmqasld xf.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.692] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\mEKNibmQaSlD xF.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\meknibmqasld xf.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.692] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\mEKNibmQaSlD xF.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\meknibmqasld xf.bmp"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf4598a0, ftCreationTime.dwHighDateTime=0x1d8b414, ftLastAccessTime.dwLowDateTime=0xf1c30860, ftLastAccessTime.dwHighDateTime=0x1d8bead, ftLastWriteTime.dwLowDateTime=0xf1c30860, ftLastWriteTime.dwHighDateTime=0x1d8bead, nFileSizeHigh=0x0, nFileSizeLow=0xf430, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="mEKNibmQaSlD xF.bmp", cAlternateFileName="MEKNIB~1.BMP")) returned 0x55e1d0 [0258.692] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf4598a0, ftCreationTime.dwHighDateTime=0x1d8b414, ftLastAccessTime.dwLowDateTime=0xf1c30860, ftLastAccessTime.dwHighDateTime=0x1d8bead, ftLastWriteTime.dwLowDateTime=0xf1c30860, ftLastWriteTime.dwHighDateTime=0x1d8bead, nFileSizeHigh=0x0, nFileSizeLow=0xf430, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="mEKNibmQaSlD xF.bmp", cAlternateFileName="MEKNIB~1.BMP")) returned 0 [0258.692] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0258.692] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\mEKNibmQaSlD xF.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\meknibmqasld xf.bmp")) returned 1 [0258.694] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\mEKNibmQaSlD xF.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\meknibmqasld xf.bmp")) returned 0xffffffff [0258.694] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486e76fc, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0x486e76fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xaf665718, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0xbbfc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft .NET Framework 4.6.2 Setup_20220803_150943770.html", cAlternateFileName="MICROS~1.HTM")) returned 1 [0258.694] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.694] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.697] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.697] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.697] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0258.698] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Microsoft .NET Framework 4.6.2 Setup_20220803_150943770.html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\microsoft .net framework 4.6.2 setup_20220803_150943770.html")) returned 0x20 [0258.698] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Microsoft .NET Framework 4.6.2 Setup_20220803_150943770.html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\microsoft .net framework 4.6.2 setup_20220803_150943770.html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.698] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Microsoft .NET Framework 4.6.2 Setup_20220803_150943770.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\microsoft .net framework 4.6.2 setup_20220803_150943770.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.699] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.703] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.705] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.708] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.708] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.708] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.709] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.709] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.709] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.710] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.710] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.710] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.710] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.710] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.710] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.711] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.711] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.711] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.711] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.711] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.711] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.711] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.712] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.712] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.712] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.712] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.712] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.712] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.713] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.713] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.713] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.713] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.714] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.716] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.716] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.716] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.717] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.717] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.717] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.717] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.717] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.717] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.717] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.718] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.718] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.718] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.718] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.718] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.718] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.719] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.719] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.719] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.719] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.719] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.719] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.720] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.720] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.720] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.720] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.720] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.721] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.721] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.721] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.721] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.721] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.721] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.721] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.722] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.722] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.722] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.722] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.722] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.722] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.723] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.723] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.723] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.723] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.723] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.723] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.723] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.724] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.724] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.724] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.724] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.724] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.724] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.725] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.725] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.725] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.725] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.725] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.725] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.726] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.726] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.726] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.728] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.728] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.728] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.728] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.728] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.728] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.729] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.729] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.729] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.729] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.729] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.729] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.730] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.730] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.730] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.730] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.730] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.730] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.731] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.731] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.731] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.731] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.731] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.731] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.731] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.732] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.732] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.732] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.732] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.732] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.732] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.733] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.733] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.733] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.733] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.734] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.734] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.734] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.734] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.735] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.735] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.735] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.735] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.735] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.735] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.738] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.738] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.739] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.739] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.742] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.742] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.742] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.742] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.742] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.742] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.743] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.743] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.743] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.743] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.744] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.744] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.744] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.747] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.748] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.748] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.748] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.749] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.749] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.749] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.750] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.750] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.750] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.750] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.750] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.751] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.751] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.751] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.752] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.752] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.752] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.752] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.754] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.755] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.755] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.755] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.755] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.755] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.756] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.756] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.756] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.756] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.757] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.757] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.757] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.757] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.757] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.757] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.758] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.758] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.758] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.759] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.759] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.759] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.759] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.759] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.760] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.760] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.760] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.760] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.760] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.760] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.761] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.761] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.761] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.762] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.762] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.762] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.762] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.762] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.762] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.763] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.763] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.763] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.763] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.763] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.765] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.766] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.767] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.767] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.771] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.771] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.772] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.772] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.773] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.773] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.774] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.774] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.774] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.775] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.775] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.775] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.776] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.776] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.776] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.776] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.777] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.777] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.777] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.777] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.778] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.778] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.779] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.779] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.779] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.779] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.780] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.781] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.781] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.781] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.781] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.782] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.782] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.782] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.783] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.783] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.783] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.784] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.784] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.784] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.784] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.784] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.784] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.785] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.785] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.785] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.785] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.785] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.785] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.786] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.786] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.786] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.786] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.786] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.786] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.787] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.787] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.787] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.787] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.787] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.788] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.788] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.788] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.788] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.789] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.789] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.789] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.789] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.789] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.789] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.790] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.790] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.790] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.790] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.790] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.790] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.791] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.791] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.791] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.791] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.791] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.791] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.792] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.792] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.792] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.792] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.792] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.792] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.792] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.793] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.793] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.793] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.793] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.793] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.793] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.794] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.794] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.794] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.794] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.794] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.794] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.795] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.795] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.795] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.795] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.795] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.795] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.796] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.796] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.796] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.796] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.798] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.798] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.798] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.798] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.799] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.799] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.799] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.799] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.799] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.799] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.800] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.800] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.800] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.800] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.801] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.801] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.802] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.802] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.802] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.802] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.802] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.803] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.803] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.803] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.803] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.803] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.803] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.804] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.804] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.804] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.804] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.804] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.804] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.805] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.805] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.805] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.805] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.805] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.806] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.806] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xfc2, lpOverlapped=0x0) returned 1 [0258.806] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xfc2, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xfc2, lpOverlapped=0x0) returned 1 [0258.806] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.806] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.806] CloseHandle (hObject=0x1d4) returned 1 [0258.806] CloseHandle (hObject=0x200) returned 1 [0258.807] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Microsoft .NET Framework 4.6.2 Setup_20220803_150943770.html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\microsoft .net framework 4.6.2 setup_20220803_150943770.html"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Microsoft .NET Framework 4.6.2 Setup_20220803_150943770.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\microsoft .net framework 4.6.2 setup_20220803_150943770.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.807] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Microsoft .NET Framework 4.6.2 Setup_20220803_150943770.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\microsoft .net framework 4.6.2 setup_20220803_150943770.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.807] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Microsoft .NET Framework 4.6.2 Setup_20220803_150943770.html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\microsoft .net framework 4.6.2 setup_20220803_150943770.html"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486e76fc, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0x486e76fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xaf665718, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0xbbfc2, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Microsoft .NET Framework 4.6.2 Setup_20220803_150943770.html", cAlternateFileName="MICROS~1.HTM")) returned 0x55e710 [0258.807] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486e76fc, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0x486e76fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xaf665718, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0xbbfc2, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Microsoft .NET Framework 4.6.2 Setup_20220803_150943770.html", cAlternateFileName="MICROS~1.HTM")) returned 0 [0258.807] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0258.807] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Microsoft .NET Framework 4.6.2 Setup_20220803_150943770.html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\microsoft .net framework 4.6.2 setup_20220803_150943770.html")) returned 1 [0258.814] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Microsoft .NET Framework 4.6.2 Setup_20220803_150943770.html" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\microsoft .net framework 4.6.2 setup_20220803_150943770.html")) returned 0xffffffff [0258.815] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642e0b80, ftCreationTime.dwHighDateTime=0x1d8c09c, ftLastAccessTime.dwLowDateTime=0x61f0d960, ftLastAccessTime.dwHighDateTime=0x1d8c123, ftLastWriteTime.dwLowDateTime=0x61f0d960, ftLastWriteTime.dwHighDateTime=0x1d8c123, nFileSizeHigh=0x0, nFileSizeLow=0xca3c, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="N-vzC5.docx", cAlternateFileName="N-VZC5~1.DOC")) returned 1 [0258.815] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.815] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.815] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.815] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0258.815] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\N-vzC5.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\n-vzc5.docx")) returned 0x20 [0258.815] VirtualAlloc (lpAddress=0x2268000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2268000 [0258.816] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\N-vzC5.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\n-vzc5.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.816] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\N-vzC5.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\n-vzc5.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.817] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.818] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.818] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.819] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.819] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.819] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.819] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.819] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.819] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.820] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.820] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.820] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.820] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.820] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.820] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.821] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.821] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.821] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.821] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.821] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.821] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.821] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.822] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.822] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.822] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xa3c, lpOverlapped=0x0) returned 1 [0258.822] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xa3c, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xa3c, lpOverlapped=0x0) returned 1 [0258.822] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.822] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0258.822] CloseHandle (hObject=0x200) returned 1 [0258.822] CloseHandle (hObject=0x1d4) returned 1 [0258.823] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\N-vzC5.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\n-vzc5.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\N-vzC5.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\n-vzc5.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0258.823] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\N-vzC5.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\n-vzc5.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0258.823] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\N-vzC5.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\n-vzc5.docx"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642e0b80, ftCreationTime.dwHighDateTime=0x1d8c09c, ftLastAccessTime.dwLowDateTime=0x61f0d960, ftLastAccessTime.dwHighDateTime=0x1d8c123, ftLastWriteTime.dwLowDateTime=0x61f0d960, ftLastWriteTime.dwHighDateTime=0x1d8c123, nFileSizeHigh=0x0, nFileSizeLow=0xca3c, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="N-vzC5.docx", cAlternateFileName="N-VZC5~1.DOC")) returned 0x55e510 [0258.823] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642e0b80, ftCreationTime.dwHighDateTime=0x1d8c09c, ftLastAccessTime.dwLowDateTime=0x61f0d960, ftLastAccessTime.dwHighDateTime=0x1d8c123, ftLastWriteTime.dwLowDateTime=0x61f0d960, ftLastWriteTime.dwHighDateTime=0x1d8c123, nFileSizeHigh=0x0, nFileSizeLow=0xca3c, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="N-vzC5.docx", cAlternateFileName="N-VZC5~1.DOC")) returned 0 [0258.823] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0258.823] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\N-vzC5.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\n-vzc5.docx")) returned 1 [0258.825] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\N-vzC5.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\n-vzc5.docx")) returned 0xffffffff [0258.825] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5472c90, ftCreationTime.dwHighDateTime=0x1d8bfc6, ftLastAccessTime.dwLowDateTime=0xe19bcd0, ftLastAccessTime.dwHighDateTime=0x1d8c128, ftLastWriteTime.dwLowDateTime=0xe19bcd0, ftLastWriteTime.dwHighDateTime=0x1d8c128, nFileSizeHigh=0x0, nFileSizeLow=0x641a, dwReserved0=0x0, dwReserved1=0x0, cFileName="nehlL.mkv", cAlternateFileName="")) returned 1 [0258.825] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0258.825] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.825] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0258.825] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0258.825] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0258.825] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0258.825] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\nehlL.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nehll.mkv")) returned 0x20 [0258.826] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\nehlL.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nehll.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0258.826] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\nehlL.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nehll.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0258.826] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.827] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.828] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0258.828] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.096] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.097] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.097] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.097] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.097] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.097] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.098] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.098] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.098] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x41a, lpOverlapped=0x0) returned 1 [0259.098] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x41a, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x41a, lpOverlapped=0x0) returned 1 [0259.098] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.098] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.099] CloseHandle (hObject=0x1d4) returned 1 [0259.099] CloseHandle (hObject=0x200) returned 1 [0259.099] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\nehlL.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nehll.mkv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\nehlL.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nehll.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.099] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\nehlL.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nehll.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.099] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\nehlL.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nehll.mkv"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5472c90, ftCreationTime.dwHighDateTime=0x1d8bfc6, ftLastAccessTime.dwLowDateTime=0xe19bcd0, ftLastAccessTime.dwHighDateTime=0x1d8c128, ftLastWriteTime.dwLowDateTime=0xe19bcd0, ftLastWriteTime.dwHighDateTime=0x1d8c128, nFileSizeHigh=0x0, nFileSizeLow=0x641a, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="nehlL.mkv", cAlternateFileName="")) returned 0x55e5d0 [0259.099] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5472c90, ftCreationTime.dwHighDateTime=0x1d8bfc6, ftLastAccessTime.dwLowDateTime=0xe19bcd0, ftLastAccessTime.dwHighDateTime=0x1d8c128, ftLastWriteTime.dwLowDateTime=0xe19bcd0, ftLastWriteTime.dwHighDateTime=0x1d8c128, nFileSizeHigh=0x0, nFileSizeLow=0x641a, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="nehlL.mkv", cAlternateFileName="")) returned 0 [0259.099] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0259.100] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\nehlL.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nehll.mkv")) returned 1 [0259.101] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\nehlL.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nehll.mkv")) returned 0xffffffff [0259.101] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2bd4c0, ftCreationTime.dwHighDateTime=0x1d8b357, ftLastAccessTime.dwLowDateTime=0x5b397130, ftLastAccessTime.dwHighDateTime=0x1d8bc01, ftLastWriteTime.dwLowDateTime=0x5b397130, ftLastWriteTime.dwHighDateTime=0x1d8bc01, nFileSizeHigh=0x0, nFileSizeLow=0x2a74, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="NixI5wZ1CbFhS.pdf", cAlternateFileName="NIXI5W~1.PDF")) returned 1 [0259.101] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.101] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.101] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.101] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.101] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.102] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0259.102] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\NixI5wZ1CbFhS.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nixi5wz1cbfhs.pdf")) returned 0x20 [0259.102] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\NixI5wZ1CbFhS.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nixi5wz1cbfhs.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0259.102] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\NixI5wZ1CbFhS.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nixi5wz1cbfhs.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0259.103] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.103] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.104] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.105] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.105] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xa74, lpOverlapped=0x0) returned 1 [0259.105] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xa74, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xa74, lpOverlapped=0x0) returned 1 [0259.105] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.105] WriteFile (in: hFile=0x1d4, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.105] CloseHandle (hObject=0x200) returned 1 [0259.105] CloseHandle (hObject=0x1d4) returned 1 [0259.105] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\NixI5wZ1CbFhS.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nixi5wz1cbfhs.pdf"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\NixI5wZ1CbFhS.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nixi5wz1cbfhs.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.106] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\NixI5wZ1CbFhS.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nixi5wz1cbfhs.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.106] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\NixI5wZ1CbFhS.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nixi5wz1cbfhs.pdf"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2bd4c0, ftCreationTime.dwHighDateTime=0x1d8b357, ftLastAccessTime.dwLowDateTime=0x5b397130, ftLastAccessTime.dwHighDateTime=0x1d8bc01, ftLastWriteTime.dwLowDateTime=0x5b397130, ftLastWriteTime.dwHighDateTime=0x1d8bc01, nFileSizeHigh=0x0, nFileSizeLow=0x2a74, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="NixI5wZ1CbFhS.pdf", cAlternateFileName="NIXI5W~1.PDF")) returned 0x55e490 [0259.106] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2bd4c0, ftCreationTime.dwHighDateTime=0x1d8b357, ftLastAccessTime.dwLowDateTime=0x5b397130, ftLastAccessTime.dwHighDateTime=0x1d8bc01, ftLastWriteTime.dwLowDateTime=0x5b397130, ftLastWriteTime.dwHighDateTime=0x1d8bc01, nFileSizeHigh=0x0, nFileSizeLow=0x2a74, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="NixI5wZ1CbFhS.pdf", cAlternateFileName="NIXI5W~1.PDF")) returned 0 [0259.106] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0259.106] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\NixI5wZ1CbFhS.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nixi5wz1cbfhs.pdf")) returned 1 [0259.107] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\NixI5wZ1CbFhS.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\nixi5wz1cbfhs.pdf")) returned 0xffffffff [0259.107] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c567380, ftCreationTime.dwHighDateTime=0x1d8b78d, ftLastAccessTime.dwLowDateTime=0x6056a360, ftLastAccessTime.dwHighDateTime=0x1d8ba6a, ftLastWriteTime.dwLowDateTime=0x6056a360, ftLastWriteTime.dwHighDateTime=0x1d8ba6a, nFileSizeHigh=0x0, nFileSizeLow=0x2229, dwReserved0=0x0, dwReserved1=0x0, cFileName="nsYzHxPa.m4a", cAlternateFileName="")) returned 1 [0259.107] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc71bb0f0, ftCreationTime.dwHighDateTime=0x1d8bab4, ftLastAccessTime.dwLowDateTime=0xc3522a80, ftLastAccessTime.dwHighDateTime=0x1d8bbe0, ftLastWriteTime.dwLowDateTime=0xc3522a80, ftLastWriteTime.dwHighDateTime=0x1d8bbe0, nFileSizeHigh=0x0, nFileSizeLow=0x15f52, dwReserved0=0x0, dwReserved1=0x0, cFileName="oaZtL.mp3", cAlternateFileName="")) returned 1 [0259.108] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.108] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.108] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.108] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0259.108] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\oaZtL.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\oaztl.mp3")) returned 0x20 [0259.108] VirtualAlloc (lpAddress=0x226c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x226c000 [0259.109] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\oaZtL.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\oaztl.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0259.109] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\oaZtL.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\oaztl.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0259.109] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.111] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.112] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.112] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.113] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.113] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.113] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.113] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.113] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.113] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.113] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.114] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.114] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.114] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.114] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.114] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.114] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.115] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.115] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.115] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.115] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.115] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.115] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.115] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.116] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.116] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.116] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.116] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.116] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.117] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.117] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.117] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.117] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.117] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.117] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.117] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.118] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.118] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.118] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.118] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.118] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.118] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.119] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xf52, lpOverlapped=0x0) returned 1 [0259.119] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xf52, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xf52, lpOverlapped=0x0) returned 1 [0259.119] ReadFile (in: hFile=0x1d4, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.119] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.119] CloseHandle (hObject=0x1d4) returned 1 [0259.119] CloseHandle (hObject=0x200) returned 1 [0259.119] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\oaZtL.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\oaztl.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\oaZtL.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\oaztl.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.119] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\oaZtL.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\oaztl.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.120] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\oaZtL.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\oaztl.mp3"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc71bb0f0, ftCreationTime.dwHighDateTime=0x1d8bab4, ftLastAccessTime.dwLowDateTime=0xc3522a80, ftLastAccessTime.dwHighDateTime=0x1d8bbe0, ftLastWriteTime.dwLowDateTime=0xc3522a80, ftLastWriteTime.dwHighDateTime=0x1d8bbe0, nFileSizeHigh=0x0, nFileSizeLow=0x15f52, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="oaZtL.mp3", cAlternateFileName="")) returned 0x55e310 [0259.120] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc71bb0f0, ftCreationTime.dwHighDateTime=0x1d8bab4, ftLastAccessTime.dwLowDateTime=0xc3522a80, ftLastAccessTime.dwHighDateTime=0x1d8bbe0, ftLastWriteTime.dwLowDateTime=0xc3522a80, ftLastWriteTime.dwHighDateTime=0x1d8bbe0, nFileSizeHigh=0x0, nFileSizeLow=0x15f52, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="oaZtL.mp3", cAlternateFileName="")) returned 0 [0259.120] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0259.120] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\oaZtL.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\oaztl.mp3")) returned 1 [0259.121] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\oaZtL.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\oaztl.mp3")) returned 0xffffffff [0259.121] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834de3cc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x834de3cc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x834e93ae, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="outlook logging", cAlternateFileName="OUTLOO~1")) returned 1 [0259.121] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\outlook logging\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\outlook logging\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834de3cc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x834de3cc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x834e93ae, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0259.122] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834de3cc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x834de3cc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x834e93ae, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0259.122] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834e93ae, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x834e93ae, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x83fbd036, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x104, cFileName="firstrun.log", cAlternateFileName="")) returned 1 [0259.122] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.122] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.122] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.122] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0259.122] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\outlook logging\\firstrun.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\outlook logging\\firstrun.log")) returned 0x20 [0259.123] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\outlook logging\\firstrun.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\outlook logging\\firstrun.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0259.123] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\outlook logging\\firstrun.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\outlook logging\\firstrun.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0259.123] ReadFile (in: hFile=0x1d4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x10e, lpOverlapped=0x0) returned 1 [0259.124] WriteFile (in: hFile=0x218, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x10e, lpOverlapped=0x0) returned 1 [0259.125] ReadFile (in: hFile=0x1d4, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0259.125] WriteFile (in: hFile=0x218, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0259.126] CloseHandle (hObject=0x1d4) returned 1 [0259.126] CloseHandle (hObject=0x218) returned 1 [0259.126] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\outlook logging\\firstrun.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\outlook logging\\firstrun.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\outlook logging\\firstrun.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\outlook logging\\firstrun.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.126] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\outlook logging\\firstrun.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\outlook logging\\firstrun.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.126] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\outlook logging\\firstrun.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\outlook logging\\firstrun.log"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834e93ae, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x834e93ae, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x83fbd036, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="firstrun.log", cAlternateFileName="")) returned 0x55e390 [0259.126] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834e93ae, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x834e93ae, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x83fbd036, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="firstrun.log", cAlternateFileName="")) returned 0 [0259.126] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0259.126] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\outlook logging\\firstrun.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\outlook logging\\firstrun.log")) returned 1 [0259.127] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\outlook logging\\firstrun.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\outlook logging\\firstrun.log")) returned 0xffffffff [0259.127] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834e93ae, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x834e93ae, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x83fbd036, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x104, cFileName="firstrun.log", cAlternateFileName="")) returned 0 [0259.127] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0259.127] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74996a0, ftCreationTime.dwHighDateTime=0x1d8b345, ftLastAccessTime.dwLowDateTime=0x55993520, ftLastAccessTime.dwHighDateTime=0x1d8b5bd, ftLastWriteTime.dwLowDateTime=0x55993520, ftLastWriteTime.dwHighDateTime=0x1d8b5bd, nFileSizeHigh=0x0, nFileSizeLow=0x28a0, dwReserved0=0x6f6c2e6e, dwReserved1=0x2000067, cFileName="r_7_Qtprf0Dr 3RJEs3.mkv", cAlternateFileName="R_7_QT~1.MKV")) returned 1 [0259.128] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.128] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.128] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.128] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0259.128] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\r_7_Qtprf0Dr 3RJEs3.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\r_7_qtprf0dr 3rjes3.mkv")) returned 0x20 [0259.128] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\r_7_Qtprf0Dr 3RJEs3.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\r_7_qtprf0dr 3rjes3.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0259.129] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\r_7_Qtprf0Dr 3RJEs3.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\r_7_qtprf0dr 3rjes3.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0259.129] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.130] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.131] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.131] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.132] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x8a0, lpOverlapped=0x0) returned 1 [0259.132] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x8a0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x8a0, lpOverlapped=0x0) returned 1 [0259.132] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.132] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.132] CloseHandle (hObject=0x200) returned 1 [0259.132] CloseHandle (hObject=0x218) returned 1 [0259.132] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\r_7_Qtprf0Dr 3RJEs3.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\r_7_qtprf0dr 3rjes3.mkv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\r_7_Qtprf0Dr 3RJEs3.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\r_7_qtprf0dr 3rjes3.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.132] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\r_7_Qtprf0Dr 3RJEs3.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\r_7_qtprf0dr 3rjes3.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.133] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\r_7_Qtprf0Dr 3RJEs3.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\r_7_qtprf0dr 3rjes3.mkv"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74996a0, ftCreationTime.dwHighDateTime=0x1d8b345, ftLastAccessTime.dwLowDateTime=0x55993520, ftLastAccessTime.dwHighDateTime=0x1d8b5bd, ftLastWriteTime.dwLowDateTime=0x55993520, ftLastWriteTime.dwHighDateTime=0x1d8b5bd, nFileSizeHigh=0x0, nFileSizeLow=0x28a0, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="r_7_Qtprf0Dr 3RJEs3.mkv", cAlternateFileName="R_7_QT~1.MKV")) returned 0x55e410 [0259.133] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74996a0, ftCreationTime.dwHighDateTime=0x1d8b345, ftLastAccessTime.dwLowDateTime=0x55993520, ftLastAccessTime.dwHighDateTime=0x1d8b5bd, ftLastWriteTime.dwLowDateTime=0x55993520, ftLastWriteTime.dwHighDateTime=0x1d8b5bd, nFileSizeHigh=0x0, nFileSizeLow=0x28a0, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="r_7_Qtprf0Dr 3RJEs3.mkv", cAlternateFileName="R_7_QT~1.MKV")) returned 0 [0259.133] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0259.133] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\r_7_Qtprf0Dr 3RJEs3.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\r_7_qtprf0dr 3rjes3.mkv")) returned 1 [0259.134] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\r_7_Qtprf0Dr 3RJEs3.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\r_7_qtprf0dr 3rjes3.mkv")) returned 0xffffffff [0259.134] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x396fd9f0, ftCreationTime.dwHighDateTime=0x1d8b930, ftLastAccessTime.dwLowDateTime=0xb06d1100, ftLastAccessTime.dwHighDateTime=0x1d8bfa0, ftLastWriteTime.dwLowDateTime=0xb06d1100, ftLastWriteTime.dwHighDateTime=0x1d8bfa0, nFileSizeHigh=0x0, nFileSizeLow=0x4c1a, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="sbGkCoi59b4.jpg", cAlternateFileName="SBGKCO~1.JPG")) returned 1 [0259.134] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.134] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.134] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.134] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0259.134] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\sbGkCoi59b4.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\sbgkcoi59b4.jpg")) returned 0x20 [0259.135] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\sbGkCoi59b4.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\sbgkcoi59b4.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0259.135] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\sbGkCoi59b4.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\sbgkcoi59b4.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0259.135] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.136] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.137] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.137] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.137] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.137] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.138] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.138] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.138] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xc1a, lpOverlapped=0x0) returned 1 [0259.138] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xc1a, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xc1a, lpOverlapped=0x0) returned 1 [0259.138] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.138] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.138] CloseHandle (hObject=0x218) returned 1 [0259.138] CloseHandle (hObject=0x200) returned 1 [0259.138] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\sbGkCoi59b4.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\sbgkcoi59b4.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\sbGkCoi59b4.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\sbgkcoi59b4.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.139] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\sbGkCoi59b4.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\sbgkcoi59b4.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.139] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\sbGkCoi59b4.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\sbgkcoi59b4.jpg"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x396fd9f0, ftCreationTime.dwHighDateTime=0x1d8b930, ftLastAccessTime.dwLowDateTime=0xb06d1100, ftLastAccessTime.dwHighDateTime=0x1d8bfa0, ftLastWriteTime.dwLowDateTime=0xb06d1100, ftLastWriteTime.dwHighDateTime=0x1d8bfa0, nFileSizeHigh=0x0, nFileSizeLow=0x4c1a, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="sbGkCoi59b4.jpg", cAlternateFileName="SBGKCO~1.JPG")) returned 0x55e890 [0259.139] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x396fd9f0, ftCreationTime.dwHighDateTime=0x1d8b930, ftLastAccessTime.dwLowDateTime=0xb06d1100, ftLastAccessTime.dwHighDateTime=0x1d8bfa0, ftLastWriteTime.dwLowDateTime=0xb06d1100, ftLastWriteTime.dwHighDateTime=0x1d8bfa0, nFileSizeHigh=0x0, nFileSizeLow=0x4c1a, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="sbGkCoi59b4.jpg", cAlternateFileName="SBGKCO~1.JPG")) returned 0 [0259.139] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0259.139] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\sbGkCoi59b4.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\sbgkcoi59b4.jpg")) returned 1 [0259.140] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\sbGkCoi59b4.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\sbgkcoi59b4.jpg")) returned 0xffffffff [0259.140] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafdfb5f5, ftCreationTime.dwHighDateTime=0x1d8a64b, ftLastAccessTime.dwLowDateTime=0xafdfb5f5, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0x465d1d2f, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x44d55, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupExe(20220802104140E88).log", cAlternateFileName="SETUPE~1.LOG")) returned 1 [0259.140] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.140] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.141] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.141] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.141] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.141] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0259.141] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\SetupExe(20220802104140E88).log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\setupexe(20220802104140e88).log")) returned 0x20 [0259.142] VirtualAlloc (lpAddress=0x2270000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2270000 [0259.142] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\SetupExe(20220802104140E88).log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\setupexe(20220802104140e88).log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0259.143] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\SetupExe(20220802104140E88).log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\setupexe(20220802104140e88).log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0259.143] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.145] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.146] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.267] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.267] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.267] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.267] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.267] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.268] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.268] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.268] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.268] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.268] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.268] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.268] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.269] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.269] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.269] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.269] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.269] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.269] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.269] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.270] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.270] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.270] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.270] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.270] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.270] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.271] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.271] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.271] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.271] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.271] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.271] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.271] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.272] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.272] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.272] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.272] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.272] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.272] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.272] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.273] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.273] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.273] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.273] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.273] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.273] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.273] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.274] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.274] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.274] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.274] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.274] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.274] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.274] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.275] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.275] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.275] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.275] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.275] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.275] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.275] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.276] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.276] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.286] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.288] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.288] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.288] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.288] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.288] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.288] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.288] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.289] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.289] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.289] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.289] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.289] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.289] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.289] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.290] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.290] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.290] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.290] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.290] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.290] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.290] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.291] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.291] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.291] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.291] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.291] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.292] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.293] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.293] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.293] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.293] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.293] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.293] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.294] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.294] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.294] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.294] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.294] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.295] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.295] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.295] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.295] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.295] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.295] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.295] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.295] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.296] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.296] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.296] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.296] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.296] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.296] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.297] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.297] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.297] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.297] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.297] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.297] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.298] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.298] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.298] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.298] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.298] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.298] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.299] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.299] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.300] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.300] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.300] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.300] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.300] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xd55, lpOverlapped=0x0) returned 1 [0259.300] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xd55, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xd55, lpOverlapped=0x0) returned 1 [0259.300] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.301] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.301] CloseHandle (hObject=0x200) returned 1 [0259.301] CloseHandle (hObject=0x218) returned 1 [0259.301] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\SetupExe(20220802104140E88).log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\setupexe(20220802104140e88).log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\SetupExe(20220802104140E88).log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\setupexe(20220802104140e88).log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.301] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\SetupExe(20220802104140E88).log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\setupexe(20220802104140e88).log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.301] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\SetupExe(20220802104140E88).log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\setupexe(20220802104140e88).log"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafdfb5f5, ftCreationTime.dwHighDateTime=0x1d8a64b, ftLastAccessTime.dwLowDateTime=0xafdfb5f5, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0x465d1d2f, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x44d55, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="SetupExe(20220802104140E88).log", cAlternateFileName="SETUPE~1.LOG")) returned 0x55e410 [0259.302] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafdfb5f5, ftCreationTime.dwHighDateTime=0x1d8a64b, ftLastAccessTime.dwLowDateTime=0xafdfb5f5, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0x465d1d2f, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x44d55, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="SetupExe(20220802104140E88).log", cAlternateFileName="SETUPE~1.LOG")) returned 0 [0259.302] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0259.302] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\SetupExe(20220802104140E88).log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\setupexe(20220802104140e88).log")) returned 1 [0259.305] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\SetupExe(20220802104140E88).log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\setupexe(20220802104140e88).log")) returned 0xffffffff [0259.305] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8696bb0, ftCreationTime.dwHighDateTime=0x1d8ba07, ftLastAccessTime.dwLowDateTime=0x1039a450, ftLastAccessTime.dwHighDateTime=0x1d8c0e0, ftLastWriteTime.dwLowDateTime=0x1039a450, ftLastWriteTime.dwHighDateTime=0x1d8c0e0, nFileSizeHigh=0x0, nFileSizeLow=0x3e42, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="SpXbfbgJ.mp4", cAlternateFileName="")) returned 1 [0259.305] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd54ff0d0, ftCreationTime.dwHighDateTime=0x1d8bfed, ftLastAccessTime.dwLowDateTime=0xdf1e0340, ftLastAccessTime.dwHighDateTime=0x1d8c0fb, ftLastWriteTime.dwLowDateTime=0xdf1e0340, ftLastWriteTime.dwHighDateTime=0x1d8c0fb, nFileSizeHigh=0x0, nFileSizeLow=0x881f, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="U0mBMbuTd.gif", cAlternateFileName="U0MBMB~1.GIF")) returned 1 [0259.306] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.306] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.306] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.306] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.306] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.306] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0259.306] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\U0mBMbuTd.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\u0mbmbutd.gif")) returned 0x20 [0259.306] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\U0mBMbuTd.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\u0mbmbutd.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0259.307] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\U0mBMbuTd.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\u0mbmbutd.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0259.307] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.308] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.310] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.310] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.310] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.310] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.310] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.311] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.311] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.311] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.311] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.311] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.311] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.312] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.312] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.312] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.312] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x81f, lpOverlapped=0x0) returned 1 [0259.312] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x81f, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x81f, lpOverlapped=0x0) returned 1 [0259.312] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.312] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.312] CloseHandle (hObject=0x218) returned 1 [0259.313] CloseHandle (hObject=0x200) returned 1 [0259.313] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\U0mBMbuTd.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\u0mbmbutd.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\U0mBMbuTd.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\u0mbmbutd.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.315] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\U0mBMbuTd.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\u0mbmbutd.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.315] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\U0mBMbuTd.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\u0mbmbutd.gif"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd54ff0d0, ftCreationTime.dwHighDateTime=0x1d8bfed, ftLastAccessTime.dwLowDateTime=0xdf1e0340, ftLastAccessTime.dwHighDateTime=0x1d8c0fb, ftLastWriteTime.dwLowDateTime=0xdf1e0340, ftLastWriteTime.dwHighDateTime=0x1d8c0fb, nFileSizeHigh=0x0, nFileSizeLow=0x881f, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="U0mBMbuTd.gif", cAlternateFileName="U0MBMB~1.GIF")) returned 0x55e410 [0259.315] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd54ff0d0, ftCreationTime.dwHighDateTime=0x1d8bfed, ftLastAccessTime.dwLowDateTime=0xdf1e0340, ftLastAccessTime.dwHighDateTime=0x1d8c0fb, ftLastWriteTime.dwLowDateTime=0xdf1e0340, ftLastWriteTime.dwHighDateTime=0x1d8c0fb, nFileSizeHigh=0x0, nFileSizeLow=0x881f, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="U0mBMbuTd.gif", cAlternateFileName="U0MBMB~1.GIF")) returned 0 [0259.315] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0259.315] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\U0mBMbuTd.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\u0mbmbutd.gif")) returned 1 [0259.316] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\U0mBMbuTd.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\u0mbmbutd.gif")) returned 0xffffffff [0259.316] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44e1c2c0, ftCreationTime.dwHighDateTime=0x1d8bdeb, ftLastAccessTime.dwLowDateTime=0xfe833750, ftLastAccessTime.dwHighDateTime=0x1d8bf2f, ftLastWriteTime.dwLowDateTime=0xfe833750, ftLastWriteTime.dwHighDateTime=0x1d8bf2f, nFileSizeHigh=0x0, nFileSizeLow=0x3008, dwReserved0=0x0, dwReserved1=0x0, cFileName="vD8eUWUIvpEQWi.m4a", cAlternateFileName="VD8EUW~1.M4A")) returned 1 [0259.317] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8697ebf0, ftCreationTime.dwHighDateTime=0x1d8b20a, ftLastAccessTime.dwLowDateTime=0x51c27c80, ftLastAccessTime.dwHighDateTime=0x1d8b2fd, ftLastWriteTime.dwLowDateTime=0x51c27c80, ftLastWriteTime.dwHighDateTime=0x1d8b2fd, nFileSizeHigh=0x0, nFileSizeLow=0xc693, dwReserved0=0x690077, dwReserved1=0x6d002e, cFileName="x2j5rfYgbAEGB 00y.mp3", cAlternateFileName="X2J5RF~1.MP3")) returned 1 [0259.317] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.317] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.317] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.317] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.317] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.317] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0259.317] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\x2j5rfYgbAEGB 00y.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\x2j5rfygbaegb 00y.mp3")) returned 0x20 [0259.318] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\x2j5rfYgbAEGB 00y.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\x2j5rfygbaegb 00y.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0259.318] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\x2j5rfYgbAEGB 00y.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\x2j5rfygbaegb 00y.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0259.320] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.321] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.321] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.322] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.322] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.322] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.322] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.322] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.322] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.323] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.323] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.323] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.323] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.323] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.323] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.323] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.324] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.324] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.324] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.324] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.324] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.324] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.325] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.325] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.325] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x693, lpOverlapped=0x0) returned 1 [0259.325] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x693, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x693, lpOverlapped=0x0) returned 1 [0259.325] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.325] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.325] CloseHandle (hObject=0x200) returned 1 [0259.325] CloseHandle (hObject=0x218) returned 1 [0259.325] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\x2j5rfYgbAEGB 00y.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\x2j5rfygbaegb 00y.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\x2j5rfYgbAEGB 00y.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\x2j5rfygbaegb 00y.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.326] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\x2j5rfYgbAEGB 00y.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\x2j5rfygbaegb 00y.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.326] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\x2j5rfYgbAEGB 00y.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\x2j5rfygbaegb 00y.mp3"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8697ebf0, ftCreationTime.dwHighDateTime=0x1d8b20a, ftLastAccessTime.dwLowDateTime=0x51c27c80, ftLastAccessTime.dwHighDateTime=0x1d8b2fd, ftLastWriteTime.dwLowDateTime=0x51c27c80, ftLastWriteTime.dwHighDateTime=0x1d8b2fd, nFileSizeHigh=0x0, nFileSizeLow=0xc693, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="x2j5rfYgbAEGB 00y.mp3", cAlternateFileName="X2J5RF~1.MP3")) returned 0x55e710 [0259.326] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8697ebf0, ftCreationTime.dwHighDateTime=0x1d8b20a, ftLastAccessTime.dwLowDateTime=0x51c27c80, ftLastAccessTime.dwHighDateTime=0x1d8b2fd, ftLastWriteTime.dwLowDateTime=0x51c27c80, ftLastWriteTime.dwHighDateTime=0x1d8b2fd, nFileSizeHigh=0x0, nFileSizeLow=0xc693, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="x2j5rfYgbAEGB 00y.mp3", cAlternateFileName="X2J5RF~1.MP3")) returned 0 [0259.326] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0259.326] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\x2j5rfYgbAEGB 00y.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\x2j5rfygbaegb 00y.mp3")) returned 1 [0259.327] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\x2j5rfYgbAEGB 00y.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\x2j5rfygbaegb 00y.mp3")) returned 0xffffffff [0259.327] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3e6fd18, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd3e6fd18, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x1ee00dc8, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x89fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="XC64ZB-20220802-1035.log", cAlternateFileName="XC64ZB~1.LOG")) returned 1 [0259.328] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.328] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.328] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.328] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.328] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.328] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0259.328] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\XC64ZB-20220802-1035.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\xc64zb-20220802-1035.log")) returned 0x20 [0259.328] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\XC64ZB-20220802-1035.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\xc64zb-20220802-1035.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0259.329] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\XC64ZB-20220802-1035.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\xc64zb-20220802-1035.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0259.329] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.332] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.334] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.334] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.334] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.334] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.335] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.335] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.335] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.335] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.335] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.335] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.336] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.336] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.336] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.336] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.336] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x9fc, lpOverlapped=0x0) returned 1 [0259.336] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x9fc, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x9fc, lpOverlapped=0x0) returned 1 [0259.336] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.336] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.337] CloseHandle (hObject=0x218) returned 1 [0259.337] CloseHandle (hObject=0x200) returned 1 [0259.337] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\XC64ZB-20220802-1035.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\xc64zb-20220802-1035.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\XC64ZB-20220802-1035.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\xc64zb-20220802-1035.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.337] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\XC64ZB-20220802-1035.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\xc64zb-20220802-1035.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.337] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\XC64ZB-20220802-1035.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\xc64zb-20220802-1035.log"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3e6fd18, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd3e6fd18, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x1ee00dc8, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x89fc, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="XC64ZB-20220802-1035.log", cAlternateFileName="XC64ZB~1.LOG")) returned 0x55e410 [0259.337] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3e6fd18, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd3e6fd18, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x1ee00dc8, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x89fc, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="XC64ZB-20220802-1035.log", cAlternateFileName="XC64ZB~1.LOG")) returned 0 [0259.337] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0259.337] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\XC64ZB-20220802-1035.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\xc64zb-20220802-1035.log")) returned 1 [0259.339] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\XC64ZB-20220802-1035.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\xc64zb-20220802-1035.log")) returned 0xffffffff [0259.339] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1525c840, ftCreationTime.dwHighDateTime=0x1d8bff5, ftLastAccessTime.dwLowDateTime=0x837f1890, ftLastAccessTime.dwHighDateTime=0x1d8c0c3, ftLastWriteTime.dwLowDateTime=0x837f1890, ftLastWriteTime.dwHighDateTime=0x1d8c0c3, nFileSizeHigh=0x0, nFileSizeLow=0x58cf, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="ZkWWZSWWkn.png", cAlternateFileName="ZKWWZS~1.PNG")) returned 1 [0259.339] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.339] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.339] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.339] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.339] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.339] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0259.339] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\ZkWWZSWWkn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\zkwwzswwkn.png")) returned 0x20 [0259.340] VirtualAlloc (lpAddress=0x2274000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2274000 [0259.340] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\ZkWWZSWWkn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\zkwwzswwkn.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0259.340] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\ZkWWZSWWkn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\zkwwzswwkn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0259.341] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.342] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.343] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.343] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.343] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.343] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.343] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.343] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.343] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.344] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.344] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x8cf, lpOverlapped=0x0) returned 1 [0259.344] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x8cf, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x8cf, lpOverlapped=0x0) returned 1 [0259.344] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.344] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.344] CloseHandle (hObject=0x200) returned 1 [0259.344] CloseHandle (hObject=0x218) returned 1 [0259.345] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\ZkWWZSWWkn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\zkwwzswwkn.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\ZkWWZSWWkn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\zkwwzswwkn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.345] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\ZkWWZSWWkn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\zkwwzswwkn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.345] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\ZkWWZSWWkn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\zkwwzswwkn.png"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1525c840, ftCreationTime.dwHighDateTime=0x1d8bff5, ftLastAccessTime.dwLowDateTime=0x837f1890, ftLastAccessTime.dwHighDateTime=0x1d8c0c3, ftLastWriteTime.dwLowDateTime=0x837f1890, ftLastWriteTime.dwHighDateTime=0x1d8c0c3, nFileSizeHigh=0x0, nFileSizeLow=0x58cf, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="ZkWWZSWWkn.png", cAlternateFileName="ZKWWZS~1.PNG")) returned 0x55e490 [0259.345] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1525c840, ftCreationTime.dwHighDateTime=0x1d8bff5, ftLastAccessTime.dwLowDateTime=0x837f1890, ftLastAccessTime.dwHighDateTime=0x1d8c0c3, ftLastWriteTime.dwLowDateTime=0x837f1890, ftLastWriteTime.dwHighDateTime=0x1d8c0c3, nFileSizeHigh=0x0, nFileSizeLow=0x58cf, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="ZkWWZSWWkn.png", cAlternateFileName="ZKWWZS~1.PNG")) returned 0 [0259.345] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0259.345] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\ZkWWZSWWkn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\zkwwzswwkn.png")) returned 1 [0259.350] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\ZkWWZSWWkn.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\zkwwzswwkn.png")) returned 0xffffffff [0259.350] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825bf070, ftCreationTime.dwHighDateTime=0x1d8bf72, ftLastAccessTime.dwLowDateTime=0x46bdd0, ftLastAccessTime.dwHighDateTime=0x1d8bf73, ftLastWriteTime.dwLowDateTime=0x46bdd0, ftLastWriteTime.dwHighDateTime=0x1d8bf73, nFileSizeHigh=0x0, nFileSizeLow=0x7094, dwReserved0=0x0, dwReserved1=0x0, cFileName="_DEn5NsuwIa6-O9getx.mp3", cAlternateFileName="_DEN5N~1.MP3")) returned 1 [0259.350] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.350] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.350] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.350] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0259.351] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\_DEn5NsuwIa6-O9getx.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\_den5nsuwia6-o9getx.mp3")) returned 0x20 [0259.351] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\_DEn5NsuwIa6-O9getx.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\_den5nsuwia6-o9getx.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0259.351] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\_DEn5NsuwIa6-O9getx.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\_den5nsuwia6-o9getx.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0259.351] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.352] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.353] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.353] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.354] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.354] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.354] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.354] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.354] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.354] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.355] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.355] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.355] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.355] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0259.355] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x94, lpOverlapped=0x0) returned 1 [0259.355] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x94, lpOverlapped=0x0) returned 1 [0259.356] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.356] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.356] CloseHandle (hObject=0x218) returned 1 [0259.356] CloseHandle (hObject=0x200) returned 1 [0259.356] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\_DEn5NsuwIa6-O9getx.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\_den5nsuwia6-o9getx.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\_DEn5NsuwIa6-O9getx.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\_den5nsuwia6-o9getx.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.356] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\_DEn5NsuwIa6-O9getx.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\_den5nsuwia6-o9getx.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.356] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\_DEn5NsuwIa6-O9getx.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\_den5nsuwia6-o9getx.mp3"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825bf070, ftCreationTime.dwHighDateTime=0x1d8bf72, ftLastAccessTime.dwLowDateTime=0x46bdd0, ftLastAccessTime.dwHighDateTime=0x1d8bf73, ftLastWriteTime.dwLowDateTime=0x46bdd0, ftLastWriteTime.dwHighDateTime=0x1d8bf73, nFileSizeHigh=0x0, nFileSizeLow=0x7094, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="_DEn5NsuwIa6-O9getx.mp3", cAlternateFileName="_DEN5N~1.MP3")) returned 0x55e650 [0259.356] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825bf070, ftCreationTime.dwHighDateTime=0x1d8bf72, ftLastAccessTime.dwLowDateTime=0x46bdd0, ftLastAccessTime.dwHighDateTime=0x1d8bf73, ftLastWriteTime.dwLowDateTime=0x46bdd0, ftLastWriteTime.dwHighDateTime=0x1d8bf73, nFileSizeHigh=0x0, nFileSizeLow=0x7094, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="_DEn5NsuwIa6-O9getx.mp3", cAlternateFileName="_DEN5N~1.MP3")) returned 0 [0259.356] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0259.356] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\_DEn5NsuwIa6-O9getx.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\_den5nsuwia6-o9getx.mp3")) returned 1 [0259.358] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\_DEn5NsuwIa6-O9getx.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\_den5nsuwia6-o9getx.mp3")) returned 0xffffffff [0259.358] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8320bdf4, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8320bdf4, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8320bdf4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} - OProcSessId.dat", cAlternateFileName="{6B789~1.DAT")) returned 1 [0259.358] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.358] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.358] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.358] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0259.358] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} - OProcSessId.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} - oprocsessid.dat")) returned 0x20 [0259.359] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} - OProcSessId.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} - oprocsessid.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0259.359] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} - OProcSessId.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} - oprocsessid.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0259.359] ReadFile (in: hFile=0x200, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.359] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0259.360] CloseHandle (hObject=0x200) returned 1 [0259.360] CloseHandle (hObject=0x218) returned 1 [0259.360] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} - OProcSessId.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} - oprocsessid.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} - OProcSessId.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} - oprocsessid.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.366] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} - OProcSessId.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} - oprocsessid.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.366] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} - OProcSessId.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} - oprocsessid.dat"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8320bdf4, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8320bdf4, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8320bdf4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0x11, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} - OProcSessId.dat", cAlternateFileName="{6B789~1.DAT")) returned 0x55e290 [0259.366] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8320bdf4, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x8320bdf4, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x8320bdf4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550370, dwReserved1=0x11, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} - OProcSessId.dat", cAlternateFileName="{6B789~1.DAT")) returned 0 [0259.366] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0259.366] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} - OProcSessId.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} - oprocsessid.dat")) returned 1 [0259.367] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\{6B789349-1698-4EA5-B0F1-2664E9E9AE46} - OProcSessId.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\{6b789349-1698-4ea5-b0f1-2664e9e9ae46} - oprocsessid.dat")) returned 0xffffffff [0259.367] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5faf66, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3c5faf66, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c5faf66, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="~DF14ED840F157E120E.TMP", cAlternateFileName="~DF14E~1.TMP")) returned 1 [0259.368] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7d8bd80d, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d8bd80d, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d8bd80d, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x370035, dwReserved1=0x310065, cFileName="~DF45387DDACE8D4D66.TMP", cAlternateFileName="~DF453~1.TMP")) returned 1 [0259.368] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x379374cb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x379374cb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x379374cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x380065, dwReserved1=0x340064, cFileName="~DF64BEC3238A96FCF5.TMP", cAlternateFileName="~DF64B~1.TMP")) returned 1 [0259.369] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe39035, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xdbe39035, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdbeab755, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x390061, dwReserved1=0x660036, cFileName="~DF88DBD32E76AFA14C.TMP", cAlternateFileName="~DF88D~1.TMP")) returned 1 [0259.370] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x74625823, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x74625823, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x74625823, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x610036, dwReserved1=0x610066, cFileName="~DFC82C101602F59499.TMP", cAlternateFileName="~DFC82~1.TMP")) returned 1 [0259.370] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xdbeab755, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xdbeab755, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdbeab755, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x660032, dwReserved1=0x390035, cFileName="~DFDD957DDC34FFB186.TMP", cAlternateFileName="~DFDD9~1.TMP")) returned 1 [0259.371] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3273b0ad, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3273b0ad, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x336d7ba6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x660034, dwReserved1=0x620066, cFileName="~DFE2E3E18FD2185616.TMP", cAlternateFileName="~DFE2E~1.TMP")) returned 1 [0259.371] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x6f3abcc4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f3abcc4, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f3abcc4, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x310032, dwReserved1=0x350038, cFileName="~DFFFCB558BD9DED4B2.TMP", cAlternateFileName="~DFFFC~1.TMP")) returned 1 [0259.372] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x6f3abcc4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f3abcc4, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f3abcc4, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x310032, dwReserved1=0x350038, cFileName="~DFFFCB558BD9DED4B2.TMP", cAlternateFileName="~DFFFC~1.TMP")) returned 0 [0259.372] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0259.372] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x45443944, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0259.372] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temporary Internet Files\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temporary internet files\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x6f3abcc4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f3abcc4, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f3abcc4, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x310032, dwReserved1=0x350038, cFileName="~DFFFCB558BD9DED4B2.TMP", cAlternateFileName="PèU")) returned 0xffffffff [0259.373] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40a64b1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x45443944, cFileName="TileDataLayer", cAlternateFileName="TILEDA~1")) returned 1 [0259.373] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40a64b1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x640039, dwReserved1=0x640065, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0259.373] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40a64b1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x640039, dwReserved1=0x640065, cFileName="..", cAlternateFileName="")) returned 1 [0259.373] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2c945d07, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x2c945d07, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x640039, dwReserved1=0x640065, cFileName="Database", cAlternateFileName="")) returned 1 [0259.373] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2c945d07, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x2c945d07, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0259.373] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2c945d07, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x2c945d07, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0259.373] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ab0ffe, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40ab0ffe, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x692bd9cc, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="EDB.chk", cAlternateFileName="")) returned 1 [0259.373] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.374] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.374] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.374] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.374] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.374] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0259.374] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.chk")) returned 0x20 [0259.374] VirtualAlloc (lpAddress=0x2278000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2278000 [0259.374] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.chk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0259.375] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0259.376] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.376] WriteFile (in: hFile=0x1d4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.377] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.377] WriteFile (in: hFile=0x1d4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.378] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0259.378] WriteFile (in: hFile=0x1d4, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0259.378] CloseHandle (hObject=0x200) returned 1 [0259.378] CloseHandle (hObject=0x1d4) returned 1 [0259.378] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.chk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.378] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.378] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.chk"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ab0ffe, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40ab0ffe, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x692bd9cc, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="EDB.chk", cAlternateFileName="")) returned 0x55e790 [0259.379] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ab0ffe, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40ab0ffe, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x692bd9cc, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="EDB.chk", cAlternateFileName="")) returned 0 [0259.379] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0259.379] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.chk")) returned 1 [0259.380] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.chk")) returned 0xffffffff [0259.380] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8db19be0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6106b8b, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="EDB.log", cAlternateFileName="")) returned 1 [0259.380] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.380] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.380] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.380] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0259.380] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.log")) returned 0x20 [0259.381] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0259.381] GetLastError () returned 0x20 [0259.381] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1d4 [0259.381] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.381] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.381] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.log"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8db19be0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6106b8b, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="EDB.log", cAlternateFileName="")) returned 0x55e410 [0259.382] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8db19be0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6106b8b, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="EDB.log", cAlternateFileName="")) returned 0 [0259.382] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0259.382] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.log")) returned 0 [0259.382] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb.log")) returned 0x20 [0259.382] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2c9633f1, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="EDB00007.log", cAlternateFileName="")) returned 1 [0259.382] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.382] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.382] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.382] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.382] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.382] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0259.383] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB00007.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb00007.log")) returned 0x20 [0259.383] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB00007.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb00007.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0259.383] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB00007.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb00007.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0259.385] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.388] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.389] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.391] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.391] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.391] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.392] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.392] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.392] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.392] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.392] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.393] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.393] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.393] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.393] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.393] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.393] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.394] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.394] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.394] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.394] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.394] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.394] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.395] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.395] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.395] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.395] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.395] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.395] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.396] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.396] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.396] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.397] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.398] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.399] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.400] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.400] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.400] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.400] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.400] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.400] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.400] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.401] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.401] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.401] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.401] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.401] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.401] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.401] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.402] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.402] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.402] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.402] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.402] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.402] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.402] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.403] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.403] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.403] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.403] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.403] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.403] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.403] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.404] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.404] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.404] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.404] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.404] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.404] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.405] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.405] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.405] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.405] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.405] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.405] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.405] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.406] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.406] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.406] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.406] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.406] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.406] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.407] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.409] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.409] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.409] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.409] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.409] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.409] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.410] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.410] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.410] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.410] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.411] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.412] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.412] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.412] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.412] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.412] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.413] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.413] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.413] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.413] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.413] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.413] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.413] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.414] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.414] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.414] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.414] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.414] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.414] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.415] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.415] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.415] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.415] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.415] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.415] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.416] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.416] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.416] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.416] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.416] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.416] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.417] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.417] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.417] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.417] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.417] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.418] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.419] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.419] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.419] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.419] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.419] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.420] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.420] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.420] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.420] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.420] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.421] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.421] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.421] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.421] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.421] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.422] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.422] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.422] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.425] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.425] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.426] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.426] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.426] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.426] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.428] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.428] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.429] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.430] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.431] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.431] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.431] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.432] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.432] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.432] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.433] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.433] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.436] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.436] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.436] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.437] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.437] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.437] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.438] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.438] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.438] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.439] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.439] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.439] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.439] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.440] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.440] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.441] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.441] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.441] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.441] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.442] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.442] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.442] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.443] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.443] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.443] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.444] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.444] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.444] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.445] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.445] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.446] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.446] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.446] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.446] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.447] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.447] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.447] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.447] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.448] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.448] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.448] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.449] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.449] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.449] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.450] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.450] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.451] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.452] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.452] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.452] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.452] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.452] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.453] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.453] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.453] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.454] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.455] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.455] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.455] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.455] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.456] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.456] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.459] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.459] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.459] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.459] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.459] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.459] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.460] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.460] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.460] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.460] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.460] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.461] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.461] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.461] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.461] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.461] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.461] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.462] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.462] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.462] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.462] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.462] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.463] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.463] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.463] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.463] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.463] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.463] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.464] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.464] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.481] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.481] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.481] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.481] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.481] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.482] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.482] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.482] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.482] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.482] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.482] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.483] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.483] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.483] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.483] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.483] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.483] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.483] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.484] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.484] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.484] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.484] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.484] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.484] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.485] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.485] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.485] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.487] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.487] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.487] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.487] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.488] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.488] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.488] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.488] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.488] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.488] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.489] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.489] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.489] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.489] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.489] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.489] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.490] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.490] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.490] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.490] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.490] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.490] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.491] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.491] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.491] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.491] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.491] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.491] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.491] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.492] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.492] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.492] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.492] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.492] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.492] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.493] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.493] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.493] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.493] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.493] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.493] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.494] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.494] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.494] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.494] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.494] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.494] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.495] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.495] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.495] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.495] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.495] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.495] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.496] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.496] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.496] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.496] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.497] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.497] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.497] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.497] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.497] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.497] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.498] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.498] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.498] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.498] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.499] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.499] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.499] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.499] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.499] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.499] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.500] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.500] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.500] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.500] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.500] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.501] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.501] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.501] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.502] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.502] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.502] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.502] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.502] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.502] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.503] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.503] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.503] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.503] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.503] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.503] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.504] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.504] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.504] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.504] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.504] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.504] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.505] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.505] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.506] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.506] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.506] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.506] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.506] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.506] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.507] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.507] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.507] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.507] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.507] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.507] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.508] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.508] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.508] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.508] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.508] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.508] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.509] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.509] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.509] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.509] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.509] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.510] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.510] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.510] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.510] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.517] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.517] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.517] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.518] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.518] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.518] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.518] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.518] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.518] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.518] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.519] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.519] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.519] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.519] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.519] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.519] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.520] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.520] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.520] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.520] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.520] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.520] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.520] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.521] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.521] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.521] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.521] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.521] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.521] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.522] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.522] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.522] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.522] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.522] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.522] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.522] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.523] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.523] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.523] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.523] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.523] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.523] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.524] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.524] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.524] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.524] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.524] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.524] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.525] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.525] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.525] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.525] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.525] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.525] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.525] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.526] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.526] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.526] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.526] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.526] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.526] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.527] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.527] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.527] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.529] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.529] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.530] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.530] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.531] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.531] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.531] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.531] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.531] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.531] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.532] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.532] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.532] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.532] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.532] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.532] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.533] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.533] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.533] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.533] ReadFile (in: hFile=0x200, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.533] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0259.653] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB00007.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb00007.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB00007.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb00007.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0259.654] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB00007.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb00007.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0259.654] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB00007.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb00007.log"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2c9633f1, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="EDB00007.log", cAlternateFileName="")) returned 0x55e610 [0259.654] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2c9633f1, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="EDB00007.log", cAlternateFileName="")) returned 0 [0259.654] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0259.654] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB00007.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb00007.log")) returned 1 [0259.663] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDB00007.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edb00007.log")) returned 0xffffffff [0259.663] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ab0ffe, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40ab0ffe, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40ab0ffe, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="EDBres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0259.664] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0259.664] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.665] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0259.665] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0259.665] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0259.665] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0259.665] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edbtmp.log")) returned 0x20 [0259.665] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edbtmp.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0259.666] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0260.438] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edbtmp.log"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.440] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.440] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edbtmp.log"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a8cb5a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xbe85c798, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="EDBtmp.log", cAlternateFileName="")) returned 0x55e710 [0260.440] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a8cb5a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xbe85c798, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="EDBtmp.log", cAlternateFileName="")) returned 0 [0260.440] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0260.442] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edbtmp.log")) returned 1 [0260.454] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\edbtmp.log")) returned 0xffffffff [0260.454] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b6fbaa, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40b6fbaa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x10d71c2f, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xf0000, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="vedatamodel.edb", cAlternateFileName="VEDATA~1.EDB")) returned 1 [0260.542] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.542] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.554] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.555] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0260.555] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\services\\search_{0633ee93-d776-472f-a0ff-e1416b8b2e3a}.ico")) returned 0x2020 [0260.555] VirtualAlloc (lpAddress=0x227c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x227c000 [0260.556] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\services\\search_{0633ee93-d776-472f-a0ff-e1416b8b2e3a}.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0260.556] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\services\\search_{0633ee93-d776-472f-a0ff-e1416b8b2e3a}.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0260.566] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\services\\search_{0633ee93-d776-472f-a0ff-e1416b8b2e3a}.ico"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\services\\search_{0633ee93-d776-472f-a0ff-e1416b8b2e3a}.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.567] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\services\\search_{0633ee93-d776-472f-a0ff-e1416b8b2e3a}.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x2020 [0260.567] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\services\\search_{0633ee93-d776-472f-a0ff-e1416b8b2e3a}.ico"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x780ef009, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x780ef009, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x78a520fa, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico", cAlternateFileName="SEARCH~1.ICO")) returned 0x55e750 [0260.567] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x780ef009, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x780ef009, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x78a520fa, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x1f00001f, dwReserved1=0x1f, cFileName="search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico", cAlternateFileName="SEARCH~1.ICO")) returned 0 [0260.567] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0260.567] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\services\\search_{0633ee93-d776-472f-a0ff-e1416b8b2e3a}.ico")) returned 1 [0260.568] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\services\\search_{0633ee93-d776-472f-a0ff-e1416b8b2e3a}.ico")) returned 0xffffffff [0260.568] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x780ef009, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x780ef009, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x78a520fa, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x620030, dwReserved1=0x1d00160b, cFileName="search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico", cAlternateFileName="SEARCH~1.ICO")) returned 0 [0260.568] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0260.569] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77bddea1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x780ef009, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x780ef009, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x46343746, dwReserved1=0x42423037, cFileName="Services", cAlternateFileName="")) returned 0 [0260.569] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0260.569] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77bddea1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77bddea1, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77bddea1, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c656461, dwReserved1=0x1d00160b, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0260.569] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0260.569] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName="Sun", cAlternateFileName="")) returned 1 [0260.569] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c656473, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0260.569] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c656473, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.569] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c656473, dwReserved1=0x1d00160b, cFileName="Java", cAlternateFileName="")) returned 1 [0260.569] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3336307b, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0260.570] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3336307b, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.570] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3336307b, dwReserved1=0x1d00160b, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0260.570] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0260.570] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.570] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="cache", cAlternateFileName="")) returned 1 [0260.570] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0260.570] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.570] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.0", cAlternateFileName="")) returned 1 [0260.571] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0260.576] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.622] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="0", cAlternateFileName="")) returned 1 [0260.622] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\0\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\0\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0260.623] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.623] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.623] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0260.623] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="1", cAlternateFileName="")) returned 1 [0260.623] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\1\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\1\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0260.623] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.623] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.623] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0260.623] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="10", cAlternateFileName="")) returned 1 [0260.623] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\10\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\10\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0260.624] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.624] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.624] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0260.624] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="11", cAlternateFileName="")) returned 1 [0260.624] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\11\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\11\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0260.624] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.624] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.624] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0260.624] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="12", cAlternateFileName="")) returned 1 [0260.624] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\12\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\12\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0260.625] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.625] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.625] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0260.626] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="13", cAlternateFileName="")) returned 1 [0260.626] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\13\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\13\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0260.626] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.626] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.626] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0260.626] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="14", cAlternateFileName="")) returned 1 [0260.626] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\14\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\14\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0260.626] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.626] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.626] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.627] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="15", cAlternateFileName="")) returned 1 [0260.627] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\15\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\15\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0260.627] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.627] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.627] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0260.627] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="16", cAlternateFileName="")) returned 1 [0260.627] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\16\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\16\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0260.627] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.628] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.628] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0260.628] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="17", cAlternateFileName="")) returned 1 [0260.628] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\17\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\17\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0260.628] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.629] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.629] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0260.629] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="18", cAlternateFileName="")) returned 1 [0260.629] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\18\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\18\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0260.629] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.629] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.629] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0260.629] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="19", cAlternateFileName="")) returned 1 [0260.629] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\19\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\19\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0260.630] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.630] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.630] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0260.630] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="2", cAlternateFileName="")) returned 1 [0260.630] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\2\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\2\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0260.630] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.630] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.630] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.630] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="20", cAlternateFileName="")) returned 1 [0260.630] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\20\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\20\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e850 [0260.631] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.631] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.631] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0260.631] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="21", cAlternateFileName="")) returned 1 [0260.631] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\21\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\21\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0260.631] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.631] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.631] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0260.631] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="22", cAlternateFileName="")) returned 1 [0260.631] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\22\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\22\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e850 [0260.632] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.632] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.632] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0260.632] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="23", cAlternateFileName="")) returned 1 [0260.632] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\23\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\23\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0260.632] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.632] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.632] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0260.632] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="24", cAlternateFileName="")) returned 1 [0260.632] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\24\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\24\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0260.633] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.633] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.633] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0260.633] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="25", cAlternateFileName="")) returned 1 [0260.633] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\25\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\25\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0260.633] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.633] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.633] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0260.633] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="26", cAlternateFileName="")) returned 1 [0260.633] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\26\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\26\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0260.634] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.634] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.634] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.634] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="27", cAlternateFileName="")) returned 1 [0260.634] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\27\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\27\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0260.634] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.634] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.634] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0260.634] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="28", cAlternateFileName="")) returned 1 [0260.634] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\28\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\28\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0260.635] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.635] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.635] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0260.635] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="29", cAlternateFileName="")) returned 1 [0260.635] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\29\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\29\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0260.635] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.635] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.635] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0260.635] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="3", cAlternateFileName="")) returned 1 [0260.635] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\3\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\3\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0260.636] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.636] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.636] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0260.636] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="30", cAlternateFileName="")) returned 1 [0260.636] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\30\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\30\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0260.636] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.636] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.636] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0260.637] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="31", cAlternateFileName="")) returned 1 [0260.637] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\31\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\31\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0260.637] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.637] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.637] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0260.637] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="32", cAlternateFileName="")) returned 1 [0260.637] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\32\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\32\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0260.637] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.637] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.637] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0260.638] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="33", cAlternateFileName="")) returned 1 [0260.638] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\33\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\33\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0260.638] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.638] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.638] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0260.638] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="34", cAlternateFileName="")) returned 1 [0260.638] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\34\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\34\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0260.638] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.638] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.639] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0260.639] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="35", cAlternateFileName="")) returned 1 [0260.639] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\35\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\35\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0260.639] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.639] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.639] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0260.639] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="36", cAlternateFileName="")) returned 1 [0260.639] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\36\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\36\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0260.639] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.639] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.640] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0260.640] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="37", cAlternateFileName="")) returned 1 [0260.640] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\37\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\37\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e850 [0260.640] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.640] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.640] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0260.640] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="38", cAlternateFileName="")) returned 1 [0260.640] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\38\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\38\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0260.640] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.641] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.641] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0260.641] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="39", cAlternateFileName="")) returned 1 [0260.641] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\39\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\39\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0260.641] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.641] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.641] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0260.641] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="4", cAlternateFileName="")) returned 1 [0260.641] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\4\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\4\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0260.642] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.642] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.642] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0260.642] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="40", cAlternateFileName="")) returned 1 [0260.642] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\40\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\40\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0260.643] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.643] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.643] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0260.643] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="41", cAlternateFileName="")) returned 1 [0260.643] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\41\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\41\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0260.643] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.643] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.643] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0260.644] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="42", cAlternateFileName="")) returned 1 [0260.644] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\42\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\42\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0260.644] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.644] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.644] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0260.644] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="43", cAlternateFileName="")) returned 1 [0260.644] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\43\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\43\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0260.645] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.645] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.645] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0260.645] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="44", cAlternateFileName="")) returned 1 [0260.645] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\44\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\44\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0260.646] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.646] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.646] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0260.646] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="45", cAlternateFileName="")) returned 1 [0260.646] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\45\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\45\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0260.646] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.646] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.646] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.646] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="46", cAlternateFileName="")) returned 1 [0260.647] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\46\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\46\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0260.647] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.647] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.647] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0260.647] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="47", cAlternateFileName="")) returned 1 [0260.647] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\47\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\47\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0260.647] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.647] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.647] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0260.648] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="48", cAlternateFileName="")) returned 1 [0260.648] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\48\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\48\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0260.648] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.648] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.648] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0260.648] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="49", cAlternateFileName="")) returned 1 [0260.648] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\49\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\49\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0260.648] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.648] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.648] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0260.649] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="5", cAlternateFileName="")) returned 1 [0260.649] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\5\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\5\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0260.649] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.649] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.649] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0260.649] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="50", cAlternateFileName="")) returned 1 [0260.649] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\50\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\50\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0260.649] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.649] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.649] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0260.650] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="51", cAlternateFileName="")) returned 1 [0260.650] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\51\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\51\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0260.650] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.650] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.650] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0260.650] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="52", cAlternateFileName="")) returned 1 [0260.650] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\52\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\52\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0260.650] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.650] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.650] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0260.651] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="53", cAlternateFileName="")) returned 1 [0260.651] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\53\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\53\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0260.651] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.651] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.651] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0260.661] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="54", cAlternateFileName="")) returned 1 [0260.661] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\54\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\54\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0260.662] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.662] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.662] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.662] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="55", cAlternateFileName="")) returned 1 [0260.662] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\55\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\55\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0260.662] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.662] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.662] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0260.662] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="56", cAlternateFileName="")) returned 1 [0260.662] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\56\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\56\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0260.663] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.663] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.663] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0260.663] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="57", cAlternateFileName="")) returned 1 [0260.663] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\57\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\57\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0260.663] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.663] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.663] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0260.663] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="58", cAlternateFileName="")) returned 1 [0260.663] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\58\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\58\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0260.664] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.664] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.664] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0260.664] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="59", cAlternateFileName="")) returned 1 [0260.664] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\59\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\59\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0260.664] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.664] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.664] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0260.664] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="6", cAlternateFileName="")) returned 1 [0260.664] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\6\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\6\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0260.665] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.665] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.665] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0260.665] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="60", cAlternateFileName="")) returned 1 [0260.665] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\60\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\60\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0260.665] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.665] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.665] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.665] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="61", cAlternateFileName="")) returned 1 [0260.665] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\61\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\61\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0260.666] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.666] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.666] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0260.666] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="62", cAlternateFileName="")) returned 1 [0260.666] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\62\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\62\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0260.666] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.666] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.666] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0260.666] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="63", cAlternateFileName="")) returned 1 [0260.666] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\63\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\63\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0260.667] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.667] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.667] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0260.667] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="7", cAlternateFileName="")) returned 1 [0260.667] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\7\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\7\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0260.667] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.667] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.667] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.667] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="8", cAlternateFileName="")) returned 1 [0260.667] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\8\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\8\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0260.668] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.668] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.668] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0260.668] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="9", cAlternateFileName="")) returned 1 [0260.668] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\9\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\9\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0260.668] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.668] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.668] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0260.668] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="host", cAlternateFileName="")) returned 1 [0260.668] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\host\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\host\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0260.669] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.669] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.669] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0260.669] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="muffin", cAlternateFileName="")) returned 1 [0260.669] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\muffin\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\muffin\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0260.669] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.669] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.669] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0260.669] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="muffin", cAlternateFileName="")) returned 0 [0260.669] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0260.669] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6.0", cAlternateFileName="")) returned 0 [0260.670] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0260.670] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb03c911e, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb03c911e, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb2529fc2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0260.671] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.671] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.672] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.672] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0260.672] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\-QEWNDo.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\-qewndo.rtf")) returned 0x20 [0260.672] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\-QEWNDo.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\-qewndo.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0260.673] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\-QEWNDo.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\-qewndo.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0260.684] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\-QEWNDo.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\-qewndo.rtf"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\-QEWNDo.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\-qewndo.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.685] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\-QEWNDo.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\-qewndo.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.685] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\-QEWNDo.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\-qewndo.rtf"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b9f770, ftCreationTime.dwHighDateTime=0x1d8b1a7, ftLastAccessTime.dwLowDateTime=0x56d222e0, ftLastAccessTime.dwHighDateTime=0x1d8bb66, ftLastWriteTime.dwLowDateTime=0x56d222e0, ftLastWriteTime.dwHighDateTime=0x1d8bb66, nFileSizeHigh=0x0, nFileSizeLow=0x17765, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="-QEWNDo.rtf", cAlternateFileName="")) returned 0x55e510 [0260.685] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b9f770, ftCreationTime.dwHighDateTime=0x1d8b1a7, ftLastAccessTime.dwLowDateTime=0x56d222e0, ftLastAccessTime.dwHighDateTime=0x1d8bb66, ftLastWriteTime.dwLowDateTime=0x56d222e0, ftLastWriteTime.dwHighDateTime=0x1d8bb66, nFileSizeHigh=0x0, nFileSizeLow=0x17765, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="-QEWNDo.rtf", cAlternateFileName="")) returned 0 [0260.685] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.685] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\-QEWNDo.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\-qewndo.rtf")) returned 1 [0260.689] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\-QEWNDo.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\-qewndo.rtf")) returned 0xffffffff [0260.689] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce0cd1b0, ftCreationTime.dwHighDateTime=0x1d8b17b, ftLastAccessTime.dwLowDateTime=0x543d2ef0, ftLastAccessTime.dwHighDateTime=0x1d8b349, ftLastWriteTime.dwLowDateTime=0x543d2ef0, ftLastWriteTime.dwHighDateTime=0x1d8b349, nFileSizeHigh=0x0, nFileSizeLow=0xf53b, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="0pokX_RRd5vnIveq__.wav", cAlternateFileName="0POKX_~1.WAV")) returned 1 [0260.691] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.691] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.691] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.691] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0260.692] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\0w7D3bPlKq.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\0w7d3bplkq.avi")) returned 0x20 [0260.692] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\0w7D3bPlKq.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\0w7d3bplkq.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0260.692] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\0w7D3bPlKq.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\0w7d3bplkq.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0260.695] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\0w7D3bPlKq.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\0w7d3bplkq.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\0w7D3bPlKq.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\0w7d3bplkq.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.696] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\0w7D3bPlKq.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\0w7d3bplkq.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.696] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\0w7D3bPlKq.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\0w7d3bplkq.avi"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710898b0, ftCreationTime.dwHighDateTime=0x1d8be8b, ftLastAccessTime.dwLowDateTime=0x780474a0, ftLastAccessTime.dwHighDateTime=0x1d8c0d3, ftLastWriteTime.dwLowDateTime=0x780474a0, ftLastWriteTime.dwHighDateTime=0x1d8c0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1590, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="0w7D3bPlKq.avi", cAlternateFileName="0W7D3B~1.AVI")) returned 0x55e8d0 [0260.696] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710898b0, ftCreationTime.dwHighDateTime=0x1d8be8b, ftLastAccessTime.dwLowDateTime=0x780474a0, ftLastAccessTime.dwHighDateTime=0x1d8c0d3, ftLastWriteTime.dwLowDateTime=0x780474a0, ftLastWriteTime.dwHighDateTime=0x1d8c0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1590, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="0w7D3bPlKq.avi", cAlternateFileName="0W7D3B~1.AVI")) returned 0 [0260.696] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0260.696] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\0w7D3bPlKq.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\0w7d3bplkq.avi")) returned 1 [0260.698] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\0w7D3bPlKq.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\0w7d3bplkq.avi")) returned 0xffffffff [0260.698] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c9ec80, ftCreationTime.dwHighDateTime=0x1d8bc9d, ftLastAccessTime.dwLowDateTime=0xdbb27bf0, ftLastAccessTime.dwHighDateTime=0x1d8bcf0, ftLastWriteTime.dwLowDateTime=0xdbb27bf0, ftLastWriteTime.dwHighDateTime=0x1d8bcf0, nFileSizeHigh=0x0, nFileSizeLow=0x16f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Fgp9mw-J_mcf.m4a", cAlternateFileName="2FGP9M~1.M4A")) returned 1 [0260.700] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.700] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.701] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0260.701] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AAlqxA.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\aalqxa.mkv")) returned 0x20 [0260.701] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AAlqxA.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\aalqxa.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0260.702] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AAlqxA.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\aalqxa.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0260.705] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AAlqxA.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\aalqxa.mkv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AAlqxA.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\aalqxa.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.705] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AAlqxA.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\aalqxa.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.706] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AAlqxA.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\aalqxa.mkv"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd5a7fd0, ftCreationTime.dwHighDateTime=0x1d8b5e8, ftLastAccessTime.dwLowDateTime=0x471c3990, ftLastAccessTime.dwHighDateTime=0x1d8b831, ftLastWriteTime.dwLowDateTime=0x471c3990, ftLastWriteTime.dwHighDateTime=0x1d8b831, nFileSizeHigh=0x0, nFileSizeLow=0x2a4f, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="AAlqxA.mkv", cAlternateFileName="")) returned 0x55e5d0 [0260.706] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd5a7fd0, ftCreationTime.dwHighDateTime=0x1d8b5e8, ftLastAccessTime.dwLowDateTime=0x471c3990, ftLastAccessTime.dwHighDateTime=0x1d8b831, ftLastWriteTime.dwLowDateTime=0x471c3990, ftLastWriteTime.dwHighDateTime=0x1d8b831, nFileSizeHigh=0x0, nFileSizeLow=0x2a4f, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="AAlqxA.mkv", cAlternateFileName="")) returned 0 [0260.706] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0260.706] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AAlqxA.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\aalqxa.mkv")) returned 1 [0260.708] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AAlqxA.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\aalqxa.mkv")) returned 0xffffffff [0260.708] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Adobe", cAlternateFileName="")) returned 1 [0260.708] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\adobe\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0260.708] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0260.708] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0260.708] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\adobe\\flash player\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5ec7bd28, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0260.708] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5ec7bd28, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.708] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5ec7bd28, dwReserved1=0x1d00160b, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 1 [0260.708] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\adobe\\flash player\\nativecache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0260.709] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.709] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0260.709] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0260.709] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5ec7bd28, dwReserved1=0x1d00160b, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 0 [0260.709] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0260.709] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0 [0260.709] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0260.709] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f46a90, ftCreationTime.dwHighDateTime=0x1d8bf32, ftLastAccessTime.dwLowDateTime=0xce03d880, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0xce03d880, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0xf699, dwReserved0=0x6579616c, dwReserved1=0x2000072, cFileName="AV_xxjsK txE9KQ.gif", cAlternateFileName="AV_XXJ~1.GIF")) returned 1 [0260.710] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.710] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.710] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.710] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.710] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.710] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0260.710] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AV_xxjsK txE9KQ.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\av_xxjsk txe9kq.gif")) returned 0x20 [0260.710] VirtualAlloc (lpAddress=0x2280000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2280000 [0260.711] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AV_xxjsK txE9KQ.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\av_xxjsk txe9kq.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0260.711] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AV_xxjsK txE9KQ.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\av_xxjsk txe9kq.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0260.718] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AV_xxjsK txE9KQ.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\av_xxjsk txe9kq.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AV_xxjsK txE9KQ.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\av_xxjsk txe9kq.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.719] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AV_xxjsK txE9KQ.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\av_xxjsk txe9kq.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.719] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AV_xxjsK txE9KQ.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\av_xxjsk txe9kq.gif"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f46a90, ftCreationTime.dwHighDateTime=0x1d8bf32, ftLastAccessTime.dwLowDateTime=0xce03d880, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0xce03d880, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0xf699, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="AV_xxjsK txE9KQ.gif", cAlternateFileName="AV_XXJ~1.GIF")) returned 0x55e510 [0260.719] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8f46a90, ftCreationTime.dwHighDateTime=0x1d8bf32, ftLastAccessTime.dwLowDateTime=0xce03d880, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0xce03d880, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0xf699, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="AV_xxjsK txE9KQ.gif", cAlternateFileName="AV_XXJ~1.GIF")) returned 0 [0260.719] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.719] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AV_xxjsK txE9KQ.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\av_xxjsk txe9kq.gif")) returned 1 [0260.722] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\AV_xxjsK txE9KQ.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\av_xxjsk txe9kq.gif")) returned 0xffffffff [0260.722] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56714f00, ftCreationTime.dwHighDateTime=0x1d8b0c2, ftLastAccessTime.dwLowDateTime=0x39af4540, ftLastAccessTime.dwHighDateTime=0x1d8b390, ftLastWriteTime.dwLowDateTime=0x39af4540, ftLastWriteTime.dwHighDateTime=0x1d8b390, nFileSizeHigh=0x0, nFileSizeLow=0xd9c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BEL0Hf.ods", cAlternateFileName="")) returned 1 [0260.723] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.723] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.724] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.724] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0260.724] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\C lTvIFLCLEIOs.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\c ltviflcleios.gif")) returned 0x20 [0260.724] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\C lTvIFLCLEIOs.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\c ltviflcleios.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0260.725] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\C lTvIFLCLEIOs.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\c ltviflcleios.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0260.733] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\C lTvIFLCLEIOs.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\c ltviflcleios.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\C lTvIFLCLEIOs.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\c ltviflcleios.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.733] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\C lTvIFLCLEIOs.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\c ltviflcleios.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.733] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\C lTvIFLCLEIOs.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\c ltviflcleios.gif"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd71630, ftCreationTime.dwHighDateTime=0x1d8b8ba, ftLastAccessTime.dwLowDateTime=0x6cbfaf90, ftLastAccessTime.dwHighDateTime=0x1d8c0a8, ftLastWriteTime.dwLowDateTime=0x6cbfaf90, ftLastWriteTime.dwHighDateTime=0x1d8c0a8, nFileSizeHigh=0x0, nFileSizeLow=0x18657, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="C lTvIFLCLEIOs.gif", cAlternateFileName="CLTVIF~1.GIF")) returned 0x55e5d0 [0260.734] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcd71630, ftCreationTime.dwHighDateTime=0x1d8b8ba, ftLastAccessTime.dwLowDateTime=0x6cbfaf90, ftLastAccessTime.dwHighDateTime=0x1d8c0a8, ftLastWriteTime.dwLowDateTime=0x6cbfaf90, ftLastWriteTime.dwHighDateTime=0x1d8c0a8, nFileSizeHigh=0x0, nFileSizeLow=0x18657, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="C lTvIFLCLEIOs.gif", cAlternateFileName="CLTVIF~1.GIF")) returned 0 [0260.734] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0260.734] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\C lTvIFLCLEIOs.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\c ltviflcleios.gif")) returned 1 [0260.737] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\C lTvIFLCLEIOs.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\c ltviflcleios.gif")) returned 0xffffffff [0260.739] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa10409e0, ftCreationTime.dwHighDateTime=0x1d8b923, ftLastAccessTime.dwLowDateTime=0x543e8db0, ftLastAccessTime.dwHighDateTime=0x1d8bacc, ftLastWriteTime.dwLowDateTime=0x543e8db0, ftLastWriteTime.dwHighDateTime=0x1d8bacc, nFileSizeHigh=0x0, nFileSizeLow=0x27dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Daw XG.csv", cAlternateFileName="DAWXG~1.CSV")) returned 1 [0260.739] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.739] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.740] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.740] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0260.740] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Daw XG.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\daw xg.csv")) returned 0x20 [0260.740] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Daw XG.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\daw xg.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0260.741] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Daw XG.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\daw xg.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0260.741] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.743] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.744] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.744] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.745] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x7dc, lpOverlapped=0x0) returned 1 [0260.745] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x7dc, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x7dc, lpOverlapped=0x0) returned 1 [0260.745] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0260.745] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0260.745] CloseHandle (hObject=0x218) returned 1 [0260.745] CloseHandle (hObject=0x1e0) returned 1 [0260.745] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Daw XG.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\daw xg.csv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Daw XG.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\daw xg.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.746] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Daw XG.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\daw xg.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.746] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Daw XG.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\daw xg.csv"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa10409e0, ftCreationTime.dwHighDateTime=0x1d8b923, ftLastAccessTime.dwLowDateTime=0x543e8db0, ftLastAccessTime.dwHighDateTime=0x1d8bacc, ftLastWriteTime.dwLowDateTime=0x543e8db0, ftLastWriteTime.dwHighDateTime=0x1d8bacc, nFileSizeHigh=0x0, nFileSizeLow=0x27dc, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="Daw XG.csv", cAlternateFileName="DAWXG~1.CSV")) returned 0x55e290 [0260.746] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa10409e0, ftCreationTime.dwHighDateTime=0x1d8b923, ftLastAccessTime.dwLowDateTime=0x543e8db0, ftLastAccessTime.dwHighDateTime=0x1d8bacc, ftLastWriteTime.dwLowDateTime=0x543e8db0, ftLastWriteTime.dwHighDateTime=0x1d8bacc, nFileSizeHigh=0x0, nFileSizeLow=0x27dc, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="Daw XG.csv", cAlternateFileName="DAWXG~1.CSV")) returned 0 [0260.746] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0260.746] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Daw XG.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\daw xg.csv")) returned 1 [0260.750] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Daw XG.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\daw xg.csv")) returned 0xffffffff [0260.750] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x420d7e40, ftCreationTime.dwHighDateTime=0x1d8bfc6, ftLastAccessTime.dwLowDateTime=0xc43a3ff0, ftLastAccessTime.dwHighDateTime=0x1d8c117, ftLastWriteTime.dwLowDateTime=0xc43a3ff0, ftLastWriteTime.dwHighDateTime=0x1d8c117, nFileSizeHigh=0x0, nFileSizeLow=0x17e81, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="dTBWs5OPc_Ez8klubHY.ots", cAlternateFileName="DTBWS5~1.OTS")) returned 1 [0260.751] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2b13220, ftCreationTime.dwHighDateTime=0x1d8b7a5, ftLastAccessTime.dwLowDateTime=0xfb3a3d20, ftLastAccessTime.dwHighDateTime=0x1d8ba69, ftLastWriteTime.dwLowDateTime=0xfb3a3d20, ftLastWriteTime.dwHighDateTime=0x1d8ba69, nFileSizeHigh=0x0, nFileSizeLow=0x2a07, dwReserved0=0x6b0038, dwReserved1=0x75006c, cFileName="fTLHb2oaa.odp", cAlternateFileName="FTLHB2~1.ODP")) returned 1 [0260.752] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99bd9150, ftCreationTime.dwHighDateTime=0x1d8bee7, ftLastAccessTime.dwLowDateTime=0xac6fc360, ftLastAccessTime.dwHighDateTime=0x1d8beea, ftLastWriteTime.dwLowDateTime=0xac6fc360, ftLastWriteTime.dwHighDateTime=0x1d8beea, nFileSizeHigh=0x0, nFileSizeLow=0x14505, dwReserved0=0x70, dwReserved1=0x75006c, cFileName="Hz4-vvREQQByoxF7.mp4", cAlternateFileName="HZ4-VV~1.MP4")) returned 1 [0260.752] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953beae0, ftCreationTime.dwHighDateTime=0x1d8b551, ftLastAccessTime.dwLowDateTime=0x3de9b8a0, ftLastAccessTime.dwHighDateTime=0x1d8bd6a, ftLastWriteTime.dwLowDateTime=0x3de9b8a0, ftLastWriteTime.dwHighDateTime=0x1d8bd6a, nFileSizeHigh=0x0, nFileSizeLow=0x183c1, dwReserved0=0x78006f, dwReserved1=0x370066, cFileName="IEEEJcQHB4cvJ_cdO_.flv", cAlternateFileName="IEEEJC~1.FLV")) returned 1 [0260.753] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.753] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.753] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.753] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0260.753] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\IEEEJcQHB4cvJ_cdO_.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\ieeejcqhb4cvj_cdo_.flv")) returned 0x20 [0260.754] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\IEEEJcQHB4cvJ_cdO_.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\ieeejcqhb4cvj_cdo_.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0260.754] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\IEEEJcQHB4cvJ_cdO_.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\ieeejcqhb4cvj_cdo_.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0260.755] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.756] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.757] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.757] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.758] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.758] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.758] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.758] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.758] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.759] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.759] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.759] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.759] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.759] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.760] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.760] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.760] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.760] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.760] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.761] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.761] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.761] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.761] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.762] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.762] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.762] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.762] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.763] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.763] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.763] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.764] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.764] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.764] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.764] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.765] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.765] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.765] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.765] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.765] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.766] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.766] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.767] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.767] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.767] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.767] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.767] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.768] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.768] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.768] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x3c1, lpOverlapped=0x0) returned 1 [0260.768] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x3c1, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x3c1, lpOverlapped=0x0) returned 1 [0260.768] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0260.769] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0260.773] CloseHandle (hObject=0x1e0) returned 1 [0260.774] CloseHandle (hObject=0x218) returned 1 [0260.774] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\IEEEJcQHB4cvJ_cdO_.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\ieeejcqhb4cvj_cdo_.flv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\IEEEJcQHB4cvJ_cdO_.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\ieeejcqhb4cvj_cdo_.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.775] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\IEEEJcQHB4cvJ_cdO_.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\ieeejcqhb4cvj_cdo_.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.775] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\IEEEJcQHB4cvJ_cdO_.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\ieeejcqhb4cvj_cdo_.flv"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953beae0, ftCreationTime.dwHighDateTime=0x1d8b551, ftLastAccessTime.dwLowDateTime=0x3de9b8a0, ftLastAccessTime.dwHighDateTime=0x1d8bd6a, ftLastWriteTime.dwLowDateTime=0x3de9b8a0, ftLastWriteTime.dwHighDateTime=0x1d8bd6a, nFileSizeHigh=0x0, nFileSizeLow=0x183c1, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="IEEEJcQHB4cvJ_cdO_.flv", cAlternateFileName="IEEEJC~1.FLV")) returned 0x55e790 [0260.775] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953beae0, ftCreationTime.dwHighDateTime=0x1d8b551, ftLastAccessTime.dwLowDateTime=0x3de9b8a0, ftLastAccessTime.dwHighDateTime=0x1d8bd6a, ftLastWriteTime.dwLowDateTime=0x3de9b8a0, ftLastWriteTime.dwHighDateTime=0x1d8bd6a, nFileSizeHigh=0x0, nFileSizeLow=0x183c1, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="IEEEJcQHB4cvJ_cdO_.flv", cAlternateFileName="IEEEJC~1.FLV")) returned 0 [0260.775] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0260.775] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\IEEEJcQHB4cvJ_cdO_.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\ieeejcqhb4cvj_cdo_.flv")) returned 1 [0260.779] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\IEEEJcQHB4cvJ_cdO_.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\ieeejcqhb4cvj_cdo_.flv")) returned 0xffffffff [0260.779] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5516f290, ftCreationTime.dwHighDateTime=0x1d8b298, ftLastAccessTime.dwLowDateTime=0xe7e2fc0, ftLastAccessTime.dwHighDateTime=0x1d8c07f, ftLastWriteTime.dwLowDateTime=0xe7e2fc0, ftLastWriteTime.dwHighDateTime=0x1d8c07f, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="kfd4AT641M9lZzo.gif", cAlternateFileName="KFD4AT~1.GIF")) returned 1 [0260.780] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.780] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.780] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.780] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0260.780] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kfd4AT641M9lZzo.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kfd4at641m9lzzo.gif")) returned 0x20 [0260.780] VirtualAlloc (lpAddress=0x2284000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2284000 [0260.781] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kfd4AT641M9lZzo.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kfd4at641m9lzzo.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0260.781] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kfd4AT641M9lZzo.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kfd4at641m9lzzo.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0260.782] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.783] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.785] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.785] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.786] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.786] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.786] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.786] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.787] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.787] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.787] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.787] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.788] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.788] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.788] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.788] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.789] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.789] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.789] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.789] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.789] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.790] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.790] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.790] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.790] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.791] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.791] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.791] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.792] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.792] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.792] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.792] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.793] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xbdc, lpOverlapped=0x0) returned 1 [0260.793] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xbdc, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xbdc, lpOverlapped=0x0) returned 1 [0260.793] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0260.793] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0260.793] CloseHandle (hObject=0x218) returned 1 [0260.793] CloseHandle (hObject=0x1e0) returned 1 [0260.793] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kfd4AT641M9lZzo.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kfd4at641m9lzzo.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kfd4AT641M9lZzo.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kfd4at641m9lzzo.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.794] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kfd4AT641M9lZzo.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kfd4at641m9lzzo.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.794] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kfd4AT641M9lZzo.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kfd4at641m9lzzo.gif"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5516f290, ftCreationTime.dwHighDateTime=0x1d8b298, ftLastAccessTime.dwLowDateTime=0xe7e2fc0, ftLastAccessTime.dwHighDateTime=0x1d8c07f, ftLastWriteTime.dwLowDateTime=0xe7e2fc0, ftLastWriteTime.dwHighDateTime=0x1d8c07f, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="kfd4AT641M9lZzo.gif", cAlternateFileName="KFD4AT~1.GIF")) returned 0x55e290 [0260.794] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5516f290, ftCreationTime.dwHighDateTime=0x1d8b298, ftLastAccessTime.dwLowDateTime=0xe7e2fc0, ftLastAccessTime.dwHighDateTime=0x1d8c07f, ftLastWriteTime.dwLowDateTime=0xe7e2fc0, ftLastWriteTime.dwHighDateTime=0x1d8c07f, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="kfd4AT641M9lZzo.gif", cAlternateFileName="KFD4AT~1.GIF")) returned 0 [0260.794] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0260.794] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kfd4AT641M9lZzo.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kfd4at641m9lzzo.gif")) returned 1 [0260.798] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kfd4AT641M9lZzo.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kfd4at641m9lzzo.gif")) returned 0xffffffff [0260.798] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8857fc90, ftCreationTime.dwHighDateTime=0x1d8c0de, ftLastAccessTime.dwLowDateTime=0x2d25f620, ftLastAccessTime.dwHighDateTime=0x1d8c0f6, ftLastWriteTime.dwLowDateTime=0x2d25f620, ftLastWriteTime.dwHighDateTime=0x1d8c0f6, nFileSizeHigh=0x0, nFileSizeLow=0x18b5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khe4uWhPkS4.gif", cAlternateFileName="KHE4UW~1.GIF")) returned 1 [0260.798] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.798] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.799] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.799] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0260.799] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Khe4uWhPkS4.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\khe4uwhpks4.gif")) returned 0x20 [0260.799] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Khe4uWhPkS4.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\khe4uwhpks4.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0260.806] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Khe4uWhPkS4.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\khe4uwhpks4.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0260.807] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.808] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.809] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.810] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.810] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.810] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.810] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.811] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.811] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.811] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.811] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.811] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.812] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.812] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.812] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.812] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.813] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.813] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.813] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.813] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.813] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.814] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.814] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.814] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.814] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.815] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.815] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.815] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.815] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.815] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.818] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.818] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.818] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.819] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.819] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.819] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.820] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.820] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.820] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.820] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.821] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.821] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.821] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.822] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.822] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.822] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.823] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.823] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.823] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xb5d, lpOverlapped=0x0) returned 1 [0260.823] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xb5d, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xb5d, lpOverlapped=0x0) returned 1 [0260.824] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0260.824] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0260.824] CloseHandle (hObject=0x1e0) returned 1 [0260.824] CloseHandle (hObject=0x218) returned 1 [0260.824] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Khe4uWhPkS4.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\khe4uwhpks4.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Khe4uWhPkS4.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\khe4uwhpks4.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.825] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Khe4uWhPkS4.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\khe4uwhpks4.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.825] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Khe4uWhPkS4.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\khe4uwhpks4.gif"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8857fc90, ftCreationTime.dwHighDateTime=0x1d8c0de, ftLastAccessTime.dwLowDateTime=0x2d25f620, ftLastAccessTime.dwHighDateTime=0x1d8c0f6, ftLastWriteTime.dwLowDateTime=0x2d25f620, ftLastWriteTime.dwHighDateTime=0x1d8c0f6, nFileSizeHigh=0x0, nFileSizeLow=0x18b5d, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Khe4uWhPkS4.gif", cAlternateFileName="KHE4UW~1.GIF")) returned 0x55e510 [0260.825] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8857fc90, ftCreationTime.dwHighDateTime=0x1d8c0de, ftLastAccessTime.dwLowDateTime=0x2d25f620, ftLastAccessTime.dwHighDateTime=0x1d8c0f6, ftLastWriteTime.dwLowDateTime=0x2d25f620, ftLastWriteTime.dwHighDateTime=0x1d8c0f6, nFileSizeHigh=0x0, nFileSizeLow=0x18b5d, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Khe4uWhPkS4.gif", cAlternateFileName="KHE4UW~1.GIF")) returned 0 [0260.825] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.825] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Khe4uWhPkS4.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\khe4uwhpks4.gif")) returned 1 [0260.828] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Khe4uWhPkS4.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\khe4uwhpks4.gif")) returned 0xffffffff [0260.828] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe5da310, ftCreationTime.dwHighDateTime=0x1d8b93e, ftLastAccessTime.dwLowDateTime=0x5ed3ad90, ftLastAccessTime.dwHighDateTime=0x1d8c0a4, ftLastWriteTime.dwLowDateTime=0x5ed3ad90, ftLastWriteTime.dwHighDateTime=0x1d8c0a4, nFileSizeHigh=0x0, nFileSizeLow=0x18d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="kQZZ OvT-A19.png", cAlternateFileName="KQZZOV~1.PNG")) returned 1 [0260.829] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.829] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.829] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.829] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0260.830] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kQZZ OvT-A19.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kqzz ovt-a19.png")) returned 0x20 [0260.830] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kQZZ OvT-A19.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kqzz ovt-a19.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0260.832] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kQZZ OvT-A19.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kqzz ovt-a19.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0260.832] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.833] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.835] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x8d3, lpOverlapped=0x0) returned 1 [0260.835] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x8d3, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x8d3, lpOverlapped=0x0) returned 1 [0260.835] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0260.835] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0260.835] CloseHandle (hObject=0x218) returned 1 [0260.835] CloseHandle (hObject=0x1e0) returned 1 [0260.835] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kQZZ OvT-A19.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kqzz ovt-a19.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kQZZ OvT-A19.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kqzz ovt-a19.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.836] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kQZZ OvT-A19.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kqzz ovt-a19.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.836] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kQZZ OvT-A19.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kqzz ovt-a19.png"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe5da310, ftCreationTime.dwHighDateTime=0x1d8b93e, ftLastAccessTime.dwLowDateTime=0x5ed3ad90, ftLastAccessTime.dwHighDateTime=0x1d8c0a4, ftLastWriteTime.dwLowDateTime=0x5ed3ad90, ftLastWriteTime.dwHighDateTime=0x1d8c0a4, nFileSizeHigh=0x0, nFileSizeLow=0x18d3, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="kQZZ OvT-A19.png", cAlternateFileName="KQZZOV~1.PNG")) returned 0x55e410 [0260.836] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe5da310, ftCreationTime.dwHighDateTime=0x1d8b93e, ftLastAccessTime.dwLowDateTime=0x5ed3ad90, ftLastAccessTime.dwHighDateTime=0x1d8c0a4, ftLastWriteTime.dwLowDateTime=0x5ed3ad90, ftLastWriteTime.dwHighDateTime=0x1d8c0a4, nFileSizeHigh=0x0, nFileSizeLow=0x18d3, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="kQZZ OvT-A19.png", cAlternateFileName="KQZZOV~1.PNG")) returned 0 [0260.836] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0260.836] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kQZZ OvT-A19.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kqzz ovt-a19.png")) returned 1 [0260.842] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\kQZZ OvT-A19.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\kqzz ovt-a19.png")) returned 0xffffffff [0260.842] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8524abd0, ftCreationTime.dwHighDateTime=0x1d8b7bb, ftLastAccessTime.dwLowDateTime=0x80bfc980, ftLastAccessTime.dwHighDateTime=0x1d8bc39, ftLastWriteTime.dwLowDateTime=0x80bfc980, ftLastWriteTime.dwHighDateTime=0x1d8bc39, nFileSizeHigh=0x0, nFileSizeLow=0x3ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="L_DTMq.mp4", cAlternateFileName="")) returned 1 [0260.843] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d2e940, ftCreationTime.dwHighDateTime=0x1d8b0e9, ftLastAccessTime.dwLowDateTime=0xb9c26040, ftLastAccessTime.dwHighDateTime=0x1d8be59, ftLastWriteTime.dwLowDateTime=0xb9c26040, ftLastWriteTime.dwHighDateTime=0x1d8be59, nFileSizeHigh=0x0, nFileSizeLow=0xfa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="mbzzavocx5tumDy.png", cAlternateFileName="MBZZAV~1.PNG")) returned 1 [0260.844] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.844] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.844] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.844] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0260.844] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\mbzzavocx5tumDy.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\mbzzavocx5tumdy.png")) returned 0x20 [0260.845] VirtualAlloc (lpAddress=0x2288000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2288000 [0260.845] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\mbzzavocx5tumDy.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\mbzzavocx5tumdy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0260.846] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\mbzzavocx5tumDy.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\mbzzavocx5tumdy.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0260.846] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.848] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.850] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.850] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.851] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.851] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.851] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.852] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.852] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.852] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.852] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.853] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.853] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.853] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.854] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.854] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.854] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.855] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.855] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.855] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.856] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.856] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.856] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.857] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.857] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.857] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.857] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.858] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.858] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.858] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0260.859] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xa7f, lpOverlapped=0x0) returned 1 [0260.859] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xa7f, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xa7f, lpOverlapped=0x0) returned 1 [0260.859] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0260.859] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0260.860] CloseHandle (hObject=0x1e0) returned 1 [0260.860] CloseHandle (hObject=0x218) returned 1 [0260.860] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\mbzzavocx5tumDy.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\mbzzavocx5tumdy.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\mbzzavocx5tumDy.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\mbzzavocx5tumdy.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.860] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\mbzzavocx5tumDy.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\mbzzavocx5tumdy.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.861] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\mbzzavocx5tumDy.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\mbzzavocx5tumdy.png"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d2e940, ftCreationTime.dwHighDateTime=0x1d8b0e9, ftLastAccessTime.dwLowDateTime=0xb9c26040, ftLastAccessTime.dwHighDateTime=0x1d8be59, ftLastWriteTime.dwLowDateTime=0xb9c26040, ftLastWriteTime.dwHighDateTime=0x1d8be59, nFileSizeHigh=0x0, nFileSizeLow=0xfa7f, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="mbzzavocx5tumDy.png", cAlternateFileName="MBZZAV~1.PNG")) returned 0x55e5d0 [0260.861] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d2e940, ftCreationTime.dwHighDateTime=0x1d8b0e9, ftLastAccessTime.dwLowDateTime=0xb9c26040, ftLastAccessTime.dwHighDateTime=0x1d8be59, ftLastWriteTime.dwLowDateTime=0xb9c26040, ftLastWriteTime.dwHighDateTime=0x1d8be59, nFileSizeHigh=0x0, nFileSizeLow=0xfa7f, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="mbzzavocx5tumDy.png", cAlternateFileName="MBZZAV~1.PNG")) returned 0 [0260.861] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0260.861] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\mbzzavocx5tumDy.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\mbzzavocx5tumdy.png")) returned 1 [0260.865] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\mbzzavocx5tumDy.png" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\mbzzavocx5tumdy.png")) returned 0xffffffff [0260.865] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xa92f1c4e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa92f1c4e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0260.865] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x661c6965, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0260.865] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x661c6965, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0260.865] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="AddIns", cAlternateFileName="")) returned 1 [0260.866] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\addins\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1d12d2c7, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0260.867] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1d12d2c7, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.867] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1d12d2c7, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.867] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.867] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e898ff, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e898ff, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e9aa3d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0260.867] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\bibliography\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e898ff, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e898ff, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e9aa3d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1d12d2c7, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0260.868] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e898ff, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e898ff, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e9aa3d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1d12d2c7, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.868] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e9aa3d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e9aa3d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80ed2ca5, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1d12d2c7, dwReserved1=0x1d00160b, cFileName="Style", cAlternateFileName="")) returned 1 [0260.868] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\bibliography\\style\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e9aa3d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e9aa3d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80ed2ca5, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0260.871] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e9aa3d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e9aa3d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80ed2ca5, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.871] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e9e60e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e9e60e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5a58ff51, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x51722, dwReserved0=0x0, dwReserved1=0x0, cFileName="APASixthEditionOfficeOnline.xsl", cAlternateFileName="APASIX~1.XSL")) returned 1 [0260.872] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ea6d97, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ea6d97, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5a638a82, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x48839, dwReserved0=0x6f0069, dwReserved1=0x6f006e, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0260.873] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80eabbab, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80eabbab, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5a6d16e8, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x4197e, dwReserved0=0x6f0069, dwReserved1=0x6f006e, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0260.873] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80eaf650, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80eaf650, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5a638a82, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x3e966, dwReserved0=0x6f0069, dwReserved1=0x6f006e, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0260.874] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80eb319b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80eb319b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5a638a82, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x3d639, dwReserved0=0x6f0000, dwReserved1=0x6f006e, cFileName="GostTitle.XSL", cAlternateFileName="GOSTTI~1.XSL")) returned 1 [0260.874] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80eb804f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80eb804f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5a7ecfbc, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x45882, dwReserved0=0x6c, dwReserved1=0x6f006e, cFileName="HarvardAnglia2008OfficeOnline.xsl", cAlternateFileName="HARVAR~1.XSL")) returned 1 [0260.875] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ebb9a1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ebb9a1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5afed704, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x320061, dwReserved1=0x300030, cFileName="IEEE2006OfficeOnline.xsl", cAlternateFileName="IEEE20~1.XSL")) returned 1 [0260.876] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ec07b6, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ec07b6, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5afed704, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x42132, dwReserved0=0x650063, dwReserved1=0x6e006f, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0260.877] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ec4265, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ec4265, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5afed704, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x351ea, dwReserved0=0x650063, dwReserved1=0x6e006f, cFileName="ISO690Nmerical.XSL", cAlternateFileName="ISO690~1.XSL")) returned 1 [0260.877] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ecb8b4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ecb8b4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5afed704, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x3e4f3, dwReserved0=0x6c0061, dwReserved1=0x78002e, cFileName="MLASeventhEditionOfficeOnline.xsl", cAlternateFileName="MLASEV~1.XSL")) returned 1 [0260.878] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ed06d2, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ed06d2, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5b432832, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c8, dwReserved0=0x740069, dwReserved1=0x6f0069, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0260.879] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ed2ca5, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ed2ca5, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5b500917, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x740069, dwReserved1=0x6f0069, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0260.880] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ed2ca5, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ed2ca5, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5b500917, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x740069, dwReserved1=0x6f0069, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0 [0260.880] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0260.881] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e9aa3d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e9aa3d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80ed2ca5, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1d12d2c7, dwReserved1=0x1d00160b, cFileName="Style", cAlternateFileName="")) returned 0 [0260.881] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0260.881] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0260.881] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\credentials\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53582e4e, dwReserved1=0x6974694c, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0260.881] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53582e4e, dwReserved1=0x6974694c, cFileName="..", cAlternateFileName="")) returned 1 [0260.881] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53582e4e, dwReserved1=0x6974694c, cFileName="..", cAlternateFileName="")) returned 0 [0260.881] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0260.881] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816a7a21, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x816a7a21, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x816a7a21, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0260.881] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\document building blocks\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816a7a21, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x816a7a21, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53582e4e, dwReserved1=0x6974694c, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0260.882] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816a7a21, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x816a7a21, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53582e4e, dwReserved1=0x6974694c, cFileName="..", cAlternateFileName="")) returned 1 [0260.882] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53582e4e, dwReserved1=0x6974694c, cFileName="1033", cAlternateFileName="")) returned 1 [0260.882] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\document building blocks\\1033\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x740000, dwReserved1=0x6f0069, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0260.882] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x740000, dwReserved1=0x6f0069, cFileName="..", cAlternateFileName="")) returned 1 [0260.882] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x740000, dwReserved1=0x6f0069, cFileName="16", cAlternateFileName="")) returned 1 [0260.882] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x817190ef, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0260.882] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x817190ef, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.882] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x817190ef, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x817190ef, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5ca4c63b, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0260.883] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x817190ef, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x817190ef, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5ca4c63b, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0 [0260.883] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0260.883] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x740000, dwReserved1=0x6f0069, cFileName="16", cAlternateFileName="")) returned 0 [0260.883] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0260.883] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53582e4e, dwReserved1=0x6974694c, cFileName="1033", cAlternateFileName="")) returned 0 [0260.883] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.883] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa92f1c4e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x31c6a486, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="Excel", cAlternateFileName="")) returned 1 [0260.883] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\excel\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa92f1c4e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53582e4e, dwReserved1=0x6974694c, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0260.885] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa92f1c4e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53582e4e, dwReserved1=0x6974694c, cFileName="..", cAlternateFileName="")) returned 1 [0260.885] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934f7bb4, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53582e4e, dwReserved1=0x6974694c, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0260.885] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\excel\\xlstart\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934f7bb4, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7542206e, dwReserved1=0x69646c69, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0260.885] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934f7bb4, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7542206e, dwReserved1=0x69646c69, cFileName="..", cAlternateFileName="")) returned 1 [0260.885] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934f7bb4, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7542206e, dwReserved1=0x69646c69, cFileName="..", cAlternateFileName="")) returned 0 [0260.885] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0260.885] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934f7bb4, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53582e4e, dwReserved1=0x6974694c, cFileName="XLSTART", cAlternateFileName="")) returned 0 [0260.885] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.885] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0260.885] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53582e4e, dwReserved1=0x6974694c, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0260.885] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53582e4e, dwReserved1=0x6974694c, cFileName="..", cAlternateFileName="")) returned 1 [0260.885] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6654de95, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x6654de95, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53582e4e, dwReserved1=0x6974694c, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0260.885] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6654de95, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x6654de95, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7542206e, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0260.886] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6654de95, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x6654de95, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7542206e, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.886] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d053a9f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d053a9f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x7542206e, dwReserved1=0x1d00160b, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0260.886] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.886] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.886] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.886] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0260.886] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini")) returned 0x26 [0260.887] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0260.887] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0260.888] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x94, lpOverlapped=0x0) returned 1 [0260.888] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x94, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x94, lpOverlapped=0x0) returned 1 [0260.890] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0260.890] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0260.890] CloseHandle (hObject=0x21c) returned 1 [0260.890] CloseHandle (hObject=0x210) returned 1 [0260.890] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.890] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.890] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d053a9f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d053a9f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e210 [0260.890] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d053a9f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d053a9f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0260.890] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0260.891] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini")) returned 1 [0260.891] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini")) returned 0xffffffff [0260.891] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6654de95, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6654de95, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x83f70c52, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x4be, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="Microsoft Outlook.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0260.892] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.892] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.892] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.892] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0260.892] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk")) returned 0x20 [0260.893] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0260.893] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0260.893] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x4be, lpOverlapped=0x0) returned 1 [0260.917] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x4be, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x4be, lpOverlapped=0x0) returned 1 [0260.918] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0260.918] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0260.918] CloseHandle (hObject=0x210) returned 1 [0260.918] CloseHandle (hObject=0x21c) returned 1 [0260.918] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.918] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.918] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6654de95, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6654de95, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x83f70c52, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x4be, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Microsoft Outlook.lnk", cAlternateFileName="MICROS~1.LNK")) returned 0x55e650 [0260.919] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6654de95, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6654de95, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x83f70c52, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x4be, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Microsoft Outlook.lnk", cAlternateFileName="MICROS~1.LNK")) returned 0 [0260.919] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0260.919] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk")) returned 1 [0260.920] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk")) returned 0xffffffff [0260.920] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d053a9f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d053a9f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1 [0260.920] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.920] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.920] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.920] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0260.920] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk")) returned 0x20 [0260.921] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0260.921] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0260.921] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x160, lpOverlapped=0x0) returned 1 [0260.923] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x160, lpOverlapped=0x0) returned 1 [0260.924] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0260.924] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0260.924] CloseHandle (hObject=0x21c) returned 1 [0260.924] CloseHandle (hObject=0x210) returned 1 [0260.924] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.924] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.925] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d053a9f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d053a9f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 0x55e290 [0260.925] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d053a9f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d053a9f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x251fff9e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 0 [0260.925] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0260.925] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk")) returned 1 [0260.926] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk")) returned 0xffffffff [0260.926] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3fec53d2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xad13dd79, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad13dd79, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0260.926] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3fec53d2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xad13dd79, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad13dd79, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0260.926] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3fec53d2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xad13dd79, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad13dd79, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0260.926] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0260.926] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0260.926] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.927] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0260.927] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0260.927] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xad13dd79, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad164063, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad18a23e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0260.927] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xad13dd79, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad164063, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad18a23e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0260.927] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xad13dd79, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad164063, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad18a23e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.927] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xad164063, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad164063, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad18a23e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0260.927] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.927] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.927] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.927] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0260.928] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini")) returned 0x6 [0260.928] VirtualAlloc (lpAddress=0x228c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x228c000 [0260.928] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0260.929] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0260.931] ReadFile (in: hFile=0x224, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x53, lpOverlapped=0x0) returned 1 [0260.932] WriteFile (in: hFile=0x220, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x53, lpOverlapped=0x0) returned 1 [0260.933] ReadFile (in: hFile=0x224, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0260.933] WriteFile (in: hFile=0x220, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0260.933] CloseHandle (hObject=0x224) returned 1 [0260.933] CloseHandle (hObject=0x220) returned 1 [0260.940] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.943] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.943] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xad164063, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad164063, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad18a23e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x550370, dwReserved1=0xe, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e7d0 [0260.943] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xad164063, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad164063, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad18a23e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x550370, dwReserved1=0xe, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0260.943] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0260.943] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini")) returned 1 [0260.950] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini")) returned 0xffffffff [0260.950] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad164063, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad164063, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="File Explorer.lnk", cAlternateFileName="FILEEX~1.LNK")) returned 1 [0260.950] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.950] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.950] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.950] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.950] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.950] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0260.951] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk")) returned 0x20 [0260.951] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0260.951] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0260.954] ReadFile (in: hFile=0x220, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x197, lpOverlapped=0x0) returned 1 [0260.954] WriteFile (in: hFile=0x224, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x197, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x197, lpOverlapped=0x0) returned 1 [0260.955] ReadFile (in: hFile=0x220, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0260.955] WriteFile (in: hFile=0x224, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0260.955] CloseHandle (hObject=0x220) returned 1 [0260.955] CloseHandle (hObject=0x224) returned 1 [0260.956] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.956] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.956] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad164063, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad164063, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="File Explorer.lnk", cAlternateFileName="FILEEX~1.LNK")) returned 0x55e510 [0260.956] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad164063, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad164063, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x777968c7, dwReserved1=0xec0abe59, cFileName="File Explorer.lnk", cAlternateFileName="FILEEX~1.LNK")) returned 0 [0260.957] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.957] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk")) returned 1 [0260.958] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk")) returned 0xffffffff [0260.958] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad164063, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad164063, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="File Explorer.lnk", cAlternateFileName="FILEEX~1.LNK")) returned 0 [0260.958] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0260.958] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xad13dd79, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad164063, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad18a23e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="TaskBar", cAlternateFileName="")) returned 0 [0260.958] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0260.958] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d02d92b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d02d92b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x70704174, dwReserved1=0x726f6853, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0260.958] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.958] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.958] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.958] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.958] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0260.959] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk")) returned 0x20 [0260.959] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0260.959] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0260.960] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x14e, lpOverlapped=0x0) returned 1 [0260.961] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x14e, lpOverlapped=0x0) returned 1 [0260.962] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0260.962] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0260.962] CloseHandle (hObject=0x210) returned 1 [0260.962] CloseHandle (hObject=0x21c) returned 1 [0260.962] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.962] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.962] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d02d92b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d02d92b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0x55e710 [0260.962] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d02d92b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d02d92b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x550370, dwReserved1=0x11, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0260.962] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0260.962] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk")) returned 1 [0260.963] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk")) returned 0xffffffff [0260.963] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d02d92b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d02d92b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x70704174, dwReserved1=0x726f6853, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0260.963] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0260.964] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="UserData", cAlternateFileName="")) returned 1 [0260.964] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0260.964] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0260.964] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Low", cAlternateFileName="")) returned 1 [0260.964] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0260.964] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0260.964] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 0 [0260.964] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0260.964] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Low", cAlternateFileName="")) returned 0 [0260.964] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0260.964] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="UserData", cAlternateFileName="")) returned 0 [0260.964] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0260.964] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x636e7561, dwReserved1=0x168, cFileName="MMC", cAlternateFileName="")) returned 1 [0260.964] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\mmc\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0260.966] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="..", cAlternateFileName="")) returned 1 [0260.966] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="..", cAlternateFileName="")) returned 0 [0260.966] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0260.966] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x636e7561, dwReserved1=0x168, cFileName="Network", cAlternateFileName="")) returned 1 [0260.966] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0260.967] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="..", cAlternateFileName="")) returned 1 [0260.967] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0260.967] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0260.967] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0260.967] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Pbk", cAlternateFileName="")) returned 1 [0260.967] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0260.967] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.967] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1 [0260.967] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0260.967] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0260.967] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1 [0260.968] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.968] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.968] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.968] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0260.968] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk")) returned 0x20 [0260.968] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0260.969] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0260.969] ReadFile (in: hFile=0x224, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0260.969] WriteFile (in: hFile=0x220, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0260.969] CloseHandle (hObject=0x224) returned 1 [0260.969] CloseHandle (hObject=0x220) returned 1 [0260.969] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.970] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.970] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="rasphone.pbk", cAlternateFileName="")) returned 0x55e610 [0260.970] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e674 | out: lpFindFileData=0x19e674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x550340, dwReserved1=0x6, cFileName="rasphone.pbk", cAlternateFileName="")) returned 0 [0260.970] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0260.970] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk")) returned 1 [0260.970] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk")) returned 0xffffffff [0260.971] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="rasphone.pbk", cAlternateFileName="")) returned 0 [0260.971] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0260.971] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 0 [0260.971] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0260.971] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Pbk", cAlternateFileName="")) returned 0 [0260.971] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0260.971] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0 [0260.971] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0260.971] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80f7a98f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa45e20df, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa45e20df, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f69, dwReserved1=0x168, cFileName="Office", cAlternateFileName="")) returned 1 [0260.971] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80f7a98f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa45e20df, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa45e20df, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0260.973] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80f7a98f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa45e20df, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa45e20df, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="..", cAlternateFileName="")) returned 1 [0260.973] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80f81d62, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80f81d62, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80f83167, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0260.973] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa45e20df, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4689310, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa4689310, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="Recent", cAlternateFileName="")) returned 1 [0260.973] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa45e20df, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4689310, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa481d59b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b6250, dwReserved1=0x550284, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0260.973] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa45e20df, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4689310, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa481d59b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b6250, dwReserved1=0x550284, cFileName="..", cAlternateFileName="")) returned 1 [0260.974] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xa481d59b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa481d59b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa481d59b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1c, dwReserved0=0x6b6250, dwReserved1=0x550284, cFileName="index.dat", cAlternateFileName="")) returned 1 [0260.974] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.974] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.974] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.974] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0260.974] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\index.dat")) returned 0x2 [0260.974] VirtualAlloc (lpAddress=0x2290000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2290000 [0260.975] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0260.975] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\index.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0260.976] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1c, lpOverlapped=0x0) returned 1 [0260.977] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1c, lpOverlapped=0x0) returned 1 [0260.979] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0260.979] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0260.979] CloseHandle (hObject=0x21c) returned 1 [0260.979] CloseHandle (hObject=0x210) returned 1 [0260.979] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\index.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0260.979] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\index.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0260.979] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xa481d59b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa481d59b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa481d59b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="index.dat", cAlternateFileName="")) returned 0x55e890 [0260.980] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xa481d59b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa481d59b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa481d59b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="index.dat", cAlternateFileName="")) returned 0 [0260.980] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0260.980] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\index.dat")) returned 1 [0260.981] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\index.dat")) returned 0xffffffff [0260.981] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4689310, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4689310, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa481d59b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4ab, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1 [0260.981] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0260.982] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.982] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0260.982] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0260.982] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0260.982] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0260.982] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk")) returned 0x20 [0260.983] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0260.983] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0260.985] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x4ab, lpOverlapped=0x0) returned 1 [0261.027] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x4ab, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x4ab, lpOverlapped=0x0) returned 1 [0261.029] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.029] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.029] CloseHandle (hObject=0x210) returned 1 [0261.029] CloseHandle (hObject=0x21c) returned 1 [0261.029] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.029] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.029] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4689310, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4689310, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa481d59b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4ab, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 0x55e510 [0261.030] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4689310, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4689310, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa481d59b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4ab, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 0 [0261.030] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.030] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk")) returned 1 [0261.031] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk")) returned 0xffffffff [0261.031] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4689310, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4689310, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa481d59b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4ab, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 0 [0261.031] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0261.031] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa45e20df, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4689310, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa4689310, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="Recent", cAlternateFileName="")) returned 0 [0261.031] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0261.031] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661c6965, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x877953e5, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c63612e, dwReserved1=0x168, cFileName="Outlook", cAlternateFileName="")) returned 1 [0261.032] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\outlook\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661c6965, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x877953e5, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4c2e7365, dwReserved1=0x72654b4e, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0261.032] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661c6965, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x877953e5, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4c2e7365, dwReserved1=0x72654b4e, cFileName="..", cAlternateFileName="")) returned 1 [0261.032] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abbe5b6, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6abbe5b6, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x6acd6e90, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x4c2e7365, dwReserved1=0x72654b4e, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0261.033] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877953e5, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x877953e5, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8864a351, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x956, dwReserved0=0x4c2e7365, dwReserved1=0x72654b4e, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0261.034] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877953e5, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x877953e5, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8864a351, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x956, dwReserved0=0x4c2e7365, dwReserved1=0x72654b4e, cFileName="Outlook.xml", cAlternateFileName="")) returned 0 [0261.034] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0261.034] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x50866c1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x168, cFileName="Protect", cAlternateFileName="")) returned 1 [0261.034] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\protect\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50866c1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x50866c1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4c2e7365, dwReserved1=0x72654b4e, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0261.034] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50866c1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x50866c1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4c2e7365, dwReserved1=0x72654b4e, cFileName="..", cAlternateFileName="")) returned 1 [0261.034] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xcf68faea, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x4c2e7365, dwReserved1=0x72654b4e, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0261.035] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x50866c1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8060823c, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x8060823c, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4c2e7365, dwReserved1=0x72654b4e, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0261.035] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1560258661-3990802383-1811730007-1000\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1560258661-3990802383-1811730007-1000\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x50866c1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8060823c, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x8060823c, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e850 [0261.036] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x50866c1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8060823c, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x8060823c, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0261.036] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8060823c, ftCreationTime.dwHighDateTime=0x1d8a649, ftLastAccessTime.dwLowDateTime=0x8060823c, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x80627df0, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="1c1d304f-aa8f-4534-b2cb-33b61c83ed15", cAlternateFileName="1C1D30~1")) returned 1 [0261.036] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x562658a2, ftCreationTime.dwHighDateTime=0x1d82a22, ftLastAccessTime.dwLowDateTime=0x562658a2, ftLastAccessTime.dwHighDateTime=0x1d82a22, ftLastWriteTime.dwLowDateTime=0xcf6b6c82, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x2d0066, dwReserved1=0x350034, cFileName="26d4f968-a540-431b-ab1b-a50e9bbda5d1", cAlternateFileName="26D4F9~1")) returned 1 [0261.037] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9a745757, ftCreationTime.dwHighDateTime=0x1d75217, ftLastAccessTime.dwLowDateTime=0x9a745757, ftLastAccessTime.dwHighDateTime=0x1d75217, ftLastWriteTime.dwLowDateTime=0xcf6e7ae7, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x2d0030, dwReserved1=0x330034, cFileName="b1182ce8-69d1-4194-8156-bc78cfec3a39", cAlternateFileName="B1182C~1")) returned 1 [0261.038] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xde7dde0f, ftCreationTime.dwHighDateTime=0x1d7b055, ftLastAccessTime.dwLowDateTime=0xde7dde0f, ftLastAccessTime.dwHighDateTime=0x1d7b055, ftLastWriteTime.dwLowDateTime=0xcf714bf2, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x2d0031, dwReserved1=0x310034, cFileName="be39cc84-e9bf-4c2d-a3a5-e953c9f3df24", cAlternateFileName="BE39CC~1")) returned 1 [0261.039] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5088b163, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5088b163, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xcf741f26, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x2d0066, dwReserved1=0x630034, cFileName="cfeedb70-e610-451b-90c2-def194b5fe80", cAlternateFileName="CFEEDB~1")) returned 1 [0261.040] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5088b163, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5088b163, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x80631a6d, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x2d0030, dwReserved1=0x350034, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0261.040] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5088b163, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5088b163, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x80631a6d, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x2d0030, dwReserved1=0x350034, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0 [0261.040] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0261.040] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xcf753085, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x36656465, dwReserved1=0x342d3031, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0261.041] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xcf753085, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x36656465, dwReserved1=0x342d3031, cFileName="SYNCHIST", cAlternateFileName="")) returned 0 [0261.041] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0261.041] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563371fc, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5635d3c1, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x5635d3c1, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d54, dwReserved1=0x35323036, cFileName="Spelling", cAlternateFileName="")) returned 1 [0261.041] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563371fc, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5635d3c1, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x5635d3c1, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x36656465, dwReserved1=0x342d3031, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0261.042] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563371fc, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5635d3c1, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x5635d3c1, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x36656465, dwReserved1=0x342d3031, cFileName="..", cAlternateFileName="")) returned 1 [0261.042] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5635d3c1, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x567d5b26, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x567d5b26, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x36656465, dwReserved1=0x342d3031, cFileName="en-US", cAlternateFileName="")) returned 1 [0261.042] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\en-US\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\en-us\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5635d3c1, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x567d5b26, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x567d5b26, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0030, dwReserved1=0x350034, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0261.042] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5635d3c1, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x567d5b26, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x567d5b26, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d0030, dwReserved1=0x350034, cFileName="..", cAlternateFileName="")) returned 1 [0261.042] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x567d5b26, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x567d5b26, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0xbfbb9feb, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x2d0030, dwReserved1=0x350034, cFileName="default.acl", cAlternateFileName="")) returned 1 [0261.043] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5648e4eb, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5648e4eb, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0xbfbb3e6f, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x2d0030, dwReserved1=0x350034, cFileName="default.dic", cAlternateFileName="")) returned 1 [0261.044] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566a47fe, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x566a47fe, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0xbfbb652a, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x2d0030, dwReserved1=0x350034, cFileName="default.exc", cAlternateFileName="")) returned 1 [0261.044] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.044] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.044] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.044] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.044] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.044] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0261.044] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\en-US\\default.exc" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\en-us\\default.exc")) returned 0x20 [0261.051] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\en-US\\default.exc" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\en-us\\default.exc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.052] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\en-US\\default.exc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\en-us\\default.exc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.057] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2, lpOverlapped=0x0) returned 1 [0261.058] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2, lpOverlapped=0x0) returned 1 [0261.059] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.059] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.059] CloseHandle (hObject=0x21c) returned 1 [0261.059] CloseHandle (hObject=0x210) returned 1 [0261.059] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\en-US\\default.exc" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\en-us\\default.exc"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\en-US\\default.exc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\en-us\\default.exc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.060] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\en-US\\default.exc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\en-us\\default.exc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.060] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\en-US\\default.exc" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\en-us\\default.exc"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566a47fe, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x566a47fe, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0xbfbb652a, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="default.exc", cAlternateFileName="")) returned 0x55e710 [0261.060] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566a47fe, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x566a47fe, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0xbfbb652a, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="default.exc", cAlternateFileName="")) returned 0 [0261.060] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0261.060] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\en-US\\default.exc" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\en-us\\default.exc")) returned 1 [0261.061] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\en-US\\default.exc" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\en-us\\default.exc")) returned 0xffffffff [0261.061] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566a47fe, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x566a47fe, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0xbfbb652a, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x2d0030, dwReserved1=0x350034, cFileName="default.exc", cAlternateFileName="")) returned 0 [0261.061] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.062] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5635d3c1, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x567d5b26, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x567d5b26, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x36656465, dwReserved1=0x342d3031, cFileName="en-US", cAlternateFileName="")) returned 0 [0261.062] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0261.062] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d54, dwReserved1=0x35323036, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0261.062] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6378652e, dwReserved1=0x342d3031, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0261.062] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6378652e, dwReserved1=0x342d3031, cFileName="..", cAlternateFileName="")) returned 1 [0261.062] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6378652e, dwReserved1=0x342d3031, cFileName="My", cAlternateFileName="")) returned 1 [0261.062] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\my\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0261.062] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0261.062] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="AppContainerUserCertRead", cAlternateFileName="APPCON~1")) returned 1 [0261.063] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730075, dwReserved1=0x720065, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0261.063] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0261.063] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0261.064] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0261.064] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0261.064] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730075, dwReserved1=0x720065, cFileName="CRLs", cAlternateFileName="")) returned 1 [0261.064] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0261.064] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0261.064] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0261.064] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.064] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730075, dwReserved1=0x720065, cFileName="CTLs", cAlternateFileName="")) returned 1 [0261.064] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0261.064] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0261.064] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 0 [0261.065] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0261.065] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730075, dwReserved1=0x720065, cFileName="CTLs", cAlternateFileName="")) returned 0 [0261.065] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0261.065] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6378652e, dwReserved1=0x342d3031, cFileName="My", cAlternateFileName="")) returned 0 [0261.065] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0261.065] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80b78b76, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x6aa33cc5, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6aa33cc5, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d54, dwReserved1=0x35323036, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0261.065] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80b78b76, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x6aa33cc5, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6aa33cc5, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65746163, dwReserved1=0x65735573, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0261.068] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80b78b76, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x6aa33cc5, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6aa33cc5, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65746163, dwReserved1=0x65735573, cFileName="..", cAlternateFileName="")) returned 1 [0261.069] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65746163, dwReserved1=0x65735573, cFileName="LiveContent", cAlternateFileName="LIVECO~1")) returned 1 [0261.069] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730075, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0261.069] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730075, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0261.069] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730075, dwReserved1=0x720065, cFileName="16", cAlternateFileName="")) returned 1 [0261.069] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96dfa773, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0261.070] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96dfa773, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0261.070] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d88102, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d88102, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="Managed", cAlternateFileName="")) returned 1 [0261.070] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d88102, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d88102, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e850 [0261.073] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d88102, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d88102, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.073] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes", cAlternateFileName="DOCUME~1")) returned 1 [0261.073] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0261.073] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.074] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98c54758, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98c54758, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0261.074] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98c54758, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98c54758, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0261.075] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98c54758, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98c54758, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0261.076] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9826b304, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9826b304, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x70d51000, ftLastWriteTime.dwHighDateTime=0x1d43fbc, nFileSizeHigh=0x0, nFileSizeLow=0x893c1, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="TM03090430[[fn=Banded]].thmx", cAlternateFileName="TM0309~1.THM")) returned 1 [0261.077] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x984f5d1e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x984f5d1e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa299a700, ftLastWriteTime.dwHighDateTime=0x1d43fbb, nFileSizeHigh=0x0, nFileSizeLow=0x192bb1, dwReserved0=0x6e0066, dwReserved1=0x62003d, cFileName="TM03090434[[fn=Wood Type]].thmx", cAlternateFileName="TM0309~2.THM")) returned 1 [0261.078] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x988e757c, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x988e757c, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xbdc7df00, ftLastWriteTime.dwHighDateTime=0x1d43fda, nFileSizeHigh=0x0, nFileSizeLow=0x883d3, dwReserved0=0x6e0066, dwReserved1=0x77003d, cFileName="TM03457444[[fn=Basis]].thmx", cAlternateFileName="TM2094~1.THM")) returned 1 [0261.078] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98acf19f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98acf19f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xe42a5200, ftLastWriteTime.dwHighDateTime=0x1d43fbb, nFileSizeHigh=0x0, nFileSizeLow=0x8b615, dwReserved0=0x6e0066, dwReserved1=0x62003d, cFileName="TM03457464[[fn=Dividend]].thmx", cAlternateFileName="TM5959~1.THM")) returned 1 [0261.135] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.135] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.135] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.135] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.135] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0261.136] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Building Blocks\\1033\\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document building blocks\\1033\\tm02835233[[fn=text sidebar (annual report red and black design)]].docx")) returned 0x20 [0261.137] VirtualAlloc (lpAddress=0x2294000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2294000 [0261.137] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Building Blocks\\1033\\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document building blocks\\1033\\tm02835233[[fn=text sidebar (annual report red and black design)]].docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x228 [0261.138] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Building Blocks\\1033\\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document building blocks\\1033\\tm02835233[[fn=text sidebar (annual report red and black design)]].docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x22c [0261.138] ReadFile (in: hFile=0x228, lpBuffer=0x19c308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19c308*, lpNumberOfBytesRead=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.141] WriteFile (in: hFile=0x22c, lpBuffer=0x19d308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19d308*, lpNumberOfBytesWritten=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.142] ReadFile (in: hFile=0x228, lpBuffer=0x19c308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19c308*, lpNumberOfBytesRead=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.143] WriteFile (in: hFile=0x22c, lpBuffer=0x19d308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19d308*, lpNumberOfBytesWritten=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.143] ReadFile (in: hFile=0x228, lpBuffer=0x19c308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19c308*, lpNumberOfBytesRead=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.143] WriteFile (in: hFile=0x22c, lpBuffer=0x19d308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19d308*, lpNumberOfBytesWritten=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.143] ReadFile (in: hFile=0x228, lpBuffer=0x19c308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19c308*, lpNumberOfBytesRead=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.144] WriteFile (in: hFile=0x22c, lpBuffer=0x19d308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19d308*, lpNumberOfBytesWritten=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.144] ReadFile (in: hFile=0x228, lpBuffer=0x19c308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19c308*, lpNumberOfBytesRead=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.144] WriteFile (in: hFile=0x22c, lpBuffer=0x19d308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19d308*, lpNumberOfBytesWritten=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.144] ReadFile (in: hFile=0x228, lpBuffer=0x19c308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19c308*, lpNumberOfBytesRead=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.145] WriteFile (in: hFile=0x22c, lpBuffer=0x19d308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19d308*, lpNumberOfBytesWritten=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.145] ReadFile (in: hFile=0x228, lpBuffer=0x19c308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19c308*, lpNumberOfBytesRead=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.145] WriteFile (in: hFile=0x22c, lpBuffer=0x19d308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19d308*, lpNumberOfBytesWritten=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.145] ReadFile (in: hFile=0x228, lpBuffer=0x19c308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19c308*, lpNumberOfBytesRead=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.145] WriteFile (in: hFile=0x22c, lpBuffer=0x19d308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19d308*, lpNumberOfBytesWritten=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.146] ReadFile (in: hFile=0x228, lpBuffer=0x19c308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19c308*, lpNumberOfBytesRead=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.146] WriteFile (in: hFile=0x22c, lpBuffer=0x19d308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19d308*, lpNumberOfBytesWritten=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.147] ReadFile (in: hFile=0x228, lpBuffer=0x19c308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19c308*, lpNumberOfBytesRead=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.147] WriteFile (in: hFile=0x22c, lpBuffer=0x19d308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19d308*, lpNumberOfBytesWritten=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.147] ReadFile (in: hFile=0x228, lpBuffer=0x19c308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19c308*, lpNumberOfBytesRead=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.147] WriteFile (in: hFile=0x22c, lpBuffer=0x19d308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19d308*, lpNumberOfBytesWritten=0x19c054*=0x1000, lpOverlapped=0x0) returned 1 [0261.147] ReadFile (in: hFile=0x228, lpBuffer=0x19c308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19c308*, lpNumberOfBytesRead=0x19c054*=0x8c0, lpOverlapped=0x0) returned 1 [0261.147] WriteFile (in: hFile=0x22c, lpBuffer=0x19d308*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19d308*, lpNumberOfBytesWritten=0x19c054*=0x8c0, lpOverlapped=0x0) returned 1 [0261.148] ReadFile (in: hFile=0x228, lpBuffer=0x19c308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19c308*, lpNumberOfBytesRead=0x19c054*=0x0, lpOverlapped=0x0) returned 1 [0261.148] WriteFile (in: hFile=0x22c, lpBuffer=0x19d308*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c054, lpOverlapped=0x0 | out: lpBuffer=0x19d308*, lpNumberOfBytesWritten=0x19c054*=0x0, lpOverlapped=0x0) returned 1 [0261.148] CloseHandle (hObject=0x228) returned 1 [0261.148] CloseHandle (hObject=0x22c) returned 1 [0261.148] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Building Blocks\\1033\\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document building blocks\\1033\\tm02835233[[fn=text sidebar (annual report red and black design)]].docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Building Blocks\\1033\\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document building blocks\\1033\\tm02835233[[fn=text sidebar (annual report red and black design)]].docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.149] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Building Blocks\\1033\\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document building blocks\\1033\\tm02835233[[fn=text sidebar (annual report red and black design)]].docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.149] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Building Blocks\\1033\\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document building blocks\\1033\\tm02835233[[fn=text sidebar (annual report red and black design)]].docx"), lpFindFileData=0x19e1a4 | out: lpFindFileData=0x19e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x980cc2bb, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x980cc2bb, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x980cc2bb, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xb8c0, dwReserved0=0x554c0c, dwReserved1=0xc4, cFileName="TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx", cAlternateFileName="TM0283~1.DOC")) returned 0x55e2d0 [0261.149] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e1a4 | out: lpFindFileData=0x19e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x980cc2bb, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x980cc2bb, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x980cc2bb, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xb8c0, dwReserved0=0x554c0c, dwReserved1=0xc4, cFileName="TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx", cAlternateFileName="TM0283~1.DOC")) returned 0 [0261.149] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0261.149] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Building Blocks\\1033\\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document building blocks\\1033\\tm02835233[[fn=text sidebar (annual report red and black design)]].docx")) returned 1 [0261.151] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Building Blocks\\1033\\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document building blocks\\1033\\tm02835233[[fn=text sidebar (annual report red and black design)]].docx")) returned 0xffffffff [0261.151] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98167377, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98167377, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98167377, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x866f, dwReserved0=0x556ed0, dwReserved1=0x2000002, cFileName="TM03998158[[fn=Element]].dotx", cAlternateFileName="TM0399~1.DOT")) returned 1 [0261.152] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9846e6c1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9846e6c1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x985f3b86, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x34df74, dwReserved0=0x6e0066, dwReserved1=0x65003d, cFileName="TM03998159[[fn=Insight]].dotx", cAlternateFileName="TM0399~2.DOT")) returned 1 [0261.153] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9846e6c1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9846e6c1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x985f3b86, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x34df74, dwReserved0=0x6e0066, dwReserved1=0x65003d, cFileName="TM03998159[[fn=Insight]].dotx", cAlternateFileName="TM0399~2.DOT")) returned 0 [0261.153] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0261.153] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x985f9d53, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x985f9d53, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e0066, dwReserved1=0x73003d, cFileName="1033", cAlternateFileName="")) returned 0 [0261.153] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.153] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b373232, dwReserved1=0x3d6e665b, cFileName="Word Document Building Blocks", cAlternateFileName="WORDDO~1")) returned 0 [0261.153] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0261.153] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d7563, dwReserved1=0x4220746e, cFileName="User", cAlternateFileName="")) returned 1 [0261.153] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b373232, dwReserved1=0x3d6e665b, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0261.157] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b373232, dwReserved1=0x3d6e665b, cFileName="..", cAlternateFileName="")) returned 1 [0261.157] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b373232, dwReserved1=0x3d6e665b, cFileName="Document Themes", cAlternateFileName="DOCUME~1")) returned 1 [0261.157] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0261.158] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName="..", cAlternateFileName="")) returned 1 [0261.158] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName="1033", cAlternateFileName="")) returned 1 [0261.158] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\1033\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0261.158] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.158] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.158] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.158] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName="1033", cAlternateFileName="")) returned 0 [0261.158] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0261.158] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b373232, dwReserved1=0x3d6e665b, cFileName="SmartArt Graphics", cAlternateFileName="SMARTA~1")) returned 1 [0261.159] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0261.159] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName="..", cAlternateFileName="")) returned 1 [0261.159] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName="1033", cAlternateFileName="")) returned 1 [0261.159] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\1033\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0261.159] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.159] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.160] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0261.160] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName="1033", cAlternateFileName="")) returned 0 [0261.160] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0261.160] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96dfa773, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96dfa773, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b373232, dwReserved1=0x3d6e665b, cFileName="Word Document Bibliography Styles", cAlternateFileName="WORDDO~1")) returned 1 [0261.160] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Word Document Bibliography Styles\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\word document bibliography styles\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96dfa773, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96dfa773, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0261.160] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96dfa773, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96dfa773, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName="..", cAlternateFileName="")) returned 1 [0261.160] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96dfa773, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96dfa773, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName="..", cAlternateFileName="")) returned 0 [0261.160] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.160] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b373232, dwReserved1=0x3d6e665b, cFileName="Word Document Building Blocks", cAlternateFileName="WORDDO~2")) returned 1 [0261.160] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Word Document Building Blocks\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\word document building blocks\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0261.161] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName="..", cAlternateFileName="")) returned 1 [0261.161] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName="1033", cAlternateFileName="")) returned 1 [0261.161] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Word Document Building Blocks\\1033\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\word document building blocks\\1033\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e850 [0261.162] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.162] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0261.162] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0261.162] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName="1033", cAlternateFileName="")) returned 0 [0261.162] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0261.162] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b373232, dwReserved1=0x3d6e665b, cFileName="Word Document Building Blocks", cAlternateFileName="WORDDO~2")) returned 0 [0261.162] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0261.162] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d7563, dwReserved1=0x4220746e, cFileName="User", cAlternateFileName="")) returned 0 [0261.162] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0261.162] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730075, dwReserved1=0x720065, cFileName="16", cAlternateFileName="")) returned 0 [0261.162] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0261.162] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4614163, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4614163, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa46a67ce, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4641, dwReserved0=0x65746163, dwReserved1=0x65735573, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0261.163] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4614163, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4614163, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa46a67ce, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4641, dwReserved0=0x65746163, dwReserved1=0x65735573, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 0 [0261.163] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0261.163] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d746f64, dwReserved1=0x35323036, cFileName="Vault", cAlternateFileName="")) returned 1 [0261.163] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\vault\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65746163, dwReserved1=0x65735573, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0261.163] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65746163, dwReserved1=0x65735573, cFileName="..", cAlternateFileName="")) returned 1 [0261.164] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65746163, dwReserved1=0x65735573, cFileName="..", cAlternateFileName="")) returned 0 [0261.164] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.164] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d746f64, dwReserved1=0x35323036, cFileName="Windows", cAlternateFileName="")) returned 1 [0261.164] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaeb77be3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaeb77be3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65746163, dwReserved1=0x65735573, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0261.164] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaeb77be3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaeb77be3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65746163, dwReserved1=0x65735573, cFileName="..", cAlternateFileName="")) returned 1 [0261.164] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65746163, dwReserved1=0x65735573, cFileName="AccountPictures", cAlternateFileName="ACCOUN~1")) returned 1 [0261.164] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\accountpictures\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730075, dwReserved1=0x720065, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0261.164] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x730075, dwReserved1=0x720065, cFileName="..", cAlternateFileName="")) returned 1 [0261.164] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x730075, dwReserved1=0x720065, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0261.165] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.165] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.165] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.165] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0261.165] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini")) returned 0x6 [0261.166] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.166] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.167] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xc4, lpOverlapped=0x0) returned 1 [0261.168] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xc4, lpOverlapped=0x0) returned 1 [0261.169] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.169] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.169] CloseHandle (hObject=0x210) returned 1 [0261.169] CloseHandle (hObject=0x21c) returned 1 [0261.170] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.170] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.170] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e510 [0261.170] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0261.170] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.170] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini")) returned 1 [0261.172] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini")) returned 0xffffffff [0261.172] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x730075, dwReserved1=0x720065, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0261.172] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0261.172] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x4347fe61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2b1d2cc3, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1d8e71, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x65735573, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0261.172] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\libraries\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x4347fe61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2b1d2cc3, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1d8e71, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0261.175] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x4347fe61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2b1d2cc3, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1d8e71, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0261.175] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x3fa, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="CameraRoll.library-ms", cAlternateFileName="CAMERA~1.LIB")) returned 1 [0261.176] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x434a60af, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x434a60af, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2b1d7aec, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x620069, dwReserved1=0x610072, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0261.176] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.176] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.177] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.177] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0261.177] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini")) returned 0x6 [0261.177] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.178] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.178] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1c3, lpOverlapped=0x0) returned 1 [0261.179] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1c3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1c3, lpOverlapped=0x0) returned 1 [0261.180] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.181] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.181] CloseHandle (hObject=0x21c) returned 1 [0261.181] CloseHandle (hObject=0x210) returned 1 [0261.181] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.181] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.181] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x434a60af, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x434a60af, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2b1d7aec, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e390 [0261.182] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x434a60af, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x434a60af, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2b1d7aec, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0261.182] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0261.182] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini")) returned 1 [0261.187] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini")) returned 0xffffffff [0261.187] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4366fcc2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43695fb2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="Documents.library-ms", cAlternateFileName="DOCUME~1.LIB")) returned 1 [0261.188] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4372e947, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x82e, dwReserved0=0x720062, dwReserved1=0x720061, cFileName="Music.library-ms", cAlternateFileName="MUSIC~1.LIB")) returned 1 [0261.188] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436e2464, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436e2464, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x83f, dwReserved0=0x2d0079, dwReserved1=0x73006d, cFileName="Pictures.library-ms", cAlternateFileName="PICTUR~1.LIB")) returned 1 [0261.189] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b1d2cc3, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1d2cc3, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1d4063, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x610072, dwReserved1=0x790072, cFileName="SavedPictures.library-ms", cAlternateFileName="SAVEDP~1.LIB")) returned 1 [0261.190] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434a60af, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435d73aa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435d73aa, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x84a, dwReserved0=0x2e0073, dwReserved1=0x69006c, cFileName="Videos.library-ms", cAlternateFileName="VIDEOS~1.LIB")) returned 1 [0261.190] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434a60af, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435d73aa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435d73aa, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x84a, dwReserved0=0x2e0073, dwReserved1=0x69006c, cFileName="Videos.library-ms", cAlternateFileName="VIDEOS~1.LIB")) returned 0 [0261.190] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0261.191] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7262696c, dwReserved1=0x2d797261, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1 [0261.191] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\network shortcuts\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790072, dwReserved1=0x6d002d, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0261.191] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790072, dwReserved1=0x6d002d, cFileName="..", cAlternateFileName="")) returned 1 [0261.191] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790072, dwReserved1=0x6d002d, cFileName="..", cAlternateFileName="")) returned 0 [0261.191] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0261.191] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7262696c, dwReserved1=0x2d797261, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1 [0261.191] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\printer shortcuts\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790072, dwReserved1=0x6d002d, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0261.192] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790072, dwReserved1=0x6d002d, cFileName="..", cAlternateFileName="")) returned 1 [0261.192] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790072, dwReserved1=0x6d002d, cFileName="..", cAlternateFileName="")) returned 0 [0261.192] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.192] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2b5d6f80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b5d6f80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7262696c, dwReserved1=0x2d797261, cFileName="Recent", cAlternateFileName="")) returned 1 [0261.192] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2b5d6f80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b77aa07, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790072, dwReserved1=0x6d002d, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0261.192] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2b5d6f80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b77aa07, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790072, dwReserved1=0x6d002d, cFileName="..", cAlternateFileName="")) returned 1 [0261.192] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d89758e, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x29ab8310, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29ab8310, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x790072, dwReserved1=0x6d002d, cFileName="-8dlx0wewoZ_y4Htiby.lnk", cAlternateFileName="-8DLX0~1.LNK")) returned 1 [0261.193] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.193] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0261.193] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-8dlx0wewoZ_y4Htiby.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-8dlx0wewoz_y4htiby.lnk")) returned 0x20 [0261.193] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-8dlx0wewoZ_y4Htiby.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-8dlx0wewoz_y4htiby.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.194] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-8dlx0wewoZ_y4Htiby.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-8dlx0wewoz_y4htiby.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.195] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x273, lpOverlapped=0x0) returned 1 [0261.196] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x273, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x273, lpOverlapped=0x0) returned 1 [0261.197] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.197] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.197] CloseHandle (hObject=0x210) returned 1 [0261.197] CloseHandle (hObject=0x21c) returned 1 [0261.197] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-8dlx0wewoZ_y4Htiby.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-8dlx0wewoz_y4htiby.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-8dlx0wewoZ_y4Htiby.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-8dlx0wewoz_y4htiby.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.198] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-8dlx0wewoZ_y4Htiby.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-8dlx0wewoz_y4htiby.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.198] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-8dlx0wewoZ_y4Htiby.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-8dlx0wewoz_y4htiby.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d89758e, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x29ab8310, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29ab8310, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="-8dlx0wewoZ_y4Htiby.lnk", cAlternateFileName="-8DLX0~1.LNK")) returned 0x55e510 [0261.198] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d89758e, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x29ab8310, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29ab8310, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="-8dlx0wewoZ_y4Htiby.lnk", cAlternateFileName="-8DLX0~1.LNK")) returned 0 [0261.198] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.198] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-8dlx0wewoZ_y4Htiby.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-8dlx0wewoz_y4htiby.lnk")) returned 1 [0261.200] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-8dlx0wewoZ_y4Htiby.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-8dlx0wewoz_y4htiby.lnk")) returned 0xffffffff [0261.200] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e185dd, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7e185dd, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7e185dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="-FRX5OOzUmfVjJcHf_DE.lnk", cAlternateFileName="-FRX5O~1.LNK")) returned 1 [0261.200] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.200] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.200] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.200] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0261.201] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-FRX5OOzUmfVjJcHf_DE.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-frx5oozumfvjjchf_de.lnk")) returned 0x20 [0261.201] VirtualAlloc (lpAddress=0x2298000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2298000 [0261.201] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-FRX5OOzUmfVjJcHf_DE.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-frx5oozumfvjjchf_de.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.202] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-FRX5OOzUmfVjJcHf_DE.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-frx5oozumfvjjchf_de.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.202] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x418, lpOverlapped=0x0) returned 1 [0261.203] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x418, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x418, lpOverlapped=0x0) returned 1 [0261.205] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.205] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.205] CloseHandle (hObject=0x21c) returned 1 [0261.205] CloseHandle (hObject=0x210) returned 1 [0261.205] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-FRX5OOzUmfVjJcHf_DE.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-frx5oozumfvjjchf_de.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-FRX5OOzUmfVjJcHf_DE.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-frx5oozumfvjjchf_de.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.205] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-FRX5OOzUmfVjJcHf_DE.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-frx5oozumfvjjchf_de.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.205] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-FRX5OOzUmfVjJcHf_DE.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-frx5oozumfvjjchf_de.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e185dd, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7e185dd, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7e185dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="-FRX5OOzUmfVjJcHf_DE.lnk", cAlternateFileName="-FRX5O~1.LNK")) returned 0x55e510 [0261.206] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e185dd, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7e185dd, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7e185dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="-FRX5OOzUmfVjJcHf_DE.lnk", cAlternateFileName="-FRX5O~1.LNK")) returned 0 [0261.206] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.206] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-FRX5OOzUmfVjJcHf_DE.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-frx5oozumfvjjchf_de.lnk")) returned 1 [0261.209] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-FRX5OOzUmfVjJcHf_DE.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-frx5oozumfvjjchf_de.lnk")) returned 0xffffffff [0261.209] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df9a83d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1df9a83d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1df9a83d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="-QEWNDo.lnk", cAlternateFileName="")) returned 1 [0261.209] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.209] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.210] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.210] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0261.210] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-QEWNDo.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-qewndo.lnk")) returned 0x20 [0261.210] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-QEWNDo.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-qewndo.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.211] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-QEWNDo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-qewndo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.211] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3ea, lpOverlapped=0x0) returned 1 [0261.212] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3ea, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3ea, lpOverlapped=0x0) returned 1 [0261.213] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.213] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.213] CloseHandle (hObject=0x210) returned 1 [0261.214] CloseHandle (hObject=0x21c) returned 1 [0261.214] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-QEWNDo.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-qewndo.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-QEWNDo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-qewndo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.214] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-QEWNDo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-qewndo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.214] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-QEWNDo.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-qewndo.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df9a83d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1df9a83d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1df9a83d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="-QEWNDo.lnk", cAlternateFileName="")) returned 0x55e390 [0261.214] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1df9a83d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1df9a83d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1df9a83d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="-QEWNDo.lnk", cAlternateFileName="")) returned 0 [0261.214] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0261.215] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-QEWNDo.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-qewndo.lnk")) returned 1 [0261.216] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-QEWNDo.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\-qewndo.lnk")) returned 0xffffffff [0261.216] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8fbcb10, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc8fbcb10, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc8fbcb10, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="0oOW.lnk", cAlternateFileName="")) returned 1 [0261.216] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.216] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.217] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.217] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0261.217] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0oOW.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\0oow.lnk")) returned 0x20 [0261.217] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0oOW.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\0oow.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.217] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0oOW.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\0oow.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.218] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x608, lpOverlapped=0x0) returned 1 [0261.219] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x608, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x608, lpOverlapped=0x0) returned 1 [0261.220] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.220] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.220] CloseHandle (hObject=0x21c) returned 1 [0261.220] CloseHandle (hObject=0x210) returned 1 [0261.221] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0oOW.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\0oow.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0oOW.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\0oow.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.221] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0oOW.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\0oow.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.221] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0oOW.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\0oow.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8fbcb10, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc8fbcb10, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc8fbcb10, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="0oOW.lnk", cAlternateFileName="")) returned 0x55e750 [0261.221] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8fbcb10, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc8fbcb10, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc8fbcb10, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="0oOW.lnk", cAlternateFileName="")) returned 0 [0261.221] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0261.221] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0oOW.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\0oow.lnk")) returned 1 [0261.223] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0oOW.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\0oow.lnk")) returned 0xffffffff [0261.223] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x785d9cfb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x1edc28a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1edc28a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="10Dj0NoHfl1fRCzJ80-K.lnk", cAlternateFileName="10DJ0N~1.LNK")) returned 1 [0261.224] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.224] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.224] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.224] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.224] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.224] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0261.224] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\10Dj0NoHfl1fRCzJ80-K.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\10dj0nohfl1frczj80-k.lnk")) returned 0x20 [0261.224] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\10Dj0NoHfl1fRCzJ80-K.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\10dj0nohfl1frczj80-k.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.225] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\10Dj0NoHfl1fRCzJ80-K.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\10dj0nohfl1frczj80-k.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.227] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x507, lpOverlapped=0x0) returned 1 [0261.228] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x507, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x507, lpOverlapped=0x0) returned 1 [0261.229] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.229] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.229] CloseHandle (hObject=0x210) returned 1 [0261.229] CloseHandle (hObject=0x21c) returned 1 [0261.229] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\10Dj0NoHfl1fRCzJ80-K.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\10dj0nohfl1frczj80-k.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\10Dj0NoHfl1fRCzJ80-K.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\10dj0nohfl1frczj80-k.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.230] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\10Dj0NoHfl1fRCzJ80-K.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\10dj0nohfl1frczj80-k.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.230] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\10Dj0NoHfl1fRCzJ80-K.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\10dj0nohfl1frczj80-k.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x785d9cfb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x1edc28a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1edc28a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="10Dj0NoHfl1fRCzJ80-K.lnk", cAlternateFileName="10DJ0N~1.LNK")) returned 0x55e210 [0261.230] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x785d9cfb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x1edc28a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1edc28a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="10Dj0NoHfl1fRCzJ80-K.lnk", cAlternateFileName="10DJ0N~1.LNK")) returned 0 [0261.230] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0261.230] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\10Dj0NoHfl1fRCzJ80-K.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\10dj0nohfl1frczj80-k.lnk")) returned 1 [0261.232] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\10Dj0NoHfl1fRCzJ80-K.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\10dj0nohfl1frczj80-k.lnk")) returned 0xffffffff [0261.232] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b31b242, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xe0abd344, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe0ac0ddd, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="1NWhODXrGU7fJ4svX5as.lnk", cAlternateFileName="1NWHOD~1.LNK")) returned 1 [0261.232] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.232] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.232] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.232] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.233] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0261.233] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1NWhODXrGU7fJ4svX5as.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1nwhodxrgu7fj4svx5as.lnk")) returned 0x20 [0261.233] VirtualAlloc (lpAddress=0x229c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x229c000 [0261.233] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1NWhODXrGU7fJ4svX5as.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1nwhodxrgu7fj4svx5as.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.234] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1NWhODXrGU7fJ4svX5as.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1nwhodxrgu7fj4svx5as.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.234] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x324, lpOverlapped=0x0) returned 1 [0261.235] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x324, lpOverlapped=0x0) returned 1 [0261.236] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.236] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.237] CloseHandle (hObject=0x21c) returned 1 [0261.237] CloseHandle (hObject=0x210) returned 1 [0261.237] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1NWhODXrGU7fJ4svX5as.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1nwhodxrgu7fj4svx5as.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1NWhODXrGU7fJ4svX5as.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1nwhodxrgu7fj4svx5as.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.237] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1NWhODXrGU7fJ4svX5as.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1nwhodxrgu7fj4svx5as.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.238] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1NWhODXrGU7fJ4svX5as.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1nwhodxrgu7fj4svx5as.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b31b242, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xe0abd344, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe0ac0ddd, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="1NWhODXrGU7fJ4svX5as.lnk", cAlternateFileName="1NWHOD~1.LNK")) returned 0x55e2d0 [0261.238] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b31b242, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xe0abd344, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe0ac0ddd, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="1NWhODXrGU7fJ4svX5as.lnk", cAlternateFileName="1NWHOD~1.LNK")) returned 0 [0261.238] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0261.238] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1NWhODXrGU7fJ4svX5as.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1nwhodxrgu7fj4svx5as.lnk")) returned 1 [0261.239] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1NWhODXrGU7fJ4svX5as.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1nwhodxrgu7fj4svx5as.lnk")) returned 0xffffffff [0261.239] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1deb59d4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1deb59d4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1deb59d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3ff, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="1obvxKB7GQj04t1.lnk", cAlternateFileName="1OBVXK~1.LNK")) returned 1 [0261.240] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.240] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.240] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.240] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.240] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.240] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0261.240] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1obvxKB7GQj04t1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1obvxkb7gqj04t1.lnk")) returned 0x20 [0261.241] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1obvxKB7GQj04t1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1obvxkb7gqj04t1.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.241] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1obvxKB7GQj04t1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1obvxkb7gqj04t1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.242] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3ff, lpOverlapped=0x0) returned 1 [0261.243] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3ff, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3ff, lpOverlapped=0x0) returned 1 [0261.244] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.245] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.245] CloseHandle (hObject=0x210) returned 1 [0261.245] CloseHandle (hObject=0x21c) returned 1 [0261.245] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1obvxKB7GQj04t1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1obvxkb7gqj04t1.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1obvxKB7GQj04t1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1obvxkb7gqj04t1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.245] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1obvxKB7GQj04t1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1obvxkb7gqj04t1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.245] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1obvxKB7GQj04t1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1obvxkb7gqj04t1.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1deb59d4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1deb59d4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1deb59d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3ff, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="1obvxKB7GQj04t1.lnk", cAlternateFileName="1OBVXK~1.LNK")) returned 0x55e850 [0261.246] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1deb59d4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1deb59d4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1deb59d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3ff, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="1obvxKB7GQj04t1.lnk", cAlternateFileName="1OBVXK~1.LNK")) returned 0 [0261.246] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0261.246] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1obvxKB7GQj04t1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1obvxkb7gqj04t1.lnk")) returned 1 [0261.247] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1obvxKB7GQj04t1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\1obvxkb7gqj04t1.lnk")) returned 0xffffffff [0261.247] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe48857d5, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe48857d5, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe48857d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3e4, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="270n1ChiZI_1.lnk", cAlternateFileName="270N1C~1.LNK")) returned 1 [0261.247] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.248] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.257] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.257] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.257] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0261.258] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\270n1ChiZI_1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\270n1chizi_1.lnk")) returned 0x20 [0261.258] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\270n1ChiZI_1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\270n1chizi_1.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.259] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\270n1ChiZI_1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\270n1chizi_1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.259] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3e4, lpOverlapped=0x0) returned 1 [0261.260] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3e4, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3e4, lpOverlapped=0x0) returned 1 [0261.262] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.262] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.262] CloseHandle (hObject=0x21c) returned 1 [0261.262] CloseHandle (hObject=0x210) returned 1 [0261.262] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\270n1ChiZI_1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\270n1chizi_1.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\270n1ChiZI_1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\270n1chizi_1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.262] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\270n1ChiZI_1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\270n1chizi_1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.263] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\270n1ChiZI_1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\270n1chizi_1.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe48857d5, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe48857d5, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe48857d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3e4, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="270n1ChiZI_1.lnk", cAlternateFileName="270N1C~1.LNK")) returned 0x55e790 [0261.263] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe48857d5, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe48857d5, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe48857d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3e4, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="270n1ChiZI_1.lnk", cAlternateFileName="270N1C~1.LNK")) returned 0 [0261.263] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0261.263] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\270n1ChiZI_1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\270n1chizi_1.lnk")) returned 1 [0261.264] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\270n1ChiZI_1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\270n1chizi_1.lnk")) returned 0xffffffff [0261.264] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cc1b41, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc8cc1b41, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc8cc1b41, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3fa, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="2KVS--9w1I7HQQG.lnk", cAlternateFileName="2KVS--~1.LNK")) returned 1 [0261.265] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.265] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.265] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.265] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.265] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.265] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0261.265] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2KVS--9w1I7HQQG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\2kvs--9w1i7hqqg.lnk")) returned 0x20 [0261.265] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2KVS--9w1I7HQQG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\2kvs--9w1i7hqqg.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.266] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2KVS--9w1I7HQQG.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\2kvs--9w1i7hqqg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.266] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3fa, lpOverlapped=0x0) returned 1 [0261.267] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3fa, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3fa, lpOverlapped=0x0) returned 1 [0261.269] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.269] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.269] CloseHandle (hObject=0x210) returned 1 [0261.269] CloseHandle (hObject=0x21c) returned 1 [0261.269] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2KVS--9w1I7HQQG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\2kvs--9w1i7hqqg.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2KVS--9w1I7HQQG.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\2kvs--9w1i7hqqg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.270] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2KVS--9w1I7HQQG.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\2kvs--9w1i7hqqg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.270] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2KVS--9w1I7HQQG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\2kvs--9w1i7hqqg.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cc1b41, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc8cc1b41, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc8cc1b41, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3fa, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="2KVS--9w1I7HQQG.lnk", cAlternateFileName="2KVS--~1.LNK")) returned 0x55e5d0 [0261.270] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cc1b41, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc8cc1b41, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc8cc1b41, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3fa, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="2KVS--9w1I7HQQG.lnk", cAlternateFileName="2KVS--~1.LNK")) returned 0 [0261.270] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0261.270] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2KVS--9w1I7HQQG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\2kvs--9w1i7hqqg.lnk")) returned 1 [0261.271] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2KVS--9w1I7HQQG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\2kvs--9w1i7hqqg.lnk")) returned 0xffffffff [0261.271] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f325e5, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7f325e5, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7f325e5, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="3Fk41qKybaiEKn.lnk", cAlternateFileName="3FK41Q~1.LNK")) returned 1 [0261.272] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.272] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.272] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.272] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.272] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.272] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0261.272] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Fk41qKybaiEKn.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\3fk41qkybaiekn.lnk")) returned 0x20 [0261.272] VirtualAlloc (lpAddress=0x22a0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22a0000 [0261.273] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Fk41qKybaiEKn.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\3fk41qkybaiekn.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.273] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Fk41qKybaiEKn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\3fk41qkybaiekn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.274] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2ae, lpOverlapped=0x0) returned 1 [0261.275] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2ae, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2ae, lpOverlapped=0x0) returned 1 [0261.276] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.276] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.276] CloseHandle (hObject=0x21c) returned 1 [0261.276] CloseHandle (hObject=0x210) returned 1 [0261.276] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Fk41qKybaiEKn.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\3fk41qkybaiekn.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Fk41qKybaiEKn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\3fk41qkybaiekn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.277] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Fk41qKybaiEKn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\3fk41qkybaiekn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.277] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Fk41qKybaiEKn.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\3fk41qkybaiekn.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f325e5, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7f325e5, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7f325e5, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="3Fk41qKybaiEKn.lnk", cAlternateFileName="3FK41Q~1.LNK")) returned 0x55e7d0 [0261.277] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7f325e5, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7f325e5, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7f325e5, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="3Fk41qKybaiEKn.lnk", cAlternateFileName="3FK41Q~1.LNK")) returned 0 [0261.277] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0261.277] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Fk41qKybaiEKn.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\3fk41qkybaiekn.lnk")) returned 1 [0261.279] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3Fk41qKybaiEKn.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\3fk41qkybaiekn.lnk")) returned 0xffffffff [0261.279] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd9fbc4b, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xdd9fbc4b, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdd9fbc4b, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="4vz-qweGNEXago h.lnk", cAlternateFileName="4VZ-QW~1.LNK")) returned 1 [0261.279] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.279] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.279] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.279] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.279] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.280] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0261.280] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4vz-qweGNEXago h.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\4vz-qwegnexago h.lnk")) returned 0x20 [0261.280] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4vz-qweGNEXago h.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\4vz-qwegnexago h.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.280] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4vz-qweGNEXago h.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\4vz-qwegnexago h.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.281] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x41e, lpOverlapped=0x0) returned 1 [0261.282] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x41e, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x41e, lpOverlapped=0x0) returned 1 [0261.284] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.284] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.284] CloseHandle (hObject=0x210) returned 1 [0261.284] CloseHandle (hObject=0x21c) returned 1 [0261.284] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4vz-qweGNEXago h.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\4vz-qwegnexago h.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4vz-qweGNEXago h.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\4vz-qwegnexago h.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.284] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4vz-qweGNEXago h.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\4vz-qwegnexago h.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.285] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4vz-qweGNEXago h.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\4vz-qwegnexago h.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd9fbc4b, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xdd9fbc4b, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdd9fbc4b, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="4vz-qweGNEXago h.lnk", cAlternateFileName="4VZ-QW~1.LNK")) returned 0x55e5d0 [0261.285] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd9fbc4b, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xdd9fbc4b, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdd9fbc4b, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="4vz-qweGNEXago h.lnk", cAlternateFileName="4VZ-QW~1.LNK")) returned 0 [0261.285] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0261.285] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4vz-qweGNEXago h.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\4vz-qwegnexago h.lnk")) returned 1 [0261.286] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4vz-qweGNEXago h.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\4vz-qwegnexago h.lnk")) returned 0xffffffff [0261.286] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa6218b, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7fa6218b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7fa6218b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="5iATZtFB1RdzznP.lnk", cAlternateFileName="5IATZT~1.LNK")) returned 1 [0261.287] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.287] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.287] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.287] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.287] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.287] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0261.287] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5iATZtFB1RdzznP.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\5iatztfb1rdzznp.lnk")) returned 0x20 [0261.287] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5iATZtFB1RdzznP.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\5iatztfb1rdzznp.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.288] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5iATZtFB1RdzznP.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\5iatztfb1rdzznp.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.288] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x6b8, lpOverlapped=0x0) returned 1 [0261.289] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x6b8, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x6b8, lpOverlapped=0x0) returned 1 [0261.290] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.291] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.291] CloseHandle (hObject=0x21c) returned 1 [0261.291] CloseHandle (hObject=0x210) returned 1 [0261.291] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5iATZtFB1RdzznP.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\5iatztfb1rdzznp.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5iATZtFB1RdzznP.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\5iatztfb1rdzznp.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.291] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5iATZtFB1RdzznP.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\5iatztfb1rdzznp.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.291] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5iATZtFB1RdzznP.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\5iatztfb1rdzznp.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa6218b, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7fa6218b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7fa6218b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="5iATZtFB1RdzznP.lnk", cAlternateFileName="5IATZT~1.LNK")) returned 0x55e510 [0261.292] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa6218b, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7fa6218b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7fa6218b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="5iATZtFB1RdzznP.lnk", cAlternateFileName="5IATZT~1.LNK")) returned 0 [0261.292] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.292] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5iATZtFB1RdzznP.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\5iatztfb1rdzznp.lnk")) returned 1 [0261.293] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\5iATZtFB1RdzznP.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\5iatztfb1rdzznp.lnk")) returned 0xffffffff [0261.293] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d0ae6f, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc6d0ae6f, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc6d0ae6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x48a, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="6HqpTudWoWceVCJqYhCX.ots.lnk", cAlternateFileName="6HQPTU~1.LNK")) returned 1 [0261.294] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.294] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.294] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.294] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.294] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.294] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0261.294] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6HqpTudWoWceVCJqYhCX.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6hqptudwowcevcjqyhcx.ots.lnk")) returned 0x20 [0261.294] VirtualAlloc (lpAddress=0x22a4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22a4000 [0261.295] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6HqpTudWoWceVCJqYhCX.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6hqptudwowcevcjqyhcx.ots.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.295] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6HqpTudWoWceVCJqYhCX.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6hqptudwowcevcjqyhcx.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.296] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x48a, lpOverlapped=0x0) returned 1 [0261.297] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x48a, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x48a, lpOverlapped=0x0) returned 1 [0261.298] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.298] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.298] CloseHandle (hObject=0x210) returned 1 [0261.298] CloseHandle (hObject=0x21c) returned 1 [0261.299] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6HqpTudWoWceVCJqYhCX.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6hqptudwowcevcjqyhcx.ots.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6HqpTudWoWceVCJqYhCX.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6hqptudwowcevcjqyhcx.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.299] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6HqpTudWoWceVCJqYhCX.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6hqptudwowcevcjqyhcx.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.299] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6HqpTudWoWceVCJqYhCX.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6hqptudwowcevcjqyhcx.ots.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d0ae6f, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc6d0ae6f, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc6d0ae6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x48a, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="6HqpTudWoWceVCJqYhCX.ots.lnk", cAlternateFileName="6HQPTU~1.LNK")) returned 0x55e910 [0261.299] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6d0ae6f, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc6d0ae6f, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc6d0ae6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x48a, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="6HqpTudWoWceVCJqYhCX.ots.lnk", cAlternateFileName="6HQPTU~1.LNK")) returned 0 [0261.299] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0261.299] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6HqpTudWoWceVCJqYhCX.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6hqptudwowcevcjqyhcx.ots.lnk")) returned 1 [0261.314] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6HqpTudWoWceVCJqYhCX.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6hqptudwowcevcjqyhcx.ots.lnk")) returned 0xffffffff [0261.315] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788facb9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2a52691b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a52691b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="6MHrGlVxhYS.lnk", cAlternateFileName="6MHRGL~1.LNK")) returned 1 [0261.315] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.315] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.315] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.315] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.315] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.315] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0261.316] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6MHrGlVxhYS.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6mhrglvxhys.lnk")) returned 0x20 [0261.316] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6MHrGlVxhYS.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6mhrglvxhys.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.317] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6MHrGlVxhYS.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6mhrglvxhys.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.317] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x389, lpOverlapped=0x0) returned 1 [0261.318] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x389, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x389, lpOverlapped=0x0) returned 1 [0261.320] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.320] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.320] CloseHandle (hObject=0x21c) returned 1 [0261.320] CloseHandle (hObject=0x210) returned 1 [0261.320] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6MHrGlVxhYS.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6mhrglvxhys.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6MHrGlVxhYS.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6mhrglvxhys.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.320] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6MHrGlVxhYS.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6mhrglvxhys.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.321] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6MHrGlVxhYS.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6mhrglvxhys.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788facb9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2a52691b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a52691b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="6MHrGlVxhYS.lnk", cAlternateFileName="6MHRGL~1.LNK")) returned 0x55e390 [0261.321] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788facb9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2a52691b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a52691b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="6MHrGlVxhYS.lnk", cAlternateFileName="6MHRGL~1.LNK")) returned 0 [0261.321] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0261.321] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6MHrGlVxhYS.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6mhrglvxhys.lnk")) returned 1 [0261.322] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6MHrGlVxhYS.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\6mhrglvxhys.lnk")) returned 0xffffffff [0261.322] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1aa50e9, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe1aa50e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe1aac5ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="7eWaq5.lnk", cAlternateFileName="")) returned 1 [0261.323] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.323] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.323] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.323] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.323] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.323] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0261.323] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7eWaq5.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7ewaq5.lnk")) returned 0x20 [0261.324] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7eWaq5.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7ewaq5.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.324] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7eWaq5.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7ewaq5.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.325] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x460, lpOverlapped=0x0) returned 1 [0261.326] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x460, lpOverlapped=0x0) returned 1 [0261.327] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.327] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.327] CloseHandle (hObject=0x210) returned 1 [0261.327] CloseHandle (hObject=0x21c) returned 1 [0261.327] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7eWaq5.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7ewaq5.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7eWaq5.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7ewaq5.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.328] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7eWaq5.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7ewaq5.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.328] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7eWaq5.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7ewaq5.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1aa50e9, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe1aa50e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe1aac5ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="7eWaq5.lnk", cAlternateFileName="")) returned 0x55e750 [0261.328] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1aa50e9, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe1aa50e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe1aac5ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="7eWaq5.lnk", cAlternateFileName="")) returned 0 [0261.328] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0261.328] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7eWaq5.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7ewaq5.lnk")) returned 1 [0261.329] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7eWaq5.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7ewaq5.lnk")) returned 0xffffffff [0261.329] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee328fc, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7ee328fc, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7ee328fc, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="7lbgTAC0tGktM8kIYBG.lnk", cAlternateFileName="7LBGTA~1.LNK")) returned 1 [0261.330] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.330] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.330] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.330] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.330] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.330] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0261.330] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7lbgTAC0tGktM8kIYBG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7lbgtac0tgktm8kiybg.lnk")) returned 0x20 [0261.331] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7lbgTAC0tGktM8kIYBG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7lbgtac0tgktm8kiybg.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.331] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7lbgTAC0tGktM8kIYBG.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7lbgtac0tgktm8kiybg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.332] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x485, lpOverlapped=0x0) returned 1 [0261.333] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x485, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x485, lpOverlapped=0x0) returned 1 [0261.334] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.334] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.334] CloseHandle (hObject=0x21c) returned 1 [0261.334] CloseHandle (hObject=0x210) returned 1 [0261.335] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7lbgTAC0tGktM8kIYBG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7lbgtac0tgktm8kiybg.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7lbgTAC0tGktM8kIYBG.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7lbgtac0tgktm8kiybg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.335] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7lbgTAC0tGktM8kIYBG.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7lbgtac0tgktm8kiybg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.335] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7lbgTAC0tGktM8kIYBG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7lbgtac0tgktm8kiybg.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee328fc, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7ee328fc, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7ee328fc, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="7lbgTAC0tGktM8kIYBG.lnk", cAlternateFileName="7LBGTA~1.LNK")) returned 0x55e510 [0261.335] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee328fc, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7ee328fc, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7ee328fc, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="7lbgTAC0tGktM8kIYBG.lnk", cAlternateFileName="7LBGTA~1.LNK")) returned 0 [0261.335] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.335] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7lbgTAC0tGktM8kIYBG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7lbgtac0tgktm8kiybg.lnk")) returned 1 [0261.337] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\7lbgTAC0tGktM8kIYBG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\7lbgtac0tgktm8kiybg.lnk")) returned 0xffffffff [0261.337] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2674eb2d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2674eb2d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2674eb2d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="8adwgo6-Bnt-dki97r.lnk", cAlternateFileName="8ADWGO~1.LNK")) returned 1 [0261.337] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.337] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.337] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.338] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.338] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.338] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0261.338] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8adwgo6-Bnt-dki97r.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8adwgo6-bnt-dki97r.lnk")) returned 0x20 [0261.338] VirtualAlloc (lpAddress=0x22a8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22a8000 [0261.339] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8adwgo6-Bnt-dki97r.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8adwgo6-bnt-dki97r.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.339] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8adwgo6-Bnt-dki97r.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8adwgo6-bnt-dki97r.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.340] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3c1, lpOverlapped=0x0) returned 1 [0261.341] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3c1, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3c1, lpOverlapped=0x0) returned 1 [0261.342] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.342] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.342] CloseHandle (hObject=0x210) returned 1 [0261.342] CloseHandle (hObject=0x21c) returned 1 [0261.342] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8adwgo6-Bnt-dki97r.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8adwgo6-bnt-dki97r.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8adwgo6-Bnt-dki97r.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8adwgo6-bnt-dki97r.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.343] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8adwgo6-Bnt-dki97r.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8adwgo6-bnt-dki97r.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.343] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8adwgo6-Bnt-dki97r.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8adwgo6-bnt-dki97r.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2674eb2d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2674eb2d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2674eb2d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="8adwgo6-Bnt-dki97r.lnk", cAlternateFileName="8ADWGO~1.LNK")) returned 0x55e750 [0261.343] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2674eb2d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2674eb2d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2674eb2d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="8adwgo6-Bnt-dki97r.lnk", cAlternateFileName="8ADWGO~1.LNK")) returned 0 [0261.343] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0261.343] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8adwgo6-Bnt-dki97r.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8adwgo6-bnt-dki97r.lnk")) returned 1 [0261.344] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8adwgo6-Bnt-dki97r.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8adwgo6-bnt-dki97r.lnk")) returned 0xffffffff [0261.345] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa88468, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2b5d6f80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b5d6f80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x564, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="8gkv.lnk", cAlternateFileName="")) returned 1 [0261.345] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.345] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.345] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.345] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.345] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.345] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0261.345] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8gkv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8gkv.lnk")) returned 0x20 [0261.346] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8gkv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8gkv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.346] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8gkv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8gkv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.347] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x564, lpOverlapped=0x0) returned 1 [0261.351] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x564, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x564, lpOverlapped=0x0) returned 1 [0261.352] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.352] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.352] CloseHandle (hObject=0x21c) returned 1 [0261.353] CloseHandle (hObject=0x210) returned 1 [0261.353] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8gkv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8gkv.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8gkv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8gkv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.353] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8gkv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8gkv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.353] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8gkv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8gkv.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa88468, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2b5d6f80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b5d6f80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x564, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="8gkv.lnk", cAlternateFileName="")) returned 0x55e890 [0261.354] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa88468, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2b5d6f80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b5d6f80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x564, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="8gkv.lnk", cAlternateFileName="")) returned 0 [0261.354] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0261.354] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8gkv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8gkv.lnk")) returned 1 [0261.355] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8gkv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\8gkv.lnk")) returned 0xffffffff [0261.355] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f1d482, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe0f1d482, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe0f20f2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3c6, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="95RH.lnk", cAlternateFileName="")) returned 1 [0261.355] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.355] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.356] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.356] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0261.356] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\95RH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\95rh.lnk")) returned 0x20 [0261.356] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\95RH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\95rh.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.357] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\95RH.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\95rh.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.357] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3c6, lpOverlapped=0x0) returned 1 [0261.359] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3c6, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3c6, lpOverlapped=0x0) returned 1 [0261.360] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.360] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.360] CloseHandle (hObject=0x210) returned 1 [0261.360] CloseHandle (hObject=0x21c) returned 1 [0261.360] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\95RH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\95rh.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\95RH.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\95rh.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.361] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\95RH.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\95rh.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.361] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\95RH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\95rh.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f1d482, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe0f1d482, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe0f20f2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3c6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="95RH.lnk", cAlternateFileName="")) returned 0x55e750 [0261.361] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f1d482, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe0f1d482, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe0f20f2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3c6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="95RH.lnk", cAlternateFileName="")) returned 0 [0261.361] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0261.361] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\95RH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\95rh.lnk")) returned 1 [0261.362] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\95RH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\95rh.lnk")) returned 0xffffffff [0261.362] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47c6c75, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe47c6c75, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe47c6c75, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="9bUTXvZ.lnk", cAlternateFileName="")) returned 1 [0261.404] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.405] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.405] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.405] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0261.405] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9bUTXvZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9butxvz.lnk")) returned 0x20 [0261.405] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9bUTXvZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9butxvz.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.406] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9bUTXvZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9butxvz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.407] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3d7, lpOverlapped=0x0) returned 1 [0261.408] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3d7, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3d7, lpOverlapped=0x0) returned 1 [0261.409] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.409] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.409] CloseHandle (hObject=0x21c) returned 1 [0261.409] CloseHandle (hObject=0x210) returned 1 [0261.410] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9bUTXvZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9butxvz.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9bUTXvZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9butxvz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.410] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9bUTXvZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9butxvz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.410] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9bUTXvZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9butxvz.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47c6c75, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe47c6c75, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe47c6c75, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="9bUTXvZ.lnk", cAlternateFileName="")) returned 0x55e510 [0261.410] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47c6c75, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe47c6c75, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe47c6c75, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="9bUTXvZ.lnk", cAlternateFileName="")) returned 0 [0261.410] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.411] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9bUTXvZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9butxvz.lnk")) returned 1 [0261.412] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9bUTXvZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9butxvz.lnk")) returned 0xffffffff [0261.412] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0c2194a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe0c2194a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe0c61991, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="9xZXIJPvpfTMPJSEH.lnk", cAlternateFileName="9XZXIJ~1.LNK")) returned 1 [0261.412] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.412] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.412] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.413] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.413] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0261.413] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9xZXIJPvpfTMPJSEH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9xzxijpvpftmpjseh.lnk")) returned 0x20 [0261.413] VirtualAlloc (lpAddress=0x22ac000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22ac000 [0261.414] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9xZXIJPvpfTMPJSEH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9xzxijpvpftmpjseh.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.414] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9xZXIJPvpfTMPJSEH.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9xzxijpvpftmpjseh.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.415] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x499, lpOverlapped=0x0) returned 1 [0261.416] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x499, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x499, lpOverlapped=0x0) returned 1 [0261.417] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.417] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.417] CloseHandle (hObject=0x210) returned 1 [0261.417] CloseHandle (hObject=0x21c) returned 1 [0261.417] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9xZXIJPvpfTMPJSEH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9xzxijpvpftmpjseh.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9xZXIJPvpfTMPJSEH.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9xzxijpvpftmpjseh.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.418] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9xZXIJPvpfTMPJSEH.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9xzxijpvpftmpjseh.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.418] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9xZXIJPvpfTMPJSEH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9xzxijpvpftmpjseh.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0c2194a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe0c2194a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe0c61991, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="9xZXIJPvpfTMPJSEH.lnk", cAlternateFileName="9XZXIJ~1.LNK")) returned 0x55e5d0 [0261.418] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0c2194a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe0c2194a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe0c61991, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="9xZXIJPvpfTMPJSEH.lnk", cAlternateFileName="9XZXIJ~1.LNK")) returned 0 [0261.418] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0261.418] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9xZXIJPvpfTMPJSEH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9xzxijpvpftmpjseh.lnk")) returned 1 [0261.419] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9xZXIJPvpfTMPJSEH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\9xzxijpvpftmpjseh.lnk")) returned 0xffffffff [0261.419] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc873e465, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc873e465, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc873e465, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="AFlQACoQ_XkZ5Kbtg.lnk", cAlternateFileName="AFLQAC~1.LNK")) returned 1 [0261.420] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.420] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.420] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.420] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0261.420] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AFlQACoQ_XkZ5Kbtg.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aflqacoq_xkz5kbtg.lnk")) returned 0x20 [0261.421] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AFlQACoQ_XkZ5Kbtg.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aflqacoq_xkz5kbtg.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.421] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AFlQACoQ_XkZ5Kbtg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aflqacoq_xkz5kbtg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.421] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2bd, lpOverlapped=0x0) returned 1 [0261.422] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2bd, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2bd, lpOverlapped=0x0) returned 1 [0261.424] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.424] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.424] CloseHandle (hObject=0x21c) returned 1 [0261.424] CloseHandle (hObject=0x210) returned 1 [0261.424] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AFlQACoQ_XkZ5Kbtg.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aflqacoq_xkz5kbtg.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AFlQACoQ_XkZ5Kbtg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aflqacoq_xkz5kbtg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.424] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AFlQACoQ_XkZ5Kbtg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aflqacoq_xkz5kbtg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.425] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AFlQACoQ_XkZ5Kbtg.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aflqacoq_xkz5kbtg.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc873e465, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc873e465, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc873e465, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AFlQACoQ_XkZ5Kbtg.lnk", cAlternateFileName="AFLQAC~1.LNK")) returned 0x55e2d0 [0261.425] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc873e465, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc873e465, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc873e465, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AFlQACoQ_XkZ5Kbtg.lnk", cAlternateFileName="AFLQAC~1.LNK")) returned 0 [0261.425] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0261.425] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AFlQACoQ_XkZ5Kbtg.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aflqacoq_xkz5kbtg.lnk")) returned 1 [0261.428] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AFlQACoQ_XkZ5Kbtg.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aflqacoq_xkz5kbtg.lnk")) returned 0xffffffff [0261.429] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78cdabd6, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x78cdabd6, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x78cdabd6, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x700, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="AiBxNvuTw_1M7cqH.lnk", cAlternateFileName="AIBXNV~1.LNK")) returned 1 [0261.429] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.429] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.429] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.429] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.429] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.429] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0261.430] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AiBxNvuTw_1M7cqH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aibxnvutw_1m7cqh.lnk")) returned 0x20 [0261.430] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AiBxNvuTw_1M7cqH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aibxnvutw_1m7cqh.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.430] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AiBxNvuTw_1M7cqH.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aibxnvutw_1m7cqh.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.431] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x700, lpOverlapped=0x0) returned 1 [0261.432] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x700, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x700, lpOverlapped=0x0) returned 1 [0261.433] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.433] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.433] CloseHandle (hObject=0x210) returned 1 [0261.433] CloseHandle (hObject=0x21c) returned 1 [0261.433] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AiBxNvuTw_1M7cqH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aibxnvutw_1m7cqh.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AiBxNvuTw_1M7cqH.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aibxnvutw_1m7cqh.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.434] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AiBxNvuTw_1M7cqH.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aibxnvutw_1m7cqh.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.434] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AiBxNvuTw_1M7cqH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aibxnvutw_1m7cqh.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78cdabd6, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x78cdabd6, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x78cdabd6, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x700, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AiBxNvuTw_1M7cqH.lnk", cAlternateFileName="AIBXNV~1.LNK")) returned 0x55e2d0 [0261.434] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78cdabd6, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x78cdabd6, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x78cdabd6, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x700, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AiBxNvuTw_1M7cqH.lnk", cAlternateFileName="AIBXNV~1.LNK")) returned 0 [0261.434] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0261.434] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AiBxNvuTw_1M7cqH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aibxnvutw_1m7cqh.lnk")) returned 1 [0261.435] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AiBxNvuTw_1M7cqH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aibxnvutw_1m7cqh.lnk")) returned 0xffffffff [0261.436] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d00bd5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d3ac71c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d3ac71c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ALx4yvVwcZQdL.lnk", cAlternateFileName="ALX4YV~1.LNK")) returned 1 [0261.436] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.436] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.436] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.436] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0261.436] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ALx4yvVwcZQdL.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\alx4yvvwczqdl.lnk")) returned 0x20 [0261.437] VirtualAlloc (lpAddress=0x22b0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22b0000 [0261.437] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ALx4yvVwcZQdL.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\alx4yvvwczqdl.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.437] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ALx4yvVwcZQdL.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\alx4yvvwczqdl.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.438] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x595, lpOverlapped=0x0) returned 1 [0261.439] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x595, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x595, lpOverlapped=0x0) returned 1 [0261.440] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.440] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.440] CloseHandle (hObject=0x21c) returned 1 [0261.440] CloseHandle (hObject=0x210) returned 1 [0261.441] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ALx4yvVwcZQdL.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\alx4yvvwczqdl.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ALx4yvVwcZQdL.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\alx4yvvwczqdl.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.441] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ALx4yvVwcZQdL.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\alx4yvvwczqdl.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.441] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ALx4yvVwcZQdL.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\alx4yvvwczqdl.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d00bd5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d3ac71c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d3ac71c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ALx4yvVwcZQdL.lnk", cAlternateFileName="ALX4YV~1.LNK")) returned 0x55e850 [0261.442] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d00bd5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d3ac71c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d3ac71c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ALx4yvVwcZQdL.lnk", cAlternateFileName="ALX4YV~1.LNK")) returned 0 [0261.442] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0261.442] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ALx4yvVwcZQdL.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\alx4yvvwczqdl.lnk")) returned 1 [0261.443] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ALx4yvVwcZQdL.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\alx4yvvwczqdl.lnk")) returned 0xffffffff [0261.443] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd537c4f1, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd537c4f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xd537c4f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="AOn1rEEg25j0A.lnk", cAlternateFileName="AON1RE~1.LNK")) returned 1 [0261.444] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.444] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.444] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.444] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.444] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.444] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0261.444] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AOn1rEEg25j0A.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aon1reeg25j0a.lnk")) returned 0x20 [0261.445] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AOn1rEEg25j0A.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aon1reeg25j0a.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.445] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AOn1rEEg25j0A.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aon1reeg25j0a.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.445] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x56c, lpOverlapped=0x0) returned 1 [0261.446] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x56c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x56c, lpOverlapped=0x0) returned 1 [0261.448] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.448] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.448] CloseHandle (hObject=0x210) returned 1 [0261.448] CloseHandle (hObject=0x21c) returned 1 [0261.448] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AOn1rEEg25j0A.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aon1reeg25j0a.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AOn1rEEg25j0A.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aon1reeg25j0a.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.448] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AOn1rEEg25j0A.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aon1reeg25j0a.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.448] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AOn1rEEg25j0A.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aon1reeg25j0a.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd537c4f1, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd537c4f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xd537c4f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AOn1rEEg25j0A.lnk", cAlternateFileName="AON1RE~1.LNK")) returned 0x55e390 [0261.449] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd537c4f1, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd537c4f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xd537c4f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AOn1rEEg25j0A.lnk", cAlternateFileName="AON1RE~1.LNK")) returned 0 [0261.449] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0261.449] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AOn1rEEg25j0A.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aon1reeg25j0a.lnk")) returned 1 [0261.450] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AOn1rEEg25j0A.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aon1reeg25j0a.lnk")) returned 0xffffffff [0261.450] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d3ac71c, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x1e94a28e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e94a28e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4ab, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="aQdi_mAs.lnk", cAlternateFileName="")) returned 1 [0261.451] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.451] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.451] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.451] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0261.451] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aQdi_mAs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aqdi_mas.lnk")) returned 0x20 [0261.451] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aQdi_mAs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aqdi_mas.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.452] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aQdi_mAs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aqdi_mas.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.452] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x4ab, lpOverlapped=0x0) returned 1 [0261.453] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x4ab, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x4ab, lpOverlapped=0x0) returned 1 [0261.454] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.454] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.455] CloseHandle (hObject=0x21c) returned 1 [0261.455] CloseHandle (hObject=0x210) returned 1 [0261.455] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aQdi_mAs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aqdi_mas.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aQdi_mAs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aqdi_mas.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.455] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aQdi_mAs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aqdi_mas.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.455] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aQdi_mAs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aqdi_mas.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d3ac71c, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x1e94a28e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e94a28e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4ab, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="aQdi_mAs.lnk", cAlternateFileName="")) returned 0x55e5d0 [0261.455] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d3ac71c, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x1e94a28e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e94a28e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4ab, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="aQdi_mAs.lnk", cAlternateFileName="")) returned 0 [0261.455] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0261.456] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aQdi_mAs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aqdi_mas.lnk")) returned 1 [0261.457] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aQdi_mAs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\aqdi_mas.lnk")) returned 0xffffffff [0261.457] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad1fc938, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xfc9bc882, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9bc882, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="AutomaticDestinations", cAlternateFileName="AUTOMA~1")) returned 1 [0261.457] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad1fc938, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xfc9bc882, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9bc882, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0261.457] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad1fc938, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xfc9bc882, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9bc882, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0261.458] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc7c4616, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc7c4616, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc7ce3f1, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x104, cFileName="162797d679096999.automaticDestinations-ms", cAlternateFileName="162797~1.AUT")) returned 1 [0261.458] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc865920, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc865920, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc866bda, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x390036, dwReserved1=0x390039, cFileName="1b6ebacd7cd2f25a.automaticDestinations-ms", cAlternateFileName="1B6EBA~1.AUT")) returned 1 [0261.459] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8e0cb1, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc8e0cb1, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc8ea8a2, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x320066, dwReserved1=0x610035, cFileName="1bc9bbbe61f14501.automaticDestinations-ms", cAlternateFileName="1BC9BB~1.AUT")) returned 1 [0261.460] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc687169, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc687169, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc6980f1, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x350034, dwReserved1=0x310030, cFileName="319f01bf9fe00f2d.automaticDestinations-ms", cAlternateFileName="319F01~1.AUT")) returned 1 [0261.461] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc806631, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc806631, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc80b397, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x660030, dwReserved1=0x640032, cFileName="5175b273ceba776b.automaticDestinations-ms", cAlternateFileName="5175B2~1.AUT")) returned 1 [0261.462] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cccb199, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7cccb199, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x2b75487f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2b304, dwReserved0=0x370037, dwReserved1=0x620036, cFileName="5f7b5f1e01b83767.automaticDestinations-ms", cAlternateFileName="5F7B5F~1.AUT")) returned 1 [0261.463] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc79fc22, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc79fc22, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc7a247f, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x370033, dwReserved1=0x370036, cFileName="61ebb1e65cfcb8da.automaticDestinations-ms", cAlternateFileName="61EBB1~1.AUT")) returned 1 [0261.464] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc90b8b4, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc90b8b4, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc90cbd6, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x380062, dwReserved1=0x610064, cFileName="6d2bac8f1edf6668.automaticDestinations-ms", cAlternateFileName="6D2BAC~1.AUT")) returned 1 [0261.464] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc89da90, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc89da90, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc89ee20, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x360036, dwReserved1=0x380036, cFileName="75668a91ce73b054.automaticDestinations-ms", cAlternateFileName="75668A~1.AUT")) returned 1 [0261.465] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc997ea6, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc997ea6, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9992be, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x300062, dwReserved1=0x340035, cFileName="78f0afb5bd4bb278.automaticDestinations-ms", cAlternateFileName="78F0AF~1.AUT")) returned 1 [0261.466] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6597e99, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd6597e99, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xbaf4e259, ftLastWriteTime.dwHighDateTime=0x1d7b056, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x320062, dwReserved1=0x380037, cFileName="7e4dca80246863e3.automaticDestinations-ms", cAlternateFileName="7E4DCA~1.AUT")) returned 1 [0261.467] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc840e11, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc840e11, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc842181, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x330036, dwReserved1=0x330065, cFileName="80d13f95c2c02af9.automaticDestinations-ms", cAlternateFileName="80D13F~1.AUT")) returned 1 [0261.468] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc96abfa, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc96abfa, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc96bf6b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x610032, dwReserved1=0x390066, cFileName="9c08ad74ad8708df.automaticDestinations-ms", cAlternateFileName="9C08AD~1.AUT")) returned 1 [0261.469] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc7568e2, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc7568e2, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc757bed, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x380030, dwReserved1=0x660064, cFileName="9cfafb05ce914942.automaticDestinations-ms", cAlternateFileName="9CFAFB~1.AUT")) returned 1 [0261.469] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a384c9, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4a384c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4af7079, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x390034, dwReserved1=0x320034, cFileName="9d1f905ce5044aee.automaticDestinations-ms", cAlternateFileName="9D1F90~1.AUT")) returned 1 [0261.470] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc6eb1d2, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc6eb1d2, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc6ec503, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x610034, dwReserved1=0x650065, cFileName="b8ab77100df80ab2.automaticDestinations-ms", cAlternateFileName="B8AB77~1.AUT")) returned 1 [0261.471] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc72bcc8, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc72bcc8, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc72d15e, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x610030, dwReserved1=0x320062, cFileName="b8b3a97bfbf120b6.automaticDestinations-ms", cAlternateFileName="B8B3A9~1.AUT")) returned 1 [0261.474] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc944e34, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc944e34, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9475f5, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x300032, dwReserved1=0x360062, cFileName="d00655d2aa12ff6d.automaticDestinations-ms", cAlternateFileName="D00655~1.AUT")) returned 1 [0261.475] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad222b42, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad222b42, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x2b62368e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x660066, dwReserved1=0x640036, cFileName="f01b4d95cf55d32a.automaticDestinations-ms", cAlternateFileName="F01B4D~1.AUT")) returned 1 [0261.475] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc9bc882, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc9bc882, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9bef75, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x330064, dwReserved1=0x610032, cFileName="fb3b0dbfee58fac8.automaticDestinations-ms", cAlternateFileName="FB3B0D~1.AUT")) returned 1 [0261.476] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc9bc882, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc9bc882, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9bef75, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x330064, dwReserved1=0x610032, cFileName="fb3b0dbfee58fac8.automaticDestinations-ms", cAlternateFileName="FB3B0D~1.AUT")) returned 0 [0261.476] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0261.476] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e00aabf, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7e00aabf, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7e00aabf, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x35656566, dwReserved1=0x63616638, cFileName="AV_xxjsK txE9KQ.lnk", cAlternateFileName="AV_XXJ~1.LNK")) returned 1 [0261.477] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.477] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.477] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.477] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0261.477] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AV_xxjsK txE9KQ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\av_xxjsk txe9kq.lnk")) returned 0x20 [0261.478] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AV_xxjsK txE9KQ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\av_xxjsk txe9kq.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.478] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AV_xxjsK txE9KQ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\av_xxjsk txe9kq.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.479] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x414, lpOverlapped=0x0) returned 1 [0261.480] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x414, lpOverlapped=0x0) returned 1 [0261.481] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.481] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.481] CloseHandle (hObject=0x210) returned 1 [0261.482] CloseHandle (hObject=0x21c) returned 1 [0261.482] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AV_xxjsK txE9KQ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\av_xxjsk txe9kq.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AV_xxjsK txE9KQ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\av_xxjsk txe9kq.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.482] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AV_xxjsK txE9KQ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\av_xxjsk txe9kq.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.482] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AV_xxjsK txE9KQ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\av_xxjsk txe9kq.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e00aabf, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7e00aabf, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7e00aabf, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AV_xxjsK txE9KQ.lnk", cAlternateFileName="AV_XXJ~1.LNK")) returned 0x55e890 [0261.483] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e00aabf, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7e00aabf, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7e00aabf, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="AV_xxjsK txE9KQ.lnk", cAlternateFileName="AV_XXJ~1.LNK")) returned 0 [0261.483] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0261.483] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AV_xxjsK txE9KQ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\av_xxjsk txe9kq.lnk")) returned 1 [0261.484] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AV_xxjsK txE9KQ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\av_xxjsk txe9kq.lnk")) returned 0xffffffff [0261.484] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e05700f, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x27bca215, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27bca215, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="BdHdcndlyia--o2TJO.lnk", cAlternateFileName="BDHDCN~1.LNK")) returned 1 [0261.485] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.485] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.485] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.485] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0261.485] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BdHdcndlyia--o2TJO.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bdhdcndlyia--o2tjo.lnk")) returned 0x20 [0261.485] VirtualAlloc (lpAddress=0x22b4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22b4000 [0261.486] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BdHdcndlyia--o2TJO.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bdhdcndlyia--o2tjo.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.486] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BdHdcndlyia--o2TJO.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bdhdcndlyia--o2tjo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.487] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3a0, lpOverlapped=0x0) returned 1 [0261.514] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3a0, lpOverlapped=0x0) returned 1 [0261.515] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.515] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.515] CloseHandle (hObject=0x21c) returned 1 [0261.515] CloseHandle (hObject=0x210) returned 1 [0261.515] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BdHdcndlyia--o2TJO.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bdhdcndlyia--o2tjo.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BdHdcndlyia--o2TJO.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bdhdcndlyia--o2tjo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.516] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BdHdcndlyia--o2TJO.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bdhdcndlyia--o2tjo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.516] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BdHdcndlyia--o2TJO.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bdhdcndlyia--o2tjo.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e05700f, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x27bca215, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27bca215, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="BdHdcndlyia--o2TJO.lnk", cAlternateFileName="BDHDCN~1.LNK")) returned 0x55e510 [0261.516] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e05700f, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x27bca215, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27bca215, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="BdHdcndlyia--o2TJO.lnk", cAlternateFileName="BDHDCN~1.LNK")) returned 0 [0261.516] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.516] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BdHdcndlyia--o2TJO.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bdhdcndlyia--o2tjo.lnk")) returned 1 [0261.518] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BdHdcndlyia--o2TJO.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bdhdcndlyia--o2tjo.lnk")) returned 0xffffffff [0261.518] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc860d1db, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc860d1db, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc860d1db, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="BEL0Hf.lnk", cAlternateFileName="")) returned 1 [0261.518] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.518] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.519] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.519] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0261.519] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BEL0Hf.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bel0hf.lnk")) returned 0x20 [0261.520] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BEL0Hf.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bel0hf.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.520] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BEL0Hf.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bel0hf.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.521] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3e5, lpOverlapped=0x0) returned 1 [0261.522] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3e5, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3e5, lpOverlapped=0x0) returned 1 [0261.523] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.523] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.523] CloseHandle (hObject=0x210) returned 1 [0261.523] CloseHandle (hObject=0x21c) returned 1 [0261.524] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BEL0Hf.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bel0hf.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BEL0Hf.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bel0hf.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.524] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BEL0Hf.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bel0hf.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.524] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BEL0Hf.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bel0hf.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc860d1db, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc860d1db, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc860d1db, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="BEL0Hf.lnk", cAlternateFileName="")) returned 0x55e5d0 [0261.525] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc860d1db, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc860d1db, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc860d1db, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="BEL0Hf.lnk", cAlternateFileName="")) returned 0 [0261.525] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0261.525] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BEL0Hf.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bel0hf.lnk")) returned 1 [0261.526] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BEL0Hf.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bel0hf.lnk")) returned 0xffffffff [0261.526] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14a2b1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d14a2b1, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d14a2b1, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="BJW1-4TBmjzVeS tFS.lnk", cAlternateFileName="BJW1-4~1.LNK")) returned 1 [0261.527] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.527] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.527] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.527] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0261.527] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BJW1-4TBmjzVeS tFS.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bjw1-4tbmjzves tfs.lnk")) returned 0x20 [0261.528] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BJW1-4TBmjzVeS tFS.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bjw1-4tbmjzves tfs.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.528] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BJW1-4TBmjzVeS tFS.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bjw1-4tbmjzves tfs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.529] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2c2, lpOverlapped=0x0) returned 1 [0261.530] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2c2, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2c2, lpOverlapped=0x0) returned 1 [0261.531] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.531] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.531] CloseHandle (hObject=0x21c) returned 1 [0261.531] CloseHandle (hObject=0x210) returned 1 [0261.532] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BJW1-4TBmjzVeS tFS.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bjw1-4tbmjzves tfs.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BJW1-4TBmjzVeS tFS.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bjw1-4tbmjzves tfs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.532] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BJW1-4TBmjzVeS tFS.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bjw1-4tbmjzves tfs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.532] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BJW1-4TBmjzVeS tFS.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bjw1-4tbmjzves tfs.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14a2b1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d14a2b1, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d14a2b1, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="BJW1-4TBmjzVeS tFS.lnk", cAlternateFileName="BJW1-4~1.LNK")) returned 0x55e8d0 [0261.532] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14a2b1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d14a2b1, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d14a2b1, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="BJW1-4TBmjzVeS tFS.lnk", cAlternateFileName="BJW1-4~1.LNK")) returned 0 [0261.532] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0261.532] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BJW1-4TBmjzVeS tFS.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bjw1-4tbmjzves tfs.lnk")) returned 1 [0261.534] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BJW1-4TBmjzVeS tFS.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\bjw1-4tbmjzves tfs.lnk")) returned 0xffffffff [0261.534] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x793f65aa, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x793f65aa, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x793f65aa, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="boIZ.lnk", cAlternateFileName="")) returned 1 [0261.534] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.537] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.537] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.537] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0261.537] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\boIZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\boiz.lnk")) returned 0x20 [0261.537] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\boIZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\boiz.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.538] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\boIZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\boiz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.539] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x454, lpOverlapped=0x0) returned 1 [0261.540] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x454, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x454, lpOverlapped=0x0) returned 1 [0261.541] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.541] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.541] CloseHandle (hObject=0x210) returned 1 [0261.541] CloseHandle (hObject=0x21c) returned 1 [0261.541] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\boIZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\boiz.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\boIZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\boiz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.542] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\boIZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\boiz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.542] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\boIZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\boiz.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x793f65aa, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x793f65aa, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x793f65aa, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="boIZ.lnk", cAlternateFileName="")) returned 0x55e910 [0261.542] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x793f65aa, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x793f65aa, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x793f65aa, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="boIZ.lnk", cAlternateFileName="")) returned 0 [0261.542] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0261.542] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\boIZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\boiz.lnk")) returned 1 [0261.544] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\boIZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\boiz.lnk")) returned 0xffffffff [0261.544] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dc91e0, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc9dc91e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc9dca5e6, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="BRFxsko.lnk", cAlternateFileName="")) returned 1 [0261.544] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.544] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.555] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.555] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0261.555] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BRFxsko.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\brfxsko.lnk")) returned 0x20 [0261.555] VirtualAlloc (lpAddress=0x22b8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22b8000 [0261.556] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BRFxsko.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\brfxsko.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.557] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BRFxsko.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\brfxsko.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.557] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3c9, lpOverlapped=0x0) returned 1 [0261.558] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3c9, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3c9, lpOverlapped=0x0) returned 1 [0261.560] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.560] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.560] CloseHandle (hObject=0x21c) returned 1 [0261.560] CloseHandle (hObject=0x210) returned 1 [0261.560] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BRFxsko.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\brfxsko.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BRFxsko.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\brfxsko.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.560] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BRFxsko.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\brfxsko.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.561] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BRFxsko.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\brfxsko.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dc91e0, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc9dc91e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc9dca5e6, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="BRFxsko.lnk", cAlternateFileName="")) returned 0x55e5d0 [0261.561] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dc91e0, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc9dc91e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc9dca5e6, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="BRFxsko.lnk", cAlternateFileName="")) returned 0 [0261.561] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0261.561] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BRFxsko.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\brfxsko.lnk")) returned 1 [0261.562] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BRFxsko.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\brfxsko.lnk")) returned 0xffffffff [0261.562] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc68928a9, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xdece85ba, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdece85ba, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="BuEKJlvF9UEYrFNSTJA.lnk", cAlternateFileName="BUEKJL~1.LNK")) returned 1 [0261.563] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.563] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.563] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.563] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0261.563] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BuEKJlvF9UEYrFNSTJA.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\buekjlvf9ueyrfnstja.lnk")) returned 0x20 [0261.564] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BuEKJlvF9UEYrFNSTJA.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\buekjlvf9ueyrfnstja.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.564] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BuEKJlvF9UEYrFNSTJA.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\buekjlvf9ueyrfnstja.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.565] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x436, lpOverlapped=0x0) returned 1 [0261.566] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x436, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x436, lpOverlapped=0x0) returned 1 [0261.567] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.567] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.567] CloseHandle (hObject=0x210) returned 1 [0261.567] CloseHandle (hObject=0x21c) returned 1 [0261.567] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BuEKJlvF9UEYrFNSTJA.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\buekjlvf9ueyrfnstja.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BuEKJlvF9UEYrFNSTJA.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\buekjlvf9ueyrfnstja.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.584] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BuEKJlvF9UEYrFNSTJA.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\buekjlvf9ueyrfnstja.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.584] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BuEKJlvF9UEYrFNSTJA.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\buekjlvf9ueyrfnstja.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc68928a9, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xdece85ba, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdece85ba, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="BuEKJlvF9UEYrFNSTJA.lnk", cAlternateFileName="BUEKJL~1.LNK")) returned 0x55e510 [0261.584] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc68928a9, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xdece85ba, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdece85ba, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="BuEKJlvF9UEYrFNSTJA.lnk", cAlternateFileName="BUEKJL~1.LNK")) returned 0 [0261.584] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.584] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BuEKJlvF9UEYrFNSTJA.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\buekjlvf9ueyrfnstja.lnk")) returned 1 [0261.586] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\BuEKJlvF9UEYrFNSTJA.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\buekjlvf9ueyrfnstja.lnk")) returned 0xffffffff [0261.586] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b23647c, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7b23647c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7b23647c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="C lTvIFLCLEIOs.lnk", cAlternateFileName="CLTVIF~1.LNK")) returned 1 [0261.586] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.586] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.586] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.586] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.586] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.587] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0261.587] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C lTvIFLCLEIOs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\c ltviflcleios.lnk")) returned 0x20 [0261.587] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C lTvIFLCLEIOs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\c ltviflcleios.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.587] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C lTvIFLCLEIOs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\c ltviflcleios.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.588] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x40f, lpOverlapped=0x0) returned 1 [0261.589] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x40f, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x40f, lpOverlapped=0x0) returned 1 [0261.590] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.590] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.591] CloseHandle (hObject=0x21c) returned 1 [0261.591] CloseHandle (hObject=0x210) returned 1 [0261.591] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C lTvIFLCLEIOs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\c ltviflcleios.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C lTvIFLCLEIOs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\c ltviflcleios.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.591] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C lTvIFLCLEIOs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\c ltviflcleios.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.591] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C lTvIFLCLEIOs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\c ltviflcleios.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b23647c, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7b23647c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7b23647c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="C lTvIFLCLEIOs.lnk", cAlternateFileName="CLTVIF~1.LNK")) returned 0x55e750 [0261.591] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b23647c, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7b23647c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7b23647c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="C lTvIFLCLEIOs.lnk", cAlternateFileName="CLTVIF~1.LNK")) returned 0 [0261.592] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0261.592] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C lTvIFLCLEIOs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\c ltviflcleios.lnk")) returned 1 [0261.593] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C lTvIFLCLEIOs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\c ltviflcleios.lnk")) returned 0xffffffff [0261.593] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7527b56, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7527b56, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7527b56, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="CHKfwx_.lnk", cAlternateFileName="")) returned 1 [0261.594] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.594] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.594] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.594] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0261.594] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CHKfwx_.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\chkfwx_.lnk")) returned 0x20 [0261.594] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CHKfwx_.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\chkfwx_.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.595] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CHKfwx_.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\chkfwx_.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.595] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x289, lpOverlapped=0x0) returned 1 [0261.596] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x289, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x289, lpOverlapped=0x0) returned 1 [0261.598] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.598] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.598] CloseHandle (hObject=0x210) returned 1 [0261.598] CloseHandle (hObject=0x21c) returned 1 [0261.598] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CHKfwx_.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\chkfwx_.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CHKfwx_.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\chkfwx_.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.599] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CHKfwx_.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\chkfwx_.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.599] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CHKfwx_.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\chkfwx_.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7527b56, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7527b56, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7527b56, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="CHKfwx_.lnk", cAlternateFileName="")) returned 0x55e390 [0261.599] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7527b56, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7527b56, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7527b56, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="CHKfwx_.lnk", cAlternateFileName="")) returned 0 [0261.599] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0261.599] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CHKfwx_.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\chkfwx_.lnk")) returned 1 [0261.600] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CHKfwx_.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\chkfwx_.lnk")) returned 0xffffffff [0261.600] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a58af1, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc9a58af1, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc9a5b32e, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x687, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Cms8gjs.ots.lnk", cAlternateFileName="CMS8GJ~1.LNK")) returned 1 [0261.601] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.601] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.601] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.601] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0261.601] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Cms8gjs.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\cms8gjs.ots.lnk")) returned 0x20 [0261.602] VirtualAlloc (lpAddress=0x22bc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22bc000 [0261.602] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Cms8gjs.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\cms8gjs.ots.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.603] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Cms8gjs.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\cms8gjs.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.603] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x687, lpOverlapped=0x0) returned 1 [0261.604] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x687, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x687, lpOverlapped=0x0) returned 1 [0261.605] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.605] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.606] CloseHandle (hObject=0x21c) returned 1 [0261.606] CloseHandle (hObject=0x210) returned 1 [0261.606] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Cms8gjs.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\cms8gjs.ots.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Cms8gjs.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\cms8gjs.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.606] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Cms8gjs.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\cms8gjs.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.606] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Cms8gjs.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\cms8gjs.ots.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a58af1, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc9a58af1, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc9a5b32e, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x687, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Cms8gjs.ots.lnk", cAlternateFileName="CMS8GJ~1.LNK")) returned 0x55e510 [0261.607] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a58af1, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc9a58af1, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc9a5b32e, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x687, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Cms8gjs.ots.lnk", cAlternateFileName="CMS8GJ~1.LNK")) returned 0 [0261.607] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.607] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Cms8gjs.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\cms8gjs.ots.lnk")) returned 1 [0261.608] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Cms8gjs.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\cms8gjs.ots.lnk")) returned 0xffffffff [0261.608] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b43d42, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x267998e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x267998e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="Common Files.lnk", cAlternateFileName="COMMON~1.LNK")) returned 1 [0261.608] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.609] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.609] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.609] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0261.609] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Common Files.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\common files.lnk")) returned 0x20 [0261.609] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Common Files.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\common files.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.610] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Common Files.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\common files.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.610] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2c6, lpOverlapped=0x0) returned 1 [0261.611] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2c6, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2c6, lpOverlapped=0x0) returned 1 [0261.614] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.614] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.614] CloseHandle (hObject=0x210) returned 1 [0261.614] CloseHandle (hObject=0x21c) returned 1 [0261.614] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Common Files.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\common files.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Common Files.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\common files.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.615] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Common Files.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\common files.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.615] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Common Files.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\common files.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b43d42, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x267998e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x267998e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Common Files.lnk", cAlternateFileName="COMMON~1.LNK")) returned 0x55e390 [0261.615] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b43d42, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x267998e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x267998e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Common Files.lnk", cAlternateFileName="COMMON~1.LNK")) returned 0 [0261.615] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0261.615] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Common Files.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\common files.lnk")) returned 1 [0261.617] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Common Files.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\common files.lnk")) returned 0xffffffff [0261.617] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad222b42, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x83fbd036, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x83fbd036, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="CustomDestinations", cAlternateFileName="CUSTOM~1")) returned 1 [0261.617] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad222b42, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x83fbd036, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x83fbd036, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8, dwReserved1=0x16, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0261.618] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad222b42, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x83fbd036, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x83fbd036, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8, dwReserved1=0x16, cFileName="..", cAlternateFileName="")) returned 1 [0261.618] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad45eebc, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad45eebc, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad45eebc, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x8, dwReserved1=0x16, cFileName="7e4dca80246863e3.customDestinations-ms", cAlternateFileName="7E4DCA~1.CUS")) returned 1 [0261.619] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83f96e92, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x83f96e92, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x83fbd036, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x24e0, dwReserved0=0x330036, dwReserved1=0x330065, cFileName="9149d0f5ebf7f710.customDestinations-ms", cAlternateFileName="9149D0~1.CUS")) returned 1 [0261.620] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aee66, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x40aee66, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x40aee66, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x370066, dwReserved1=0x300031, cFileName="9d1f905ce5044aee.customDestinations-ms", cAlternateFileName="9D1F90~1.CUS")) returned 1 [0261.620] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad222b42, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad222b42, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad222b42, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x610034, dwReserved1=0x650065, cFileName="f01b4d95cf55d32a.customDestinations-ms", cAlternateFileName="F01B4D~1.CUS")) returned 1 [0261.621] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad222b42, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad222b42, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad222b42, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x610034, dwReserved1=0x650065, cFileName="f01b4d95cf55d32a.customDestinations-ms", cAlternateFileName="F01B4D~1.CUS")) returned 0 [0261.621] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.622] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20a42f0, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe20a42f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe20a7d6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x35666335, dwReserved1=0x32336435, cFileName="Daw XG.lnk", cAlternateFileName="DAWXG~1.LNK")) returned 1 [0261.623] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.623] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.623] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.623] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0261.623] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Daw XG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\daw xg.lnk")) returned 0x20 [0261.623] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Daw XG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\daw xg.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.624] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Daw XG.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\daw xg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.625] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3e5, lpOverlapped=0x0) returned 1 [0261.626] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3e5, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3e5, lpOverlapped=0x0) returned 1 [0261.627] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.627] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.627] CloseHandle (hObject=0x21c) returned 1 [0261.627] CloseHandle (hObject=0x210) returned 1 [0261.627] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Daw XG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\daw xg.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Daw XG.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\daw xg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.628] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Daw XG.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\daw xg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.628] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Daw XG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\daw xg.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20a42f0, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe20a42f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe20a7d6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Daw XG.lnk", cAlternateFileName="DAWXG~1.LNK")) returned 0x55e850 [0261.628] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20a42f0, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe20a42f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe20a7d6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Daw XG.lnk", cAlternateFileName="DAWXG~1.LNK")) returned 0 [0261.628] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0261.628] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Daw XG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\daw xg.lnk")) returned 1 [0261.632] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Daw XG.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\daw xg.lnk")) returned 0xffffffff [0261.632] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43695fb2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43695fb2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0261.632] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.632] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.632] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.632] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0261.633] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini")) returned 0x6 [0261.633] VirtualAlloc (lpAddress=0x22c0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22c0000 [0261.633] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.634] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.635] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1b0, lpOverlapped=0x0) returned 1 [0261.636] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1b0, lpOverlapped=0x0) returned 1 [0261.637] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.637] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.637] CloseHandle (hObject=0x210) returned 1 [0261.637] CloseHandle (hObject=0x21c) returned 1 [0261.637] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.637] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.638] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43695fb2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43695fb2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e290 [0261.638] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43695fb2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43695fb2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0261.638] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0261.638] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini")) returned 1 [0261.639] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini")) returned 0xffffffff [0261.639] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b95d673, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7b95d673, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7b95d673, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="DkWdW-k.lnk", cAlternateFileName="")) returned 1 [0261.640] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.640] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.640] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.640] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.640] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.640] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0261.640] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DkWdW-k.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dkwdw-k.lnk")) returned 0x20 [0261.640] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DkWdW-k.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dkwdw-k.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.641] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DkWdW-k.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dkwdw-k.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.642] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3d7, lpOverlapped=0x0) returned 1 [0261.643] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3d7, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3d7, lpOverlapped=0x0) returned 1 [0261.644] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.644] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.644] CloseHandle (hObject=0x21c) returned 1 [0261.644] CloseHandle (hObject=0x210) returned 1 [0261.644] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DkWdW-k.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dkwdw-k.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DkWdW-k.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dkwdw-k.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.645] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DkWdW-k.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dkwdw-k.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.645] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DkWdW-k.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dkwdw-k.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b95d673, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7b95d673, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7b95d673, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="DkWdW-k.lnk", cAlternateFileName="")) returned 0x55e650 [0261.645] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b95d673, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7b95d673, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7b95d673, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="DkWdW-k.lnk", cAlternateFileName="")) returned 0 [0261.645] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0261.645] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DkWdW-k.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dkwdw-k.lnk")) returned 1 [0261.646] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\DkWdW-k.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dkwdw-k.lnk")) returned 0xffffffff [0261.646] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bca975, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe4bca975, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4be0876, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="dsd4xng9Vd1K.lnk", cAlternateFileName="DSD4XN~1.LNK")) returned 1 [0261.647] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.647] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.647] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.647] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0261.647] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dsd4xng9Vd1K.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dsd4xng9vd1k.lnk")) returned 0x20 [0261.648] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dsd4xng9Vd1K.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dsd4xng9vd1k.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.648] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dsd4xng9Vd1K.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dsd4xng9vd1k.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.649] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x480, lpOverlapped=0x0) returned 1 [0261.650] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x480, lpOverlapped=0x0) returned 1 [0261.651] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.651] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.651] CloseHandle (hObject=0x210) returned 1 [0261.651] CloseHandle (hObject=0x21c) returned 1 [0261.651] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dsd4xng9Vd1K.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dsd4xng9vd1k.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dsd4xng9Vd1K.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dsd4xng9vd1k.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.652] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dsd4xng9Vd1K.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dsd4xng9vd1k.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.652] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dsd4xng9Vd1K.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dsd4xng9vd1k.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bca975, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe4bca975, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4be0876, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="dsd4xng9Vd1K.lnk", cAlternateFileName="DSD4XN~1.LNK")) returned 0x55e750 [0261.652] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bca975, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe4bca975, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4be0876, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="dsd4xng9Vd1K.lnk", cAlternateFileName="DSD4XN~1.LNK")) returned 0 [0261.652] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0261.652] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dsd4xng9Vd1K.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dsd4xng9vd1k.lnk")) returned 1 [0261.653] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dsd4xng9Vd1K.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dsd4xng9vd1k.lnk")) returned 0xffffffff [0261.654] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28743791, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28743791, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28743791, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="dTBWs5OPc_Ez8klubHY.ots.lnk", cAlternateFileName="DTBWS5~1.LNK")) returned 1 [0261.654] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.654] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.654] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.654] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.654] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.654] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0261.655] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dTBWs5OPc_Ez8klubHY.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dtbws5opc_ez8klubhy.ots.lnk")) returned 0x20 [0261.655] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dTBWs5OPc_Ez8klubHY.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dtbws5opc_ez8klubhy.ots.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.655] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dTBWs5OPc_Ez8klubHY.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dtbws5opc_ez8klubhy.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.656] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x428, lpOverlapped=0x0) returned 1 [0261.657] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x428, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x428, lpOverlapped=0x0) returned 1 [0261.658] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.658] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.658] CloseHandle (hObject=0x21c) returned 1 [0261.658] CloseHandle (hObject=0x210) returned 1 [0261.658] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dTBWs5OPc_Ez8klubHY.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dtbws5opc_ez8klubhy.ots.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dTBWs5OPc_Ez8klubHY.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dtbws5opc_ez8klubhy.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.659] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dTBWs5OPc_Ez8klubHY.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dtbws5opc_ez8klubhy.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.659] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dTBWs5OPc_Ez8klubHY.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dtbws5opc_ez8klubhy.ots.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28743791, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28743791, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28743791, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="dTBWs5OPc_Ez8klubHY.ots.lnk", cAlternateFileName="DTBWS5~1.LNK")) returned 0x55e510 [0261.659] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28743791, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28743791, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28743791, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="dTBWs5OPc_Ez8klubHY.ots.lnk", cAlternateFileName="DTBWS5~1.LNK")) returned 0 [0261.659] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.659] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dTBWs5OPc_Ez8klubHY.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dtbws5opc_ez8klubhy.ots.lnk")) returned 1 [0261.661] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dTBWs5OPc_Ez8klubHY.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\dtbws5opc_ez8klubhy.ots.lnk")) returned 0xffffffff [0261.661] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6defc96, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc6defc96, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc6defc96, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="EH1JpmpeO46ag.lnk", cAlternateFileName="EH1JPM~1.LNK")) returned 1 [0261.662] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.662] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.662] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.662] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.662] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.662] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0261.662] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH1JpmpeO46ag.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\eh1jpmpeo46ag.lnk")) returned 0x20 [0261.662] VirtualAlloc (lpAddress=0x22c4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22c4000 [0261.663] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH1JpmpeO46ag.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\eh1jpmpeo46ag.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.663] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH1JpmpeO46ag.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\eh1jpmpeo46ag.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.664] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x4e5, lpOverlapped=0x0) returned 1 [0261.665] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x4e5, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x4e5, lpOverlapped=0x0) returned 1 [0261.666] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.666] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.666] CloseHandle (hObject=0x210) returned 1 [0261.666] CloseHandle (hObject=0x21c) returned 1 [0261.666] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH1JpmpeO46ag.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\eh1jpmpeo46ag.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH1JpmpeO46ag.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\eh1jpmpeo46ag.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.667] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH1JpmpeO46ag.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\eh1jpmpeo46ag.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.667] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH1JpmpeO46ag.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\eh1jpmpeo46ag.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6defc96, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc6defc96, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc6defc96, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="EH1JpmpeO46ag.lnk", cAlternateFileName="EH1JPM~1.LNK")) returned 0x55e650 [0261.667] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6defc96, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc6defc96, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc6defc96, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="EH1JpmpeO46ag.lnk", cAlternateFileName="EH1JPM~1.LNK")) returned 0 [0261.667] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0261.667] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH1JpmpeO46ag.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\eh1jpmpeo46ag.lnk")) returned 1 [0261.668] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EH1JpmpeO46ag.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\eh1jpmpeo46ag.lnk")) returned 0xffffffff [0261.668] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e3a08d1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1e3a08d1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e3a08d1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ExGkHXAjJlu-KbVwYaT.lnk", cAlternateFileName="EXGKHX~1.LNK")) returned 1 [0261.669] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.669] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.669] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.669] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.669] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.669] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0261.669] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ExGkHXAjJlu-KbVwYaT.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\exgkhxajjlu-kbvwyat.lnk")) returned 0x20 [0261.670] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ExGkHXAjJlu-KbVwYaT.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\exgkhxajjlu-kbvwyat.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.670] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ExGkHXAjJlu-KbVwYaT.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\exgkhxajjlu-kbvwyat.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.671] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2c7, lpOverlapped=0x0) returned 1 [0261.672] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2c7, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2c7, lpOverlapped=0x0) returned 1 [0261.673] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.673] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.673] CloseHandle (hObject=0x21c) returned 1 [0261.673] CloseHandle (hObject=0x210) returned 1 [0261.673] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ExGkHXAjJlu-KbVwYaT.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\exgkhxajjlu-kbvwyat.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ExGkHXAjJlu-KbVwYaT.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\exgkhxajjlu-kbvwyat.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.673] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ExGkHXAjJlu-KbVwYaT.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\exgkhxajjlu-kbvwyat.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.674] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ExGkHXAjJlu-KbVwYaT.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\exgkhxajjlu-kbvwyat.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e3a08d1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1e3a08d1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e3a08d1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ExGkHXAjJlu-KbVwYaT.lnk", cAlternateFileName="EXGKHX~1.LNK")) returned 0x55e210 [0261.674] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e3a08d1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1e3a08d1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e3a08d1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="ExGkHXAjJlu-KbVwYaT.lnk", cAlternateFileName="EXGKHX~1.LNK")) returned 0 [0261.674] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0261.674] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ExGkHXAjJlu-KbVwYaT.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\exgkhxajjlu-kbvwyat.lnk")) returned 1 [0261.676] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ExGkHXAjJlu-KbVwYaT.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\exgkhxajjlu-kbvwyat.lnk")) returned 0xffffffff [0261.677] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e378098, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x1e43925d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e43925d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="fBcb0Eywdbm (2).lnk", cAlternateFileName="FBCB0E~2.LNK")) returned 1 [0261.677] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.677] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.677] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.677] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0261.677] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm (2).lnk")) returned 0x20 [0261.678] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm (2).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.678] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.679] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x24b, lpOverlapped=0x0) returned 1 [0261.680] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x24b, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x24b, lpOverlapped=0x0) returned 1 [0261.681] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.681] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.681] CloseHandle (hObject=0x210) returned 1 [0261.681] CloseHandle (hObject=0x21c) returned 1 [0261.682] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm (2).lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.682] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.682] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm (2).lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e378098, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x1e43925d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e43925d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="fBcb0Eywdbm (2).lnk", cAlternateFileName="FBCB0E~2.LNK")) returned 0x55e290 [0261.682] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e378098, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x1e43925d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e43925d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="fBcb0Eywdbm (2).lnk", cAlternateFileName="FBCB0E~2.LNK")) returned 0 [0261.682] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0261.682] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm (2).lnk")) returned 1 [0261.684] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm (2).lnk")) returned 0xffffffff [0261.684] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75f54650, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x75f54650, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x75f54650, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="fBcb0Eywdbm.lnk", cAlternateFileName="FBCB0E~1.LNK")) returned 1 [0261.684] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.684] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.684] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.684] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.684] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.684] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0261.685] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm.lnk")) returned 0x20 [0261.685] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.685] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.686] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x24b, lpOverlapped=0x0) returned 1 [0261.687] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x24b, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x24b, lpOverlapped=0x0) returned 1 [0261.688] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.688] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.688] CloseHandle (hObject=0x21c) returned 1 [0261.688] CloseHandle (hObject=0x210) returned 1 [0261.688] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.689] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.689] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75f54650, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x75f54650, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x75f54650, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="fBcb0Eywdbm.lnk", cAlternateFileName="FBCB0E~1.LNK")) returned 0x55e1d0 [0261.689] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75f54650, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x75f54650, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x75f54650, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="fBcb0Eywdbm.lnk", cAlternateFileName="FBCB0E~1.LNK")) returned 0 [0261.689] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0261.689] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm.lnk")) returned 1 [0261.690] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fBcb0Eywdbm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fbcb0eywdbm.lnk")) returned 0xffffffff [0261.691] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e8d558c, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2319086a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2319086a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="FThXpfrBZPMJLX.lnk", cAlternateFileName="FTHXPF~1.LNK")) returned 1 [0261.691] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.691] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.692] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.692] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0261.692] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FThXpfrBZPMJLX.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fthxpfrbzpmjlx.lnk")) returned 0x20 [0261.692] VirtualAlloc (lpAddress=0x22c8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22c8000 [0261.692] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FThXpfrBZPMJLX.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fthxpfrbzpmjlx.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.693] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FThXpfrBZPMJLX.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fthxpfrbzpmjlx.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.693] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x526, lpOverlapped=0x0) returned 1 [0261.694] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x526, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x526, lpOverlapped=0x0) returned 1 [0261.695] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.696] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.696] CloseHandle (hObject=0x210) returned 1 [0261.696] CloseHandle (hObject=0x21c) returned 1 [0261.696] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FThXpfrBZPMJLX.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fthxpfrbzpmjlx.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FThXpfrBZPMJLX.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fthxpfrbzpmjlx.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.696] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FThXpfrBZPMJLX.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fthxpfrbzpmjlx.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.696] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FThXpfrBZPMJLX.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fthxpfrbzpmjlx.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e8d558c, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2319086a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2319086a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FThXpfrBZPMJLX.lnk", cAlternateFileName="FTHXPF~1.LNK")) returned 0x55e1d0 [0261.696] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e8d558c, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2319086a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2319086a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="FThXpfrBZPMJLX.lnk", cAlternateFileName="FTHXPF~1.LNK")) returned 0 [0261.697] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0261.697] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FThXpfrBZPMJLX.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fthxpfrbzpmjlx.lnk")) returned 1 [0261.698] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FThXpfrBZPMJLX.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fthxpfrbzpmjlx.lnk")) returned 0xffffffff [0261.698] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e00cf47, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1e00cf47, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e033268, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="fTLHb2oaa.lnk", cAlternateFileName="FTLHB2~1.LNK")) returned 1 [0261.698] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.698] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.699] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.699] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0261.699] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fTLHb2oaa.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ftlhb2oaa.lnk")) returned 0x20 [0261.699] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fTLHb2oaa.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ftlhb2oaa.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.699] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fTLHb2oaa.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ftlhb2oaa.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.700] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3f6, lpOverlapped=0x0) returned 1 [0261.701] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3f6, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3f6, lpOverlapped=0x0) returned 1 [0261.702] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.702] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.702] CloseHandle (hObject=0x21c) returned 1 [0261.702] CloseHandle (hObject=0x210) returned 1 [0261.702] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fTLHb2oaa.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ftlhb2oaa.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fTLHb2oaa.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ftlhb2oaa.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.703] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fTLHb2oaa.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ftlhb2oaa.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.703] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fTLHb2oaa.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ftlhb2oaa.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e00cf47, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1e00cf47, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e033268, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="fTLHb2oaa.lnk", cAlternateFileName="FTLHB2~1.LNK")) returned 0x55e890 [0261.703] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e00cf47, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1e00cf47, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e033268, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="fTLHb2oaa.lnk", cAlternateFileName="FTLHB2~1.LNK")) returned 0 [0261.703] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0261.703] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fTLHb2oaa.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ftlhb2oaa.lnk")) returned 1 [0261.704] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fTLHb2oaa.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ftlhb2oaa.lnk")) returned 0xffffffff [0261.704] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x785b38ca, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x785b38ca, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x785b38ca, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="fxGkChym_qpotd.lnk", cAlternateFileName="FXGKCH~1.LNK")) returned 1 [0261.705] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.705] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.705] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.705] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0261.705] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fxGkChym_qpotd.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fxgkchym_qpotd.lnk")) returned 0x20 [0261.706] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fxGkChym_qpotd.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fxgkchym_qpotd.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.706] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fxGkChym_qpotd.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fxgkchym_qpotd.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.706] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x64c, lpOverlapped=0x0) returned 1 [0261.707] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x64c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x64c, lpOverlapped=0x0) returned 1 [0261.709] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.709] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.709] CloseHandle (hObject=0x210) returned 1 [0261.709] CloseHandle (hObject=0x21c) returned 1 [0261.709] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fxGkChym_qpotd.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fxgkchym_qpotd.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fxGkChym_qpotd.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fxgkchym_qpotd.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.710] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fxGkChym_qpotd.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fxgkchym_qpotd.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.710] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fxGkChym_qpotd.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fxgkchym_qpotd.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x785b38ca, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x785b38ca, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x785b38ca, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="fxGkChym_qpotd.lnk", cAlternateFileName="FXGKCH~1.LNK")) returned 0x55e5d0 [0261.710] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x785b38ca, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x785b38ca, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x785b38ca, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="fxGkChym_qpotd.lnk", cAlternateFileName="FXGKCH~1.LNK")) returned 0 [0261.710] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0261.710] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fxGkChym_qpotd.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fxgkchym_qpotd.lnk")) returned 1 [0261.711] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\fxGkChym_qpotd.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\fxgkchym_qpotd.lnk")) returned 0xffffffff [0261.711] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed9c684, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1ed9c684, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1ed9c684, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3cb, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="gHRER.lnk", cAlternateFileName="")) returned 1 [0261.712] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.712] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.712] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.712] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0261.712] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHRER.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ghrer.lnk")) returned 0x20 [0261.712] VirtualAlloc (lpAddress=0x22cc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22cc000 [0261.713] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHRER.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ghrer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.713] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHRER.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ghrer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.714] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3cb, lpOverlapped=0x0) returned 1 [0261.715] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3cb, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3cb, lpOverlapped=0x0) returned 1 [0261.716] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.716] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.716] CloseHandle (hObject=0x21c) returned 1 [0261.716] CloseHandle (hObject=0x210) returned 1 [0261.716] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHRER.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ghrer.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHRER.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ghrer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.717] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHRER.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ghrer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.717] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHRER.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ghrer.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed9c684, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1ed9c684, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1ed9c684, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3cb, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="gHRER.lnk", cAlternateFileName="")) returned 0x55e1d0 [0261.717] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed9c684, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1ed9c684, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1ed9c684, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3cb, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="gHRER.lnk", cAlternateFileName="")) returned 0 [0261.717] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0261.717] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHRER.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ghrer.lnk")) returned 1 [0261.719] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gHRER.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ghrer.lnk")) returned 0xffffffff [0261.719] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f4b4c4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77f4b4c4, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77f4b4c4, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3e9, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="gJbDSP9uu5zxm.lnk", cAlternateFileName="GJBDSP~1.LNK")) returned 1 [0261.719] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.719] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.719] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.719] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0261.720] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gJbDSP9uu5zxm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gjbdsp9uu5zxm.lnk")) returned 0x20 [0261.720] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gJbDSP9uu5zxm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gjbdsp9uu5zxm.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.720] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gJbDSP9uu5zxm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gjbdsp9uu5zxm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.721] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3e9, lpOverlapped=0x0) returned 1 [0261.722] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3e9, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3e9, lpOverlapped=0x0) returned 1 [0261.727] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.727] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.727] CloseHandle (hObject=0x210) returned 1 [0261.727] CloseHandle (hObject=0x21c) returned 1 [0261.727] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gJbDSP9uu5zxm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gjbdsp9uu5zxm.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gJbDSP9uu5zxm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gjbdsp9uu5zxm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.727] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gJbDSP9uu5zxm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gjbdsp9uu5zxm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.728] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gJbDSP9uu5zxm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gjbdsp9uu5zxm.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f4b4c4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77f4b4c4, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77f4b4c4, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3e9, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="gJbDSP9uu5zxm.lnk", cAlternateFileName="GJBDSP~1.LNK")) returned 0x55e750 [0261.728] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f4b4c4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77f4b4c4, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77f4b4c4, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3e9, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="gJbDSP9uu5zxm.lnk", cAlternateFileName="GJBDSP~1.LNK")) returned 0 [0261.728] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0261.728] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gJbDSP9uu5zxm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gjbdsp9uu5zxm.lnk")) returned 1 [0261.729] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gJbDSP9uu5zxm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gjbdsp9uu5zxm.lnk")) returned 0xffffffff [0261.729] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220477fc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x220477fc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x221063ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x407, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="GT MqBo1IsSDe6tEL9w.lnk", cAlternateFileName="GTMQBO~1.LNK")) returned 1 [0261.730] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.730] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.730] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.730] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0261.730] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GT MqBo1IsSDe6tEL9w.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gt mqbo1issde6tel9w.lnk")) returned 0x20 [0261.731] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GT MqBo1IsSDe6tEL9w.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gt mqbo1issde6tel9w.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.731] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GT MqBo1IsSDe6tEL9w.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gt mqbo1issde6tel9w.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.732] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x407, lpOverlapped=0x0) returned 1 [0261.733] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x407, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x407, lpOverlapped=0x0) returned 1 [0261.734] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.734] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.734] CloseHandle (hObject=0x21c) returned 1 [0261.734] CloseHandle (hObject=0x210) returned 1 [0261.734] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GT MqBo1IsSDe6tEL9w.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gt mqbo1issde6tel9w.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GT MqBo1IsSDe6tEL9w.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gt mqbo1issde6tel9w.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.735] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GT MqBo1IsSDe6tEL9w.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gt mqbo1issde6tel9w.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.735] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GT MqBo1IsSDe6tEL9w.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gt mqbo1issde6tel9w.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220477fc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x220477fc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x221063ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x407, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="GT MqBo1IsSDe6tEL9w.lnk", cAlternateFileName="GTMQBO~1.LNK")) returned 0x55e390 [0261.735] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220477fc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x220477fc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x221063ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x407, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="GT MqBo1IsSDe6tEL9w.lnk", cAlternateFileName="GTMQBO~1.LNK")) returned 0 [0261.735] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0261.735] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GT MqBo1IsSDe6tEL9w.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gt mqbo1issde6tel9w.lnk")) returned 1 [0261.736] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GT MqBo1IsSDe6tEL9w.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gt mqbo1issde6tel9w.lnk")) returned 0xffffffff [0261.736] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8712a7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d8712a7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d8712a7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="GTVE7s8yay vT.lnk", cAlternateFileName="GTVE7S~1.LNK")) returned 1 [0261.737] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.737] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.737] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.737] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0261.737] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GTVE7s8yay vT.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gtve7s8yay vt.lnk")) returned 0x20 [0261.738] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GTVE7s8yay vT.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gtve7s8yay vt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.738] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GTVE7s8yay vT.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gtve7s8yay vt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.739] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x37d, lpOverlapped=0x0) returned 1 [0261.740] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x37d, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x37d, lpOverlapped=0x0) returned 1 [0261.741] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.741] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.741] CloseHandle (hObject=0x210) returned 1 [0261.741] CloseHandle (hObject=0x21c) returned 1 [0261.741] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GTVE7s8yay vT.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gtve7s8yay vt.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GTVE7s8yay vT.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gtve7s8yay vt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.742] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GTVE7s8yay vT.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gtve7s8yay vt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.742] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GTVE7s8yay vT.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gtve7s8yay vt.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8712a7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d8712a7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d8712a7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="GTVE7s8yay vT.lnk", cAlternateFileName="GTVE7S~1.LNK")) returned 0x55e210 [0261.742] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8712a7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d8712a7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d8712a7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="GTVE7s8yay vT.lnk", cAlternateFileName="GTVE7S~1.LNK")) returned 0 [0261.742] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0261.742] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GTVE7s8yay vT.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gtve7s8yay vt.lnk")) returned 1 [0261.743] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\GTVE7s8yay vT.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gtve7s8yay vt.lnk")) returned 0xffffffff [0261.744] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8895ad3, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc8895ad3, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc8895ad3, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x46c, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="gzCcmy5r.lnk", cAlternateFileName="")) returned 1 [0261.744] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.744] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.744] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.744] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0261.744] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gzCcmy5r.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gzccmy5r.lnk")) returned 0x20 [0261.745] VirtualAlloc (lpAddress=0x22d0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22d0000 [0261.745] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gzCcmy5r.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gzccmy5r.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.745] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gzCcmy5r.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gzccmy5r.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.746] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x46c, lpOverlapped=0x0) returned 1 [0261.747] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x46c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x46c, lpOverlapped=0x0) returned 1 [0261.748] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.748] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.748] CloseHandle (hObject=0x21c) returned 1 [0261.748] CloseHandle (hObject=0x210) returned 1 [0261.749] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gzCcmy5r.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gzccmy5r.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gzCcmy5r.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gzccmy5r.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.749] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gzCcmy5r.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gzccmy5r.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.749] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gzCcmy5r.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gzccmy5r.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8895ad3, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc8895ad3, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc8895ad3, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x46c, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="gzCcmy5r.lnk", cAlternateFileName="")) returned 0x55e850 [0261.749] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8895ad3, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc8895ad3, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc8895ad3, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x46c, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="gzCcmy5r.lnk", cAlternateFileName="")) returned 0 [0261.749] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0261.749] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gzCcmy5r.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gzccmy5r.lnk")) returned 1 [0261.751] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gzCcmy5r.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\gzccmy5r.lnk")) returned 0xffffffff [0261.751] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc835e711, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc835e711, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc835e711, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="HIjE Bz.lnk", cAlternateFileName="HIJEBZ~1.LNK")) returned 1 [0261.751] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.751] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.751] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.751] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.752] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0261.752] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HIjE Bz.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hije bz.lnk")) returned 0x20 [0261.752] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HIjE Bz.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hije bz.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.752] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HIjE Bz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hije bz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.753] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3d2, lpOverlapped=0x0) returned 1 [0261.754] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3d2, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3d2, lpOverlapped=0x0) returned 1 [0261.756] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.756] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.756] CloseHandle (hObject=0x210) returned 1 [0261.756] CloseHandle (hObject=0x21c) returned 1 [0261.756] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HIjE Bz.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hije bz.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HIjE Bz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hije bz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.756] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HIjE Bz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hije bz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.756] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HIjE Bz.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hije bz.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc835e711, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc835e711, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc835e711, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="HIjE Bz.lnk", cAlternateFileName="HIJEBZ~1.LNK")) returned 0x55e850 [0261.757] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc835e711, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc835e711, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc835e711, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="HIjE Bz.lnk", cAlternateFileName="HIJEBZ~1.LNK")) returned 0 [0261.757] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0261.757] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HIjE Bz.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hije bz.lnk")) returned 1 [0261.758] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HIjE Bz.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hije bz.lnk")) returned 0xffffffff [0261.758] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe14287f4, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe14287f4, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe142c21f, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x67d, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="hjW1.lnk", cAlternateFileName="")) returned 1 [0261.759] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.759] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.759] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.759] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0261.759] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hjW1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hjw1.lnk")) returned 0x20 [0261.759] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hjW1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hjw1.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.760] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hjW1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hjw1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.760] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x67d, lpOverlapped=0x0) returned 1 [0261.761] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x67d, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x67d, lpOverlapped=0x0) returned 1 [0261.762] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.762] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.762] CloseHandle (hObject=0x21c) returned 1 [0261.763] CloseHandle (hObject=0x210) returned 1 [0261.763] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hjW1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hjw1.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hjW1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hjw1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.763] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hjW1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hjw1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.763] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hjW1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hjw1.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe14287f4, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe14287f4, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe142c21f, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x67d, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="hjW1.lnk", cAlternateFileName="")) returned 0x55e390 [0261.763] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe14287f4, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe14287f4, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe142c21f, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x67d, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="hjW1.lnk", cAlternateFileName="")) returned 0 [0261.763] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0261.764] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hjW1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hjw1.lnk")) returned 1 [0261.765] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hjW1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\hjw1.lnk")) returned 0xffffffff [0261.765] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bdfbe33, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7bdfbe33, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7bdfbe33, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="IEEEJcQHB4cvJ_cdO_.flv.lnk", cAlternateFileName="IEEEJC~1.LNK")) returned 1 [0261.765] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.765] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.766] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.766] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.766] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.766] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0261.766] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IEEEJcQHB4cvJ_cdO_.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ieeejcqhb4cvj_cdo_.flv.lnk")) returned 0x20 [0261.766] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IEEEJcQHB4cvJ_cdO_.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ieeejcqhb4cvj_cdo_.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.766] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IEEEJcQHB4cvJ_cdO_.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ieeejcqhb4cvj_cdo_.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.767] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x423, lpOverlapped=0x0) returned 1 [0261.768] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x423, lpOverlapped=0x0) returned 1 [0261.772] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.772] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.772] CloseHandle (hObject=0x210) returned 1 [0261.772] CloseHandle (hObject=0x21c) returned 1 [0261.772] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IEEEJcQHB4cvJ_cdO_.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ieeejcqhb4cvj_cdo_.flv.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IEEEJcQHB4cvJ_cdO_.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ieeejcqhb4cvj_cdo_.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.773] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IEEEJcQHB4cvJ_cdO_.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ieeejcqhb4cvj_cdo_.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.773] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IEEEJcQHB4cvJ_cdO_.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ieeejcqhb4cvj_cdo_.flv.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bdfbe33, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7bdfbe33, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7bdfbe33, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="IEEEJcQHB4cvJ_cdO_.flv.lnk", cAlternateFileName="IEEEJC~1.LNK")) returned 0x55e750 [0261.773] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bdfbe33, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7bdfbe33, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7bdfbe33, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="IEEEJcQHB4cvJ_cdO_.flv.lnk", cAlternateFileName="IEEEJC~1.LNK")) returned 0 [0261.773] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0261.773] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IEEEJcQHB4cvJ_cdO_.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ieeejcqhb4cvj_cdo_.flv.lnk")) returned 1 [0261.774] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IEEEJcQHB4cvJ_cdO_.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ieeejcqhb4cvj_cdo_.flv.lnk")) returned 0xffffffff [0261.774] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a48f213, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a48f213, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a5006f9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="IHUUW_UC0Nn8T.lnk", cAlternateFileName="IHUUW_~1.LNK")) returned 1 [0261.775] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.775] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.775] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.775] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0261.775] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IHUUW_UC0Nn8T.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ihuuw_uc0nn8t.lnk")) returned 0x20 [0261.775] VirtualAlloc (lpAddress=0x22d4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22d4000 [0261.776] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IHUUW_UC0Nn8T.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ihuuw_uc0nn8t.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.776] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IHUUW_UC0Nn8T.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ihuuw_uc0nn8t.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.777] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x485, lpOverlapped=0x0) returned 1 [0261.778] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x485, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x485, lpOverlapped=0x0) returned 1 [0261.779] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.779] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.779] CloseHandle (hObject=0x21c) returned 1 [0261.779] CloseHandle (hObject=0x210) returned 1 [0261.780] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IHUUW_UC0Nn8T.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ihuuw_uc0nn8t.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IHUUW_UC0Nn8T.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ihuuw_uc0nn8t.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.780] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IHUUW_UC0Nn8T.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ihuuw_uc0nn8t.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.780] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IHUUW_UC0Nn8T.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ihuuw_uc0nn8t.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a48f213, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a48f213, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a5006f9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="IHUUW_UC0Nn8T.lnk", cAlternateFileName="IHUUW_~1.LNK")) returned 0x55e510 [0261.780] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a48f213, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a48f213, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a5006f9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="IHUUW_UC0Nn8T.lnk", cAlternateFileName="IHUUW_~1.LNK")) returned 0 [0261.780] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.781] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IHUUW_UC0Nn8T.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ihuuw_uc0nn8t.lnk")) returned 1 [0261.782] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IHUUW_UC0Nn8T.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ihuuw_uc0nn8t.lnk")) returned 0xffffffff [0261.782] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7870af17, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7870af17, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7870af17, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="IK2lOrscFawass.lnk", cAlternateFileName="IK2LOR~1.LNK")) returned 1 [0261.782] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.782] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.783] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.783] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0261.783] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IK2lOrscFawass.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ik2lorscfawass.lnk")) returned 0x20 [0261.783] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IK2lOrscFawass.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ik2lorscfawass.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.784] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IK2lOrscFawass.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ik2lorscfawass.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.784] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3ee, lpOverlapped=0x0) returned 1 [0261.786] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3ee, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3ee, lpOverlapped=0x0) returned 1 [0261.787] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.787] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.787] CloseHandle (hObject=0x210) returned 1 [0261.788] CloseHandle (hObject=0x21c) returned 1 [0261.788] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IK2lOrscFawass.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ik2lorscfawass.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IK2lOrscFawass.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ik2lorscfawass.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.788] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IK2lOrscFawass.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ik2lorscfawass.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.788] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IK2lOrscFawass.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ik2lorscfawass.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7870af17, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7870af17, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7870af17, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="IK2lOrscFawass.lnk", cAlternateFileName="IK2LOR~1.LNK")) returned 0x55e750 [0261.788] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7870af17, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7870af17, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7870af17, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="IK2lOrscFawass.lnk", cAlternateFileName="IK2LOR~1.LNK")) returned 0 [0261.788] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0261.789] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IK2lOrscFawass.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ik2lorscfawass.lnk")) returned 1 [0261.790] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IK2lOrscFawass.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ik2lorscfawass.lnk")) returned 0xffffffff [0261.790] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be5df3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x24be5df3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x24be5df3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="iV1eysp19dqsXKWg2u0.lnk", cAlternateFileName="IV1EYS~1.LNK")) returned 1 [0261.790] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.791] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.791] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.791] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0261.791] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iV1eysp19dqsXKWg2u0.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\iv1eysp19dqsxkwg2u0.lnk")) returned 0x20 [0261.791] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iV1eysp19dqsXKWg2u0.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\iv1eysp19dqsxkwg2u0.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.792] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iV1eysp19dqsXKWg2u0.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\iv1eysp19dqsxkwg2u0.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.793] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x4a3, lpOverlapped=0x0) returned 1 [0261.794] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x4a3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x4a3, lpOverlapped=0x0) returned 1 [0261.795] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.795] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.795] CloseHandle (hObject=0x21c) returned 1 [0261.795] CloseHandle (hObject=0x210) returned 1 [0261.795] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iV1eysp19dqsXKWg2u0.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\iv1eysp19dqsxkwg2u0.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iV1eysp19dqsXKWg2u0.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\iv1eysp19dqsxkwg2u0.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.796] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iV1eysp19dqsXKWg2u0.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\iv1eysp19dqsxkwg2u0.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.796] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iV1eysp19dqsXKWg2u0.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\iv1eysp19dqsxkwg2u0.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be5df3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x24be5df3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x24be5df3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iV1eysp19dqsXKWg2u0.lnk", cAlternateFileName="IV1EYS~1.LNK")) returned 0x55e510 [0261.796] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24be5df3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x24be5df3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x24be5df3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="iV1eysp19dqsXKWg2u0.lnk", cAlternateFileName="IV1EYS~1.LNK")) returned 0 [0261.796] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.796] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iV1eysp19dqsXKWg2u0.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\iv1eysp19dqsxkwg2u0.lnk")) returned 1 [0261.797] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iV1eysp19dqsXKWg2u0.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\iv1eysp19dqsxkwg2u0.lnk")) returned 0xffffffff [0261.797] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccf7b94a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xccf7b94a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xccf7b94a, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="IzC9E.lnk", cAlternateFileName="")) returned 1 [0261.798] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.798] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.798] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.798] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0261.798] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IzC9E.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\izc9e.lnk")) returned 0x20 [0261.798] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IzC9E.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\izc9e.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.799] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IzC9E.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\izc9e.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.799] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x682, lpOverlapped=0x0) returned 1 [0261.801] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x682, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x682, lpOverlapped=0x0) returned 1 [0261.802] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.802] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.802] CloseHandle (hObject=0x210) returned 1 [0261.802] CloseHandle (hObject=0x21c) returned 1 [0261.802] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IzC9E.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\izc9e.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IzC9E.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\izc9e.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.803] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IzC9E.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\izc9e.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.803] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IzC9E.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\izc9e.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccf7b94a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xccf7b94a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xccf7b94a, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="IzC9E.lnk", cAlternateFileName="")) returned 0x55e210 [0261.803] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccf7b94a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xccf7b94a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xccf7b94a, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="IzC9E.lnk", cAlternateFileName="")) returned 0 [0261.803] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0261.803] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IzC9E.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\izc9e.lnk")) returned 1 [0261.804] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IzC9E.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\izc9e.lnk")) returned 0xffffffff [0261.805] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x797b0130, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xc7e99885, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7e99885, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x38a, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="JAB0S_rGExV_SLJ.lnk", cAlternateFileName="JAB0S_~1.LNK")) returned 1 [0261.805] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.805] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.805] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.805] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0261.806] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JAB0S_rGExV_SLJ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\jab0s_rgexv_slj.lnk")) returned 0x20 [0261.806] VirtualAlloc (lpAddress=0x22d8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22d8000 [0261.806] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JAB0S_rGExV_SLJ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\jab0s_rgexv_slj.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.807] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JAB0S_rGExV_SLJ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\jab0s_rgexv_slj.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.807] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x38a, lpOverlapped=0x0) returned 1 [0261.808] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x38a, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x38a, lpOverlapped=0x0) returned 1 [0261.810] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.810] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.810] CloseHandle (hObject=0x21c) returned 1 [0261.810] CloseHandle (hObject=0x210) returned 1 [0261.810] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JAB0S_rGExV_SLJ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\jab0s_rgexv_slj.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JAB0S_rGExV_SLJ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\jab0s_rgexv_slj.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.811] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JAB0S_rGExV_SLJ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\jab0s_rgexv_slj.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.811] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JAB0S_rGExV_SLJ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\jab0s_rgexv_slj.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x797b0130, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xc7e99885, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7e99885, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x38a, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="JAB0S_rGExV_SLJ.lnk", cAlternateFileName="JAB0S_~1.LNK")) returned 0x55e290 [0261.811] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x797b0130, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xc7e99885, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7e99885, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x38a, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="JAB0S_rGExV_SLJ.lnk", cAlternateFileName="JAB0S_~1.LNK")) returned 0 [0261.811] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0261.811] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JAB0S_rGExV_SLJ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\jab0s_rgexv_slj.lnk")) returned 1 [0261.812] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\JAB0S_rGExV_SLJ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\jab0s_rgexv_slj.lnk")) returned 0xffffffff [0261.812] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc699d80d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc699d80d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc699d80d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3e6, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="k _jfq9EKV.lnk", cAlternateFileName="K_JFQ9~1.LNK")) returned 1 [0261.813] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.813] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.813] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.813] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0261.813] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k _jfq9EKV.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k _jfq9ekv.lnk")) returned 0x20 [0261.814] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k _jfq9EKV.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k _jfq9ekv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.814] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k _jfq9EKV.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k _jfq9ekv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.815] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3e6, lpOverlapped=0x0) returned 1 [0261.819] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3e6, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3e6, lpOverlapped=0x0) returned 1 [0261.820] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.820] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.820] CloseHandle (hObject=0x210) returned 1 [0261.820] CloseHandle (hObject=0x21c) returned 1 [0261.821] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k _jfq9EKV.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k _jfq9ekv.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k _jfq9EKV.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k _jfq9ekv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.821] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k _jfq9EKV.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k _jfq9ekv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.821] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k _jfq9EKV.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k _jfq9ekv.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc699d80d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc699d80d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc699d80d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3e6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="k _jfq9EKV.lnk", cAlternateFileName="K_JFQ9~1.LNK")) returned 0x55e1d0 [0261.821] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc699d80d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc699d80d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc699d80d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3e6, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="k _jfq9EKV.lnk", cAlternateFileName="K_JFQ9~1.LNK")) returned 0 [0261.821] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0261.822] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k _jfq9EKV.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k _jfq9ekv.lnk")) returned 1 [0261.823] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k _jfq9EKV.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k _jfq9ekv.lnk")) returned 0xffffffff [0261.823] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe231e9f5, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe231e9f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe231e9f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="k2jJ-.lnk", cAlternateFileName="")) returned 1 [0261.823] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.823] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.824] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.824] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0261.824] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k2jJ-.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k2jj-.lnk")) returned 0x20 [0261.824] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k2jJ-.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k2jj-.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.824] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k2jJ-.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k2jj-.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.825] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x27d, lpOverlapped=0x0) returned 1 [0261.826] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x27d, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x27d, lpOverlapped=0x0) returned 1 [0261.827] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.827] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.827] CloseHandle (hObject=0x21c) returned 1 [0261.827] CloseHandle (hObject=0x210) returned 1 [0261.828] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k2jJ-.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k2jj-.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k2jJ-.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k2jj-.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.828] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k2jJ-.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k2jj-.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.828] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k2jJ-.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k2jj-.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe231e9f5, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe231e9f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe231e9f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="k2jJ-.lnk", cAlternateFileName="")) returned 0x55e250 [0261.828] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe231e9f5, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe231e9f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe231e9f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="k2jJ-.lnk", cAlternateFileName="")) returned 0 [0261.828] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0261.828] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k2jJ-.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k2jj-.lnk")) returned 1 [0261.830] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k2jJ-.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\k2jj-.lnk")) returned 0xffffffff [0261.830] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe077b98f, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe077b98f, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe077b98f, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="kfd4AT641M9lZzo.lnk", cAlternateFileName="KFD4AT~1.LNK")) returned 1 [0261.830] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.830] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.830] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.830] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0261.831] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kfd4AT641M9lZzo.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kfd4at641m9lzzo.lnk")) returned 0x20 [0261.831] VirtualAlloc (lpAddress=0x22dc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22dc000 [0261.833] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kfd4AT641M9lZzo.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kfd4at641m9lzzo.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.833] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kfd4AT641M9lZzo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kfd4at641m9lzzo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.834] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x414, lpOverlapped=0x0) returned 1 [0261.835] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x414, lpOverlapped=0x0) returned 1 [0261.836] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.836] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.836] CloseHandle (hObject=0x210) returned 1 [0261.836] CloseHandle (hObject=0x21c) returned 1 [0261.837] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kfd4AT641M9lZzo.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kfd4at641m9lzzo.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kfd4AT641M9lZzo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kfd4at641m9lzzo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.837] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kfd4AT641M9lZzo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kfd4at641m9lzzo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.837] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kfd4AT641M9lZzo.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kfd4at641m9lzzo.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe077b98f, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe077b98f, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe077b98f, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="kfd4AT641M9lZzo.lnk", cAlternateFileName="KFD4AT~1.LNK")) returned 0x55e890 [0261.837] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe077b98f, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe077b98f, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe077b98f, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="kfd4AT641M9lZzo.lnk", cAlternateFileName="KFD4AT~1.LNK")) returned 0 [0261.837] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0261.837] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kfd4AT641M9lZzo.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kfd4at641m9lzzo.lnk")) returned 1 [0261.839] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kfd4AT641M9lZzo.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kfd4at641m9lzzo.lnk")) returned 0xffffffff [0261.839] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84b5c41, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc84b5c41, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc84b5c41, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Khe4uWhPkS4.lnk", cAlternateFileName="KHE4UW~1.LNK")) returned 1 [0261.839] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.839] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.839] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.839] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.840] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.840] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0261.840] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Khe4uWhPkS4.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\khe4uwhpks4.lnk")) returned 0x20 [0261.840] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Khe4uWhPkS4.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\khe4uwhpks4.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.840] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Khe4uWhPkS4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\khe4uwhpks4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.841] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x400, lpOverlapped=0x0) returned 1 [0261.842] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x400, lpOverlapped=0x0) returned 1 [0261.843] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.843] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.843] CloseHandle (hObject=0x21c) returned 1 [0261.843] CloseHandle (hObject=0x210) returned 1 [0261.844] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Khe4uWhPkS4.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\khe4uwhpks4.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Khe4uWhPkS4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\khe4uwhpks4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.844] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Khe4uWhPkS4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\khe4uwhpks4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.844] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Khe4uWhPkS4.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\khe4uwhpks4.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84b5c41, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc84b5c41, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc84b5c41, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Khe4uWhPkS4.lnk", cAlternateFileName="KHE4UW~1.LNK")) returned 0x55e510 [0261.844] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84b5c41, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc84b5c41, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc84b5c41, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Khe4uWhPkS4.lnk", cAlternateFileName="KHE4UW~1.LNK")) returned 0 [0261.844] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.844] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Khe4uWhPkS4.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\khe4uwhpks4.lnk")) returned 1 [0261.846] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Khe4uWhPkS4.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\khe4uwhpks4.lnk")) returned 0xffffffff [0261.846] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fa4bfa, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7fa4bfa, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7fa4bfa, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x405, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="kQZZ OvT-A19.lnk", cAlternateFileName="KQZZOV~1.LNK")) returned 1 [0261.846] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.846] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.847] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.847] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.847] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.847] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0261.847] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kQZZ OvT-A19.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kqzz ovt-a19.lnk")) returned 0x20 [0261.847] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kQZZ OvT-A19.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kqzz ovt-a19.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.848] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kQZZ OvT-A19.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kqzz ovt-a19.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.848] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x405, lpOverlapped=0x0) returned 1 [0261.849] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x405, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x405, lpOverlapped=0x0) returned 1 [0261.851] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.851] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.851] CloseHandle (hObject=0x210) returned 1 [0261.851] CloseHandle (hObject=0x21c) returned 1 [0261.851] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kQZZ OvT-A19.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kqzz ovt-a19.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kQZZ OvT-A19.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kqzz ovt-a19.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.851] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kQZZ OvT-A19.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kqzz ovt-a19.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.852] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kQZZ OvT-A19.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kqzz ovt-a19.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fa4bfa, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7fa4bfa, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7fa4bfa, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x405, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="kQZZ OvT-A19.lnk", cAlternateFileName="KQZZOV~1.LNK")) returned 0x55e7d0 [0261.852] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fa4bfa, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7fa4bfa, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7fa4bfa, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x405, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="kQZZ OvT-A19.lnk", cAlternateFileName="KQZZOV~1.LNK")) returned 0 [0261.852] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0261.852] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kQZZ OvT-A19.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kqzz ovt-a19.lnk")) returned 1 [0261.853] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kQZZ OvT-A19.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\kqzz ovt-a19.lnk")) returned 0xffffffff [0261.853] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecc22fb, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x218d422e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x218d422e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="LEWorMp4uRNygtAMs5 (2).lnk", cAlternateFileName="LEWORM~2.LNK")) returned 1 [0261.854] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.854] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.854] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.854] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0261.854] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5 (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5 (2).lnk")) returned 0x20 [0261.854] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5 (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5 (2).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.855] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5 (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5 (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.856] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x4fd, lpOverlapped=0x0) returned 1 [0261.857] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x4fd, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x4fd, lpOverlapped=0x0) returned 1 [0261.858] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.858] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.858] CloseHandle (hObject=0x21c) returned 1 [0261.858] CloseHandle (hObject=0x210) returned 1 [0261.859] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5 (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5 (2).lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5 (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5 (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.859] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5 (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5 (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.859] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5 (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5 (2).lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecc22fb, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x218d422e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x218d422e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="LEWorMp4uRNygtAMs5 (2).lnk", cAlternateFileName="LEWORM~2.LNK")) returned 0x55e8d0 [0261.859] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdecc22fb, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x218d422e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x218d422e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="LEWorMp4uRNygtAMs5 (2).lnk", cAlternateFileName="LEWORM~2.LNK")) returned 0 [0261.859] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0261.859] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5 (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5 (2).lnk")) returned 1 [0261.861] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5 (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5 (2).lnk")) returned 0xffffffff [0261.861] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deb3605, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xc8fe2bed, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc8fe2bed, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="LEWorMp4uRNygtAMs5.lnk", cAlternateFileName="LEWORM~1.LNK")) returned 1 [0261.861] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.861] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.862] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.862] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0261.862] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5.lnk")) returned 0x20 [0261.862] VirtualAlloc (lpAddress=0x22e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22e0000 [0261.864] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.864] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.865] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x4fd, lpOverlapped=0x0) returned 1 [0261.866] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x4fd, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x4fd, lpOverlapped=0x0) returned 1 [0261.867] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.867] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.867] CloseHandle (hObject=0x210) returned 1 [0261.867] CloseHandle (hObject=0x21c) returned 1 [0261.867] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.868] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.868] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deb3605, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xc8fe2bed, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc8fe2bed, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="LEWorMp4uRNygtAMs5.lnk", cAlternateFileName="LEWORM~1.LNK")) returned 0x55e2d0 [0261.868] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deb3605, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xc8fe2bed, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc8fe2bed, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="LEWorMp4uRNygtAMs5.lnk", cAlternateFileName="LEWORM~1.LNK")) returned 0 [0261.868] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0261.868] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5.lnk")) returned 1 [0261.870] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LEWorMp4uRNygtAMs5.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lewormp4urnygtams5.lnk")) returned 0xffffffff [0261.870] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc87fcff0, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc87fcff0, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc87fcff0, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x6a4, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="LyzxRwKCPSt.lnk", cAlternateFileName="LYZXRW~1.LNK")) returned 1 [0261.870] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.870] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.870] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.870] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.870] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0261.871] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LyzxRwKCPSt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lyzxrwkcpst.lnk")) returned 0x20 [0261.871] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LyzxRwKCPSt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lyzxrwkcpst.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.871] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LyzxRwKCPSt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lyzxrwkcpst.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.872] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x6a4, lpOverlapped=0x0) returned 1 [0261.873] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x6a4, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x6a4, lpOverlapped=0x0) returned 1 [0261.874] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.874] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.874] CloseHandle (hObject=0x21c) returned 1 [0261.874] CloseHandle (hObject=0x210) returned 1 [0261.875] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LyzxRwKCPSt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lyzxrwkcpst.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LyzxRwKCPSt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lyzxrwkcpst.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.875] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LyzxRwKCPSt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lyzxrwkcpst.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.875] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LyzxRwKCPSt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lyzxrwkcpst.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc87fcff0, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc87fcff0, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc87fcff0, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x6a4, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="LyzxRwKCPSt.lnk", cAlternateFileName="LYZXRW~1.LNK")) returned 0x55e190 [0261.875] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc87fcff0, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc87fcff0, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc87fcff0, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x6a4, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="LyzxRwKCPSt.lnk", cAlternateFileName="LYZXRW~1.LNK")) returned 0 [0261.875] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0261.875] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LyzxRwKCPSt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lyzxrwkcpst.lnk")) returned 1 [0261.877] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LyzxRwKCPSt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\lyzxrwkcpst.lnk")) returned 0xffffffff [0261.877] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ea52e4c, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7ea52e4c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7ea52e4c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3cb, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="m299G.lnk", cAlternateFileName="")) returned 1 [0261.877] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.877] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.877] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.877] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0261.878] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\m299G.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\m299g.lnk")) returned 0x20 [0261.878] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\m299G.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\m299g.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.879] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\m299G.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\m299g.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.879] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3cb, lpOverlapped=0x0) returned 1 [0261.881] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3cb, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3cb, lpOverlapped=0x0) returned 1 [0261.882] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.882] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.882] CloseHandle (hObject=0x210) returned 1 [0261.882] CloseHandle (hObject=0x21c) returned 1 [0261.886] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\m299G.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\m299g.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\m299G.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\m299g.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.886] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\m299G.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\m299g.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.886] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\m299G.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\m299g.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ea52e4c, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7ea52e4c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7ea52e4c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3cb, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="m299G.lnk", cAlternateFileName="")) returned 0x55e510 [0261.886] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ea52e4c, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7ea52e4c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7ea52e4c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3cb, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="m299G.lnk", cAlternateFileName="")) returned 0 [0261.887] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0261.887] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\m299G.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\m299g.lnk")) returned 1 [0261.888] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\m299G.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\m299g.lnk")) returned 0xffffffff [0261.888] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b28fd23, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2b28fd23, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b2b5e5c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="mbzzavocx5tumDy.lnk", cAlternateFileName="MBZZAV~1.LNK")) returned 1 [0261.888] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.889] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.889] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.889] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0261.889] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mbzzavocx5tumDy.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mbzzavocx5tumdy.lnk")) returned 0x20 [0261.889] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mbzzavocx5tumDy.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mbzzavocx5tumdy.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.890] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mbzzavocx5tumDy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mbzzavocx5tumdy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.890] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x414, lpOverlapped=0x0) returned 1 [0261.891] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x414, lpOverlapped=0x0) returned 1 [0261.893] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.893] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.893] CloseHandle (hObject=0x21c) returned 1 [0261.893] CloseHandle (hObject=0x210) returned 1 [0261.893] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mbzzavocx5tumDy.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mbzzavocx5tumdy.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mbzzavocx5tumDy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mbzzavocx5tumdy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.893] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mbzzavocx5tumDy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mbzzavocx5tumdy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.893] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mbzzavocx5tumDy.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mbzzavocx5tumdy.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b28fd23, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2b28fd23, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b2b5e5c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="mbzzavocx5tumDy.lnk", cAlternateFileName="MBZZAV~1.LNK")) returned 0x55e2d0 [0261.894] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b28fd23, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2b28fd23, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b2b5e5c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="mbzzavocx5tumDy.lnk", cAlternateFileName="MBZZAV~1.LNK")) returned 0 [0261.894] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0261.894] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mbzzavocx5tumDy.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mbzzavocx5tumdy.lnk")) returned 1 [0261.895] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mbzzavocx5tumDy.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mbzzavocx5tumdy.lnk")) returned 0xffffffff [0261.895] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3c7394a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe3c7394a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe3c7394a, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="MNH8zaGFzoVYD5Z6B.lnk", cAlternateFileName="MNH8ZA~1.LNK")) returned 1 [0261.896] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.896] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.896] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.896] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0261.896] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MNH8zaGFzoVYD5Z6B.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnh8zagfzovyd5z6b.lnk")) returned 0x20 [0261.897] VirtualAlloc (lpAddress=0x22e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22e4000 [0261.897] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MNH8zaGFzoVYD5Z6B.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnh8zagfzovyd5z6b.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.897] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MNH8zaGFzoVYD5Z6B.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnh8zagfzovyd5z6b.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.898] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x359, lpOverlapped=0x0) returned 1 [0261.899] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x359, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x359, lpOverlapped=0x0) returned 1 [0261.901] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.901] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.901] CloseHandle (hObject=0x210) returned 1 [0261.901] CloseHandle (hObject=0x21c) returned 1 [0261.901] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MNH8zaGFzoVYD5Z6B.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnh8zagfzovyd5z6b.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MNH8zaGFzoVYD5Z6B.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnh8zagfzovyd5z6b.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.901] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MNH8zaGFzoVYD5Z6B.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnh8zagfzovyd5z6b.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.901] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MNH8zaGFzoVYD5Z6B.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnh8zagfzovyd5z6b.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3c7394a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe3c7394a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe3c7394a, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="MNH8zaGFzoVYD5Z6B.lnk", cAlternateFileName="MNH8ZA~1.LNK")) returned 0x55e290 [0261.902] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3c7394a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe3c7394a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe3c7394a, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="MNH8zaGFzoVYD5Z6B.lnk", cAlternateFileName="MNH8ZA~1.LNK")) returned 0 [0261.902] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0261.902] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MNH8zaGFzoVYD5Z6B.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnh8zagfzovyd5z6b.lnk")) returned 1 [0261.903] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MNH8zaGFzoVYD5Z6B.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnh8zagfzovyd5z6b.lnk")) returned 0xffffffff [0261.903] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77af8f1b, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77af8f1b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77af8f1b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Mnnvfs8UvOlcl.flv.lnk", cAlternateFileName="MNNVFS~1.LNK")) returned 1 [0261.904] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.904] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.904] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.904] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.904] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.904] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0261.904] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Mnnvfs8UvOlcl.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnnvfs8uvolcl.flv.lnk")) returned 0x20 [0261.905] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Mnnvfs8UvOlcl.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnnvfs8uvolcl.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.905] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Mnnvfs8UvOlcl.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnnvfs8uvolcl.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.906] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x467, lpOverlapped=0x0) returned 1 [0261.907] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x467, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x467, lpOverlapped=0x0) returned 1 [0261.908] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.908] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.908] CloseHandle (hObject=0x21c) returned 1 [0261.908] CloseHandle (hObject=0x210) returned 1 [0261.908] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Mnnvfs8UvOlcl.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnnvfs8uvolcl.flv.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Mnnvfs8UvOlcl.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnnvfs8uvolcl.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.909] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Mnnvfs8UvOlcl.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnnvfs8uvolcl.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.909] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Mnnvfs8UvOlcl.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnnvfs8uvolcl.flv.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77af8f1b, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77af8f1b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77af8f1b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Mnnvfs8UvOlcl.flv.lnk", cAlternateFileName="MNNVFS~1.LNK")) returned 0x55e210 [0261.909] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77af8f1b, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77af8f1b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77af8f1b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Mnnvfs8UvOlcl.flv.lnk", cAlternateFileName="MNNVFS~1.LNK")) returned 0 [0261.911] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0261.912] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Mnnvfs8UvOlcl.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnnvfs8uvolcl.flv.lnk")) returned 1 [0261.913] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Mnnvfs8UvOlcl.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mnnvfs8uvolcl.flv.lnk")) returned 0xffffffff [0261.913] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0ffb75b, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x27b318e1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27b318e1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="msy2N7n2 mhY (2).lnk", cAlternateFileName="MSY2N7~2.LNK")) returned 1 [0261.913] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.913] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.914] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.914] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.914] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.914] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0261.914] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy (2).lnk")) returned 0x20 [0261.914] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy (2).lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.915] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.915] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x429, lpOverlapped=0x0) returned 1 [0261.916] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x429, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x429, lpOverlapped=0x0) returned 1 [0261.918] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.918] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.918] CloseHandle (hObject=0x210) returned 1 [0261.918] CloseHandle (hObject=0x21c) returned 1 [0261.918] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy (2).lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.918] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.918] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy (2).lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0ffb75b, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x27b318e1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27b318e1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="msy2N7n2 mhY (2).lnk", cAlternateFileName="MSY2N7~2.LNK")) returned 0x55e790 [0261.919] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0ffb75b, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x27b318e1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27b318e1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="msy2N7n2 mhY (2).lnk", cAlternateFileName="MSY2N7~2.LNK")) returned 0 [0261.919] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0261.919] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy (2).lnk")) returned 1 [0261.920] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY (2).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy (2).lnk")) returned 0xffffffff [0261.920] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc611f27d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd49f2e20, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xd49f2e20, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="msy2N7n2 mhY.lnk", cAlternateFileName="MSY2N7~1.LNK")) returned 1 [0261.921] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.921] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.921] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.921] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.921] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.921] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0261.921] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy.lnk")) returned 0x20 [0261.921] VirtualAlloc (lpAddress=0x22e8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22e8000 [0261.922] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0261.922] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0261.923] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x429, lpOverlapped=0x0) returned 1 [0261.924] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x429, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x429, lpOverlapped=0x0) returned 1 [0261.925] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.996] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0261.996] CloseHandle (hObject=0x21c) returned 1 [0261.996] CloseHandle (hObject=0x210) returned 1 [0261.996] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0261.997] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0261.997] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc611f27d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd49f2e20, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xd49f2e20, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="msy2N7n2 mhY.lnk", cAlternateFileName="MSY2N7~1.LNK")) returned 0x55e750 [0261.997] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc611f27d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd49f2e20, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xd49f2e20, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="msy2N7n2 mhY.lnk", cAlternateFileName="MSY2N7~1.LNK")) returned 0 [0261.997] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0261.997] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy.lnk")) returned 1 [0261.999] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\msy2N7n2 mhY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\msy2n7n2 mhy.lnk")) returned 0xffffffff [0261.999] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782201af, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x782201af, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x782201af, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4fe, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="mt1d10co8b8orGro7.lnk", cAlternateFileName="MT1D10~1.LNK")) returned 1 [0261.999] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0261.999] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0261.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0261.999] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0261.999] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.000] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0262.000] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mt1d10co8b8orGro7.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mt1d10co8b8orgro7.lnk")) returned 0x20 [0262.000] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mt1d10co8b8orGro7.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mt1d10co8b8orgro7.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.001] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mt1d10co8b8orGro7.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mt1d10co8b8orgro7.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.001] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x4fe, lpOverlapped=0x0) returned 1 [0262.002] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x4fe, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x4fe, lpOverlapped=0x0) returned 1 [0262.004] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.004] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.004] CloseHandle (hObject=0x210) returned 1 [0262.004] CloseHandle (hObject=0x21c) returned 1 [0262.004] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mt1d10co8b8orGro7.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mt1d10co8b8orgro7.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mt1d10co8b8orGro7.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mt1d10co8b8orgro7.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.005] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mt1d10co8b8orGro7.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mt1d10co8b8orgro7.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.005] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mt1d10co8b8orGro7.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mt1d10co8b8orgro7.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782201af, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x782201af, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x782201af, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4fe, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="mt1d10co8b8orGro7.lnk", cAlternateFileName="MT1D10~1.LNK")) returned 0x55e290 [0262.005] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782201af, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x782201af, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x782201af, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4fe, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="mt1d10co8b8orGro7.lnk", cAlternateFileName="MT1D10~1.LNK")) returned 0 [0262.005] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0262.005] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mt1d10co8b8orGro7.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mt1d10co8b8orgro7.lnk")) returned 1 [0262.007] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mt1d10co8b8orGro7.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mt1d10co8b8orgro7.lnk")) returned 0xffffffff [0262.007] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c28964, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7c28964, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7c28964, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="mTRn.lnk", cAlternateFileName="")) returned 1 [0262.007] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.007] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.007] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.007] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.008] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0262.008] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mTRn.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mtrn.lnk")) returned 0x20 [0262.008] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mTRn.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mtrn.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.009] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mTRn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mtrn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.009] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x436, lpOverlapped=0x0) returned 1 [0262.011] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x436, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x436, lpOverlapped=0x0) returned 1 [0262.013] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.013] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.013] CloseHandle (hObject=0x21c) returned 1 [0262.013] CloseHandle (hObject=0x210) returned 1 [0262.013] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mTRn.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mtrn.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mTRn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mtrn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.013] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mTRn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mtrn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.013] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mTRn.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mtrn.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c28964, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7c28964, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7c28964, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="mTRn.lnk", cAlternateFileName="")) returned 0x55e210 [0262.014] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c28964, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc7c28964, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7c28964, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="mTRn.lnk", cAlternateFileName="")) returned 0 [0262.014] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0262.014] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mTRn.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mtrn.lnk")) returned 1 [0262.015] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mTRn.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\mtrn.lnk")) returned 0xffffffff [0262.015] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b443e6, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe0d6698b, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe0df8a32, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x2f2, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Music.lnk", cAlternateFileName="")) returned 1 [0262.015] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.015] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.016] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.016] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.016] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.016] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0262.016] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk")) returned 0x20 [0262.016] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.017] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.017] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x2f2, lpOverlapped=0x0) returned 1 [0262.018] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x2f2, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x2f2, lpOverlapped=0x0) returned 1 [0262.021] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.021] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.021] CloseHandle (hObject=0x210) returned 1 [0262.021] CloseHandle (hObject=0x21c) returned 1 [0262.021] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.022] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.022] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b443e6, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe0d6698b, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe0df8a32, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x2f2, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Music.lnk", cAlternateFileName="")) returned 0x55e290 [0262.022] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b443e6, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe0d6698b, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe0df8a32, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x2f2, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Music.lnk", cAlternateFileName="")) returned 0 [0262.022] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0262.022] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk")) returned 1 [0262.023] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Music.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\music.lnk")) returned 0xffffffff [0262.024] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde76a7a1, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xde76a7a1, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xde76a7a1, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x413, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="N5qOeuBE2tNgsag QcZm.lnk", cAlternateFileName="N5QOEU~1.LNK")) returned 1 [0262.024] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.024] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.024] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.024] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0262.025] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\N5qOeuBE2tNgsag QcZm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n5qoeube2tngsag qczm.lnk")) returned 0x20 [0262.025] VirtualAlloc (lpAddress=0x22ec000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22ec000 [0262.025] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\N5qOeuBE2tNgsag QcZm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n5qoeube2tngsag qczm.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.026] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\N5qOeuBE2tNgsag QcZm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n5qoeube2tngsag qczm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.026] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x413, lpOverlapped=0x0) returned 1 [0262.027] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x413, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x413, lpOverlapped=0x0) returned 1 [0262.028] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.028] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.029] CloseHandle (hObject=0x21c) returned 1 [0262.029] CloseHandle (hObject=0x210) returned 1 [0262.029] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\N5qOeuBE2tNgsag QcZm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n5qoeube2tngsag qczm.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\N5qOeuBE2tNgsag QcZm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n5qoeube2tngsag qczm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.029] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\N5qOeuBE2tNgsag QcZm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n5qoeube2tngsag qczm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.029] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\N5qOeuBE2tNgsag QcZm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n5qoeube2tngsag qczm.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde76a7a1, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xde76a7a1, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xde76a7a1, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x413, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="N5qOeuBE2tNgsag QcZm.lnk", cAlternateFileName="N5QOEU~1.LNK")) returned 0x55e390 [0262.030] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde76a7a1, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xde76a7a1, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xde76a7a1, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x413, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="N5qOeuBE2tNgsag QcZm.lnk", cAlternateFileName="N5QOEU~1.LNK")) returned 0 [0262.030] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0262.030] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\N5qOeuBE2tNgsag QcZm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n5qoeube2tngsag qczm.lnk")) returned 1 [0262.031] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\N5qOeuBE2tNgsag QcZm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n5qoeube2tngsag qczm.lnk")) returned 0xffffffff [0262.031] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78bb341, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc78bb341, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc78bb341, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="n8JDFGSB2.flv.lnk", cAlternateFileName="N8JDFG~1.LNK")) returned 1 [0262.032] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.032] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.032] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.032] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0262.032] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n8JDFGSB2.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n8jdfgsb2.flv.lnk")) returned 0x20 [0262.032] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n8JDFGSB2.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n8jdfgsb2.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.033] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n8JDFGSB2.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n8jdfgsb2.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.033] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3c5, lpOverlapped=0x0) returned 1 [0262.035] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3c5, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3c5, lpOverlapped=0x0) returned 1 [0262.036] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.036] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.036] CloseHandle (hObject=0x210) returned 1 [0262.036] CloseHandle (hObject=0x21c) returned 1 [0262.037] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n8JDFGSB2.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n8jdfgsb2.flv.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n8JDFGSB2.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n8jdfgsb2.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.037] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n8JDFGSB2.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n8jdfgsb2.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.037] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n8JDFGSB2.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n8jdfgsb2.flv.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78bb341, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc78bb341, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc78bb341, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="n8JDFGSB2.flv.lnk", cAlternateFileName="N8JDFG~1.LNK")) returned 0x55e250 [0262.037] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78bb341, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc78bb341, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc78bb341, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="n8JDFGSB2.flv.lnk", cAlternateFileName="N8JDFG~1.LNK")) returned 0 [0262.038] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0262.038] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n8JDFGSB2.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n8jdfgsb2.flv.lnk")) returned 1 [0262.039] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\n8JDFGSB2.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\n8jdfgsb2.flv.lnk")) returned 0xffffffff [0262.039] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a190, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7ef8a190, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7ef8a190, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="nE6sHIObtlA7xNApjaL4.lnk", cAlternateFileName="NE6SHI~1.LNK")) returned 1 [0262.039] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.040] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.040] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.040] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0262.040] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\nE6sHIObtlA7xNApjaL4.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ne6shiobtla7xnapjal4.lnk")) returned 0x20 [0262.040] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\nE6sHIObtlA7xNApjaL4.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ne6shiobtla7xnapjal4.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.041] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\nE6sHIObtlA7xNApjaL4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ne6shiobtla7xnapjal4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.041] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x4a8, lpOverlapped=0x0) returned 1 [0262.042] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x4a8, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x4a8, lpOverlapped=0x0) returned 1 [0262.043] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.044] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.044] CloseHandle (hObject=0x21c) returned 1 [0262.044] CloseHandle (hObject=0x210) returned 1 [0262.044] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\nE6sHIObtlA7xNApjaL4.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ne6shiobtla7xnapjal4.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\nE6sHIObtlA7xNApjaL4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ne6shiobtla7xnapjal4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.044] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\nE6sHIObtlA7xNApjaL4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ne6shiobtla7xnapjal4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.044] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\nE6sHIObtlA7xNApjaL4.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ne6shiobtla7xnapjal4.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a190, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7ef8a190, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7ef8a190, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="nE6sHIObtlA7xNApjaL4.lnk", cAlternateFileName="NE6SHI~1.LNK")) returned 0x55e510 [0262.044] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef8a190, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7ef8a190, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7ef8a190, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="nE6sHIObtlA7xNApjaL4.lnk", cAlternateFileName="NE6SHI~1.LNK")) returned 0 [0262.045] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0262.045] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\nE6sHIObtlA7xNApjaL4.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ne6shiobtla7xnapjal4.lnk")) returned 1 [0262.046] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\nE6sHIObtlA7xNApjaL4.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ne6shiobtla7xnapjal4.lnk")) returned 0xffffffff [0262.046] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e1881f1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7e1881f1, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7e1881f1, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="NoXrRHISMhJBNo0cfL.flv.lnk", cAlternateFileName="NOXRRH~1.LNK")) returned 1 [0262.047] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.047] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.047] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.047] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0262.047] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NoXrRHISMhJBNo0cfL.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\noxrrhismhjbno0cfl.flv.lnk")) returned 0x20 [0262.047] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NoXrRHISMhJBNo0cfL.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\noxrrhismhjbno0cfl.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.048] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NoXrRHISMhJBNo0cfL.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\noxrrhismhjbno0cfl.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.051] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x423, lpOverlapped=0x0) returned 1 [0262.052] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x423, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x423, lpOverlapped=0x0) returned 1 [0262.053] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.053] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.053] CloseHandle (hObject=0x210) returned 1 [0262.053] CloseHandle (hObject=0x21c) returned 1 [0262.053] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NoXrRHISMhJBNo0cfL.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\noxrrhismhjbno0cfl.flv.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NoXrRHISMhJBNo0cfL.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\noxrrhismhjbno0cfl.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.054] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NoXrRHISMhJBNo0cfL.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\noxrrhismhjbno0cfl.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.054] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NoXrRHISMhJBNo0cfL.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\noxrrhismhjbno0cfl.flv.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e1881f1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7e1881f1, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7e1881f1, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="NoXrRHISMhJBNo0cfL.flv.lnk", cAlternateFileName="NOXRRH~1.LNK")) returned 0x55e750 [0262.054] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e1881f1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7e1881f1, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7e1881f1, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="NoXrRHISMhJBNo0cfL.flv.lnk", cAlternateFileName="NOXRRH~1.LNK")) returned 0 [0262.054] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0262.054] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NoXrRHISMhJBNo0cfL.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\noxrrhismhjbno0cfl.flv.lnk")) returned 1 [0262.056] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NoXrRHISMhJBNo0cfL.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\noxrrhismhjbno0cfl.flv.lnk")) returned 0xffffffff [0262.056] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b58abeb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2b58abeb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b58abeb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6b3, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="NquTqUFX3Dwb1.lnk", cAlternateFileName="NQUTQU~1.LNK")) returned 1 [0262.056] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.056] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.057] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.057] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0262.057] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NquTqUFX3Dwb1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nqutqufx3dwb1.lnk")) returned 0x20 [0262.057] VirtualAlloc (lpAddress=0x22f0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22f0000 [0262.057] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NquTqUFX3Dwb1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nqutqufx3dwb1.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.058] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NquTqUFX3Dwb1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nqutqufx3dwb1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.059] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x6b3, lpOverlapped=0x0) returned 1 [0262.060] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x6b3, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x6b3, lpOverlapped=0x0) returned 1 [0262.061] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.061] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.061] CloseHandle (hObject=0x21c) returned 1 [0262.061] CloseHandle (hObject=0x210) returned 1 [0262.061] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NquTqUFX3Dwb1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nqutqufx3dwb1.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NquTqUFX3Dwb1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nqutqufx3dwb1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.062] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NquTqUFX3Dwb1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nqutqufx3dwb1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.062] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NquTqUFX3Dwb1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nqutqufx3dwb1.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b58abeb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2b58abeb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b58abeb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6b3, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="NquTqUFX3Dwb1.lnk", cAlternateFileName="NQUTQU~1.LNK")) returned 0x55e8d0 [0262.062] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b58abeb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2b58abeb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b58abeb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6b3, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="NquTqUFX3Dwb1.lnk", cAlternateFileName="NQUTQU~1.LNK")) returned 0 [0262.062] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0262.062] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NquTqUFX3Dwb1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nqutqufx3dwb1.lnk")) returned 1 [0262.064] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NquTqUFX3Dwb1.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nqutqufx3dwb1.lnk")) returned 0xffffffff [0262.064] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d00bd5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xe491f802, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe491f802, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Nr0iCrSGwQMcpOn9gZ.lnk", cAlternateFileName="NR0ICR~1.LNK")) returned 1 [0262.064] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.064] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.064] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.065] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.065] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.065] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0262.065] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Nr0iCrSGwQMcpOn9gZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nr0icrsgwqmcpon9gz.lnk")) returned 0x20 [0262.065] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Nr0iCrSGwQMcpOn9gZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nr0icrsgwqmcpon9gz.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.068] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Nr0iCrSGwQMcpOn9gZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nr0icrsgwqmcpon9gz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.069] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x55c, lpOverlapped=0x0) returned 1 [0262.070] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x55c, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x55c, lpOverlapped=0x0) returned 1 [0262.072] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.072] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.072] CloseHandle (hObject=0x210) returned 1 [0262.072] CloseHandle (hObject=0x21c) returned 1 [0262.072] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Nr0iCrSGwQMcpOn9gZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nr0icrsgwqmcpon9gz.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Nr0iCrSGwQMcpOn9gZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nr0icrsgwqmcpon9gz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.073] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Nr0iCrSGwQMcpOn9gZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nr0icrsgwqmcpon9gz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.073] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Nr0iCrSGwQMcpOn9gZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nr0icrsgwqmcpon9gz.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d00bd5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xe491f802, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe491f802, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Nr0iCrSGwQMcpOn9gZ.lnk", cAlternateFileName="NR0ICR~1.LNK")) returned 0x55e190 [0262.073] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d00bd5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xe491f802, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe491f802, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="Nr0iCrSGwQMcpOn9gZ.lnk", cAlternateFileName="NR0ICR~1.LNK")) returned 0 [0262.073] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0262.073] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Nr0iCrSGwQMcpOn9gZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nr0icrsgwqmcpon9gz.lnk")) returned 1 [0262.075] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Nr0iCrSGwQMcpOn9gZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\nr0icrsgwqmcpon9gz.lnk")) returned 0xffffffff [0262.075] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd495a476, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd495a476, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xd495a476, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="OJKcISn3d2BAzwlafETu.lnk", cAlternateFileName="OJKCIS~1.LNK")) returned 1 [0262.075] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.075] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.075] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.076] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.076] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0262.076] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OJKcISn3d2BAzwlafETu.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ojkcisn3d2bazwlafetu.lnk")) returned 0x20 [0262.076] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OJKcISn3d2BAzwlafETu.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ojkcisn3d2bazwlafetu.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.077] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OJKcISn3d2BAzwlafETu.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ojkcisn3d2bazwlafetu.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.078] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x42d, lpOverlapped=0x0) returned 1 [0262.079] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x42d, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x42d, lpOverlapped=0x0) returned 1 [0262.080] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.080] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.080] CloseHandle (hObject=0x21c) returned 1 [0262.080] CloseHandle (hObject=0x210) returned 1 [0262.080] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OJKcISn3d2BAzwlafETu.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ojkcisn3d2bazwlafetu.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OJKcISn3d2BAzwlafETu.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ojkcisn3d2bazwlafetu.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.081] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OJKcISn3d2BAzwlafETu.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ojkcisn3d2bazwlafetu.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.081] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OJKcISn3d2BAzwlafETu.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ojkcisn3d2bazwlafetu.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd495a476, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd495a476, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xd495a476, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="OJKcISn3d2BAzwlafETu.lnk", cAlternateFileName="OJKCIS~1.LNK")) returned 0x55e5d0 [0262.081] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd495a476, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xd495a476, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xd495a476, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="OJKcISn3d2BAzwlafETu.lnk", cAlternateFileName="OJKCIS~1.LNK")) returned 0 [0262.089] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0262.094] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OJKcISn3d2BAzwlafETu.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ojkcisn3d2bazwlafetu.lnk")) returned 1 [0262.098] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OJKcISn3d2BAzwlafETu.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ojkcisn3d2bazwlafetu.lnk")) returned 0xffffffff [0262.098] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27b0b5f0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x27b0b5f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27b0b5f0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="PAU1zPeoNTZTO1prSM.flv.lnk", cAlternateFileName="PAU1ZP~1.LNK")) returned 1 [0262.099] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.099] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.099] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.099] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.099] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.099] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0262.099] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PAU1zPeoNTZTO1prSM.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pau1zpeontzto1prsm.flv.lnk")) returned 0x20 [0262.100] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PAU1zPeoNTZTO1prSM.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pau1zpeontzto1prsm.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.100] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PAU1zPeoNTZTO1prSM.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pau1zpeontzto1prsm.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.101] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x562, lpOverlapped=0x0) returned 1 [0262.102] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x562, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x562, lpOverlapped=0x0) returned 1 [0262.104] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.104] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.104] CloseHandle (hObject=0x210) returned 1 [0262.104] CloseHandle (hObject=0x21c) returned 1 [0262.104] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PAU1zPeoNTZTO1prSM.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pau1zpeontzto1prsm.flv.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PAU1zPeoNTZTO1prSM.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pau1zpeontzto1prsm.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.105] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PAU1zPeoNTZTO1prSM.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pau1zpeontzto1prsm.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.105] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PAU1zPeoNTZTO1prSM.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pau1zpeontzto1prsm.flv.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27b0b5f0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x27b0b5f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27b0b5f0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="PAU1zPeoNTZTO1prSM.flv.lnk", cAlternateFileName="PAU1ZP~1.LNK")) returned 0x55e290 [0262.105] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27b0b5f0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x27b0b5f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27b0b5f0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="PAU1zPeoNTZTO1prSM.flv.lnk", cAlternateFileName="PAU1ZP~1.LNK")) returned 0 [0262.105] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0262.105] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PAU1zPeoNTZTO1prSM.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pau1zpeontzto1prsm.flv.lnk")) returned 1 [0262.106] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PAU1zPeoNTZTO1prSM.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pau1zpeontzto1prsm.flv.lnk")) returned 0xffffffff [0262.106] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2295e786, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2295e786, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2295e786, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="PcrR2Lm.lnk", cAlternateFileName="")) returned 1 [0262.107] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.107] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.107] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.107] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0262.107] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PcrR2Lm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pcrr2lm.lnk")) returned 0x20 [0262.108] VirtualAlloc (lpAddress=0x22f4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22f4000 [0262.108] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PcrR2Lm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pcrr2lm.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.109] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PcrR2Lm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pcrr2lm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.109] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3c9, lpOverlapped=0x0) returned 1 [0262.110] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3c9, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3c9, lpOverlapped=0x0) returned 1 [0262.112] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.112] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.112] CloseHandle (hObject=0x21c) returned 1 [0262.112] CloseHandle (hObject=0x210) returned 1 [0262.112] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PcrR2Lm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pcrr2lm.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PcrR2Lm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pcrr2lm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.113] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PcrR2Lm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pcrr2lm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.113] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PcrR2Lm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pcrr2lm.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2295e786, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2295e786, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2295e786, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="PcrR2Lm.lnk", cAlternateFileName="")) returned 0x55e510 [0262.113] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2295e786, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2295e786, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2295e786, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="PcrR2Lm.lnk", cAlternateFileName="")) returned 0 [0262.113] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0262.113] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PcrR2Lm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pcrr2lm.lnk")) returned 1 [0262.114] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PcrR2Lm.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pcrr2lm.lnk")) returned 0xffffffff [0262.114] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f4b4c4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2298497e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2298497e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x305, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Pictures.lnk", cAlternateFileName="")) returned 1 [0262.115] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.115] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.115] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.115] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0262.115] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk")) returned 0x20 [0262.116] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.116] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.117] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x305, lpOverlapped=0x0) returned 1 [0262.118] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x305, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x305, lpOverlapped=0x0) returned 1 [0262.119] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.119] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.120] CloseHandle (hObject=0x210) returned 1 [0262.120] CloseHandle (hObject=0x21c) returned 1 [0262.120] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.120] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.120] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f4b4c4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2298497e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2298497e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x305, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Pictures.lnk", cAlternateFileName="")) returned 0x55e250 [0262.120] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77f4b4c4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2298497e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2298497e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x305, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Pictures.lnk", cAlternateFileName="")) returned 0 [0262.121] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0262.121] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk")) returned 1 [0262.122] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk")) returned 0xffffffff [0262.122] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deb3605, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7deb3605, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7deb3605, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="pjxi.lnk", cAlternateFileName="")) returned 1 [0262.122] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.122] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.142] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.142] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0262.142] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pjxi.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pjxi.lnk")) returned 0x20 [0262.143] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pjxi.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pjxi.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.144] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pjxi.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pjxi.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.145] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x608, lpOverlapped=0x0) returned 1 [0262.146] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x608, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x608, lpOverlapped=0x0) returned 1 [0262.148] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.148] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.148] CloseHandle (hObject=0x21c) returned 1 [0262.148] CloseHandle (hObject=0x210) returned 1 [0262.148] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pjxi.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pjxi.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pjxi.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pjxi.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.149] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pjxi.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pjxi.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.149] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pjxi.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pjxi.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deb3605, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7deb3605, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7deb3605, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="pjxi.lnk", cAlternateFileName="")) returned 0x55e850 [0262.149] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7deb3605, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7deb3605, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7deb3605, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="pjxi.lnk", cAlternateFileName="")) returned 0 [0262.149] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0262.149] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pjxi.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pjxi.lnk")) returned 1 [0262.151] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pjxi.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pjxi.lnk")) returned 0xffffffff [0262.151] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b1ae94, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc6b1ae94, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc6b1ae94, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="pR186criUq8W6F.lnk", cAlternateFileName="PR186C~1.LNK")) returned 1 [0262.151] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.151] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.151] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.151] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0262.152] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pR186criUq8W6F.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pr186criuq8w6f.lnk")) returned 0x20 [0262.152] VirtualAlloc (lpAddress=0x22f8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22f8000 [0262.152] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pR186criUq8W6F.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pr186criuq8w6f.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.153] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pR186criUq8W6F.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pr186criuq8w6f.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.154] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3ad, lpOverlapped=0x0) returned 1 [0262.155] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3ad, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3ad, lpOverlapped=0x0) returned 1 [0262.156] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.156] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.156] CloseHandle (hObject=0x210) returned 1 [0262.156] CloseHandle (hObject=0x21c) returned 1 [0262.156] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pR186criUq8W6F.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pr186criuq8w6f.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pR186criUq8W6F.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pr186criuq8w6f.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.157] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pR186criUq8W6F.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pr186criuq8w6f.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.157] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pR186criUq8W6F.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pr186criuq8w6f.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b1ae94, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc6b1ae94, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc6b1ae94, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="pR186criUq8W6F.lnk", cAlternateFileName="PR186C~1.LNK")) returned 0x55e5d0 [0262.157] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6b1ae94, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc6b1ae94, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc6b1ae94, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="pR186criUq8W6F.lnk", cAlternateFileName="PR186C~1.LNK")) returned 0 [0262.157] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0262.157] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pR186criUq8W6F.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pr186criuq8w6f.lnk")) returned 1 [0262.159] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pR186criUq8W6F.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\pr186criuq8w6f.lnk")) returned 0xffffffff [0262.159] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21887dea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21887dea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21887dea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x60f, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="QhgY.lnk", cAlternateFileName="")) returned 1 [0262.160] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.160] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.160] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.160] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0262.160] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QhgY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qhgy.lnk")) returned 0x20 [0262.161] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QhgY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qhgy.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.161] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QhgY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qhgy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.162] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x60f, lpOverlapped=0x0) returned 1 [0262.163] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x60f, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x60f, lpOverlapped=0x0) returned 1 [0262.164] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.164] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.164] CloseHandle (hObject=0x21c) returned 1 [0262.164] CloseHandle (hObject=0x210) returned 1 [0262.164] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QhgY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qhgy.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QhgY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qhgy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.165] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QhgY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qhgy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.165] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QhgY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qhgy.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21887dea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21887dea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21887dea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x60f, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="QhgY.lnk", cAlternateFileName="")) returned 0x55e650 [0262.165] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21887dea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21887dea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21887dea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x60f, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="QhgY.lnk", cAlternateFileName="")) returned 0 [0262.165] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0262.165] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QhgY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qhgy.lnk")) returned 1 [0262.167] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QhgY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qhgy.lnk")) returned 0xffffffff [0262.167] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e73415c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1e73415c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e73415c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="qJQGc1JI O8.lnk", cAlternateFileName="QJQGC1~1.LNK")) returned 1 [0262.167] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.167] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.167] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.168] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0262.168] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qJQGc1JI O8.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qjqgc1ji o8.lnk")) returned 0x20 [0262.168] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qJQGc1JI O8.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qjqgc1ji o8.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.169] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qJQGc1JI O8.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qjqgc1ji o8.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.169] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x47b, lpOverlapped=0x0) returned 1 [0262.171] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x47b, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x47b, lpOverlapped=0x0) returned 1 [0262.172] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.172] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.173] CloseHandle (hObject=0x210) returned 1 [0262.173] CloseHandle (hObject=0x21c) returned 1 [0262.173] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qJQGc1JI O8.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qjqgc1ji o8.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qJQGc1JI O8.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qjqgc1ji o8.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.173] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qJQGc1JI O8.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qjqgc1ji o8.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.173] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qJQGc1JI O8.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qjqgc1ji o8.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e73415c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1e73415c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e73415c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="qJQGc1JI O8.lnk", cAlternateFileName="QJQGC1~1.LNK")) returned 0x55e390 [0262.173] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e73415c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1e73415c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e73415c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="qJQGc1JI O8.lnk", cAlternateFileName="QJQGC1~1.LNK")) returned 0 [0262.174] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0262.174] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qJQGc1JI O8.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qjqgc1ji o8.lnk")) returned 1 [0262.179] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qJQGc1JI O8.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qjqgc1ji o8.lnk")) returned 0xffffffff [0262.179] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e351d2e, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7e351d2e, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7e351d2e, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="QSer_RfUObTRfZ-i.lnk", cAlternateFileName="QSER_R~1.LNK")) returned 1 [0262.180] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.180] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.180] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.180] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.180] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.180] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0262.180] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QSer_RfUObTRfZ-i.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qser_rfuobtrfz-i.lnk")) returned 0x20 [0262.180] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QSer_RfUObTRfZ-i.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qser_rfuobtrfz-i.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.181] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QSer_RfUObTRfZ-i.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qser_rfuobtrfz-i.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.182] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x354, lpOverlapped=0x0) returned 1 [0262.183] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x354, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x354, lpOverlapped=0x0) returned 1 [0262.184] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.184] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.184] CloseHandle (hObject=0x21c) returned 1 [0262.184] CloseHandle (hObject=0x210) returned 1 [0262.184] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QSer_RfUObTRfZ-i.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qser_rfuobtrfz-i.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QSer_RfUObTRfZ-i.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qser_rfuobtrfz-i.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.185] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QSer_RfUObTRfZ-i.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qser_rfuobtrfz-i.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.185] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QSer_RfUObTRfZ-i.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qser_rfuobtrfz-i.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e351d2e, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7e351d2e, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7e351d2e, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="QSer_RfUObTRfZ-i.lnk", cAlternateFileName="QSER_R~1.LNK")) returned 0x55e790 [0262.185] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e351d2e, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7e351d2e, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7e351d2e, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="QSer_RfUObTRfZ-i.lnk", cAlternateFileName="QSER_R~1.LNK")) returned 0 [0262.185] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0262.185] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QSer_RfUObTRfZ-i.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qser_rfuobtrfz-i.lnk")) returned 1 [0262.187] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QSer_RfUObTRfZ-i.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qser_rfuobtrfz-i.lnk")) returned 0xffffffff [0262.187] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6c724b4, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc6c724b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc6c724b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x476, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="qZUaC4VwVU.lnk", cAlternateFileName="QZUAC4~1.LNK")) returned 1 [0262.187] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.187] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.187] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.187] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.187] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.187] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0262.188] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZUaC4VwVU.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qzuac4vwvu.lnk")) returned 0x20 [0262.188] VirtualAlloc (lpAddress=0x22fc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x22fc000 [0262.188] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZUaC4VwVU.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qzuac4vwvu.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.189] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZUaC4VwVU.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qzuac4vwvu.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.190] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x476, lpOverlapped=0x0) returned 1 [0262.190] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x476, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x476, lpOverlapped=0x0) returned 1 [0262.192] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.192] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.192] CloseHandle (hObject=0x210) returned 1 [0262.192] CloseHandle (hObject=0x21c) returned 1 [0262.192] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZUaC4VwVU.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qzuac4vwvu.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZUaC4VwVU.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qzuac4vwvu.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.193] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZUaC4VwVU.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qzuac4vwvu.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.193] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZUaC4VwVU.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qzuac4vwvu.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6c724b4, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc6c724b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc6c724b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x476, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="qZUaC4VwVU.lnk", cAlternateFileName="QZUAC4~1.LNK")) returned 0x55e510 [0262.193] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6c724b4, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc6c724b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc6c724b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x476, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="qZUaC4VwVU.lnk", cAlternateFileName="QZUAC4~1.LNK")) returned 0 [0262.193] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0262.193] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZUaC4VwVU.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qzuac4vwvu.lnk")) returned 1 [0262.195] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qZUaC4VwVU.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\qzuac4vwvu.lnk")) returned 0xffffffff [0262.195] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83f712d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc83f712d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc83f712d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="RF70W9.lnk", cAlternateFileName="")) returned 1 [0262.195] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.195] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.195] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.195] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.196] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0262.196] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RF70W9.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rf70w9.lnk")) returned 0x20 [0262.196] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RF70W9.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rf70w9.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.196] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RF70W9.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rf70w9.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.197] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x498, lpOverlapped=0x0) returned 1 [0262.198] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x498, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x498, lpOverlapped=0x0) returned 1 [0262.199] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.199] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.199] CloseHandle (hObject=0x21c) returned 1 [0262.200] CloseHandle (hObject=0x210) returned 1 [0262.200] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RF70W9.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rf70w9.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RF70W9.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rf70w9.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.200] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RF70W9.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rf70w9.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.200] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RF70W9.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rf70w9.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83f712d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc83f712d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc83f712d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="RF70W9.lnk", cAlternateFileName="")) returned 0x55e210 [0262.200] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83f712d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc83f712d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc83f712d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="RF70W9.lnk", cAlternateFileName="")) returned 0 [0262.201] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0262.201] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RF70W9.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rf70w9.lnk")) returned 1 [0262.202] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RF70W9.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rf70w9.lnk")) returned 0xffffffff [0262.202] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x254d6b90, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x254d6b90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x254d6b90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6ca, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="rFTnkA9Jc0y6Km6KDmoJ.lnk", cAlternateFileName="RFTNKA~1.LNK")) returned 1 [0262.202] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.203] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.203] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.203] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.203] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.203] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0262.203] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rFTnkA9Jc0y6Km6KDmoJ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rftnka9jc0y6km6kdmoj.lnk")) returned 0x20 [0262.203] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rFTnkA9Jc0y6Km6KDmoJ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rftnka9jc0y6km6kdmoj.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.204] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rFTnkA9Jc0y6Km6KDmoJ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rftnka9jc0y6km6kdmoj.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.204] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x6ca, lpOverlapped=0x0) returned 1 [0262.205] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x6ca, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x6ca, lpOverlapped=0x0) returned 1 [0262.207] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.207] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.207] CloseHandle (hObject=0x210) returned 1 [0262.207] CloseHandle (hObject=0x21c) returned 1 [0262.208] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rFTnkA9Jc0y6Km6KDmoJ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rftnka9jc0y6km6kdmoj.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rFTnkA9Jc0y6Km6KDmoJ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rftnka9jc0y6km6kdmoj.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.208] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rFTnkA9Jc0y6Km6KDmoJ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rftnka9jc0y6km6kdmoj.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.208] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rFTnkA9Jc0y6Km6KDmoJ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rftnka9jc0y6km6kdmoj.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x254d6b90, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x254d6b90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x254d6b90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6ca, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="rFTnkA9Jc0y6Km6KDmoJ.lnk", cAlternateFileName="RFTNKA~1.LNK")) returned 0x55e7d0 [0262.208] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x254d6b90, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x254d6b90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x254d6b90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6ca, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="rFTnkA9Jc0y6Km6KDmoJ.lnk", cAlternateFileName="RFTNKA~1.LNK")) returned 0 [0262.208] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0262.208] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rFTnkA9Jc0y6Km6KDmoJ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rftnka9jc0y6km6kdmoj.lnk")) returned 1 [0262.210] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rFTnkA9Jc0y6Km6KDmoJ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rftnka9jc0y6km6kdmoj.lnk")) returned 0xffffffff [0262.210] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20207e9f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x20207e9f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x20252c2a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="rHA5Ynh D2qLJ.ots.lnk", cAlternateFileName="RHA5YN~1.LNK")) returned 1 [0262.210] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.210] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.210] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.211] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0262.211] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rHA5Ynh D2qLJ.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rha5ynh d2qlj.ots.lnk")) returned 0x20 [0262.211] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rHA5Ynh D2qLJ.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rha5ynh d2qlj.ots.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.211] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rHA5Ynh D2qLJ.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rha5ynh d2qlj.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.212] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x4bd, lpOverlapped=0x0) returned 1 [0262.213] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x4bd, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x4bd, lpOverlapped=0x0) returned 1 [0262.214] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.214] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.214] CloseHandle (hObject=0x21c) returned 1 [0262.214] CloseHandle (hObject=0x210) returned 1 [0262.215] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rHA5Ynh D2qLJ.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rha5ynh d2qlj.ots.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rHA5Ynh D2qLJ.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rha5ynh d2qlj.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.215] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rHA5Ynh D2qLJ.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rha5ynh d2qlj.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.215] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rHA5Ynh D2qLJ.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rha5ynh d2qlj.ots.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20207e9f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x20207e9f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x20252c2a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="rHA5Ynh D2qLJ.ots.lnk", cAlternateFileName="RHA5YN~1.LNK")) returned 0x55e610 [0262.215] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20207e9f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x20207e9f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x20252c2a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="rHA5Ynh D2qLJ.ots.lnk", cAlternateFileName="RHA5YN~1.LNK")) returned 0 [0262.215] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0262.216] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rHA5Ynh D2qLJ.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rha5ynh d2qlj.ots.lnk")) returned 1 [0262.217] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rHA5Ynh D2qLJ.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rha5ynh d2qlj.ots.lnk")) returned 0xffffffff [0262.217] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x785d9cfb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2b2dc0de, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b2dc0de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Roaming.lnk", cAlternateFileName="")) returned 1 [0262.217] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.217] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.218] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.218] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0262.218] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk")) returned 0x20 [0262.218] VirtualAlloc (lpAddress=0x2300000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2300000 [0262.219] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.219] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.220] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x318, lpOverlapped=0x0) returned 1 [0262.221] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x318, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x318, lpOverlapped=0x0) returned 1 [0262.255] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.255] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.255] CloseHandle (hObject=0x210) returned 1 [0262.255] CloseHandle (hObject=0x21c) returned 1 [0262.256] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.256] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.256] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x785d9cfb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2b2dc0de, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b2dc0de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Roaming.lnk", cAlternateFileName="")) returned 0x55e5d0 [0262.256] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x785d9cfb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2b2dc0de, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b2dc0de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Roaming.lnk", cAlternateFileName="")) returned 0 [0262.257] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0262.257] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk")) returned 1 [0262.258] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk")) returned 0xffffffff [0262.258] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f04b41b, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7f04b41b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7f04b41b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="RthKlZazZoygA81MZ.lnk", cAlternateFileName="RTHKLZ~1.LNK")) returned 1 [0262.259] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.259] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.259] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.259] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.259] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.259] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0262.259] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RthKlZazZoygA81MZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rthklzazzoyga81mz.lnk")) returned 0x20 [0262.259] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RthKlZazZoygA81MZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rthklzazzoyga81mz.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.260] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RthKlZazZoygA81MZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rthklzazzoyga81mz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.261] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x359, lpOverlapped=0x0) returned 1 [0262.262] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x359, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x359, lpOverlapped=0x0) returned 1 [0262.263] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.263] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.263] CloseHandle (hObject=0x21c) returned 1 [0262.263] CloseHandle (hObject=0x210) returned 1 [0262.263] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RthKlZazZoygA81MZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rthklzazzoyga81mz.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RthKlZazZoygA81MZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rthklzazzoyga81mz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.264] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RthKlZazZoygA81MZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rthklzazzoyga81mz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.264] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RthKlZazZoygA81MZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rthklzazzoyga81mz.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f04b41b, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7f04b41b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7f04b41b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="RthKlZazZoygA81MZ.lnk", cAlternateFileName="RTHKLZ~1.LNK")) returned 0x55e390 [0262.264] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f04b41b, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7f04b41b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7f04b41b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="RthKlZazZoygA81MZ.lnk", cAlternateFileName="RTHKLZ~1.LNK")) returned 0 [0262.264] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0262.264] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RthKlZazZoygA81MZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rthklzazzoyga81mz.lnk")) returned 1 [0262.266] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RthKlZazZoygA81MZ.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rthklzazzoyga81mz.lnk")) returned 0xffffffff [0262.266] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e4a9475, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7e4a9475, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7e4a9475, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="RW0X.lnk", cAlternateFileName="")) returned 1 [0262.266] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.266] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.266] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.266] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.266] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.266] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0262.267] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RW0X.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rw0x.lnk")) returned 0x20 [0262.267] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RW0X.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rw0x.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.267] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RW0X.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rw0x.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.268] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x436, lpOverlapped=0x0) returned 1 [0262.269] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x436, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x436, lpOverlapped=0x0) returned 1 [0262.271] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.271] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.271] CloseHandle (hObject=0x210) returned 1 [0262.271] CloseHandle (hObject=0x21c) returned 1 [0262.271] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RW0X.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rw0x.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RW0X.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rw0x.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.271] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RW0X.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rw0x.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.271] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RW0X.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rw0x.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e4a9475, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7e4a9475, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7e4a9475, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="RW0X.lnk", cAlternateFileName="")) returned 0x55e5d0 [0262.272] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e4a9475, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7e4a9475, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7e4a9475, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="RW0X.lnk", cAlternateFileName="")) returned 0 [0262.272] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0262.272] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RW0X.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rw0x.lnk")) returned 1 [0262.273] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\RW0X.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rw0x.lnk")) returned 0xffffffff [0262.273] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e2230ae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1e2230ae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e2230ae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3e9, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="rWi_LKN_vlOUM.lnk", cAlternateFileName="RWI_LK~1.LNK")) returned 1 [0262.274] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.274] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.274] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.274] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.274] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.274] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0262.274] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rWi_LKN_vlOUM.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rwi_lkn_vloum.lnk")) returned 0x20 [0262.274] VirtualAlloc (lpAddress=0x2304000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2304000 [0262.275] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rWi_LKN_vlOUM.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rwi_lkn_vloum.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.275] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rWi_LKN_vlOUM.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rwi_lkn_vloum.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.276] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3e9, lpOverlapped=0x0) returned 1 [0262.277] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3e9, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3e9, lpOverlapped=0x0) returned 1 [0262.278] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.278] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.278] CloseHandle (hObject=0x21c) returned 1 [0262.278] CloseHandle (hObject=0x210) returned 1 [0262.278] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rWi_LKN_vlOUM.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rwi_lkn_vloum.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rWi_LKN_vlOUM.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rwi_lkn_vloum.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.279] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rWi_LKN_vlOUM.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rwi_lkn_vloum.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.279] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rWi_LKN_vlOUM.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rwi_lkn_vloum.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e2230ae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1e2230ae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e2230ae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3e9, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="rWi_LKN_vlOUM.lnk", cAlternateFileName="RWI_LK~1.LNK")) returned 0x55e5d0 [0262.279] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e2230ae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1e2230ae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e2230ae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3e9, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="rWi_LKN_vlOUM.lnk", cAlternateFileName="RWI_LK~1.LNK")) returned 0 [0262.279] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0262.279] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rWi_LKN_vlOUM.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rwi_lkn_vloum.lnk")) returned 1 [0262.280] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rWi_LKN_vlOUM.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\rwi_lkn_vloum.lnk")) returned 0xffffffff [0262.281] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc67f9dc3, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc67f9dc3, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc67f9dc3, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3df, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="S22voOMZ0nN.lnk", cAlternateFileName="S22VOO~1.LNK")) returned 1 [0262.281] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.281] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.281] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.281] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.281] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.281] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0262.282] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\S22voOMZ0nN.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s22voomz0nn.lnk")) returned 0x20 [0262.282] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\S22voOMZ0nN.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s22voomz0nn.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.282] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\S22voOMZ0nN.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s22voomz0nn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.283] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3df, lpOverlapped=0x0) returned 1 [0262.284] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3df, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3df, lpOverlapped=0x0) returned 1 [0262.287] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.287] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.287] CloseHandle (hObject=0x210) returned 1 [0262.287] CloseHandle (hObject=0x21c) returned 1 [0262.287] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\S22voOMZ0nN.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s22voomz0nn.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\S22voOMZ0nN.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s22voomz0nn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.287] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\S22voOMZ0nN.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s22voomz0nn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.288] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\S22voOMZ0nN.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s22voomz0nn.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc67f9dc3, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc67f9dc3, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc67f9dc3, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3df, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="S22voOMZ0nN.lnk", cAlternateFileName="S22VOO~1.LNK")) returned 0x55e510 [0262.288] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc67f9dc3, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc67f9dc3, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc67f9dc3, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3df, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="S22voOMZ0nN.lnk", cAlternateFileName="S22VOO~1.LNK")) returned 0 [0262.288] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0262.288] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\S22voOMZ0nN.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s22voomz0nn.lnk")) returned 1 [0262.289] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\S22voOMZ0nN.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s22voomz0nn.lnk")) returned 0xffffffff [0262.289] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7686b641, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2b77aa07, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b77aa07, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="s89b6.lnk", cAlternateFileName="")) returned 1 [0262.290] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.290] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.290] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.290] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.290] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.290] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0262.290] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\s89b6.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s89b6.lnk")) returned 0x20 [0262.291] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\s89b6.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s89b6.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.291] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\s89b6.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s89b6.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.292] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x55f, lpOverlapped=0x0) returned 1 [0262.293] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x55f, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x55f, lpOverlapped=0x0) returned 1 [0262.295] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.295] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.295] CloseHandle (hObject=0x21c) returned 1 [0262.295] CloseHandle (hObject=0x210) returned 1 [0262.295] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\s89b6.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s89b6.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\s89b6.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s89b6.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.295] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\s89b6.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s89b6.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.295] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\s89b6.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s89b6.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7686b641, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2b77aa07, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b77aa07, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="s89b6.lnk", cAlternateFileName="")) returned 0x55e5d0 [0262.296] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7686b641, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2b77aa07, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b77aa07, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="s89b6.lnk", cAlternateFileName="")) returned 0 [0262.296] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0262.296] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\s89b6.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s89b6.lnk")) returned 1 [0262.297] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\s89b6.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\s89b6.lnk")) returned 0xffffffff [0262.297] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b1f187, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xc7717a82, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7717a82, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="sIWWQ-WC9.lnk", cAlternateFileName="SIWWQ-~1.LNK")) returned 1 [0262.298] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.298] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.298] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.298] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0262.298] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sIWWQ-WC9.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\siwwq-wc9.lnk")) returned 0x20 [0262.298] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sIWWQ-WC9.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\siwwq-wc9.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.299] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sIWWQ-WC9.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\siwwq-wc9.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.299] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x373, lpOverlapped=0x0) returned 1 [0262.302] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x373, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x373, lpOverlapped=0x0) returned 1 [0262.303] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.303] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.303] CloseHandle (hObject=0x210) returned 1 [0262.303] CloseHandle (hObject=0x21c) returned 1 [0262.303] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sIWWQ-WC9.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\siwwq-wc9.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sIWWQ-WC9.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\siwwq-wc9.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.304] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sIWWQ-WC9.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\siwwq-wc9.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.304] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sIWWQ-WC9.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\siwwq-wc9.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b1f187, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xc7717a82, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7717a82, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="sIWWQ-WC9.lnk", cAlternateFileName="SIWWQ-~1.LNK")) returned 0x55e750 [0262.304] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b1f187, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xc7717a82, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc7717a82, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="sIWWQ-WC9.lnk", cAlternateFileName="SIWWQ-~1.LNK")) returned 0 [0262.304] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0262.304] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sIWWQ-WC9.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\siwwq-wc9.lnk")) returned 1 [0262.306] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sIWWQ-WC9.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\siwwq-wc9.lnk")) returned 0xffffffff [0262.306] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1e2bb8, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d1e2bb8, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d1e2bb8, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="SU6aI2.lnk", cAlternateFileName="")) returned 1 [0262.306] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.306] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.306] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.306] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.306] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.307] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0262.307] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SU6aI2.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\su6ai2.lnk")) returned 0x20 [0262.307] VirtualAlloc (lpAddress=0x2308000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2308000 [0262.307] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SU6aI2.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\su6ai2.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.308] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SU6aI2.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\su6ai2.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.309] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x460, lpOverlapped=0x0) returned 1 [0262.310] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x460, lpOverlapped=0x0) returned 1 [0262.311] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.311] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.311] CloseHandle (hObject=0x21c) returned 1 [0262.311] CloseHandle (hObject=0x210) returned 1 [0262.311] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SU6aI2.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\su6ai2.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SU6aI2.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\su6ai2.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.312] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SU6aI2.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\su6ai2.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0262.312] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SU6aI2.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\su6ai2.lnk"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1e2bb8, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d1e2bb8, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d1e2bb8, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="SU6aI2.lnk", cAlternateFileName="")) returned 0x55e510 [0262.312] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1e2bb8, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d1e2bb8, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d1e2bb8, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="SU6aI2.lnk", cAlternateFileName="")) returned 0 [0262.312] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0262.312] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SU6aI2.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\su6ai2.lnk")) returned 1 [0262.313] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SU6aI2.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\su6ai2.lnk")) returned 0xffffffff [0262.313] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e88914c, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7e88914c, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7e88914c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="suj0H6VnG1d.lnk", cAlternateFileName="SUJ0H6~1.LNK")) returned 1 [0262.314] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.314] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.314] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.314] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0262.314] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\suj0H6VnG1d.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\suj0h6vng1d.lnk")) returned 0x20 [0262.315] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\suj0H6VnG1d.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\suj0h6vng1d.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.315] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\suj0H6VnG1d.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\suj0h6vng1d.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.316] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3eb, lpOverlapped=0x0) returned 1 [0262.317] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3eb, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3eb, lpOverlapped=0x0) returned 1 [0262.318] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.318] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.318] CloseHandle (hObject=0x210) returned 1 [0262.318] CloseHandle (hObject=0x21c) returned 1 [0262.319] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\suj0H6VnG1d.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\suj0h6vng1d.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\suj0H6VnG1d.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\suj0h6vng1d.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.328] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.328] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.328] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.328] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.328] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.329] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0262.329] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\t0tZUKO4i913ZI.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\t0tzuko4i913zi.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.329] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\t0tZUKO4i913ZI.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\t0tzuko4i913zi.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.330] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x45d, lpOverlapped=0x0) returned 1 [0262.331] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x45d, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x45d, lpOverlapped=0x0) returned 1 [0262.333] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.333] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.333] CloseHandle (hObject=0x21c) returned 1 [0262.333] CloseHandle (hObject=0x210) returned 1 [0262.334] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\t0tZUKO4i913ZI.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\t0tzuko4i913zi.flv.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\t0tZUKO4i913ZI.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\t0tzuko4i913zi.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.336] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.336] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.336] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.336] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0262.340] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tf ZOqi-Uy kGkn5g.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\tf zoqi-uy kgkn5g.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tf ZOqi-Uy kGkn5g.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\tf zoqi-uy kgkn5g.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.342] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.342] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.343] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.343] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.343] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.343] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0262.343] VirtualAlloc (lpAddress=0x230c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x230c000 [0262.344] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tJzY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\tjzy.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.344] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tJzY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\tjzy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.345] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x454, lpOverlapped=0x0) returned 1 [0262.346] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x454, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x454, lpOverlapped=0x0) returned 1 [0262.350] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.350] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.350] CloseHandle (hObject=0x21c) returned 1 [0262.350] CloseHandle (hObject=0x210) returned 1 [0262.350] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tJzY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\tjzy.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tJzY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\tjzy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.352] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.352] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.353] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.353] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.353] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.353] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0262.356] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tMlj6-2of.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\tmlj6-2of.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tMlj6-2of.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\tmlj6-2of.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.359] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.359] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.359] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.359] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0262.362] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ToW_sv.ots.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\tow_sv.ots.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ToW_sv.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\tow_sv.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.364] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.364] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.365] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.365] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.365] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.365] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0262.365] VirtualAlloc (lpAddress=0x2310000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2310000 [0262.366] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tyk8QAxzpbww82Wlk.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\tyk8qaxzpbww82wlk.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.366] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tyk8QAxzpbww82Wlk.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\tyk8qaxzpbww82wlk.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.367] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x41e, lpOverlapped=0x0) returned 1 [0262.368] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x41e, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x41e, lpOverlapped=0x0) returned 1 [0262.369] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.369] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.369] CloseHandle (hObject=0x210) returned 1 [0262.369] CloseHandle (hObject=0x21c) returned 1 [0262.369] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tyk8QAxzpbww82Wlk.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\tyk8qaxzpbww82wlk.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tyk8QAxzpbww82Wlk.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\tyk8qaxzpbww82wlk.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.371] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.371] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.371] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.371] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.371] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0262.374] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\u1C0tTQR_1SPifEt0TEn.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\u1c0ttqr_1spifet0ten.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\u1C0tTQR_1SPifEt0TEn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\u1c0ttqr_1spifet0ten.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.377] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.377] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.377] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.377] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0262.380] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\U8r288JvxsAlu2vt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\u8r288jvxsalu2vt.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\U8r288JvxsAlu2vt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\u8r288jvxsalu2vt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.382] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.382] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.383] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.383] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0262.386] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\udCFH17BURL.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\udcfh17burl.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\udCFH17BURL.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\udcfh17burl.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.388] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.388] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.389] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.389] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0262.389] VirtualAlloc (lpAddress=0x2314000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2314000 [0262.389] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\usItM.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\usitm.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.390] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\usItM.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\usitm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.391] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x67b, lpOverlapped=0x0) returned 1 [0262.392] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x67b, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x67b, lpOverlapped=0x0) returned 1 [0262.393] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.393] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.393] CloseHandle (hObject=0x210) returned 1 [0262.393] CloseHandle (hObject=0x21c) returned 1 [0262.393] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\usItM.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\usitm.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\usItM.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\usitm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.399] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.399] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.399] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.399] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0262.402] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uuLOLCY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\uulolcy.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uuLOLCY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\uulolcy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.404] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.404] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.404] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.404] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0262.408] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uz_9Msior_qUWWI.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\uz_9msior_quwwi.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uz_9Msior_qUWWI.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\uz_9msior_quwwi.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.410] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.410] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.411] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.411] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.411] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0262.413] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v-hS0ZFeO.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\v-hs0zfeo.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v-hS0ZFeO.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\v-hs0zfeo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.416] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.416] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.416] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.416] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0262.416] VirtualAlloc (lpAddress=0x2318000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2318000 [0262.417] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v4YCbLNj.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\v4ycblnj.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.417] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v4YCbLNj.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\v4ycblnj.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.418] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x290, lpOverlapped=0x0) returned 1 [0262.419] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x290, lpOverlapped=0x0) returned 1 [0262.420] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.420] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.420] CloseHandle (hObject=0x210) returned 1 [0262.420] CloseHandle (hObject=0x21c) returned 1 [0262.421] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v4YCbLNj.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\v4ycblnj.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v4YCbLNj.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\v4ycblnj.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.423] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.423] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.423] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.423] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0262.426] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VD4qBAi.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\vd4qbai.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VD4qBAi.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\vd4qbai.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.428] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.428] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.429] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.429] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.429] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0262.432] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vezPmeybY48YDb4rAa6.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\vezpmeyby48ydb4raa6.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\vezPmeybY48YDb4rAa6.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\vezpmeyby48ydb4raa6.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.434] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.434] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.435] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.435] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0262.437] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\videos.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\videos.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.440] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.440] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.440] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.441] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0262.444] VirtualAlloc (lpAddress=0x231c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x231c000 [0262.444] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VlzDVW69dNfCp zkR.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\vlzdvw69dnfcp zkr.flv.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.445] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VlzDVW69dNfCp zkR.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\vlzdvw69dnfcp zkr.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.446] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x41e, lpOverlapped=0x0) returned 1 [0262.447] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x41e, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x41e, lpOverlapped=0x0) returned 1 [0262.448] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.448] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.449] CloseHandle (hObject=0x210) returned 1 [0262.449] CloseHandle (hObject=0x21c) returned 1 [0262.449] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VlzDVW69dNfCp zkR.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\vlzdvw69dnfcp zkr.flv.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VlzDVW69dNfCp zkR.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\vlzdvw69dnfcp zkr.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.451] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.451] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.451] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.451] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0262.454] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\voQySJ4.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\voqysj4.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\voQySJ4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\voqysj4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.457] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.457] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.457] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.457] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0262.460] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Vu4oRX8zmoARco.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\vu4orx8zmoarco.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Vu4oRX8zmoARco.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\vu4orx8zmoarco.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.463] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.463] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.463] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.463] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.463] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.463] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0262.464] VirtualAlloc (lpAddress=0x2320000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2320000 [0262.464] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Wfn55FaOLc2P-yaWvMX.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\wfn55faolc2p-yawvmx.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.465] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Wfn55FaOLc2P-yaWvMX.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\wfn55faolc2p-yawvmx.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.466] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x42d, lpOverlapped=0x0) returned 1 [0262.467] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x42d, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x42d, lpOverlapped=0x0) returned 1 [0262.468] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.468] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.468] CloseHandle (hObject=0x21c) returned 1 [0262.468] CloseHandle (hObject=0x210) returned 1 [0262.468] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Wfn55FaOLc2P-yaWvMX.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\wfn55faolc2p-yawvmx.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Wfn55FaOLc2P-yaWvMX.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\wfn55faolc2p-yawvmx.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.470] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.470] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.470] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.470] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0262.474] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WgUX39PHXYiqGx8CP.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\wgux39phxyiqgx8cp.flv.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WgUX39PHXYiqGx8CP.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\wgux39phxyiqgx8cp.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.476] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.476] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.476] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.476] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0262.479] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wL84FPIPRrjF.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\wl84fpiprrjf.flv.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wL84FPIPRrjF.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\wl84fpiprrjf.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.482] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.482] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.482] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.482] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.482] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.482] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0262.485] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Wnyk20dy85PKi.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\wnyk20dy85pki.flv.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Wnyk20dy85PKi.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\wnyk20dy85pki.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.487] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.487] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.487] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.487] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0262.510] VirtualAlloc (lpAddress=0x2324000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2324000 [0262.510] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wrrB3.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\wrrb3.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.511] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wrrB3.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\wrrb3.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.512] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x459, lpOverlapped=0x0) returned 1 [0262.513] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x459, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x459, lpOverlapped=0x0) returned 1 [0262.514] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.515] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.515] CloseHandle (hObject=0x21c) returned 1 [0262.515] CloseHandle (hObject=0x210) returned 1 [0262.515] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wrrB3.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\wrrb3.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wrrB3.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\wrrb3.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.517] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.517] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.517] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.517] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.517] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0262.520] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\X7Iini03CbUwi31eN.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\x7iini03cbuwi31en.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\X7Iini03CbUwi31eN.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\x7iini03cbuwi31en.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.523] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.523] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.523] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.523] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.523] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.524] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0262.526] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xBS0G9T4s0KTw2EN.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\xbs0g9t4s0ktw2en.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xBS0G9T4s0KTw2EN.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\xbs0g9t4s0ktw2en.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.529] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.529] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.529] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.529] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0262.533] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XKTGJScA6wfs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\xktgjsca6wfs.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XKTGJScA6wfs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\xktgjsca6wfs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.536] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.536] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.536] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.536] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0262.536] VirtualAlloc (lpAddress=0x2328000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2328000 [0262.537] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xRz0 CrxkDW.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\xrz0 crxkdw.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.537] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xRz0 CrxkDW.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\xrz0 crxkdw.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.538] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x47b, lpOverlapped=0x0) returned 1 [0262.539] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x47b, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x47b, lpOverlapped=0x0) returned 1 [0262.540] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.540] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.540] CloseHandle (hObject=0x21c) returned 1 [0262.541] CloseHandle (hObject=0x210) returned 1 [0262.541] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xRz0 CrxkDW.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\xrz0 crxkdw.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xRz0 CrxkDW.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\xrz0 crxkdw.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.543] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.543] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.543] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.543] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0262.546] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yaRd.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\yard.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yaRd.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\yard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.548] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.548] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.565] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.565] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0262.570] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yfv4lWxLPw.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\yfv4lwxlpw.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yfv4lWxLPw.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\yfv4lwxlpw.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.572] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.573] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.573] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.573] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0262.576] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ymTcIWR_gWH.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ymtciwr_gwh.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ymTcIWR_gWH.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ymtciwr_gwh.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.578] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.578] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.579] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.579] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0262.579] VirtualAlloc (lpAddress=0x232c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x232c000 [0262.580] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yVSZ-e4lR27Ww.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\yvsz-e4lr27ww.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.580] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yVSZ-e4lR27Ww.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\yvsz-e4lr27ww.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.581] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3f5, lpOverlapped=0x0) returned 1 [0262.585] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3f5, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3f5, lpOverlapped=0x0) returned 1 [0262.586] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.586] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.586] CloseHandle (hObject=0x21c) returned 1 [0262.586] CloseHandle (hObject=0x210) returned 1 [0262.586] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yVSZ-e4lR27Ww.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\yvsz-e4lr27ww.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yVSZ-e4lR27Ww.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\yvsz-e4lr27ww.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.589] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.589] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.589] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.589] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.589] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.589] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0262.592] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWKAsaltVFvRmuT6Bq.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ywkasaltvfvrmut6bq.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YWKAsaltVFvRmuT6Bq.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ywkasaltvfvrmut6bq.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.595] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.595] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.595] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.595] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0262.598] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YyZCa.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\yyzca.flv.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YyZCa.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\yyzca.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.601] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.601] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.601] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.601] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0262.601] VirtualAlloc (lpAddress=0x2330000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2330000 [0262.602] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z5y0BnViuyw9OKsWr.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\z5y0bnviuyw9okswr.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.603] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z5y0BnViuyw9OKsWr.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\z5y0bnviuyw9okswr.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.603] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x409, lpOverlapped=0x0) returned 1 [0262.604] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x409, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x409, lpOverlapped=0x0) returned 1 [0262.606] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.606] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.606] CloseHandle (hObject=0x210) returned 1 [0262.606] CloseHandle (hObject=0x21c) returned 1 [0262.607] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z5y0BnViuyw9OKsWr.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\z5y0bnviuyw9okswr.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Z5y0BnViuyw9OKsWr.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\z5y0bnviuyw9okswr.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.609] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.609] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.609] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.609] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0262.612] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zc1lfVUI5Sjl7oZcSD.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\zc1lfvui5sjl7ozcsd.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zc1lfVUI5Sjl7oZcSD.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\zc1lfvui5sjl7ozcsd.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.650] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.650] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.650] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.650] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0262.653] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zggXaEqM7UQYVgQY.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\zggxaeqm7uqyvgqy.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zggXaEqM7UQYVgQY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\zggxaeqm7uqyvgqy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.656] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.656] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.656] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.656] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0262.659] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZhhStph4.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\zhhstph4.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZhhStph4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\zhhstph4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.661] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.661] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.662] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.662] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.662] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.662] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0262.662] VirtualAlloc (lpAddress=0x2334000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2334000 [0262.663] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZrVCQnLs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\zrvcqnls.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.663] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZrVCQnLs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\zrvcqnls.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.668] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x3d0, lpOverlapped=0x0) returned 1 [0262.669] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x3d0, lpOverlapped=0x0) returned 1 [0262.670] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.670] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.670] CloseHandle (hObject=0x210) returned 1 [0262.670] CloseHandle (hObject=0x21c) returned 1 [0262.671] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZrVCQnLs.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\zrvcqnls.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZrVCQnLs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\zrvcqnls.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.673] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.673] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.673] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.673] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.673] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.673] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0262.676] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZSGop.flv.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\zsgop.flv.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ZSGop.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\zsgop.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.684] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.684] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.684] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.684] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.684] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.684] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0262.688] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ztrelWGv875J1kOIbuq.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ztrelwgv875j1koibuq.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ztrelWGv875J1kOIbuq.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\ztrelwgv875j1koibuq.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.690] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.690] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.690] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.693] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.693] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.693] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0262.697] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_7kx8h.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\_7kx8h.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_7kx8h.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\_7kx8h.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.700] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.701] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0262.701] VirtualAlloc (lpAddress=0x2338000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2338000 [0262.702] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Bluetooth File Transfer.LNK" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\sendto\\bluetooth file transfer.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.703] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Bluetooth File Transfer.LNK.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\sendto\\bluetooth file transfer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.703] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x41f, lpOverlapped=0x0) returned 1 [0262.705] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x41f, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x41f, lpOverlapped=0x0) returned 1 [0262.707] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.707] WriteFile (in: hFile=0x21c, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.707] CloseHandle (hObject=0x210) returned 1 [0262.707] CloseHandle (hObject=0x21c) returned 1 [0262.707] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Bluetooth File Transfer.LNK" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\sendto\\bluetooth file transfer.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Bluetooth File Transfer.LNK.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\sendto\\bluetooth file transfer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.711] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.711] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.711] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.711] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.711] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.711] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0262.717] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.720] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.720] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.720] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.720] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0262.771] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.773] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.774] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.774] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.774] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0262.774] VirtualAlloc (lpAddress=0x233c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x233c000 [0262.774] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.775] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0262.776] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xae, lpOverlapped=0x0) returned 1 [0262.776] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xae, lpOverlapped=0x0) returned 1 [0262.778] ReadFile (in: hFile=0x21c, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.778] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0262.778] CloseHandle (hObject=0x21c) returned 1 [0262.778] CloseHandle (hObject=0x210) returned 1 [0262.778] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.780] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.780] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.780] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.780] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0262.782] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.784] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.784] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.797] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.797] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0262.813] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.815] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.815] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.815] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.815] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0262.820] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.822] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.822] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.823] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.823] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0262.823] VirtualAlloc (lpAddress=0x2340000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2340000 [0262.824] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0262.824] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0262.825] ReadFile (in: hFile=0x224, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x452, lpOverlapped=0x0) returned 1 [0262.827] WriteFile (in: hFile=0x220, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x452, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x452, lpOverlapped=0x0) returned 1 [0262.828] ReadFile (in: hFile=0x224, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0262.828] WriteFile (in: hFile=0x220, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0262.828] CloseHandle (hObject=0x224) returned 1 [0262.828] CloseHandle (hObject=0x220) returned 1 [0262.829] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.830] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.830] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.830] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.830] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0262.835] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.837] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.837] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.837] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.837] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0262.840] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\internet explorer.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\internet explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.841] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.842] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.842] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.842] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0262.845] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.857] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.857] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.857] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.857] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.857] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.857] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0262.857] VirtualAlloc (lpAddress=0x2344000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2344000 [0262.858] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0262.858] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0262.861] ReadFile (in: hFile=0x224, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0xae, lpOverlapped=0x0) returned 1 [0262.862] WriteFile (in: hFile=0x220, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0xae, lpOverlapped=0x0) returned 1 [0262.863] ReadFile (in: hFile=0x224, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0262.863] WriteFile (in: hFile=0x220, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0262.863] CloseHandle (hObject=0x224) returned 1 [0262.863] CloseHandle (hObject=0x220) returned 1 [0262.864] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.871] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.871] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.872] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.872] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0262.881] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.896] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.896] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.896] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.896] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0262.905] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.919] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.919] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.919] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.920] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.920] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0262.927] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.939] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.939] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.939] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.939] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0262.939] VirtualAlloc (lpAddress=0x2348000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2348000 [0262.940] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.940] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0262.943] ReadFile (in: hFile=0x21c, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x476, lpOverlapped=0x0) returned 1 [0262.945] WriteFile (in: hFile=0x224, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x476, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x476, lpOverlapped=0x0) returned 1 [0262.947] ReadFile (in: hFile=0x21c, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0262.947] WriteFile (in: hFile=0x224, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0262.947] CloseHandle (hObject=0x21c) returned 1 [0262.947] CloseHandle (hObject=0x224) returned 1 [0262.949] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.959] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.959] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.959] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.959] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0262.967] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.974] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.974] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.974] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.974] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0262.980] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.986] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.986] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.986] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.986] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0262.987] VirtualAlloc (lpAddress=0x234c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x234c000 [0262.987] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0262.988] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0262.992] ReadFile (in: hFile=0x224, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x32f, lpOverlapped=0x0) returned 1 [0262.994] WriteFile (in: hFile=0x21c, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x32f, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x32f, lpOverlapped=0x0) returned 1 [0262.995] ReadFile (in: hFile=0x224, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0262.995] WriteFile (in: hFile=0x21c, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0262.995] CloseHandle (hObject=0x224) returned 1 [0262.995] CloseHandle (hObject=0x21c) returned 1 [0262.995] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0262.997] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0262.997] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0262.997] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0262.997] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0262.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0263.000] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.002] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.002] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.002] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.002] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0263.015] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.017] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.018] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.018] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.018] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.018] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.018] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0263.021] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.023] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.023] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.023] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.023] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0263.023] VirtualAlloc (lpAddress=0x2350000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2350000 [0263.024] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0263.024] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0263.025] ReadFile (in: hFile=0x224, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x199, lpOverlapped=0x0) returned 1 [0263.027] WriteFile (in: hFile=0x21c, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x199, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x199, lpOverlapped=0x0) returned 1 [0263.028] ReadFile (in: hFile=0x224, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0263.028] WriteFile (in: hFile=0x21c, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0263.028] CloseHandle (hObject=0x224) returned 1 [0263.028] CloseHandle (hObject=0x21c) returned 1 [0263.029] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.031] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.031] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.031] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.031] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0263.036] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.038] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.038] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.038] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.038] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.039] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0263.044] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.047] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.047] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.047] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.047] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0263.058] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.083] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.083] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.084] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.084] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0263.085] VirtualAlloc (lpAddress=0x2354000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2354000 [0263.085] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0263.086] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x21c [0263.088] ReadFile (in: hFile=0x224, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x4fa, lpOverlapped=0x0) returned 1 [0263.089] WriteFile (in: hFile=0x21c, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x4fa, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x4fa, lpOverlapped=0x0) returned 1 [0263.091] ReadFile (in: hFile=0x224, lpBuffer=0x19c7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19c7d8*, lpNumberOfBytesRead=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0263.091] WriteFile (in: hFile=0x21c, lpBuffer=0x19d7d8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c524, lpOverlapped=0x0 | out: lpBuffer=0x19d7d8*, lpNumberOfBytesWritten=0x19c524*=0x0, lpOverlapped=0x0) returned 1 [0263.091] CloseHandle (hObject=0x224) returned 1 [0263.091] CloseHandle (hObject=0x21c) returned 1 [0263.091] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.094] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.094] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.094] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.094] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.094] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.094] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0263.099] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.102] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.102] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.103] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.103] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.103] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.103] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0263.142] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cachedimage_1440_900_pos4.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cachedimage_1440_900_pos4.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.151] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.151] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.151] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.151] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0263.151] VirtualAlloc (lpAddress=0x2358000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2358000 [0263.152] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NoXrRHISMhJBNo0cfL.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\noxrrhismhjbno0cfl.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0263.153] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NoXrRHISMhJBNo0cfL.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\noxrrhismhjbno0cfl.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.153] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.154] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.155] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.155] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.156] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.156] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.156] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.156] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.159] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xdc5, lpOverlapped=0x0) returned 1 [0263.159] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xdc5, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xdc5, lpOverlapped=0x0) returned 1 [0263.160] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.160] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.160] CloseHandle (hObject=0x218) returned 1 [0263.160] CloseHandle (hObject=0x1e0) returned 1 [0263.160] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NoXrRHISMhJBNo0cfL.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\noxrrhismhjbno0cfl.flv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\NoXrRHISMhJBNo0cfL.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\noxrrhismhjbno0cfl.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.164] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.164] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.165] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.165] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0263.170] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\OJKcISn3d2BAzwlafETu.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\ojkcisn3d2bazwlafetu.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\OJKcISn3d2BAzwlafETu.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\ojkcisn3d2bazwlafetu.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.176] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.176] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.177] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.177] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0263.182] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\SG285k.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\sg285k.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\SG285k.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\sg285k.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.185] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.185] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.186] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.186] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0263.192] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\tf ZOqi-Uy kGkn5g.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\tf zoqi-uy kgkn5g.csv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\tf ZOqi-Uy kGkn5g.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\tf zoqi-uy kgkn5g.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.196] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.196] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.196] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.196] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.197] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0263.197] VirtualAlloc (lpAddress=0x235c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x235c000 [0263.197] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Tyk8QAxzpbww82Wlk.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\tyk8qaxzpbww82wlk.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0263.198] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Tyk8QAxzpbww82Wlk.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\tyk8qaxzpbww82wlk.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.199] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.200] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.201] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.201] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.201] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.201] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.201] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.201] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.202] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.202] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.202] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.202] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.202] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.202] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.203] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.203] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.203] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.203] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.203] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x5b6, lpOverlapped=0x0) returned 1 [0263.203] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x5b6, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x5b6, lpOverlapped=0x0) returned 1 [0263.204] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.204] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.204] CloseHandle (hObject=0x218) returned 1 [0263.204] CloseHandle (hObject=0x1e0) returned 1 [0263.204] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Tyk8QAxzpbww82Wlk.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\tyk8qaxzpbww82wlk.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Tyk8QAxzpbww82Wlk.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\tyk8qaxzpbww82wlk.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.209] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.209] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.209] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.209] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.210] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0263.214] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\v-hS0ZFeO.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\v-hs0zfeo.pps"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\v-hS0ZFeO.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\v-hs0zfeo.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.218] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.218] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.219] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.219] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0263.225] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\VgeIJtKEri.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\vgeijtkeri.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\VgeIJtKEri.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\vgeijtkeri.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.228] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.228] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.228] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.228] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.228] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.228] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0263.233] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\VlzDVW69dNfCp zkR.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\vlzdvw69dnfcp zkr.flv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\VlzDVW69dNfCp zkR.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\vlzdvw69dnfcp zkr.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.246] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.246] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.246] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.246] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.246] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.247] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0263.247] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x1) returned 0x2360000 [0263.247] VirtualAlloc (lpAddress=0x2360000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2360000 [0263.248] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\voQySJ4.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\voqysj4.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0263.248] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\voQySJ4.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\voqysj4.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.249] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.250] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.251] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.251] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.251] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.251] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.251] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.251] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.252] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.252] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.252] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.252] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.252] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.252] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.253] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1b7, lpOverlapped=0x0) returned 1 [0263.253] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1b7, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1b7, lpOverlapped=0x0) returned 1 [0263.253] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.253] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.253] CloseHandle (hObject=0x218) returned 1 [0263.254] CloseHandle (hObject=0x1e0) returned 1 [0263.255] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\voQySJ4.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\voqysj4.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\voQySJ4.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\voqysj4.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.261] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.261] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.261] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.262] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.262] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.262] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0263.264] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\W9UNqm5rN4-1sAvH-.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\w9unqm5rn4-1savh-.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\W9UNqm5rN4-1sAvH-.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\w9unqm5rn4-1savh-.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.267] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.267] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.267] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.267] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.267] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.267] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0263.270] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\WgUX39PHXYiqGx8CP.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wgux39phxyiqgx8cp.flv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\WgUX39PHXYiqGx8CP.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wgux39phxyiqgx8cp.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.280] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.280] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.280] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.280] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.280] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.280] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0263.283] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Contacts\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\contacts\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Contacts\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\contacts\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.286] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.286] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.287] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.287] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.287] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.287] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0263.287] VirtualAlloc (lpAddress=0x2364000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2364000 [0263.287] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\1NWhODXrGU7fJ4svX5as\\t0tZUKO4i913ZI.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\1nwhodxrgu7fj4svx5as\\t0tzuko4i913zi.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0263.288] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\1NWhODXrGU7fJ4svX5as\\t0tZUKO4i913ZI.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\1nwhodxrgu7fj4svx5as\\t0tzuko4i913zi.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0263.290] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.291] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.292] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.292] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.293] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.293] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.293] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.293] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.293] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.294] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.294] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.294] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.294] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.294] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.294] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.295] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.295] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.295] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0263.295] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x4a4, lpOverlapped=0x0) returned 1 [0263.295] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x4a4, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x4a4, lpOverlapped=0x0) returned 1 [0263.295] ReadFile (in: hFile=0x218, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0263.295] WriteFile (in: hFile=0x200, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0263.295] CloseHandle (hObject=0x218) returned 1 [0263.296] CloseHandle (hObject=0x200) returned 1 [0263.299] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\1NWhODXrGU7fJ4svX5as\\t0tZUKO4i913ZI.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\1nwhodxrgu7fj4svx5as\\t0tzuko4i913zi.flv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\1NWhODXrGU7fJ4svX5as\\t0tZUKO4i913ZI.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\1nwhodxrgu7fj4svx5as\\t0tzuko4i913zi.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.307] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.307] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.307] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.308] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.308] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0263.316] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Cx-QE.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\cx-qe.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Cx-QE.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\cx-qe.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.322] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.322] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.322] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.322] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.322] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.322] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0263.331] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\GPyn7kNjWJZ2.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\gpyn7knjwjz2.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\GPyn7kNjWJZ2.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\gpyn7knjwjz2.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.339] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.340] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.340] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.340] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.340] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.340] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0263.340] VirtualAlloc (lpAddress=0x2368000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2368000 [0263.341] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\GTVE7s8yay vT.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\gtve7s8yay vt.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.341] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\GTVE7s8yay vT.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\gtve7s8yay vt.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0263.343] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.344] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.345] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.345] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.346] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.346] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.346] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.346] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.346] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.347] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.347] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.347] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.347] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.348] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.348] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.348] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.348] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.348] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.349] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.349] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.349] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.349] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.349] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.350] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.350] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.350] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.350] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xfe, lpOverlapped=0x0) returned 1 [0263.350] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xfe, lpOverlapped=0x0) returned 1 [0263.350] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.350] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.351] CloseHandle (hObject=0x19c) returned 1 [0263.351] CloseHandle (hObject=0x200) returned 1 [0263.352] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\GTVE7s8yay vT.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\gtve7s8yay vt.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\GTVE7s8yay vT.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\gtve7s8yay vt.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.362] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.362] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.362] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.363] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.363] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0263.363] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Tk57GbGZqKRx.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\tk57gbgzqkrx.mp3")) returned 0x20 [0263.364] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Tk57GbGZqKRx.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\tk57gbgzqkrx.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0263.364] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Tk57GbGZqKRx.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\tk57gbgzqkrx.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.366] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.367] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.369] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.369] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.369] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.369] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.370] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.370] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.370] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.370] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.371] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.371] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.371] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.371] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.371] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.372] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.372] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.372] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.372] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.372] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.373] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.373] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.373] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.373] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.374] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.374] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.374] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.374] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.374] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.375] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.375] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.375] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.375] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.376] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.376] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.376] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.376] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.376] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.377] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x898, lpOverlapped=0x0) returned 1 [0263.377] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x898, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x898, lpOverlapped=0x0) returned 1 [0263.377] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.377] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.377] CloseHandle (hObject=0x200) returned 1 [0263.377] CloseHandle (hObject=0x19c) returned 1 [0263.381] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Tk57GbGZqKRx.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\tk57gbgzqkrx.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Tk57GbGZqKRx.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\tk57gbgzqkrx.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.383] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Tk57GbGZqKRx.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\tk57gbgzqkrx.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.383] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Tk57GbGZqKRx.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\tk57gbgzqkrx.mp3"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e9f3e0, ftCreationTime.dwHighDateTime=0x1d8bffd, ftLastAccessTime.dwLowDateTime=0x4df87bb0, ftLastAccessTime.dwHighDateTime=0x1d8c070, ftLastWriteTime.dwLowDateTime=0x4df87bb0, ftLastWriteTime.dwHighDateTime=0x1d8c070, nFileSizeHigh=0x0, nFileSizeLow=0x13898, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="Tk57GbGZqKRx.mp3", cAlternateFileName="TK57GB~1.MP3")) returned 0x55e410 [0263.383] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e9f3e0, ftCreationTime.dwHighDateTime=0x1d8bffd, ftLastAccessTime.dwLowDateTime=0x4df87bb0, ftLastAccessTime.dwHighDateTime=0x1d8c070, ftLastWriteTime.dwLowDateTime=0x4df87bb0, ftLastWriteTime.dwHighDateTime=0x1d8c070, nFileSizeHigh=0x0, nFileSizeLow=0x13898, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="Tk57GbGZqKRx.mp3", cAlternateFileName="TK57GB~1.MP3")) returned 0 [0263.383] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0263.383] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Tk57GbGZqKRx.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\tk57gbgzqkrx.mp3")) returned 1 [0263.386] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Tk57GbGZqKRx.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\tk57gbgzqkrx.mp3")) returned 0xffffffff [0263.386] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e6d5110, ftCreationTime.dwHighDateTime=0x1d8b847, ftLastAccessTime.dwLowDateTime=0x2736a4a0, ftLastAccessTime.dwHighDateTime=0x1d8bbef, ftLastWriteTime.dwLowDateTime=0x2736a4a0, ftLastWriteTime.dwHighDateTime=0x1d8bbef, nFileSizeHigh=0x0, nFileSizeLow=0xd7c5, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="Vu4oRX8zmoARco.bmp", cAlternateFileName="VU4ORX~1.BMP")) returned 1 [0263.387] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.387] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.387] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.387] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0263.387] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Vu4oRX8zmoARco.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\vu4orx8zmoarco.bmp")) returned 0x20 [0263.387] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Vu4oRX8zmoARco.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\vu4orx8zmoarco.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.388] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Vu4oRX8zmoARco.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\vu4orx8zmoarco.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0263.390] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.391] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.393] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.393] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.393] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.394] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.394] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.395] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.395] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.395] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.395] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.395] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.396] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.396] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.396] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.396] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.396] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.397] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.397] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.397] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.398] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.398] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.398] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.398] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.398] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.399] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.399] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x7c5, lpOverlapped=0x0) returned 1 [0263.399] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x7c5, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x7c5, lpOverlapped=0x0) returned 1 [0263.399] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.399] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.399] CloseHandle (hObject=0x19c) returned 1 [0263.399] CloseHandle (hObject=0x200) returned 1 [0263.402] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Vu4oRX8zmoARco.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\vu4orx8zmoarco.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Vu4oRX8zmoARco.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\vu4orx8zmoarco.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.404] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Vu4oRX8zmoARco.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\vu4orx8zmoarco.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.404] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Vu4oRX8zmoARco.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\vu4orx8zmoarco.bmp"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e6d5110, ftCreationTime.dwHighDateTime=0x1d8b847, ftLastAccessTime.dwLowDateTime=0x2736a4a0, ftLastAccessTime.dwHighDateTime=0x1d8bbef, ftLastWriteTime.dwLowDateTime=0x2736a4a0, ftLastWriteTime.dwHighDateTime=0x1d8bbef, nFileSizeHigh=0x0, nFileSizeLow=0xd7c5, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="Vu4oRX8zmoARco.bmp", cAlternateFileName="VU4ORX~1.BMP")) returned 0x55e510 [0263.404] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e6d5110, ftCreationTime.dwHighDateTime=0x1d8b847, ftLastAccessTime.dwLowDateTime=0x2736a4a0, ftLastAccessTime.dwHighDateTime=0x1d8bbef, ftLastWriteTime.dwLowDateTime=0x2736a4a0, ftLastWriteTime.dwHighDateTime=0x1d8bbef, nFileSizeHigh=0x0, nFileSizeLow=0xd7c5, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="Vu4oRX8zmoARco.bmp", cAlternateFileName="VU4ORX~1.BMP")) returned 0 [0263.404] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0263.404] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Vu4oRX8zmoARco.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\vu4orx8zmoarco.bmp")) returned 1 [0263.409] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\Vu4oRX8zmoARco.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\vu4orx8zmoarco.bmp")) returned 0xffffffff [0263.409] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54416990, ftCreationTime.dwHighDateTime=0x1d8b7bb, ftLastAccessTime.dwLowDateTime=0xbaa1510, ftLastAccessTime.dwHighDateTime=0x1d8c067, ftLastWriteTime.dwLowDateTime=0xbaa1510, ftLastWriteTime.dwHighDateTime=0x1d8c067, nFileSizeHigh=0x0, nFileSizeLow=0xca9a, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Yhe9IkX717wLh.wav", cAlternateFileName="YHE9IK~1.WAV")) returned 1 [0263.410] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54416990, ftCreationTime.dwHighDateTime=0x1d8b7bb, ftLastAccessTime.dwLowDateTime=0xbaa1510, ftLastAccessTime.dwHighDateTime=0x1d8c067, ftLastWriteTime.dwLowDateTime=0xbaa1510, ftLastWriteTime.dwHighDateTime=0x1d8c067, nFileSizeHigh=0x0, nFileSizeLow=0xca9a, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="Yhe9IkX717wLh.wav", cAlternateFileName="YHE9IK~1.WAV")) returned 0 [0263.410] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0263.412] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4af19b0, ftCreationTime.dwHighDateTime=0x1d8bba4, ftLastAccessTime.dwLowDateTime=0xc1200910, ftLastAccessTime.dwHighDateTime=0x1d8be21, ftLastWriteTime.dwLowDateTime=0xc1200910, ftLastWriteTime.dwHighDateTime=0x1d8be21, nFileSizeHigh=0x0, nFileSizeLow=0x1675c, dwReserved0=0x77373137, dwReserved1=0x772e684c, cFileName="3Fk41qKybaiEKn.jpg", cAlternateFileName="3FK41Q~1.JPG")) returned 1 [0263.412] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.412] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.413] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.413] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0263.413] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\3Fk41qKybaiEKn.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\3fk41qkybaiekn.jpg")) returned 0x20 [0263.413] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\3Fk41qKybaiEKn.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\3fk41qkybaiekn.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.414] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\3Fk41qKybaiEKn.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\3fk41qkybaiekn.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0263.416] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.417] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.418] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.418] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.419] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.419] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.419] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.419] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.420] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.420] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.420] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.421] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.421] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.421] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.421] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.422] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.422] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.422] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.422] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.422] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.423] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.423] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.423] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.423] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.423] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.424] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.424] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.424] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.424] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.424] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.425] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.425] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.425] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.425] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.426] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.426] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.426] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.426] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.426] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.426] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.427] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.427] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.427] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.427] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.427] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x75c, lpOverlapped=0x0) returned 1 [0263.427] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x75c, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x75c, lpOverlapped=0x0) returned 1 [0263.428] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.428] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.428] CloseHandle (hObject=0x1e0) returned 1 [0263.428] CloseHandle (hObject=0x200) returned 1 [0263.429] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\3Fk41qKybaiEKn.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\3fk41qkybaiekn.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\3Fk41qKybaiEKn.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\3fk41qkybaiekn.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.430] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\3Fk41qKybaiEKn.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\3fk41qkybaiekn.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.430] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\3Fk41qKybaiEKn.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\3fk41qkybaiekn.jpg"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4af19b0, ftCreationTime.dwHighDateTime=0x1d8bba4, ftLastAccessTime.dwLowDateTime=0xc1200910, ftLastAccessTime.dwHighDateTime=0x1d8be21, ftLastWriteTime.dwLowDateTime=0xc1200910, ftLastWriteTime.dwHighDateTime=0x1d8be21, nFileSizeHigh=0x0, nFileSizeLow=0x1675c, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="3Fk41qKybaiEKn.jpg", cAlternateFileName="3FK41Q~1.JPG")) returned 0x55e490 [0263.430] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4af19b0, ftCreationTime.dwHighDateTime=0x1d8bba4, ftLastAccessTime.dwLowDateTime=0xc1200910, ftLastAccessTime.dwHighDateTime=0x1d8be21, ftLastWriteTime.dwLowDateTime=0xc1200910, ftLastWriteTime.dwHighDateTime=0x1d8be21, nFileSizeHigh=0x0, nFileSizeLow=0x1675c, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="3Fk41qKybaiEKn.jpg", cAlternateFileName="3FK41Q~1.JPG")) returned 0 [0263.430] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0263.430] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\3Fk41qKybaiEKn.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\3fk41qkybaiekn.jpg")) returned 1 [0263.437] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\3Fk41qKybaiEKn.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\3fk41qkybaiekn.jpg")) returned 0xffffffff [0263.437] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3733d70, ftCreationTime.dwHighDateTime=0x1d8bd35, ftLastAccessTime.dwLowDateTime=0x34910300, ftLastAccessTime.dwHighDateTime=0x1d8bf2a, ftLastWriteTime.dwLowDateTime=0x34910300, ftLastWriteTime.dwHighDateTime=0x1d8bf2a, nFileSizeHigh=0x0, nFileSizeLow=0x124b0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="4wUap.m4a", cAlternateFileName="")) returned 1 [0263.437] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x1, ftCreationTime.dwLowDateTime=0x9f3ab000, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x9fd34680, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x39432e00, ftLastWriteTime.dwHighDateTime=0x1d8cc9f, nFileSizeHigh=0x0, nFileSizeLow=0x2b000, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", cAlternateFileName="9EE11E~1.EXE")) returned 1 [0263.438] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586ba560, ftCreationTime.dwHighDateTime=0x1d8b9f7, ftLastAccessTime.dwLowDateTime=0x78f70ef0, ftLastAccessTime.dwHighDateTime=0x1d8ba65, ftLastWriteTime.dwLowDateTime=0x78f70ef0, ftLastWriteTime.dwHighDateTime=0x1d8ba65, nFileSizeHigh=0x0, nFileSizeLow=0xb4b1, dwReserved0=0x310038, dwReserved1=0x350031, cFileName="AFlQACoQ_XkZ5Kbtg.gif", cAlternateFileName="AFLQAC~1.GIF")) returned 1 [0263.438] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.439] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.439] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.439] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.439] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.439] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0263.439] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\AFlQACoQ_XkZ5Kbtg.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\aflqacoq_xkz5kbtg.gif")) returned 0x20 [0263.439] VirtualAlloc (lpAddress=0x236c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x236c000 [0263.440] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\AFlQACoQ_XkZ5Kbtg.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\aflqacoq_xkz5kbtg.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0263.440] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\AFlQACoQ_XkZ5Kbtg.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\aflqacoq_xkz5kbtg.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.443] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.444] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.445] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.445] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.446] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.446] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.446] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.446] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.446] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.447] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.447] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.447] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.447] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.448] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.448] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.448] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.448] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.449] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.449] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.449] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.449] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.449] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.450] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x4b1, lpOverlapped=0x0) returned 1 [0263.450] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x4b1, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x4b1, lpOverlapped=0x0) returned 1 [0263.450] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.450] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.450] CloseHandle (hObject=0x200) returned 1 [0263.450] CloseHandle (hObject=0x1e0) returned 1 [0263.452] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\AFlQACoQ_XkZ5Kbtg.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\aflqacoq_xkz5kbtg.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\AFlQACoQ_XkZ5Kbtg.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\aflqacoq_xkz5kbtg.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.452] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\AFlQACoQ_XkZ5Kbtg.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\aflqacoq_xkz5kbtg.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.452] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\AFlQACoQ_XkZ5Kbtg.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\aflqacoq_xkz5kbtg.gif"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586ba560, ftCreationTime.dwHighDateTime=0x1d8b9f7, ftLastAccessTime.dwLowDateTime=0x78f70ef0, ftLastAccessTime.dwHighDateTime=0x1d8ba65, ftLastWriteTime.dwLowDateTime=0x78f70ef0, ftLastWriteTime.dwHighDateTime=0x1d8ba65, nFileSizeHigh=0x0, nFileSizeLow=0xb4b1, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="AFlQACoQ_XkZ5Kbtg.gif", cAlternateFileName="AFLQAC~1.GIF")) returned 0x55e510 [0263.453] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586ba560, ftCreationTime.dwHighDateTime=0x1d8b9f7, ftLastAccessTime.dwLowDateTime=0x78f70ef0, ftLastAccessTime.dwHighDateTime=0x1d8ba65, ftLastWriteTime.dwLowDateTime=0x78f70ef0, ftLastWriteTime.dwHighDateTime=0x1d8ba65, nFileSizeHigh=0x0, nFileSizeLow=0xb4b1, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="AFlQACoQ_XkZ5Kbtg.gif", cAlternateFileName="AFLQAC~1.GIF")) returned 0 [0263.453] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0263.453] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\AFlQACoQ_XkZ5Kbtg.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\aflqacoq_xkz5kbtg.gif")) returned 1 [0263.457] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\AFlQACoQ_XkZ5Kbtg.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\aflqacoq_xkz5kbtg.gif")) returned 0xffffffff [0263.457] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98aad280, ftCreationTime.dwHighDateTime=0x1d8b778, ftLastAccessTime.dwLowDateTime=0xffd0a120, ftLastAccessTime.dwHighDateTime=0x1d8b998, ftLastWriteTime.dwLowDateTime=0xffd0a120, ftLastWriteTime.dwHighDateTime=0x1d8b998, nFileSizeHigh=0x0, nFileSizeLow=0xc766, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ALetk1xGO6QA.m4a", cAlternateFileName="ALETK1~1.M4A")) returned 1 [0263.457] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a8acde0, ftCreationTime.dwHighDateTime=0x1d8b5af, ftLastAccessTime.dwLowDateTime=0xbd266ff0, ftLastAccessTime.dwHighDateTime=0x1d8bf63, ftLastWriteTime.dwLowDateTime=0xbd266ff0, ftLastWriteTime.dwHighDateTime=0x1d8bf63, nFileSizeHigh=0x0, nFileSizeLow=0x7e6a, dwReserved0=0x6d002e, dwReserved1=0x610034, cFileName="BJW1-4TBmjzVeS tFS.png", cAlternateFileName="BJW1-4~1.PNG")) returned 1 [0263.458] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.458] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.458] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.458] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0263.458] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\BJW1-4TBmjzVeS tFS.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bjw1-4tbmjzves tfs.png")) returned 0x20 [0263.459] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\BJW1-4TBmjzVeS tFS.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bjw1-4tbmjzves tfs.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.459] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\BJW1-4TBmjzVeS tFS.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bjw1-4tbmjzves tfs.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0263.462] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.463] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.464] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.464] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.464] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.464] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.465] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.465] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.465] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.465] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.465] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.465] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.466] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.466] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.466] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xe6a, lpOverlapped=0x0) returned 1 [0263.466] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xe6a, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xe6a, lpOverlapped=0x0) returned 1 [0263.467] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.467] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.467] CloseHandle (hObject=0x1e0) returned 1 [0263.467] CloseHandle (hObject=0x200) returned 1 [0263.469] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\BJW1-4TBmjzVeS tFS.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bjw1-4tbmjzves tfs.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\BJW1-4TBmjzVeS tFS.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bjw1-4tbmjzves tfs.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.469] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\BJW1-4TBmjzVeS tFS.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bjw1-4tbmjzves tfs.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.469] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\BJW1-4TBmjzVeS tFS.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bjw1-4tbmjzves tfs.png"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a8acde0, ftCreationTime.dwHighDateTime=0x1d8b5af, ftLastAccessTime.dwLowDateTime=0xbd266ff0, ftLastAccessTime.dwHighDateTime=0x1d8bf63, ftLastWriteTime.dwLowDateTime=0xbd266ff0, ftLastWriteTime.dwHighDateTime=0x1d8bf63, nFileSizeHigh=0x0, nFileSizeLow=0x7e6a, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="BJW1-4TBmjzVeS tFS.png", cAlternateFileName="BJW1-4~1.PNG")) returned 0x55e890 [0263.469] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a8acde0, ftCreationTime.dwHighDateTime=0x1d8b5af, ftLastAccessTime.dwLowDateTime=0xbd266ff0, ftLastAccessTime.dwHighDateTime=0x1d8bf63, ftLastWriteTime.dwLowDateTime=0xbd266ff0, ftLastWriteTime.dwHighDateTime=0x1d8bf63, nFileSizeHigh=0x0, nFileSizeLow=0x7e6a, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="BJW1-4TBmjzVeS tFS.png", cAlternateFileName="BJW1-4~1.PNG")) returned 0 [0263.470] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0263.470] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\BJW1-4TBmjzVeS tFS.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bjw1-4tbmjzves tfs.png")) returned 1 [0263.475] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\BJW1-4TBmjzVeS tFS.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\bjw1-4tbmjzves tfs.png")) returned 0xffffffff [0263.476] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9cdaa0, ftCreationTime.dwHighDateTime=0x1d8bc65, ftLastAccessTime.dwLowDateTime=0xa1fc94c0, ftLastAccessTime.dwHighDateTime=0x1d8bff4, ftLastWriteTime.dwLowDateTime=0xa1fc94c0, ftLastWriteTime.dwHighDateTime=0x1d8bff4, nFileSizeHigh=0x0, nFileSizeLow=0x1045e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHKfwx_.bmp", cAlternateFileName="")) returned 1 [0263.476] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.476] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.476] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.476] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0263.476] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CHKfwx_.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\chkfwx_.bmp")) returned 0x20 [0263.477] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CHKfwx_.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\chkfwx_.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0263.477] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CHKfwx_.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\chkfwx_.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.480] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.481] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.482] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.483] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.483] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.483] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.483] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.483] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.484] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.484] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.484] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.484] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.485] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.485] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.485] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.485] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.485] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.485] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.486] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.486] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.486] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.486] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.486] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.487] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.487] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.487] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.487] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.487] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.488] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.488] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.488] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.488] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.489] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x45e, lpOverlapped=0x0) returned 1 [0263.489] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x45e, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x45e, lpOverlapped=0x0) returned 1 [0263.489] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.489] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.489] CloseHandle (hObject=0x200) returned 1 [0263.489] CloseHandle (hObject=0x1e0) returned 1 [0263.492] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CHKfwx_.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\chkfwx_.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CHKfwx_.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\chkfwx_.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.492] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CHKfwx_.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\chkfwx_.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.492] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CHKfwx_.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\chkfwx_.bmp"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9cdaa0, ftCreationTime.dwHighDateTime=0x1d8bc65, ftLastAccessTime.dwLowDateTime=0xa1fc94c0, ftLastAccessTime.dwHighDateTime=0x1d8bff4, ftLastWriteTime.dwLowDateTime=0xa1fc94c0, ftLastWriteTime.dwHighDateTime=0x1d8bff4, nFileSizeHigh=0x0, nFileSizeLow=0x1045e, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="CHKfwx_.bmp", cAlternateFileName="")) returned 0x55e510 [0263.492] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d9cdaa0, ftCreationTime.dwHighDateTime=0x1d8bc65, ftLastAccessTime.dwLowDateTime=0xa1fc94c0, ftLastAccessTime.dwHighDateTime=0x1d8bff4, ftLastWriteTime.dwLowDateTime=0xa1fc94c0, ftLastWriteTime.dwHighDateTime=0x1d8bff4, nFileSizeHigh=0x0, nFileSizeLow=0x1045e, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="CHKfwx_.bmp", cAlternateFileName="")) returned 0 [0263.492] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0263.492] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CHKfwx_.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\chkfwx_.bmp")) returned 1 [0263.498] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\CHKfwx_.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\chkfwx_.bmp")) returned 0xffffffff [0263.498] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0263.499] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.499] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.499] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.499] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0263.499] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\desktop.ini")) returned 0x26 [0263.499] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.500] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0263.502] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x11a, lpOverlapped=0x0) returned 1 [0263.503] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x11a, lpOverlapped=0x0) returned 1 [0263.504] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.504] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.504] CloseHandle (hObject=0x1e0) returned 1 [0263.504] CloseHandle (hObject=0x200) returned 1 [0263.507] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.507] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.507] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e390 [0263.507] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0263.508] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0263.508] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\desktop.ini")) returned 1 [0263.510] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\desktop.ini")) returned 0xffffffff [0263.510] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc729de60, ftCreationTime.dwHighDateTime=0x1d8b0c7, ftLastAccessTime.dwLowDateTime=0xb5cfcbe0, ftLastAccessTime.dwHighDateTime=0x1d8c123, ftLastWriteTime.dwLowDateTime=0xb5cfcbe0, ftLastWriteTime.dwHighDateTime=0x1d8c123, nFileSizeHigh=0x0, nFileSizeLow=0xbf14, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="ExGkHXAjJlu-KbVwYaT.jpg", cAlternateFileName="EXGKHX~1.JPG")) returned 1 [0263.510] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.510] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.510] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.510] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0263.511] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ExGkHXAjJlu-KbVwYaT.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\exgkhxajjlu-kbvwyat.jpg")) returned 0x20 [0263.511] VirtualAlloc (lpAddress=0x2370000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2370000 [0263.511] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ExGkHXAjJlu-KbVwYaT.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\exgkhxajjlu-kbvwyat.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0263.512] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ExGkHXAjJlu-KbVwYaT.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\exgkhxajjlu-kbvwyat.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.513] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.514] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.515] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.516] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.516] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.516] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.516] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.516] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.517] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.517] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.517] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.517] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.517] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.517] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.518] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.518] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.518] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.518] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.518] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.518] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.519] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.532] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.532] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xf14, lpOverlapped=0x0) returned 1 [0263.533] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xf14, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xf14, lpOverlapped=0x0) returned 1 [0263.533] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.533] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.533] CloseHandle (hObject=0x200) returned 1 [0263.533] CloseHandle (hObject=0x1e0) returned 1 [0263.536] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ExGkHXAjJlu-KbVwYaT.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\exgkhxajjlu-kbvwyat.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ExGkHXAjJlu-KbVwYaT.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\exgkhxajjlu-kbvwyat.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.537] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ExGkHXAjJlu-KbVwYaT.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\exgkhxajjlu-kbvwyat.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.537] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ExGkHXAjJlu-KbVwYaT.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\exgkhxajjlu-kbvwyat.jpg"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc729de60, ftCreationTime.dwHighDateTime=0x1d8b0c7, ftLastAccessTime.dwLowDateTime=0xb5cfcbe0, ftLastAccessTime.dwHighDateTime=0x1d8c123, ftLastWriteTime.dwLowDateTime=0xb5cfcbe0, ftLastWriteTime.dwHighDateTime=0x1d8c123, nFileSizeHigh=0x0, nFileSizeLow=0xbf14, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="ExGkHXAjJlu-KbVwYaT.jpg", cAlternateFileName="EXGKHX~1.JPG")) returned 0x55e710 [0263.537] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc729de60, ftCreationTime.dwHighDateTime=0x1d8b0c7, ftLastAccessTime.dwLowDateTime=0xb5cfcbe0, ftLastAccessTime.dwHighDateTime=0x1d8c123, ftLastWriteTime.dwLowDateTime=0xb5cfcbe0, ftLastWriteTime.dwHighDateTime=0x1d8c123, nFileSizeHigh=0x0, nFileSizeLow=0xbf14, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="ExGkHXAjJlu-KbVwYaT.jpg", cAlternateFileName="EXGKHX~1.JPG")) returned 0 [0263.537] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0263.537] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ExGkHXAjJlu-KbVwYaT.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\exgkhxajjlu-kbvwyat.jpg")) returned 1 [0263.540] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ExGkHXAjJlu-KbVwYaT.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\exgkhxajjlu-kbvwyat.jpg")) returned 0xffffffff [0263.540] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a4f7010, ftCreationTime.dwHighDateTime=0x1d8c079, ftLastAccessTime.dwLowDateTime=0xcc9bd0c0, ftLastAccessTime.dwHighDateTime=0x1d8c0ca, ftLastWriteTime.dwLowDateTime=0xcc9bd0c0, ftLastWriteTime.dwHighDateTime=0x1d8c0ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fBcb0Eywdbm", cAlternateFileName="FBCB0E~1")) returned 1 [0263.540] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a4f7010, ftCreationTime.dwHighDateTime=0x1d8c079, ftLastAccessTime.dwLowDateTime=0xcc9bd0c0, ftLastAccessTime.dwHighDateTime=0x1d8c0ca, ftLastWriteTime.dwLowDateTime=0xcc9bd0c0, ftLastWriteTime.dwHighDateTime=0x1d8c0ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0263.540] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a4f7010, ftCreationTime.dwHighDateTime=0x1d8c079, ftLastAccessTime.dwLowDateTime=0xcc9bd0c0, ftLastAccessTime.dwHighDateTime=0x1d8c0ca, ftLastWriteTime.dwLowDateTime=0xcc9bd0c0, ftLastWriteTime.dwHighDateTime=0x1d8c0ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0263.540] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bf7a270, ftCreationTime.dwHighDateTime=0x1d8bc2c, ftLastAccessTime.dwLowDateTime=0xd5a9b800, ftLastAccessTime.dwHighDateTime=0x1d8bed9, ftLastWriteTime.dwLowDateTime=0xd5a9b800, ftLastWriteTime.dwHighDateTime=0x1d8bed9, nFileSizeHigh=0x0, nFileSizeLow=0x154da, dwReserved0=0x0, dwReserved1=0x104, cFileName="Ezm6rhO0KEsql.wav", cAlternateFileName="EZM6RH~1.WAV")) returned 1 [0263.541] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6022b5b0, ftCreationTime.dwHighDateTime=0x1d8b415, ftLastAccessTime.dwLowDateTime=0x36516b60, ftLastAccessTime.dwHighDateTime=0x1d8b9be, ftLastWriteTime.dwLowDateTime=0x36516b60, ftLastWriteTime.dwHighDateTime=0x1d8b9be, nFileSizeHigh=0x0, nFileSizeLow=0xe8ee, dwReserved0=0x2e006c, dwReserved1=0x610077, cFileName="MNH8zaGFzoVYD5Z6B.bmp", cAlternateFileName="MNH8ZA~1.BMP")) returned 1 [0263.541] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.541] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.541] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.541] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.541] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.541] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0263.542] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\MNH8zaGFzoVYD5Z6B.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\mnh8zagfzovyd5z6b.bmp")) returned 0x20 [0263.542] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\MNH8zaGFzoVYD5Z6B.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\mnh8zagfzovyd5z6b.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0263.542] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\MNH8zaGFzoVYD5Z6B.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\mnh8zagfzovyd5z6b.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.544] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.545] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.546] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.546] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.546] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.546] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.546] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.547] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.547] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.547] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.547] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.547] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.547] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.548] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.548] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.548] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.548] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.548] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.549] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.549] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.549] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.549] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.549] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.549] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.550] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.550] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.558] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.558] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.558] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x8ee, lpOverlapped=0x0) returned 1 [0263.558] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x8ee, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x8ee, lpOverlapped=0x0) returned 1 [0263.559] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.559] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.559] CloseHandle (hObject=0x200) returned 1 [0263.559] CloseHandle (hObject=0x19c) returned 1 [0263.562] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\MNH8zaGFzoVYD5Z6B.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\mnh8zagfzovyd5z6b.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\MNH8zaGFzoVYD5Z6B.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\mnh8zagfzovyd5z6b.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.563] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\MNH8zaGFzoVYD5Z6B.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\mnh8zagfzovyd5z6b.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.563] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\MNH8zaGFzoVYD5Z6B.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\mnh8zagfzovyd5z6b.bmp"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6022b5b0, ftCreationTime.dwHighDateTime=0x1d8b415, ftLastAccessTime.dwLowDateTime=0x36516b60, ftLastAccessTime.dwHighDateTime=0x1d8b9be, ftLastWriteTime.dwLowDateTime=0x36516b60, ftLastWriteTime.dwHighDateTime=0x1d8b9be, nFileSizeHigh=0x0, nFileSizeLow=0xe8ee, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="MNH8zaGFzoVYD5Z6B.bmp", cAlternateFileName="MNH8ZA~1.BMP")) returned 0x55e310 [0263.563] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6022b5b0, ftCreationTime.dwHighDateTime=0x1d8b415, ftLastAccessTime.dwLowDateTime=0x36516b60, ftLastAccessTime.dwHighDateTime=0x1d8b9be, ftLastWriteTime.dwLowDateTime=0x36516b60, ftLastWriteTime.dwHighDateTime=0x1d8b9be, nFileSizeHigh=0x0, nFileSizeLow=0xe8ee, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="MNH8zaGFzoVYD5Z6B.bmp", cAlternateFileName="MNH8ZA~1.BMP")) returned 0 [0263.563] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0263.563] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\MNH8zaGFzoVYD5Z6B.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\mnh8zagfzovyd5z6b.bmp")) returned 1 [0263.568] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\MNH8zaGFzoVYD5Z6B.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\mnh8zagfzovyd5z6b.bmp")) returned 0xffffffff [0263.568] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1236bd20, ftCreationTime.dwHighDateTime=0x1d8b77a, ftLastAccessTime.dwLowDateTime=0x71d96b10, ftLastAccessTime.dwHighDateTime=0x1d8ba4a, ftLastWriteTime.dwLowDateTime=0x71d96b10, ftLastWriteTime.dwHighDateTime=0x1d8ba4a, nFileSizeHigh=0x0, nFileSizeLow=0x8cbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="oj_I2hof2cL4iCtZ.wav", cAlternateFileName="OJ_I2H~1.WAV")) returned 1 [0263.568] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ee9250, ftCreationTime.dwHighDateTime=0x1d8b831, ftLastAccessTime.dwLowDateTime=0x8bbc5180, ftLastAccessTime.dwHighDateTime=0x1d8c0c3, ftLastWriteTime.dwLowDateTime=0x8bbc5180, ftLastWriteTime.dwHighDateTime=0x1d8c0c3, nFileSizeHigh=0x0, nFileSizeLow=0x187c6, dwReserved0=0x630069, dwReserved1=0x7a0074, cFileName="QSer_RfUObTRfZ-i.jpg", cAlternateFileName="QSER_R~1.JPG")) returned 1 [0263.569] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.569] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.569] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.569] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.569] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.569] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0263.569] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\QSer_RfUObTRfZ-i.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\qser_rfuobtrfz-i.jpg")) returned 0x20 [0263.569] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\QSer_RfUObTRfZ-i.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\qser_rfuobtrfz-i.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.570] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\QSer_RfUObTRfZ-i.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\qser_rfuobtrfz-i.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0263.572] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.572] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.574] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.574] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.574] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.574] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.574] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.575] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.575] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.575] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.575] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.575] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.575] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.576] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.576] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.576] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.576] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.576] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.576] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.577] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.577] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.577] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.577] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.577] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.577] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.578] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.578] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.578] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.578] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.578] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.578] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.579] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.579] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.579] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.579] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.580] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.580] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.580] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.580] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.580] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.581] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.581] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.581] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.581] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.582] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.582] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.582] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.582] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.582] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x7c6, lpOverlapped=0x0) returned 1 [0263.583] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x7c6, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x7c6, lpOverlapped=0x0) returned 1 [0263.583] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.583] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.583] CloseHandle (hObject=0x19c) returned 1 [0263.583] CloseHandle (hObject=0x200) returned 1 [0263.585] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\QSer_RfUObTRfZ-i.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\qser_rfuobtrfz-i.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\QSer_RfUObTRfZ-i.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\qser_rfuobtrfz-i.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.589] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\QSer_RfUObTRfZ-i.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\qser_rfuobtrfz-i.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.589] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\QSer_RfUObTRfZ-i.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\qser_rfuobtrfz-i.jpg"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ee9250, ftCreationTime.dwHighDateTime=0x1d8b831, ftLastAccessTime.dwLowDateTime=0x8bbc5180, ftLastAccessTime.dwHighDateTime=0x1d8c0c3, ftLastWriteTime.dwLowDateTime=0x8bbc5180, ftLastWriteTime.dwHighDateTime=0x1d8c0c3, nFileSizeHigh=0x0, nFileSizeLow=0x187c6, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="QSer_RfUObTRfZ-i.jpg", cAlternateFileName="QSER_R~1.JPG")) returned 0x55e5d0 [0263.589] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ee9250, ftCreationTime.dwHighDateTime=0x1d8b831, ftLastAccessTime.dwLowDateTime=0x8bbc5180, ftLastAccessTime.dwHighDateTime=0x1d8c0c3, ftLastWriteTime.dwLowDateTime=0x8bbc5180, ftLastWriteTime.dwHighDateTime=0x1d8c0c3, nFileSizeHigh=0x0, nFileSizeLow=0x187c6, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="QSer_RfUObTRfZ-i.jpg", cAlternateFileName="QSER_R~1.JPG")) returned 0 [0263.589] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0263.590] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\QSer_RfUObTRfZ-i.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\qser_rfuobtrfz-i.jpg")) returned 1 [0263.593] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\QSer_RfUObTRfZ-i.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\qser_rfuobtrfz-i.jpg")) returned 0xffffffff [0263.593] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8cde40, ftCreationTime.dwHighDateTime=0x1d8b56e, ftLastAccessTime.dwLowDateTime=0x7dd963b0, ftLastAccessTime.dwHighDateTime=0x1d8beb0, ftLastWriteTime.dwLowDateTime=0x7dd963b0, ftLastWriteTime.dwHighDateTime=0x1d8beb0, nFileSizeHigh=0x0, nFileSizeLow=0xe76c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RthKlZazZoygA81MZ.jpg", cAlternateFileName="RTHKLZ~1.JPG")) returned 1 [0263.594] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.594] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.594] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.594] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0263.594] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\RthKlZazZoygA81MZ.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\rthklzazzoyga81mz.jpg")) returned 0x20 [0263.594] VirtualAlloc (lpAddress=0x2374000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2374000 [0263.595] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\RthKlZazZoygA81MZ.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\rthklzazzoyga81mz.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0263.595] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\RthKlZazZoygA81MZ.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\rthklzazzoyga81mz.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.599] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.600] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.601] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.602] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.602] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.602] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.602] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.602] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.603] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.603] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.603] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.603] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.603] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.603] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.604] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.604] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.604] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.604] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.604] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.604] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.605] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.605] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.605] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.605] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.605] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.605] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.606] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.606] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0263.606] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x76c, lpOverlapped=0x0) returned 1 [0263.606] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x76c, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x76c, lpOverlapped=0x0) returned 1 [0263.606] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.606] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0263.606] CloseHandle (hObject=0x200) returned 1 [0263.606] CloseHandle (hObject=0x19c) returned 1 [0263.609] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\RthKlZazZoygA81MZ.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\rthklzazzoyga81mz.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\RthKlZazZoygA81MZ.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\rthklzazzoyga81mz.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.610] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\RthKlZazZoygA81MZ.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\rthklzazzoyga81mz.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.610] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\RthKlZazZoygA81MZ.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\rthklzazzoyga81mz.jpg"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8cde40, ftCreationTime.dwHighDateTime=0x1d8b56e, ftLastAccessTime.dwLowDateTime=0x7dd963b0, ftLastAccessTime.dwHighDateTime=0x1d8beb0, ftLastWriteTime.dwLowDateTime=0x7dd963b0, ftLastWriteTime.dwHighDateTime=0x1d8beb0, nFileSizeHigh=0x0, nFileSizeLow=0xe76c, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="RthKlZazZoygA81MZ.jpg", cAlternateFileName="RTHKLZ~1.JPG")) returned 0x55e750 [0263.611] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8cde40, ftCreationTime.dwHighDateTime=0x1d8b56e, ftLastAccessTime.dwLowDateTime=0x7dd963b0, ftLastAccessTime.dwHighDateTime=0x1d8beb0, ftLastWriteTime.dwLowDateTime=0x7dd963b0, ftLastWriteTime.dwHighDateTime=0x1d8beb0, nFileSizeHigh=0x0, nFileSizeLow=0xe76c, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="RthKlZazZoygA81MZ.jpg", cAlternateFileName="RTHKLZ~1.JPG")) returned 0 [0263.611] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0263.611] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\RthKlZazZoygA81MZ.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\rthklzazzoyga81mz.jpg")) returned 1 [0263.616] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\RthKlZazZoygA81MZ.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\rthklzazzoyga81mz.jpg")) returned 0xffffffff [0263.616] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8cde40, ftCreationTime.dwHighDateTime=0x1d8b56e, ftLastAccessTime.dwLowDateTime=0x7dd963b0, ftLastAccessTime.dwHighDateTime=0x1d8beb0, ftLastWriteTime.dwLowDateTime=0x7dd963b0, ftLastWriteTime.dwHighDateTime=0x1d8beb0, nFileSizeHigh=0x0, nFileSizeLow=0xe76c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RthKlZazZoygA81MZ.jpg", cAlternateFileName="RTHKLZ~1.JPG")) returned 0 [0263.616] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0263.617] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4a1f310, ftCreationTime.dwHighDateTime=0x1d8c124, ftLastAccessTime.dwLowDateTime=0x6b9e1c10, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6b9e1c10, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x979, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="Ft3yPFlLda4HfpGaHR.swf", cAlternateFileName="FT3YPF~1.SWF")) returned 1 [0263.617] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc4302b0, ftCreationTime.dwHighDateTime=0x1d8baac, ftLastAccessTime.dwLowDateTime=0x8d94bd00, ftLastAccessTime.dwHighDateTime=0x1d8be3c, ftLastWriteTime.dwLowDateTime=0x8d94bd00, ftLastWriteTime.dwHighDateTime=0x1d8be3c, nFileSizeHigh=0x0, nFileSizeLow=0x127c, dwReserved0=0x700066, dwReserved1=0x610067, cFileName="k2jJ-.jpg", cAlternateFileName="")) returned 1 [0263.618] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.618] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.618] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.618] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0263.618] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\k2jJ-.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\k2jj-.jpg")) returned 0x20 [0263.618] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\k2jJ-.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\k2jj-.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.619] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\k2jJ-.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\k2jj-.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.621] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.622] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.623] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x27c, lpOverlapped=0x0) returned 1 [0263.623] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x27c, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x27c, lpOverlapped=0x0) returned 1 [0263.623] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.623] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.623] CloseHandle (hObject=0x1e0) returned 1 [0263.623] CloseHandle (hObject=0x19c) returned 1 [0263.625] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\k2jJ-.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\k2jj-.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\k2jJ-.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\k2jj-.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.625] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\k2jJ-.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\k2jj-.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.625] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\k2jJ-.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\k2jj-.jpg"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc4302b0, ftCreationTime.dwHighDateTime=0x1d8baac, ftLastAccessTime.dwLowDateTime=0x8d94bd00, ftLastAccessTime.dwHighDateTime=0x1d8be3c, ftLastWriteTime.dwLowDateTime=0x8d94bd00, ftLastWriteTime.dwHighDateTime=0x1d8be3c, nFileSizeHigh=0x0, nFileSizeLow=0x127c, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="k2jJ-.jpg", cAlternateFileName="")) returned 0x55e2d0 [0263.625] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc4302b0, ftCreationTime.dwHighDateTime=0x1d8baac, ftLastAccessTime.dwLowDateTime=0x8d94bd00, ftLastAccessTime.dwHighDateTime=0x1d8be3c, ftLastWriteTime.dwLowDateTime=0x8d94bd00, ftLastWriteTime.dwHighDateTime=0x1d8be3c, nFileSizeHigh=0x0, nFileSizeLow=0x127c, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="k2jJ-.jpg", cAlternateFileName="")) returned 0 [0263.626] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0263.626] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\k2jJ-.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\k2jj-.jpg")) returned 1 [0263.629] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\k2jJ-.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\k2jj-.jpg")) returned 0xffffffff [0263.629] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f25bd70, ftCreationTime.dwHighDateTime=0x1d8bbc9, ftLastAccessTime.dwLowDateTime=0xa2b0dcc0, ftLastAccessTime.dwHighDateTime=0x1d8bcd7, ftLastWriteTime.dwLowDateTime=0xa2b0dcc0, ftLastWriteTime.dwHighDateTime=0x1d8bcd7, nFileSizeHigh=0x0, nFileSizeLow=0x3315, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="KFOnZrXcibqJ-rzhU.m4a", cAlternateFileName="KFONZR~1.M4A")) returned 1 [0263.630] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeaddfe0, ftCreationTime.dwHighDateTime=0x1d8b7ac, ftLastAccessTime.dwLowDateTime=0x8a3a7f10, ftLastAccessTime.dwHighDateTime=0x1d8bd37, ftLastWriteTime.dwLowDateTime=0x8a3a7f10, ftLastWriteTime.dwHighDateTime=0x1d8bd37, nFileSizeHigh=0x0, nFileSizeLow=0x6478, dwReserved0=0x72002d, dwReserved1=0x68007a, cFileName="NMYzcSVMbuoShDSEUEr4.swf", cAlternateFileName="NMYZCS~1.SWF")) returned 1 [0263.630] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68e1eb10, ftCreationTime.dwHighDateTime=0x1d8b6e2, ftLastAccessTime.dwLowDateTime=0x706f31c0, ftLastAccessTime.dwHighDateTime=0x1d8b94f, ftLastWriteTime.dwLowDateTime=0x706f31c0, ftLastWriteTime.dwHighDateTime=0x1d8b94f, nFileSizeHigh=0x0, nFileSizeLow=0x1327b, dwReserved0=0x640068, dwReserved1=0x650073, cFileName="oHQuuCEivKXjdHUMs.wav", cAlternateFileName="OHQUUC~1.WAV")) returned 1 [0263.631] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39756570, ftCreationTime.dwHighDateTime=0x1d8b802, ftLastAccessTime.dwLowDateTime=0x972ab7c0, ftLastAccessTime.dwHighDateTime=0x1d8b860, ftLastWriteTime.dwLowDateTime=0x972ab7c0, ftLastWriteTime.dwHighDateTime=0x1d8b860, nFileSizeHigh=0x0, nFileSizeLow=0x25fd, dwReserved0=0x680064, dwReserved1=0x6d0075, cFileName="r2Jb2xWXO9z.mp3", cAlternateFileName="R2JB2X~1.MP3")) returned 1 [0263.631] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.631] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.632] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.632] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0263.632] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\r2Jb2xWXO9z.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\r2jb2xwxo9z.mp3")) returned 0x20 [0263.632] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\r2Jb2xWXO9z.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\r2jb2xwxo9z.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.633] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\r2Jb2xWXO9z.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\r2jb2xwxo9z.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.636] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.637] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.638] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.638] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.638] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x5fd, lpOverlapped=0x0) returned 1 [0263.639] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x5fd, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x5fd, lpOverlapped=0x0) returned 1 [0263.639] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.639] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.639] CloseHandle (hObject=0x19c) returned 1 [0263.639] CloseHandle (hObject=0x1e0) returned 1 [0263.640] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\r2Jb2xWXO9z.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\r2jb2xwxo9z.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\r2Jb2xWXO9z.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\r2jb2xwxo9z.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.641] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\r2Jb2xWXO9z.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\r2jb2xwxo9z.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.641] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\r2Jb2xWXO9z.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\r2jb2xwxo9z.mp3"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39756570, ftCreationTime.dwHighDateTime=0x1d8b802, ftLastAccessTime.dwLowDateTime=0x972ab7c0, ftLastAccessTime.dwHighDateTime=0x1d8b860, ftLastWriteTime.dwLowDateTime=0x972ab7c0, ftLastWriteTime.dwHighDateTime=0x1d8b860, nFileSizeHigh=0x0, nFileSizeLow=0x25fd, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="r2Jb2xWXO9z.mp3", cAlternateFileName="R2JB2X~1.MP3")) returned 0x55e5d0 [0263.641] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39756570, ftCreationTime.dwHighDateTime=0x1d8b802, ftLastAccessTime.dwLowDateTime=0x972ab7c0, ftLastAccessTime.dwHighDateTime=0x1d8b860, ftLastWriteTime.dwLowDateTime=0x972ab7c0, ftLastWriteTime.dwHighDateTime=0x1d8b860, nFileSizeHigh=0x0, nFileSizeLow=0x25fd, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="r2Jb2xWXO9z.mp3", cAlternateFileName="R2JB2X~1.MP3")) returned 0 [0263.641] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0263.641] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\r2Jb2xWXO9z.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\r2jb2xwxo9z.mp3")) returned 1 [0263.644] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\r2Jb2xWXO9z.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\r2jb2xwxo9z.mp3")) returned 0xffffffff [0263.644] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96e7ef0, ftCreationTime.dwHighDateTime=0x1d8b5f0, ftLastAccessTime.dwLowDateTime=0xcc02a960, ftLastAccessTime.dwHighDateTime=0x1d8c09b, ftLastWriteTime.dwLowDateTime=0xcc02a960, ftLastWriteTime.dwHighDateTime=0x1d8c09b, nFileSizeHigh=0x0, nFileSizeLow=0xbce6, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="RPB19Tq0.wav", cAlternateFileName="")) returned 1 [0263.645] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22b10da0, ftCreationTime.dwHighDateTime=0x1d8bfee, ftLastAccessTime.dwLowDateTime=0xbafc0f40, ftLastAccessTime.dwHighDateTime=0x1d8bffa, ftLastWriteTime.dwLowDateTime=0xbafc0f40, ftLastWriteTime.dwHighDateTime=0x1d8bffa, nFileSizeHigh=0x0, nFileSizeLow=0x10e89, dwReserved0=0x550000, dwReserved1=0x2000002, cFileName="sG4YrsPkBWouawt6j.m4a", cAlternateFileName="SG4YRS~1.M4A")) returned 1 [0263.645] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d36030, ftCreationTime.dwHighDateTime=0x1d8bc47, ftLastAccessTime.dwLowDateTime=0x1a922930, ftLastAccessTime.dwHighDateTime=0x1d8bf8d, ftLastWriteTime.dwLowDateTime=0x1a922930, ftLastWriteTime.dwHighDateTime=0x1d8bf8d, nFileSizeHigh=0x0, nFileSizeLow=0x15903, dwReserved0=0x770061, dwReserved1=0x360074, cFileName="V3xi3wO l.m4a", cAlternateFileName="V3XI3W~1.M4A")) returned 1 [0263.646] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67fc050, ftCreationTime.dwHighDateTime=0x1d8b501, ftLastAccessTime.dwLowDateTime=0x3e804850, ftLastAccessTime.dwHighDateTime=0x1d8bb72, ftLastWriteTime.dwLowDateTime=0x3e804850, ftLastWriteTime.dwHighDateTime=0x1d8bb72, nFileSizeHigh=0x0, nFileSizeLow=0xa20c, dwReserved0=0x61, dwReserved1=0x360074, cFileName="v4YCbLNj.rtf", cAlternateFileName="")) returned 1 [0263.646] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.646] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.646] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.646] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.646] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0263.647] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\v4YCbLNj.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\v4ycblnj.rtf")) returned 0x20 [0263.647] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\v4YCbLNj.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\v4ycblnj.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.647] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\v4YCbLNj.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\v4ycblnj.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.649] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.650] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.651] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.652] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.652] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.652] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.652] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.652] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.653] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.653] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.653] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.653] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.653] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.653] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.654] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.654] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.654] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.654] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.654] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.654] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.655] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x20c, lpOverlapped=0x0) returned 1 [0263.655] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x20c, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x20c, lpOverlapped=0x0) returned 1 [0263.655] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.655] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.655] CloseHandle (hObject=0x1e0) returned 1 [0263.655] CloseHandle (hObject=0x19c) returned 1 [0263.662] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\v4YCbLNj.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\v4ycblnj.rtf"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\v4YCbLNj.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\v4ycblnj.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.663] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\v4YCbLNj.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\v4ycblnj.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.663] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\v4YCbLNj.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\v4ycblnj.rtf"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67fc050, ftCreationTime.dwHighDateTime=0x1d8b501, ftLastAccessTime.dwLowDateTime=0x3e804850, ftLastAccessTime.dwHighDateTime=0x1d8bb72, ftLastWriteTime.dwLowDateTime=0x3e804850, ftLastWriteTime.dwHighDateTime=0x1d8bb72, nFileSizeHigh=0x0, nFileSizeLow=0xa20c, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="v4YCbLNj.rtf", cAlternateFileName="")) returned 0x55e390 [0263.663] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67fc050, ftCreationTime.dwHighDateTime=0x1d8b501, ftLastAccessTime.dwLowDateTime=0x3e804850, ftLastAccessTime.dwHighDateTime=0x1d8bb72, ftLastWriteTime.dwLowDateTime=0x3e804850, ftLastWriteTime.dwHighDateTime=0x1d8bb72, nFileSizeHigh=0x0, nFileSizeLow=0xa20c, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="v4YCbLNj.rtf", cAlternateFileName="")) returned 0 [0263.663] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0263.663] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\v4YCbLNj.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\v4ycblnj.rtf")) returned 1 [0263.667] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\v4YCbLNj.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\v4ycblnj.rtf")) returned 0xffffffff [0263.667] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701b06e0, ftCreationTime.dwHighDateTime=0x1d8b855, ftLastAccessTime.dwLowDateTime=0x243b4990, ftLastAccessTime.dwHighDateTime=0x1d8c00e, ftLastWriteTime.dwLowDateTime=0x243b4990, ftLastWriteTime.dwHighDateTime=0x1d8c00e, nFileSizeHigh=0x0, nFileSizeLow=0xfcbc, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="w23TEnSoX0X bUh.wav", cAlternateFileName="W23TEN~1.WAV")) returned 1 [0263.668] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1efc6e0, ftCreationTime.dwHighDateTime=0x1d8c01d, ftLastAccessTime.dwLowDateTime=0xbc460ca0, ftLastAccessTime.dwHighDateTime=0x1d8c0c4, ftLastWriteTime.dwLowDateTime=0xbc460ca0, ftLastWriteTime.dwHighDateTime=0x1d8c0c4, nFileSizeHigh=0x0, nFileSizeLow=0x15a6a, dwReserved0=0x750062, dwReserved1=0x2e0068, cFileName="wL84FPIPRrjF.flv", cAlternateFileName="WL84FP~1.FLV")) returned 1 [0263.668] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.668] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.668] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.668] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.668] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.668] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0263.668] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wL84FPIPRrjF.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wl84fpiprrjf.flv")) returned 0x20 [0263.668] VirtualAlloc (lpAddress=0x2378000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2378000 [0263.669] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wL84FPIPRrjF.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wl84fpiprrjf.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.669] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wL84FPIPRrjF.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wl84fpiprrjf.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.673] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.674] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.675] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.676] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.676] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.676] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.676] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.677] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.677] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.677] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.677] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.677] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.677] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.677] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.678] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.678] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.678] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.678] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.678] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.679] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.679] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.679] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.679] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.679] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.680] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.680] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.680] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.680] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.680] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.681] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.681] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.681] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.681] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.681] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.682] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.682] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.682] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.682] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.683] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.683] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.683] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.683] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.684] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xa6a, lpOverlapped=0x0) returned 1 [0263.684] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xa6a, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xa6a, lpOverlapped=0x0) returned 1 [0263.684] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.684] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.684] CloseHandle (hObject=0x19c) returned 1 [0263.684] CloseHandle (hObject=0x1e0) returned 1 [0263.685] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wL84FPIPRrjF.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wl84fpiprrjf.flv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wL84FPIPRrjF.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wl84fpiprrjf.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.686] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wL84FPIPRrjF.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wl84fpiprrjf.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.686] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wL84FPIPRrjF.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wl84fpiprrjf.flv"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1efc6e0, ftCreationTime.dwHighDateTime=0x1d8c01d, ftLastAccessTime.dwLowDateTime=0xbc460ca0, ftLastAccessTime.dwHighDateTime=0x1d8c0c4, ftLastWriteTime.dwLowDateTime=0xbc460ca0, ftLastWriteTime.dwHighDateTime=0x1d8c0c4, nFileSizeHigh=0x0, nFileSizeLow=0x15a6a, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="wL84FPIPRrjF.flv", cAlternateFileName="WL84FP~1.FLV")) returned 0x55e290 [0263.686] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1efc6e0, ftCreationTime.dwHighDateTime=0x1d8c01d, ftLastAccessTime.dwLowDateTime=0xbc460ca0, ftLastAccessTime.dwHighDateTime=0x1d8c0c4, ftLastWriteTime.dwLowDateTime=0xbc460ca0, ftLastWriteTime.dwHighDateTime=0x1d8c0c4, nFileSizeHigh=0x0, nFileSizeLow=0x15a6a, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="wL84FPIPRrjF.flv", cAlternateFileName="WL84FP~1.FLV")) returned 0 [0263.686] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0263.686] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wL84FPIPRrjF.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wl84fpiprrjf.flv")) returned 1 [0263.690] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wL84FPIPRrjF.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wl84fpiprrjf.flv")) returned 0xffffffff [0263.690] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe73d7240, ftCreationTime.dwHighDateTime=0x1d8c0bf, ftLastAccessTime.dwLowDateTime=0x13e7e170, ftLastAccessTime.dwHighDateTime=0x1d8c0ef, ftLastWriteTime.dwLowDateTime=0x13e7e170, ftLastWriteTime.dwHighDateTime=0x1d8c0ef, nFileSizeHigh=0x0, nFileSizeLow=0x306a, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="wZnk91fFxeq-ux.mp3", cAlternateFileName="WZNK91~1.MP3")) returned 1 [0263.690] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.690] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.690] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.690] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.690] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.690] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0263.690] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wZnk91fFxeq-ux.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wznk91ffxeq-ux.mp3")) returned 0x20 [0263.692] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wZnk91fFxeq-ux.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wznk91ffxeq-ux.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.692] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wZnk91fFxeq-ux.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wznk91ffxeq-ux.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.694] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.695] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.696] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.696] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.696] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.696] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.697] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x6a, lpOverlapped=0x0) returned 1 [0263.697] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x6a, lpOverlapped=0x0) returned 1 [0263.697] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.697] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.697] CloseHandle (hObject=0x1e0) returned 1 [0263.697] CloseHandle (hObject=0x19c) returned 1 [0263.699] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wZnk91fFxeq-ux.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wznk91ffxeq-ux.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wZnk91fFxeq-ux.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wznk91ffxeq-ux.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.699] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wZnk91fFxeq-ux.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wznk91ffxeq-ux.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.699] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wZnk91fFxeq-ux.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wznk91ffxeq-ux.mp3"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe73d7240, ftCreationTime.dwHighDateTime=0x1d8c0bf, ftLastAccessTime.dwLowDateTime=0x13e7e170, ftLastAccessTime.dwHighDateTime=0x1d8c0ef, ftLastWriteTime.dwLowDateTime=0x13e7e170, ftLastWriteTime.dwHighDateTime=0x1d8c0ef, nFileSizeHigh=0x0, nFileSizeLow=0x306a, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="wZnk91fFxeq-ux.mp3", cAlternateFileName="WZNK91~1.MP3")) returned 0x55e210 [0263.699] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe73d7240, ftCreationTime.dwHighDateTime=0x1d8c0bf, ftLastAccessTime.dwLowDateTime=0x13e7e170, ftLastAccessTime.dwHighDateTime=0x1d8c0ef, ftLastWriteTime.dwLowDateTime=0x13e7e170, ftLastWriteTime.dwHighDateTime=0x1d8c0ef, nFileSizeHigh=0x0, nFileSizeLow=0x306a, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="wZnk91fFxeq-ux.mp3", cAlternateFileName="WZNK91~1.MP3")) returned 0 [0263.699] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0263.699] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wZnk91fFxeq-ux.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wznk91ffxeq-ux.mp3")) returned 1 [0263.701] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\wZnk91fFxeq-ux.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\wznk91ffxeq-ux.mp3")) returned 0xffffffff [0263.701] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f591fc0, ftCreationTime.dwHighDateTime=0x1d8b704, ftLastAccessTime.dwLowDateTime=0x351a6b50, ftLastAccessTime.dwHighDateTime=0x1d8bffb, ftLastWriteTime.dwLowDateTime=0x351a6b50, ftLastWriteTime.dwHighDateTime=0x1d8bffb, nFileSizeHigh=0x0, nFileSizeLow=0x146e9, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="YbJLketrmcupsFcqKK4K.mp3", cAlternateFileName="YBJLKE~1.MP3")) returned 1 [0263.702] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.702] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.702] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.702] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.702] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.702] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0263.702] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbJLketrmcupsFcqKK4K.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ybjlketrmcupsfcqkk4k.mp3")) returned 0x20 [0263.702] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbJLketrmcupsFcqKK4K.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ybjlketrmcupsfcqkk4k.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.703] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbJLketrmcupsFcqKK4K.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ybjlketrmcupsfcqkk4k.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.705] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.705] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.707] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.707] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.707] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.707] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.707] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.708] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.708] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.708] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.708] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.708] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.708] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.709] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.709] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.709] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.709] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.709] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.709] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.710] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.710] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.710] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.710] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.711] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.711] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.711] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.711] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.711] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.711] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.712] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.712] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.712] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.712] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.712] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.712] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.713] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.713] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.713] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.713] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.713] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.713] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x6e9, lpOverlapped=0x0) returned 1 [0263.713] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x6e9, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x6e9, lpOverlapped=0x0) returned 1 [0263.714] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.714] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.714] CloseHandle (hObject=0x19c) returned 1 [0263.714] CloseHandle (hObject=0x1e0) returned 1 [0263.716] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbJLketrmcupsFcqKK4K.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ybjlketrmcupsfcqkk4k.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbJLketrmcupsFcqKK4K.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ybjlketrmcupsfcqkk4k.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.716] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbJLketrmcupsFcqKK4K.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ybjlketrmcupsfcqkk4k.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.716] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbJLketrmcupsFcqKK4K.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ybjlketrmcupsfcqkk4k.mp3"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f591fc0, ftCreationTime.dwHighDateTime=0x1d8b704, ftLastAccessTime.dwLowDateTime=0x351a6b50, ftLastAccessTime.dwHighDateTime=0x1d8bffb, ftLastWriteTime.dwLowDateTime=0x351a6b50, ftLastWriteTime.dwHighDateTime=0x1d8bffb, nFileSizeHigh=0x0, nFileSizeLow=0x146e9, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="YbJLketrmcupsFcqKK4K.mp3", cAlternateFileName="YBJLKE~1.MP3")) returned 0x55e850 [0263.716] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f591fc0, ftCreationTime.dwHighDateTime=0x1d8b704, ftLastAccessTime.dwLowDateTime=0x351a6b50, ftLastAccessTime.dwHighDateTime=0x1d8bffb, ftLastWriteTime.dwLowDateTime=0x351a6b50, ftLastWriteTime.dwHighDateTime=0x1d8bffb, nFileSizeHigh=0x0, nFileSizeLow=0x146e9, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="YbJLketrmcupsFcqKK4K.mp3", cAlternateFileName="YBJLKE~1.MP3")) returned 0 [0263.716] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0263.716] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbJLketrmcupsFcqKK4K.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ybjlketrmcupsfcqkk4k.mp3")) returned 1 [0263.719] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\YbJLketrmcupsFcqKK4K.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ybjlketrmcupsfcqkk4k.mp3")) returned 0xffffffff [0263.719] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc342b870, ftCreationTime.dwHighDateTime=0x1d8be15, ftLastAccessTime.dwLowDateTime=0xcc57b1c0, ftLastAccessTime.dwHighDateTime=0x1d8be2b, ftLastWriteTime.dwLowDateTime=0xcc57b1c0, ftLastWriteTime.dwHighDateTime=0x1d8be2b, nFileSizeHigh=0x0, nFileSizeLow=0x91e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ymTcIWR_gWH.bmp", cAlternateFileName="YMTCIW~1.BMP")) returned 1 [0263.719] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.719] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.719] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.719] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0263.720] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ymTcIWR_gWH.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ymtciwr_gwh.bmp")) returned 0x20 [0263.720] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ymTcIWR_gWH.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ymtciwr_gwh.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.720] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ymTcIWR_gWH.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ymtciwr_gwh.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.724] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.724] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.726] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.727] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.727] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.727] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.727] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.727] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.727] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.728] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.728] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.728] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.728] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.728] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.728] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.728] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.729] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.729] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.729] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1e8, lpOverlapped=0x0) returned 1 [0263.729] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1e8, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1e8, lpOverlapped=0x0) returned 1 [0263.729] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.729] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.729] CloseHandle (hObject=0x1e0) returned 1 [0263.729] CloseHandle (hObject=0x19c) returned 1 [0263.732] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ymTcIWR_gWH.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ymtciwr_gwh.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ymTcIWR_gWH.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ymtciwr_gwh.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.732] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ymTcIWR_gWH.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ymtciwr_gwh.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.733] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ymTcIWR_gWH.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ymtciwr_gwh.bmp"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc342b870, ftCreationTime.dwHighDateTime=0x1d8be15, ftLastAccessTime.dwLowDateTime=0xcc57b1c0, ftLastAccessTime.dwHighDateTime=0x1d8be2b, ftLastWriteTime.dwLowDateTime=0xcc57b1c0, ftLastWriteTime.dwHighDateTime=0x1d8be2b, nFileSizeHigh=0x0, nFileSizeLow=0x91e8, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="ymTcIWR_gWH.bmp", cAlternateFileName="YMTCIW~1.BMP")) returned 0x55e210 [0263.733] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc342b870, ftCreationTime.dwHighDateTime=0x1d8be15, ftLastAccessTime.dwLowDateTime=0xcc57b1c0, ftLastAccessTime.dwHighDateTime=0x1d8be2b, ftLastWriteTime.dwLowDateTime=0xcc57b1c0, ftLastWriteTime.dwHighDateTime=0x1d8be2b, nFileSizeHigh=0x0, nFileSizeLow=0x91e8, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="ymTcIWR_gWH.bmp", cAlternateFileName="YMTCIW~1.BMP")) returned 0 [0263.733] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0263.733] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ymTcIWR_gWH.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ymtciwr_gwh.bmp")) returned 1 [0263.744] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ymTcIWR_gWH.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ymtciwr_gwh.bmp")) returned 0xffffffff [0263.745] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa63513e0, ftCreationTime.dwHighDateTime=0x1d8bdbb, ftLastAccessTime.dwLowDateTime=0x3fc482b0, ftLastAccessTime.dwHighDateTime=0x1d8c105, ftLastWriteTime.dwLowDateTime=0x3fc482b0, ftLastWriteTime.dwHighDateTime=0x1d8c105, nFileSizeHigh=0x0, nFileSizeLow=0x10145, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="Zc1lfVUI5Sjl7oZcSD.png", cAlternateFileName="ZC1LFV~1.PNG")) returned 1 [0263.745] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.745] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.745] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.745] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0263.746] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Zc1lfVUI5Sjl7oZcSD.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zc1lfvui5sjl7ozcsd.png")) returned 0x20 [0263.746] VirtualAlloc (lpAddress=0x237c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x237c000 [0263.746] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Zc1lfVUI5Sjl7oZcSD.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zc1lfvui5sjl7ozcsd.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.747] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Zc1lfVUI5Sjl7oZcSD.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zc1lfvui5sjl7ozcsd.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.748] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.749] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.750] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.750] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.755] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.755] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.755] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.755] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.755] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.755] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.756] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.756] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.756] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.756] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.756] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.756] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.757] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.757] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.757] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.757] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.757] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.757] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.758] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.758] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.758] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.758] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.759] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.759] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.759] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.759] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.759] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.759] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.760] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x145, lpOverlapped=0x0) returned 1 [0263.760] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x145, lpOverlapped=0x0) returned 1 [0263.760] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.760] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.760] CloseHandle (hObject=0x19c) returned 1 [0263.760] CloseHandle (hObject=0x1e0) returned 1 [0263.762] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Zc1lfVUI5Sjl7oZcSD.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zc1lfvui5sjl7ozcsd.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Zc1lfVUI5Sjl7oZcSD.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zc1lfvui5sjl7ozcsd.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.762] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Zc1lfVUI5Sjl7oZcSD.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zc1lfvui5sjl7ozcsd.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.762] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Zc1lfVUI5Sjl7oZcSD.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zc1lfvui5sjl7ozcsd.png"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa63513e0, ftCreationTime.dwHighDateTime=0x1d8bdbb, ftLastAccessTime.dwLowDateTime=0x3fc482b0, ftLastAccessTime.dwHighDateTime=0x1d8c105, ftLastWriteTime.dwLowDateTime=0x3fc482b0, ftLastWriteTime.dwHighDateTime=0x1d8c105, nFileSizeHigh=0x0, nFileSizeLow=0x10145, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Zc1lfVUI5Sjl7oZcSD.png", cAlternateFileName="ZC1LFV~1.PNG")) returned 0x55e390 [0263.762] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa63513e0, ftCreationTime.dwHighDateTime=0x1d8bdbb, ftLastAccessTime.dwLowDateTime=0x3fc482b0, ftLastAccessTime.dwHighDateTime=0x1d8c105, ftLastWriteTime.dwLowDateTime=0x3fc482b0, ftLastWriteTime.dwHighDateTime=0x1d8c105, nFileSizeHigh=0x0, nFileSizeLow=0x10145, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Zc1lfVUI5Sjl7oZcSD.png", cAlternateFileName="ZC1LFV~1.PNG")) returned 0 [0263.763] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0263.763] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Zc1lfVUI5Sjl7oZcSD.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zc1lfvui5sjl7ozcsd.png")) returned 1 [0263.766] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\Zc1lfVUI5Sjl7oZcSD.png" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zc1lfvui5sjl7ozcsd.png")) returned 0xffffffff [0263.766] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173905d0, ftCreationTime.dwHighDateTime=0x1d8b2d9, ftLastAccessTime.dwLowDateTime=0xceca8580, ftLastAccessTime.dwHighDateTime=0x1d8b472, ftLastWriteTime.dwLowDateTime=0xceca8580, ftLastWriteTime.dwHighDateTime=0x1d8b472, nFileSizeHigh=0x0, nFileSizeLow=0x184ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZQL0Wg7u6I.mkv", cAlternateFileName="ZQL0WG~1.MKV")) returned 1 [0263.766] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.766] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.767] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.767] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0263.767] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ZQL0Wg7u6I.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zql0wg7u6i.mkv")) returned 0x20 [0263.767] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ZQL0Wg7u6I.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zql0wg7u6i.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.768] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ZQL0Wg7u6I.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zql0wg7u6i.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.771] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.772] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.773] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.773] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.773] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.774] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.774] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.774] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.774] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.774] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.775] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.775] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.775] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.775] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.775] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.776] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.776] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.776] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.776] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.776] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.777] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.777] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.777] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.777] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.777] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.777] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.778] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.778] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.778] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.778] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.778] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.778] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.779] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.779] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.779] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.779] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.779] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.779] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.780] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.780] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.780] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.780] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.780] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.780] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.781] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.781] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.781] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.781] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.781] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x4ae, lpOverlapped=0x0) returned 1 [0263.781] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x4ae, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x4ae, lpOverlapped=0x0) returned 1 [0263.782] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.782] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.782] CloseHandle (hObject=0x1e0) returned 1 [0263.782] CloseHandle (hObject=0x19c) returned 1 [0263.950] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ZQL0Wg7u6I.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zql0wg7u6i.mkv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ZQL0Wg7u6I.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zql0wg7u6i.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.950] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ZQL0Wg7u6I.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zql0wg7u6i.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.950] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ZQL0Wg7u6I.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zql0wg7u6i.mkv"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173905d0, ftCreationTime.dwHighDateTime=0x1d8b2d9, ftLastAccessTime.dwLowDateTime=0xceca8580, ftLastAccessTime.dwHighDateTime=0x1d8b472, ftLastWriteTime.dwLowDateTime=0xceca8580, ftLastWriteTime.dwHighDateTime=0x1d8b472, nFileSizeHigh=0x0, nFileSizeLow=0x184ae, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="ZQL0Wg7u6I.mkv", cAlternateFileName="ZQL0WG~1.MKV")) returned 0x55e7d0 [0263.950] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173905d0, ftCreationTime.dwHighDateTime=0x1d8b2d9, ftLastAccessTime.dwLowDateTime=0xceca8580, ftLastAccessTime.dwHighDateTime=0x1d8b472, ftLastWriteTime.dwLowDateTime=0xceca8580, ftLastWriteTime.dwHighDateTime=0x1d8b472, nFileSizeHigh=0x0, nFileSizeLow=0x184ae, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="ZQL0Wg7u6I.mkv", cAlternateFileName="ZQL0WG~1.MKV")) returned 0 [0263.951] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0263.951] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ZQL0Wg7u6I.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zql0wg7u6i.mkv")) returned 1 [0263.953] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\ZQL0Wg7u6I.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\zql0wg7u6i.mkv")) returned 0xffffffff [0263.953] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x173905d0, ftCreationTime.dwHighDateTime=0x1d8b2d9, ftLastAccessTime.dwLowDateTime=0xceca8580, ftLastAccessTime.dwHighDateTime=0x1d8b472, ftLastWriteTime.dwLowDateTime=0xceca8580, ftLastWriteTime.dwHighDateTime=0x1d8b472, nFileSizeHigh=0x0, nFileSizeLow=0x184ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZQL0Wg7u6I.mkv", cAlternateFileName="ZQL0WG~1.MKV")) returned 0 [0263.953] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0263.953] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6fe8c840, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6fe8c840, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e493675, dwReserved1=0x5a766b6d, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0263.953] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6fe8c840, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6fe8c840, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0263.953] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6fe8c840, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6fe8c840, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0263.953] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab6b260, ftCreationTime.dwHighDateTime=0x1d87877, ftLastAccessTime.dwLowDateTime=0x608960d0, ftLastAccessTime.dwHighDateTime=0x1d878fb, ftLastWriteTime.dwLowDateTime=0x608960d0, ftLastWriteTime.dwHighDateTime=0x1d878fb, nFileSizeHigh=0x0, nFileSizeLow=0x1f62, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="-FRX5OOzUmfVjJcHf_DE.pptx", cAlternateFileName="-FRX5O~1.PPT")) returned 1 [0263.954] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d58e4f0, ftCreationTime.dwHighDateTime=0x1d85c99, ftLastAccessTime.dwLowDateTime=0x8523830, ftLastAccessTime.dwHighDateTime=0x1d8bcdd, ftLastWriteTime.dwLowDateTime=0x8523830, ftLastWriteTime.dwHighDateTime=0x1d8bcdd, nFileSizeHigh=0x0, nFileSizeLow=0x14fcc, dwReserved0=0x6a006a, dwReserved1=0x680063, cFileName="1obvxKB7GQj04t1.pptx", cAlternateFileName="1OBVXK~1.PPT")) returned 1 [0263.955] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530d85c0, ftCreationTime.dwHighDateTime=0x1d8bae2, ftLastAccessTime.dwLowDateTime=0x22f87d80, ftLastAccessTime.dwHighDateTime=0x1d8bf57, ftLastWriteTime.dwLowDateTime=0x22f87d80, ftLastWriteTime.dwHighDateTime=0x1d8bf57, nFileSizeHigh=0x0, nFileSizeLow=0x129c0, dwReserved0=0x740034, dwReserved1=0x2e0031, cFileName="2KVS--9w1I7HQQG.ppt", cAlternateFileName="2KVS--~1.PPT")) returned 1 [0263.955] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0263.955] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0263.955] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0263.955] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0263.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0263.956] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\2KVS--9w1I7HQQG.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\2kvs--9w1i7hqqg.ppt")) returned 0x20 [0263.956] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\2KVS--9w1I7HQQG.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\2kvs--9w1i7hqqg.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0263.956] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\2KVS--9w1I7HQQG.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\2kvs--9w1i7hqqg.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0263.957] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.958] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.959] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.960] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.960] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.960] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.960] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.960] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.961] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.961] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.961] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.961] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.961] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.962] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.962] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.962] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.962] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.962] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.966] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.967] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.967] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.967] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.967] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.967] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.968] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.968] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.968] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.968] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.968] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.968] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.969] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.969] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.969] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.969] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.970] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.970] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0263.970] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x9c0, lpOverlapped=0x0) returned 1 [0263.970] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x9c0, lpOverlapped=0x0) returned 1 [0263.970] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.970] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0263.970] CloseHandle (hObject=0x19c) returned 1 [0263.971] CloseHandle (hObject=0x1e0) returned 1 [0263.971] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\2KVS--9w1I7HQQG.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\2kvs--9w1i7hqqg.ppt"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\2KVS--9w1I7HQQG.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\2kvs--9w1i7hqqg.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0263.971] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\2KVS--9w1I7HQQG.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\2kvs--9w1i7hqqg.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0263.971] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\2KVS--9w1I7HQQG.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\2kvs--9w1i7hqqg.ppt"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530d85c0, ftCreationTime.dwHighDateTime=0x1d8bae2, ftLastAccessTime.dwLowDateTime=0x22f87d80, ftLastAccessTime.dwHighDateTime=0x1d8bf57, ftLastWriteTime.dwLowDateTime=0x22f87d80, ftLastWriteTime.dwHighDateTime=0x1d8bf57, nFileSizeHigh=0x0, nFileSizeLow=0x129c0, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="2KVS--9w1I7HQQG.ppt", cAlternateFileName="2KVS--~1.PPT")) returned 0x55e610 [0263.971] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530d85c0, ftCreationTime.dwHighDateTime=0x1d8bae2, ftLastAccessTime.dwLowDateTime=0x22f87d80, ftLastAccessTime.dwHighDateTime=0x1d8bf57, ftLastWriteTime.dwLowDateTime=0x22f87d80, ftLastWriteTime.dwHighDateTime=0x1d8bf57, nFileSizeHigh=0x0, nFileSizeLow=0x129c0, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="2KVS--9w1I7HQQG.ppt", cAlternateFileName="2KVS--~1.PPT")) returned 0 [0263.972] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0263.972] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\2KVS--9w1I7HQQG.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\2kvs--9w1i7hqqg.ppt")) returned 1 [0264.279] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\2KVS--9w1I7HQQG.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\2kvs--9w1i7hqqg.ppt")) returned 0xffffffff [0264.279] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4f5ca0, ftCreationTime.dwHighDateTime=0x1d897d7, ftLastAccessTime.dwLowDateTime=0xbf2ca240, ftLastAccessTime.dwHighDateTime=0x1d8a890, ftLastWriteTime.dwLowDateTime=0xbf2ca240, ftLastWriteTime.dwHighDateTime=0x1d8a890, nFileSizeHigh=0x0, nFileSizeLow=0x15bfa, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="95RH.xlsx", cAlternateFileName="95RH~1.XLS")) returned 1 [0264.280] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb897f0, ftCreationTime.dwHighDateTime=0x1d873c9, ftLastAccessTime.dwLowDateTime=0x259a1cf0, ftLastAccessTime.dwHighDateTime=0x1d8b4ef, ftLastWriteTime.dwLowDateTime=0x259a1cf0, ftLastWriteTime.dwHighDateTime=0x1d8b4ef, nFileSizeHigh=0x0, nFileSizeLow=0x1830e, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="9bUTXvZ.xlsx", cAlternateFileName="9BUTXV~1.XLS")) returned 1 [0264.281] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4372e947, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0264.290] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0264.290] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0264.290] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0264.290] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0264.291] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0264.291] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0264.291] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\desktop.ini")) returned 0x26 [0264.296] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0264.297] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0264.298] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x192, lpOverlapped=0x0) returned 1 [0264.299] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x192, lpOverlapped=0x0) returned 1 [0264.300] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0264.300] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0264.300] CloseHandle (hObject=0x1e0) returned 1 [0264.300] CloseHandle (hObject=0x19c) returned 1 [0264.300] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0264.301] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0264.301] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4372e947, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e390 [0264.301] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4372e947, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0264.301] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0264.301] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\desktop.ini")) returned 1 [0264.303] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\desktop.ini")) returned 0xffffffff [0264.303] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadda3310, ftCreationTime.dwHighDateTime=0x1d8a091, ftLastAccessTime.dwLowDateTime=0x8914d100, ftLastAccessTime.dwHighDateTime=0x1d8c0eb, ftLastWriteTime.dwLowDateTime=0x8914d100, ftLastWriteTime.dwHighDateTime=0x1d8c0eb, nFileSizeHigh=0x0, nFileSizeLow=0x7340, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="DkWdW-k.xlsx", cAlternateFileName="DKWDW-~1.XLS")) returned 1 [0264.303] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45dcd710, ftCreationTime.dwHighDateTime=0x1d85f21, ftLastAccessTime.dwLowDateTime=0x1e491980, ftLastAccessTime.dwHighDateTime=0x1d88720, ftLastWriteTime.dwLowDateTime=0x1e491980, ftLastWriteTime.dwHighDateTime=0x1d88720, nFileSizeHigh=0x0, nFileSizeLow=0xee73, dwReserved0=0x550000, dwReserved1=0x2000002, cFileName="gHRER.docx", cAlternateFileName="GHRER~1.DOC")) returned 1 [0264.304] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0264.304] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0264.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0264.304] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0264.304] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0264.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0264.304] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\gHRER.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ghrer.docx")) returned 0x20 [0264.304] VirtualAlloc (lpAddress=0x2380000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0264.306] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\gHRER.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ghrer.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0264.307] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\gHRER.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ghrer.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0264.308] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.309] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.310] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.310] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.310] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.311] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.311] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.311] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.311] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.312] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.312] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.312] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.312] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.312] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.313] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.313] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.313] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.313] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.356] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.356] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.356] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.356] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.357] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.357] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.357] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.357] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.357] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.357] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.358] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xe73, lpOverlapped=0x0) returned 1 [0264.358] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xe73, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xe73, lpOverlapped=0x0) returned 1 [0264.358] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0264.358] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0264.358] CloseHandle (hObject=0x19c) returned 1 [0264.358] CloseHandle (hObject=0x1e0) returned 1 [0264.358] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\gHRER.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ghrer.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\gHRER.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ghrer.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0264.359] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\gHRER.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ghrer.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0264.359] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\gHRER.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ghrer.docx"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45dcd710, ftCreationTime.dwHighDateTime=0x1d85f21, ftLastAccessTime.dwLowDateTime=0x1e491980, ftLastAccessTime.dwHighDateTime=0x1d88720, ftLastWriteTime.dwLowDateTime=0x1e491980, ftLastWriteTime.dwHighDateTime=0x1d88720, nFileSizeHigh=0x0, nFileSizeLow=0xee73, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="gHRER.docx", cAlternateFileName="GHRER~1.DOC")) returned 0x55e410 [0264.359] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45dcd710, ftCreationTime.dwHighDateTime=0x1d85f21, ftLastAccessTime.dwLowDateTime=0x1e491980, ftLastAccessTime.dwHighDateTime=0x1d88720, ftLastWriteTime.dwLowDateTime=0x1e491980, ftLastWriteTime.dwHighDateTime=0x1d88720, nFileSizeHigh=0x0, nFileSizeLow=0xee73, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="gHRER.docx", cAlternateFileName="GHRER~1.DOC")) returned 0 [0264.359] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0264.359] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\gHRER.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ghrer.docx")) returned 1 [0264.403] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\gHRER.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ghrer.docx")) returned 0xffffffff [0264.403] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc255b0, ftCreationTime.dwHighDateTime=0x1d8bd9f, ftLastAccessTime.dwLowDateTime=0xe4abca50, ftLastAccessTime.dwHighDateTime=0x1d8c050, ftLastWriteTime.dwLowDateTime=0xe4abca50, ftLastWriteTime.dwHighDateTime=0x1d8c050, nFileSizeHigh=0x0, nFileSizeLow=0x45d4, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="HIjE Bz.odp", cAlternateFileName="HIJEBZ~1.ODP")) returned 1 [0264.404] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b9abc0, ftCreationTime.dwHighDateTime=0x1d866a3, ftLastAccessTime.dwLowDateTime=0xbdfbd2b0, ftLastAccessTime.dwHighDateTime=0x1d897e2, ftLastWriteTime.dwLowDateTime=0xbdfbd2b0, ftLastWriteTime.dwHighDateTime=0x1d897e2, nFileSizeHigh=0x0, nFileSizeLow=0x2838, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="k _jfq9EKV.docx", cAlternateFileName="K_JFQ9~1.DOC")) returned 1 [0264.404] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0264.404] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0264.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0264.405] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0264.405] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0264.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0264.405] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\k _jfq9EKV.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\k _jfq9ekv.docx")) returned 0x20 [0264.405] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\k _jfq9EKV.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\k _jfq9ekv.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0264.406] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\k _jfq9EKV.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\k _jfq9ekv.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0264.407] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.408] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.409] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.409] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.409] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x838, lpOverlapped=0x0) returned 1 [0264.410] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x838, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x838, lpOverlapped=0x0) returned 1 [0264.410] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0264.410] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0264.410] CloseHandle (hObject=0x1e0) returned 1 [0264.410] CloseHandle (hObject=0x19c) returned 1 [0264.410] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\k _jfq9EKV.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\k _jfq9ekv.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\k _jfq9EKV.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\k _jfq9ekv.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0264.411] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\k _jfq9EKV.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\k _jfq9ekv.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0264.411] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\k _jfq9EKV.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\k _jfq9ekv.docx"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b9abc0, ftCreationTime.dwHighDateTime=0x1d866a3, ftLastAccessTime.dwLowDateTime=0xbdfbd2b0, ftLastAccessTime.dwHighDateTime=0x1d897e2, ftLastWriteTime.dwLowDateTime=0xbdfbd2b0, ftLastWriteTime.dwHighDateTime=0x1d897e2, nFileSizeHigh=0x0, nFileSizeLow=0x2838, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="k _jfq9EKV.docx", cAlternateFileName="K_JFQ9~1.DOC")) returned 0x55e790 [0264.411] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b9abc0, ftCreationTime.dwHighDateTime=0x1d866a3, ftLastAccessTime.dwLowDateTime=0xbdfbd2b0, ftLastAccessTime.dwHighDateTime=0x1d897e2, ftLastWriteTime.dwLowDateTime=0xbdfbd2b0, ftLastWriteTime.dwHighDateTime=0x1d897e2, nFileSizeHigh=0x0, nFileSizeLow=0x2838, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="k _jfq9EKV.docx", cAlternateFileName="K_JFQ9~1.DOC")) returned 0 [0264.411] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0264.411] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\k _jfq9EKV.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\k _jfq9ekv.docx")) returned 1 [0264.646] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\k _jfq9EKV.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\k _jfq9ekv.docx")) returned 0xffffffff [0264.646] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73e4efe0, ftCreationTime.dwHighDateTime=0x1d89d69, ftLastAccessTime.dwLowDateTime=0x8c5fdbc0, ftLastAccessTime.dwHighDateTime=0x1d8a81d, ftLastWriteTime.dwLowDateTime=0x8c5fdbc0, ftLastWriteTime.dwHighDateTime=0x1d8a81d, nFileSizeHigh=0x0, nFileSizeLow=0x16a9f, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="m299G.xlsx", cAlternateFileName="M299G~1.XLS")) returned 1 [0264.647] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0264.647] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my music\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x402215, ftCreationTime.dwLowDateTime=0x19f660, ftCreationTime.dwHighDateTime=0x777dee30, ftLastAccessTime.dwLowDateTime=0x19f628, ftLastAccessTime.dwHighDateTime=0x77783c58, ftLastWriteTime.dwLowDateTime=0x550000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x553868, nFileSizeLow=0x19f638, dwReserved0=0x77790217, dwReserved1=0x553868, cFileName="ÿÿÿÿPö\x19", cAlternateFileName="\x10âU")) returned 0xffffffff [0264.648] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0264.648] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my pictures\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x402215, ftCreationTime.dwLowDateTime=0x19f660, ftCreationTime.dwHighDateTime=0x777dee30, ftLastAccessTime.dwLowDateTime=0x19f628, ftLastAccessTime.dwHighDateTime=0x77783c58, ftLastWriteTime.dwLowDateTime=0x550000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x553868, nFileSizeLow=0x19f638, dwReserved0=0x77790217, dwReserved1=0x553868, cFileName="ÿÿÿÿPö\x19", cAlternateFileName="\x10âU")) returned 0xffffffff [0264.648] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0264.648] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my videos\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x402215, ftCreationTime.dwLowDateTime=0x19f660, ftCreationTime.dwHighDateTime=0x777dee30, ftLastAccessTime.dwLowDateTime=0x19f628, ftLastAccessTime.dwHighDateTime=0x77783c58, ftLastWriteTime.dwLowDateTime=0x550000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x553868, nFileSizeLow=0x19f638, dwReserved0=0x77790217, dwReserved1=0x553868, cFileName="ÿÿÿÿPö\x19", cAlternateFileName="\x10âU")) returned 0xffffffff [0264.648] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b899860, ftCreationTime.dwHighDateTime=0x1d8b283, ftLastAccessTime.dwLowDateTime=0x5b922ad0, ftLastAccessTime.dwHighDateTime=0x1d8b285, ftLastWriteTime.dwLowDateTime=0x5b922ad0, ftLastWriteTime.dwHighDateTime=0x1d8b285, nFileSizeHigh=0x0, nFileSizeLow=0x128a3, dwReserved0=0xa0000003, dwReserved1=0x2000002, cFileName="N5qOeuBE2tNgsag QcZm.ods", cAlternateFileName="N5QOEU~1.ODS")) returned 1 [0264.649] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x839084fb, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x610073, dwReserved1=0x200067, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0264.649] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e490 [0264.649] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x839084fb, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x886727b4, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0264.649] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 1 [0264.651] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0264.651] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0264.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0264.652] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0264.652] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0264.652] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0264.652] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst")) returned 0x2020 [0264.656] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0264.657] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0264.658] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.662] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.663] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.669] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.670] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.670] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.670] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.670] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.671] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.671] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.671] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.671] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.672] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.672] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.672] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.672] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.673] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.673] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.673] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.673] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.673] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.674] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.674] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.674] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.674] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.675] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.675] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.675] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.675] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.761] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.762] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.762] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.762] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.762] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.763] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.763] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.763] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.763] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.763] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.763] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.764] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.764] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.764] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.764] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.764] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.764] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.765] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.765] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.765] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.765] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.765] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.765] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.765] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.766] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.766] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.766] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.766] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.766] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.766] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.767] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.767] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.767] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.767] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.767] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.768] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.768] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.768] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.768] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.768] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.768] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.770] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.770] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.770] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.770] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.771] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.771] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.771] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.771] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.771] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.771] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.772] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.772] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.772] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.772] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.772] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.772] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.773] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.773] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.773] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.773] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.773] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.773] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.774] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.774] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.774] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.774] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.774] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.774] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.775] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.775] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.800] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.800] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.801] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.801] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.801] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.801] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.801] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.802] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.802] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.802] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.802] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.802] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.803] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.803] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.803] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.803] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.803] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.803] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.804] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.804] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.804] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.804] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.804] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.805] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.805] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.805] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.805] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.805] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.806] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.806] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.809] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.809] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0264.809] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x400, lpOverlapped=0x0) returned 1 [0264.809] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x400, lpOverlapped=0x0) returned 1 [0264.809] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0264.810] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0264.810] CloseHandle (hObject=0x1e0) returned 1 [0264.810] CloseHandle (hObject=0x200) returned 1 [0264.810] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0264.810] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0264.810] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 0x55e7d0 [0264.811] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 0 [0264.811] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0264.811] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst")) returned 1 [0264.815] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\achoo@gdllo.de.pst" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\achoo@gdllo.de.pst")) returned 0xffffffff [0264.815] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6397affd, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6397affd, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8866b39a, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="achoo@gdllo.de.pst", cAlternateFileName="ACHOO@~1.PST")) returned 0 [0264.815] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0264.815] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91737670, ftCreationTime.dwHighDateTime=0x1d8af99, ftLastAccessTime.dwLowDateTime=0x61de0250, ftLastAccessTime.dwHighDateTime=0x1d8b56a, ftLastWriteTime.dwLowDateTime=0x61de0250, ftLastWriteTime.dwHighDateTime=0x1d8b56a, nFileSizeHigh=0x0, nFileSizeLow=0x77e5, dwReserved0=0x6f6c6c64, dwReserved1=0x2e65642e, cFileName="suj0H6VnG1d.docx", cAlternateFileName="SUJ0H6~1.DOC")) returned 1 [0264.815] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0264.815] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0264.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0264.815] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0264.815] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0264.816] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0264.816] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\suj0H6VnG1d.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\suj0h6vng1d.docx")) returned 0x20 [0264.816] VirtualAlloc (lpAddress=0x2384000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2384000 [0264.816] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\suj0H6VnG1d.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\suj0h6vng1d.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0264.817] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\suj0H6VnG1d.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\suj0h6vng1d.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0264.817] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.818] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.819] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.819] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.820] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.820] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.820] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.820] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.820] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.820] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.821] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.821] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.821] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.821] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0264.821] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x7e5, lpOverlapped=0x0) returned 1 [0264.821] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x7e5, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x7e5, lpOverlapped=0x0) returned 1 [0264.821] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0264.821] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0264.822] CloseHandle (hObject=0x19c) returned 1 [0264.822] CloseHandle (hObject=0x200) returned 1 [0265.055] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\suj0H6VnG1d.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\suj0h6vng1d.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\suj0H6VnG1d.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\suj0h6vng1d.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.063] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\suj0H6VnG1d.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\suj0h6vng1d.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.064] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\suj0H6VnG1d.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\suj0h6vng1d.docx"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91737670, ftCreationTime.dwHighDateTime=0x1d8af99, ftLastAccessTime.dwLowDateTime=0x61de0250, ftLastAccessTime.dwHighDateTime=0x1d8b56a, ftLastWriteTime.dwLowDateTime=0x61de0250, ftLastWriteTime.dwHighDateTime=0x1d8b56a, nFileSizeHigh=0x0, nFileSizeLow=0x77e5, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="suj0H6VnG1d.docx", cAlternateFileName="SUJ0H6~1.DOC")) returned 0x55e890 [0265.064] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91737670, ftCreationTime.dwHighDateTime=0x1d8af99, ftLastAccessTime.dwLowDateTime=0x61de0250, ftLastAccessTime.dwHighDateTime=0x1d8b56a, ftLastWriteTime.dwLowDateTime=0x61de0250, ftLastWriteTime.dwHighDateTime=0x1d8b56a, nFileSizeHigh=0x0, nFileSizeLow=0x77e5, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="suj0H6VnG1d.docx", cAlternateFileName="SUJ0H6~1.DOC")) returned 0 [0265.064] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0265.064] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\suj0H6VnG1d.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\suj0h6vng1d.docx")) returned 1 [0265.149] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\suj0H6VnG1d.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\suj0h6vng1d.docx")) returned 0xffffffff [0265.150] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e29ee0, ftCreationTime.dwHighDateTime=0x1d89499, ftLastAccessTime.dwLowDateTime=0x3529eaf0, ftLastAccessTime.dwHighDateTime=0x1d8b3e2, ftLastWriteTime.dwLowDateTime=0x3529eaf0, ftLastWriteTime.dwHighDateTime=0x1d8b3e2, nFileSizeHigh=0x0, nFileSizeLow=0x121cb, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="vezPmeybY48YDb4rAa6.xlsx", cAlternateFileName="VEZPME~1.XLS")) returned 1 [0265.155] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x639bf100, ftCreationTime.dwHighDateTime=0x1d8634f, ftLastAccessTime.dwLowDateTime=0xe8000db0, ftLastAccessTime.dwHighDateTime=0x1d88fe5, ftLastWriteTime.dwLowDateTime=0xe8000db0, ftLastWriteTime.dwHighDateTime=0x1d88fe5, nFileSizeHigh=0x0, nFileSizeLow=0xd0ca, dwReserved0=0x620064, dwReserved1=0x720034, cFileName="X7Iini03CbUwi31eN.docx", cAlternateFileName="X7IINI~1.DOC")) returned 1 [0265.156] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.156] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.162] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.162] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.163] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.163] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0265.163] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\X7Iini03CbUwi31eN.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\x7iini03cbuwi31en.docx")) returned 0x20 [0265.163] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\X7Iini03CbUwi31eN.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\x7iini03cbuwi31en.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0265.164] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\X7Iini03CbUwi31eN.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\x7iini03cbuwi31en.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.165] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.167] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.169] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.169] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.169] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.169] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.169] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.170] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.170] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.170] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.170] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.171] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.171] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.171] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.171] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.171] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.172] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.172] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.172] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.172] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.172] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.173] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.173] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.173] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.173] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.173] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.174] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xca, lpOverlapped=0x0) returned 1 [0265.174] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xca, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xca, lpOverlapped=0x0) returned 1 [0265.174] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.174] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.174] CloseHandle (hObject=0x200) returned 1 [0265.174] CloseHandle (hObject=0x19c) returned 1 [0265.174] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\X7Iini03CbUwi31eN.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\x7iini03cbuwi31en.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\X7Iini03CbUwi31eN.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\x7iini03cbuwi31en.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.175] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\X7Iini03CbUwi31eN.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\x7iini03cbuwi31en.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.175] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\X7Iini03CbUwi31eN.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\x7iini03cbuwi31en.docx"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x639bf100, ftCreationTime.dwHighDateTime=0x1d8634f, ftLastAccessTime.dwLowDateTime=0xe8000db0, ftLastAccessTime.dwHighDateTime=0x1d88fe5, ftLastWriteTime.dwLowDateTime=0xe8000db0, ftLastWriteTime.dwHighDateTime=0x1d88fe5, nFileSizeHigh=0x0, nFileSizeLow=0xd0ca, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="X7Iini03CbUwi31eN.docx", cAlternateFileName="X7IINI~1.DOC")) returned 0x55e5d0 [0265.175] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x639bf100, ftCreationTime.dwHighDateTime=0x1d8634f, ftLastAccessTime.dwLowDateTime=0xe8000db0, ftLastAccessTime.dwHighDateTime=0x1d88fe5, ftLastWriteTime.dwLowDateTime=0xe8000db0, ftLastWriteTime.dwHighDateTime=0x1d88fe5, nFileSizeHigh=0x0, nFileSizeLow=0xd0ca, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="X7Iini03CbUwi31eN.docx", cAlternateFileName="X7IINI~1.DOC")) returned 0 [0265.175] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0265.175] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\X7Iini03CbUwi31eN.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\x7iini03cbuwi31en.docx")) returned 1 [0265.240] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\X7Iini03CbUwi31eN.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\x7iini03cbuwi31en.docx")) returned 0xffffffff [0265.240] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d62c10, ftCreationTime.dwHighDateTime=0x1d881dd, ftLastAccessTime.dwLowDateTime=0xfec4500, ftLastAccessTime.dwHighDateTime=0x1d8a18e, ftLastWriteTime.dwLowDateTime=0xfec4500, ftLastWriteTime.dwHighDateTime=0x1d8a18e, nFileSizeHigh=0x0, nFileSizeLow=0xf18, dwReserved0=0x0, dwReserved1=0x0, cFileName="XKTGJScA6wfs.pptx", cAlternateFileName="XKTGJS~1.PPT")) returned 1 [0265.240] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6cae8f0, ftCreationTime.dwHighDateTime=0x1d83989, ftLastAccessTime.dwLowDateTime=0x6ca7ec60, ftLastAccessTime.dwHighDateTime=0x1d8812f, ftLastWriteTime.dwLowDateTime=0x6ca7ec60, ftLastWriteTime.dwHighDateTime=0x1d8812f, nFileSizeHigh=0x0, nFileSizeLow=0xd342, dwReserved0=0x70002e, dwReserved1=0x740070, cFileName="yVSZ-e4lR27Ww.pptx", cAlternateFileName="YVSZ-E~1.PPT")) returned 1 [0265.241] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c4c9c0, ftCreationTime.dwHighDateTime=0x1d8bde6, ftLastAccessTime.dwLowDateTime=0x8fc3a000, ftLastAccessTime.dwHighDateTime=0x1d8bdf1, ftLastWriteTime.dwLowDateTime=0x8fc3a000, ftLastWriteTime.dwHighDateTime=0x1d8bdf1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0077, dwReserved1=0x700070, cFileName="YWKAsaltVFvRmuT6Bq", cAlternateFileName="YWKASA~1")) returned 1 [0265.241] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c4c9c0, ftCreationTime.dwHighDateTime=0x1d8bde6, ftLastAccessTime.dwLowDateTime=0x8fc3a000, ftLastAccessTime.dwHighDateTime=0x1d8bdf1, ftLastWriteTime.dwLowDateTime=0x8fc3a000, ftLastWriteTime.dwHighDateTime=0x1d8bdf1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0265.241] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c4c9c0, ftCreationTime.dwHighDateTime=0x1d8bde6, ftLastAccessTime.dwLowDateTime=0x8fc3a000, ftLastAccessTime.dwHighDateTime=0x1d8bdf1, ftLastWriteTime.dwLowDateTime=0x8fc3a000, ftLastWriteTime.dwHighDateTime=0x1d8bdf1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0265.241] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8059980, ftCreationTime.dwHighDateTime=0x1d8b946, ftLastAccessTime.dwLowDateTime=0xc07fbb40, ftLastAccessTime.dwHighDateTime=0x1d8ba0c, ftLastWriteTime.dwLowDateTime=0xc07fbb40, ftLastWriteTime.dwHighDateTime=0x1d8ba0c, nFileSizeHigh=0x0, nFileSizeLow=0x94e8, dwReserved0=0x0, dwReserved1=0x104, cFileName="RF70W9.pps", cAlternateFileName="")) returned 1 [0265.242] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.242] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.242] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.242] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.242] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.242] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0265.243] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\RF70W9.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\rf70w9.pps")) returned 0x20 [0265.243] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\RF70W9.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\rf70w9.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0265.243] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\RF70W9.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\rf70w9.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0265.246] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.248] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.249] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.249] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.249] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.250] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.250] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.250] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.250] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.251] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.251] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.251] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.251] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.252] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.252] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.252] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.252] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.253] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.253] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x4e8, lpOverlapped=0x0) returned 1 [0265.253] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x4e8, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x4e8, lpOverlapped=0x0) returned 1 [0265.253] ReadFile (in: hFile=0x200, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0265.253] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0265.253] CloseHandle (hObject=0x200) returned 1 [0265.253] CloseHandle (hObject=0x1e0) returned 1 [0265.254] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\RF70W9.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\rf70w9.pps"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\RF70W9.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\rf70w9.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.254] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\RF70W9.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\rf70w9.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.255] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\RF70W9.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\rf70w9.pps"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8059980, ftCreationTime.dwHighDateTime=0x1d8b946, ftLastAccessTime.dwLowDateTime=0xc07fbb40, ftLastAccessTime.dwHighDateTime=0x1d8ba0c, ftLastWriteTime.dwLowDateTime=0xc07fbb40, ftLastWriteTime.dwHighDateTime=0x1d8ba0c, nFileSizeHigh=0x0, nFileSizeLow=0x94e8, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="RF70W9.pps", cAlternateFileName="")) returned 0x55e750 [0265.255] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8059980, ftCreationTime.dwHighDateTime=0x1d8b946, ftLastAccessTime.dwLowDateTime=0xc07fbb40, ftLastAccessTime.dwHighDateTime=0x1d8ba0c, ftLastWriteTime.dwLowDateTime=0xc07fbb40, ftLastWriteTime.dwHighDateTime=0x1d8ba0c, nFileSizeHigh=0x0, nFileSizeLow=0x94e8, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="RF70W9.pps", cAlternateFileName="")) returned 0 [0265.255] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0265.255] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\RF70W9.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\rf70w9.pps")) returned 1 [0265.269] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\RF70W9.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\rf70w9.pps")) returned 0xffffffff [0265.269] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bb1b710, ftCreationTime.dwHighDateTime=0x1d8b49d, ftLastAccessTime.dwLowDateTime=0x1c44a3e0, ftLastAccessTime.dwHighDateTime=0x1d8b829, ftLastWriteTime.dwLowDateTime=0x1c44a3e0, ftLastWriteTime.dwHighDateTime=0x1d8b829, nFileSizeHigh=0x0, nFileSizeLow=0x2ee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rHA5Ynh D2qLJ.ots", cAlternateFileName="RHA5YN~1.OTS")) returned 1 [0265.270] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa74c6bb0, ftCreationTime.dwHighDateTime=0x1d8b9a7, ftLastAccessTime.dwLowDateTime=0x8b8ba450, ftLastAccessTime.dwHighDateTime=0x1d8bef1, ftLastWriteTime.dwLowDateTime=0x8b8ba450, ftLastWriteTime.dwHighDateTime=0x1d8bef1, nFileSizeHigh=0x0, nFileSizeLow=0x15470, dwReserved0=0x2e006a, dwReserved1=0x74006f, cFileName="U8r288JvxsAlu2vt.pdf", cAlternateFileName="U8R288~1.PDF")) returned 1 [0265.270] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.270] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.270] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.271] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.271] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.271] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0265.271] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\U8r288JvxsAlu2vt.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\u8r288jvxsalu2vt.pdf")) returned 0x20 [0265.271] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\U8r288JvxsAlu2vt.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\u8r288jvxsalu2vt.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0265.272] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\U8r288JvxsAlu2vt.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\u8r288jvxsalu2vt.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0265.273] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.274] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.275] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.275] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.276] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.277] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.277] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.277] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.277] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.278] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.278] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.278] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.278] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.278] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.279] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.279] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.279] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.279] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.279] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.280] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.280] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.280] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.280] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.280] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.281] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.281] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.281] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.281] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.281] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.282] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.282] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.282] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.282] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.282] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.283] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.283] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.283] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.283] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.283] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.284] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.284] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.284] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.284] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x470, lpOverlapped=0x0) returned 1 [0265.284] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x470, lpOverlapped=0x0) returned 1 [0265.285] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0265.285] WriteFile (in: hFile=0x200, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0265.285] CloseHandle (hObject=0x1e0) returned 1 [0265.285] CloseHandle (hObject=0x200) returned 1 [0265.285] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\U8r288JvxsAlu2vt.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\u8r288jvxsalu2vt.pdf"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\U8r288JvxsAlu2vt.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\u8r288jvxsalu2vt.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.285] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\U8r288JvxsAlu2vt.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\u8r288jvxsalu2vt.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.286] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\U8r288JvxsAlu2vt.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\u8r288jvxsalu2vt.pdf"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa74c6bb0, ftCreationTime.dwHighDateTime=0x1d8b9a7, ftLastAccessTime.dwLowDateTime=0x8b8ba450, ftLastAccessTime.dwHighDateTime=0x1d8bef1, ftLastWriteTime.dwLowDateTime=0x8b8ba450, ftLastWriteTime.dwHighDateTime=0x1d8bef1, nFileSizeHigh=0x0, nFileSizeLow=0x15470, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="U8r288JvxsAlu2vt.pdf", cAlternateFileName="U8R288~1.PDF")) returned 0x55e850 [0265.286] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa74c6bb0, ftCreationTime.dwHighDateTime=0x1d8b9a7, ftLastAccessTime.dwLowDateTime=0x8b8ba450, ftLastAccessTime.dwHighDateTime=0x1d8bef1, ftLastWriteTime.dwLowDateTime=0x8b8ba450, ftLastWriteTime.dwHighDateTime=0x1d8bef1, nFileSizeHigh=0x0, nFileSizeLow=0x15470, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="U8r288JvxsAlu2vt.pdf", cAlternateFileName="U8R288~1.PDF")) returned 0 [0265.286] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0265.286] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\U8r288JvxsAlu2vt.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\u8r288jvxsalu2vt.pdf")) returned 1 [0265.313] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\U8r288JvxsAlu2vt.pdf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\u8r288jvxsalu2vt.pdf")) returned 0xffffffff [0265.313] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa74c6bb0, ftCreationTime.dwHighDateTime=0x1d8b9a7, ftLastAccessTime.dwLowDateTime=0x8b8ba450, ftLastAccessTime.dwHighDateTime=0x1d8bef1, ftLastWriteTime.dwLowDateTime=0x8b8ba450, ftLastWriteTime.dwHighDateTime=0x1d8bef1, nFileSizeHigh=0x0, nFileSizeLow=0x15470, dwReserved0=0x2e006a, dwReserved1=0x74006f, cFileName="U8r288JvxsAlu2vt.pdf", cAlternateFileName="U8R288~1.PDF")) returned 0 [0265.313] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0265.313] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cfd10, ftCreationTime.dwHighDateTime=0x1d83ffe, ftLastAccessTime.dwLowDateTime=0x21a8a840, ftLastAccessTime.dwHighDateTime=0x1d880ca, ftLastWriteTime.dwLowDateTime=0x21a8a840, ftLastWriteTime.dwHighDateTime=0x1d880ca, nFileSizeHigh=0x0, nFileSizeLow=0xbc94, dwReserved0=0x41737876, dwReserved1=0x7632756c, cFileName="Z5y0BnViuyw9OKsWr.docx", cAlternateFileName="Z5Y0BN~1.DOC")) returned 1 [0265.313] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.313] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.313] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.313] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.314] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0265.314] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z5y0BnViuyw9OKsWr.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\z5y0bnviuyw9okswr.docx")) returned 0x20 [0265.315] VirtualAlloc (lpAddress=0x2388000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2388000 [0265.315] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z5y0BnViuyw9OKsWr.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\z5y0bnviuyw9okswr.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.316] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z5y0BnViuyw9OKsWr.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\z5y0bnviuyw9okswr.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0265.317] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.318] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.319] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.319] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.320] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.320] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.320] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.320] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.320] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.321] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.321] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.321] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.321] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.322] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.322] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.324] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.325] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.325] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.325] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.325] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.326] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.326] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0265.326] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xc94, lpOverlapped=0x0) returned 1 [0265.326] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xc94, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xc94, lpOverlapped=0x0) returned 1 [0265.326] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.326] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.327] CloseHandle (hObject=0x19c) returned 1 [0265.327] CloseHandle (hObject=0x200) returned 1 [0265.327] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z5y0BnViuyw9OKsWr.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\z5y0bnviuyw9okswr.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z5y0BnViuyw9OKsWr.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\z5y0bnviuyw9okswr.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.327] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z5y0BnViuyw9OKsWr.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\z5y0bnviuyw9okswr.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.328] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z5y0BnViuyw9OKsWr.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\z5y0bnviuyw9okswr.docx"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cfd10, ftCreationTime.dwHighDateTime=0x1d83ffe, ftLastAccessTime.dwLowDateTime=0x21a8a840, ftLastAccessTime.dwHighDateTime=0x1d880ca, ftLastWriteTime.dwLowDateTime=0x21a8a840, ftLastWriteTime.dwHighDateTime=0x1d880ca, nFileSizeHigh=0x0, nFileSizeLow=0xbc94, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Z5y0BnViuyw9OKsWr.docx", cAlternateFileName="Z5Y0BN~1.DOC")) returned 0x55e490 [0265.328] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cfd10, ftCreationTime.dwHighDateTime=0x1d83ffe, ftLastAccessTime.dwLowDateTime=0x21a8a840, ftLastAccessTime.dwHighDateTime=0x1d880ca, ftLastWriteTime.dwLowDateTime=0x21a8a840, ftLastWriteTime.dwHighDateTime=0x1d880ca, nFileSizeHigh=0x0, nFileSizeLow=0xbc94, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="Z5y0BnViuyw9OKsWr.docx", cAlternateFileName="Z5Y0BN~1.DOC")) returned 0 [0265.328] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0265.328] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z5y0BnViuyw9OKsWr.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\z5y0bnviuyw9okswr.docx")) returned 1 [0265.331] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Z5y0BnViuyw9OKsWr.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\z5y0bnviuyw9okswr.docx")) returned 0xffffffff [0265.331] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f85c530, ftCreationTime.dwHighDateTime=0x1d84f2d, ftLastAccessTime.dwLowDateTime=0x88903a70, ftLastAccessTime.dwHighDateTime=0x1d89306, ftLastWriteTime.dwLowDateTime=0x88903a70, ftLastWriteTime.dwHighDateTime=0x1d89306, nFileSizeHigh=0x0, nFileSizeLow=0x5a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zggXaEqM7UQYVgQY.pptx", cAlternateFileName="ZGGXAE~1.PPT")) returned 1 [0265.332] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1a61c90, ftCreationTime.dwHighDateTime=0x1d8ba8b, ftLastAccessTime.dwLowDateTime=0x7cc56b00, ftLastAccessTime.dwHighDateTime=0x1d8bbe4, ftLastWriteTime.dwLowDateTime=0x7cc56b00, ftLastWriteTime.dwHighDateTime=0x1d8bbe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x670076, dwReserved1=0x790071, cFileName="_7kx8h", cAlternateFileName="")) returned 1 [0265.332] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1a61c90, ftCreationTime.dwHighDateTime=0x1d8ba8b, ftLastAccessTime.dwLowDateTime=0x7cc56b00, ftLastAccessTime.dwHighDateTime=0x1d8bbe4, ftLastWriteTime.dwLowDateTime=0x7cc56b00, ftLastWriteTime.dwHighDateTime=0x1d8bbe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0265.332] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1a61c90, ftCreationTime.dwHighDateTime=0x1d8ba8b, ftLastAccessTime.dwLowDateTime=0x7cc56b00, ftLastAccessTime.dwHighDateTime=0x1d8bbe4, ftLastWriteTime.dwLowDateTime=0x7cc56b00, ftLastWriteTime.dwHighDateTime=0x1d8bbe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0265.332] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37cd9960, ftCreationTime.dwHighDateTime=0x1d8bc56, ftLastAccessTime.dwLowDateTime=0xf41f55d0, ftLastAccessTime.dwHighDateTime=0x1d8bed7, ftLastWriteTime.dwLowDateTime=0xf41f55d0, ftLastWriteTime.dwHighDateTime=0x1d8bed7, nFileSizeHigh=0x0, nFileSizeLow=0x13f65, dwReserved0=0x0, dwReserved1=0x104, cFileName="6HqpTudWoWceVCJqYhCX.ots", cAlternateFileName="6HQPTU~1.OTS")) returned 1 [0265.333] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b77f70, ftCreationTime.dwHighDateTime=0x1d8b3f0, ftLastAccessTime.dwLowDateTime=0x39531c90, ftLastAccessTime.dwHighDateTime=0x1d8bc85, ftLastWriteTime.dwLowDateTime=0x39531c90, ftLastWriteTime.dwHighDateTime=0x1d8bc85, nFileSizeHigh=0x0, nFileSizeLow=0xcea8, dwReserved0=0x630076, dwReserved1=0x71006a, cFileName="7lbgTAC0tGktM8kIYBG.doc", cAlternateFileName="7LBGTA~1.DOC")) returned 1 [0265.333] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.333] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.334] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.334] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.334] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.334] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0265.334] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\7lbgTAC0tGktM8kIYBG.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\7lbgtac0tgktm8kiybg.doc")) returned 0x20 [0265.334] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\7lbgTAC0tGktM8kIYBG.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\7lbgtac0tgktm8kiybg.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.335] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\7lbgTAC0tGktM8kIYBG.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\7lbgtac0tgktm8kiybg.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0265.336] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.337] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.338] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.339] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.339] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.339] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.339] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.340] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.340] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.340] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.340] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.340] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.341] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.341] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.341] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.341] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.341] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.342] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.342] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.342] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.342] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.342] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.343] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.343] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.343] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xea8, lpOverlapped=0x0) returned 1 [0265.343] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xea8, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xea8, lpOverlapped=0x0) returned 1 [0265.343] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0265.343] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0265.344] CloseHandle (hObject=0x19c) returned 1 [0265.344] CloseHandle (hObject=0x1e0) returned 1 [0265.344] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\7lbgTAC0tGktM8kIYBG.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\7lbgtac0tgktm8kiybg.doc"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\7lbgTAC0tGktM8kIYBG.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\7lbgtac0tgktm8kiybg.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.344] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\7lbgTAC0tGktM8kIYBG.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\7lbgtac0tgktm8kiybg.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.345] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\7lbgTAC0tGktM8kIYBG.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\7lbgtac0tgktm8kiybg.doc"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b77f70, ftCreationTime.dwHighDateTime=0x1d8b3f0, ftLastAccessTime.dwLowDateTime=0x39531c90, ftLastAccessTime.dwHighDateTime=0x1d8bc85, ftLastWriteTime.dwLowDateTime=0x39531c90, ftLastWriteTime.dwHighDateTime=0x1d8bc85, nFileSizeHigh=0x0, nFileSizeLow=0xcea8, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="7lbgTAC0tGktM8kIYBG.doc", cAlternateFileName="7LBGTA~1.DOC")) returned 0x55e410 [0265.345] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52b77f70, ftCreationTime.dwHighDateTime=0x1d8b3f0, ftLastAccessTime.dwLowDateTime=0x39531c90, ftLastAccessTime.dwHighDateTime=0x1d8bc85, ftLastWriteTime.dwLowDateTime=0x39531c90, ftLastWriteTime.dwHighDateTime=0x1d8bc85, nFileSizeHigh=0x0, nFileSizeLow=0xcea8, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="7lbgTAC0tGktM8kIYBG.doc", cAlternateFileName="7LBGTA~1.DOC")) returned 0 [0265.345] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0265.345] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\7lbgTAC0tGktM8kIYBG.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\7lbgtac0tgktm8kiybg.doc")) returned 1 [0265.375] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\7lbgTAC0tGktM8kIYBG.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\7lbgtac0tgktm8kiybg.doc")) returned 0xffffffff [0265.375] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bd9b070, ftCreationTime.dwHighDateTime=0x1d8c068, ftLastAccessTime.dwLowDateTime=0xe510e860, ftLastAccessTime.dwHighDateTime=0x1d8c08a, ftLastWriteTime.dwLowDateTime=0xe510e860, ftLastWriteTime.dwHighDateTime=0x1d8c08a, nFileSizeHigh=0x0, nFileSizeLow=0xb811, dwReserved0=0x0, dwReserved1=0x0, cFileName="mTRn.odp", cAlternateFileName="")) returned 1 [0265.376] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca826e0, ftCreationTime.dwHighDateTime=0x1d8b23f, ftLastAccessTime.dwLowDateTime=0x1d74b6e0, ftLastAccessTime.dwHighDateTime=0x1d8bf65, ftLastWriteTime.dwLowDateTime=0x1d74b6e0, ftLastWriteTime.dwHighDateTime=0x1d8bf65, nFileSizeHigh=0x0, nFileSizeLow=0xdb78, dwReserved0=0x0, dwReserved1=0x0, cFileName="RW0X.doc", cAlternateFileName="")) returned 1 [0265.376] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.376] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.376] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.376] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0265.376] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\RW0X.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\rw0x.doc")) returned 0x20 [0265.377] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\RW0X.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\rw0x.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0265.377] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\RW0X.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\rw0x.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.378] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.379] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.380] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.381] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.381] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.381] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.381] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.381] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.382] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.382] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.382] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.382] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.382] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.383] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.383] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.383] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.383] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.383] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.384] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.384] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.384] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.384] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.384] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.391] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.391] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.391] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0265.391] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xb78, lpOverlapped=0x0) returned 1 [0265.392] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xb78, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xb78, lpOverlapped=0x0) returned 1 [0265.392] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0265.392] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0265.392] CloseHandle (hObject=0x1e0) returned 1 [0265.392] CloseHandle (hObject=0x19c) returned 1 [0265.392] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\RW0X.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\rw0x.doc"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\RW0X.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\rw0x.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.393] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\RW0X.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\rw0x.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.393] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\RW0X.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\rw0x.doc"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca826e0, ftCreationTime.dwHighDateTime=0x1d8b23f, ftLastAccessTime.dwLowDateTime=0x1d74b6e0, ftLastAccessTime.dwHighDateTime=0x1d8bf65, ftLastWriteTime.dwLowDateTime=0x1d74b6e0, ftLastWriteTime.dwHighDateTime=0x1d8bf65, nFileSizeHigh=0x0, nFileSizeLow=0xdb78, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="RW0X.doc", cAlternateFileName="")) returned 0x55e8d0 [0265.393] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca826e0, ftCreationTime.dwHighDateTime=0x1d8b23f, ftLastAccessTime.dwLowDateTime=0x1d74b6e0, ftLastAccessTime.dwHighDateTime=0x1d8bf65, ftLastWriteTime.dwLowDateTime=0x1d74b6e0, ftLastWriteTime.dwHighDateTime=0x1d8bf65, nFileSizeHigh=0x0, nFileSizeLow=0xdb78, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="RW0X.doc", cAlternateFileName="")) returned 0 [0265.393] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0265.393] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\RW0X.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\rw0x.doc")) returned 1 [0265.397] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\RW0X.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\rw0x.doc")) returned 0xffffffff [0265.397] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67b83d40, ftCreationTime.dwHighDateTime=0x1d8bc76, ftLastAccessTime.dwLowDateTime=0xebb8fb40, ftLastAccessTime.dwHighDateTime=0x1d8bfee, ftLastWriteTime.dwLowDateTime=0xebb8fb40, ftLastWriteTime.dwHighDateTime=0x1d8bfee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="VD4qBAi", cAlternateFileName="")) returned 1 [0265.397] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67b83d40, ftCreationTime.dwHighDateTime=0x1d8bc76, ftLastAccessTime.dwLowDateTime=0xebb8fb40, ftLastAccessTime.dwHighDateTime=0x1d8bfee, ftLastWriteTime.dwLowDateTime=0xebb8fb40, ftLastWriteTime.dwHighDateTime=0x1d8bfee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0265.397] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67b83d40, ftCreationTime.dwHighDateTime=0x1d8bc76, ftLastAccessTime.dwLowDateTime=0xebb8fb40, ftLastAccessTime.dwHighDateTime=0x1d8bfee, ftLastWriteTime.dwLowDateTime=0xebb8fb40, ftLastWriteTime.dwHighDateTime=0x1d8bfee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0265.398] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x697d1e80, ftCreationTime.dwHighDateTime=0x1d8b5c2, ftLastAccessTime.dwLowDateTime=0xddd80080, ftLastAccessTime.dwHighDateTime=0x1d8c010, ftLastWriteTime.dwLowDateTime=0xddd80080, ftLastWriteTime.dwHighDateTime=0x1d8c010, nFileSizeHigh=0x0, nFileSizeLow=0x125b9, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="EH1JpmpeO46ag.doc", cAlternateFileName="EH1JPM~1.DOC")) returned 1 [0265.398] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.398] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.398] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.398] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.398] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.398] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0265.398] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\EH1JpmpeO46ag.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\eh1jpmpeo46ag.doc")) returned 0x20 [0265.399] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\EH1JpmpeO46ag.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\eh1jpmpeo46ag.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0265.399] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\EH1JpmpeO46ag.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\eh1jpmpeo46ag.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0265.404] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.405] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.407] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.407] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.407] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.407] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.407] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.408] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.408] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.408] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.408] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.408] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.409] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.409] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.409] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.409] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.411] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.411] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.411] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.411] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.411] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.412] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.412] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.412] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.412] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.412] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.412] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.413] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.413] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.413] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.413] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.413] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.414] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.414] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.414] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.414] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0265.414] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x5b9, lpOverlapped=0x0) returned 1 [0265.414] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x5b9, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x5b9, lpOverlapped=0x0) returned 1 [0265.415] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0265.415] WriteFile (in: hFile=0x218, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0265.415] CloseHandle (hObject=0x1e0) returned 1 [0265.415] CloseHandle (hObject=0x218) returned 1 [0265.415] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\EH1JpmpeO46ag.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\eh1jpmpeo46ag.doc"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\EH1JpmpeO46ag.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\eh1jpmpeo46ag.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.415] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\EH1JpmpeO46ag.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\eh1jpmpeo46ag.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.416] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\EH1JpmpeO46ag.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\eh1jpmpeo46ag.doc"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x697d1e80, ftCreationTime.dwHighDateTime=0x1d8b5c2, ftLastAccessTime.dwLowDateTime=0xddd80080, ftLastAccessTime.dwHighDateTime=0x1d8c010, ftLastWriteTime.dwLowDateTime=0xddd80080, ftLastWriteTime.dwHighDateTime=0x1d8c010, nFileSizeHigh=0x0, nFileSizeLow=0x125b9, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="EH1JpmpeO46ag.doc", cAlternateFileName="EH1JPM~1.DOC")) returned 0x55e5d0 [0265.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x697d1e80, ftCreationTime.dwHighDateTime=0x1d8b5c2, ftLastAccessTime.dwLowDateTime=0xddd80080, ftLastAccessTime.dwHighDateTime=0x1d8c010, ftLastWriteTime.dwLowDateTime=0xddd80080, ftLastWriteTime.dwHighDateTime=0x1d8c010, nFileSizeHigh=0x0, nFileSizeLow=0x125b9, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="EH1JpmpeO46ag.doc", cAlternateFileName="EH1JPM~1.DOC")) returned 0 [0265.417] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0265.417] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\EH1JpmpeO46ag.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\eh1jpmpeo46ag.doc")) returned 1 [0265.419] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\EH1JpmpeO46ag.doc" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\eh1jpmpeo46ag.doc")) returned 0xffffffff [0265.419] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3a6b70, ftCreationTime.dwHighDateTime=0x1d8b569, ftLastAccessTime.dwLowDateTime=0x572a20a0, ftLastAccessTime.dwHighDateTime=0x1d8bfc9, ftLastWriteTime.dwLowDateTime=0x572a20a0, ftLastWriteTime.dwHighDateTime=0x1d8bfc9, nFileSizeHigh=0x0, nFileSizeLow=0x10aab, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="mt1d10co8b8orGro7.pptx", cAlternateFileName="MT1D10~1.PPT")) returned 1 [0265.420] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19db5970, ftCreationTime.dwHighDateTime=0x1d8b944, ftLastAccessTime.dwLowDateTime=0x3c7a4830, ftLastAccessTime.dwHighDateTime=0x1d8bf2d, ftLastWriteTime.dwLowDateTime=0x3c7a4830, ftLastWriteTime.dwHighDateTime=0x1d8bf2d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x670072, dwReserved1=0x6f0072, cFileName="ZhhStph4", cAlternateFileName="")) returned 1 [0265.420] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19db5970, ftCreationTime.dwHighDateTime=0x1d8b944, ftLastAccessTime.dwLowDateTime=0x3c7a4830, ftLastAccessTime.dwHighDateTime=0x1d8bf2d, ftLastWriteTime.dwLowDateTime=0x3c7a4830, ftLastWriteTime.dwHighDateTime=0x1d8bf2d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0265.420] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19db5970, ftCreationTime.dwHighDateTime=0x1d8b944, ftLastAccessTime.dwLowDateTime=0x3c7a4830, ftLastAccessTime.dwHighDateTime=0x1d8bf2d, ftLastWriteTime.dwLowDateTime=0x3c7a4830, ftLastWriteTime.dwHighDateTime=0x1d8bf2d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0265.420] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x334b7040, ftCreationTime.dwHighDateTime=0x1d8b21c, ftLastAccessTime.dwLowDateTime=0x7719cdf0, ftLastAccessTime.dwHighDateTime=0x1d8b648, ftLastWriteTime.dwLowDateTime=0x7719cdf0, ftLastWriteTime.dwHighDateTime=0x1d8b648, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="10Dj0NoHfl1fRCzJ80-K", cAlternateFileName="10DJ0N~1")) returned 1 [0265.420] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x334b7040, ftCreationTime.dwHighDateTime=0x1d8b21c, ftLastAccessTime.dwLowDateTime=0x7719cdf0, ftLastAccessTime.dwHighDateTime=0x1d8b648, ftLastWriteTime.dwLowDateTime=0x7719cdf0, ftLastWriteTime.dwHighDateTime=0x1d8b648, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8a0069b8, dwReserved1=0xf4ecfafa, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0265.420] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x334b7040, ftCreationTime.dwHighDateTime=0x1d8b21c, ftLastAccessTime.dwLowDateTime=0x7719cdf0, ftLastAccessTime.dwHighDateTime=0x1d8b648, ftLastWriteTime.dwLowDateTime=0x7719cdf0, ftLastWriteTime.dwHighDateTime=0x1d8b648, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8a0069b8, dwReserved1=0xf4ecfafa, cFileName="..", cAlternateFileName="")) returned 1 [0265.420] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd10750, ftCreationTime.dwHighDateTime=0x1d8bc60, ftLastAccessTime.dwLowDateTime=0x65f768c0, ftLastAccessTime.dwHighDateTime=0x1d8be4a, ftLastWriteTime.dwLowDateTime=0x65f768c0, ftLastWriteTime.dwHighDateTime=0x1d8be4a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x8a0069b8, dwReserved1=0xf4ecfafa, cFileName="8gkv", cAlternateFileName="")) returned 1 [0265.420] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd10750, ftCreationTime.dwHighDateTime=0x1d8bc60, ftLastAccessTime.dwLowDateTime=0x65f768c0, ftLastAccessTime.dwHighDateTime=0x1d8be4a, ftLastWriteTime.dwLowDateTime=0x65f768c0, ftLastWriteTime.dwHighDateTime=0x1d8be4a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0265.421] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd10750, ftCreationTime.dwHighDateTime=0x1d8bc60, ftLastAccessTime.dwLowDateTime=0x65f768c0, ftLastAccessTime.dwHighDateTime=0x1d8be4a, ftLastWriteTime.dwLowDateTime=0x65f768c0, ftLastWriteTime.dwHighDateTime=0x1d8be4a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.421] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa08d8640, ftCreationTime.dwHighDateTime=0x1d8c0b6, ftLastAccessTime.dwLowDateTime=0x4a419250, ftLastAccessTime.dwHighDateTime=0x1d8c12d, ftLastWriteTime.dwLowDateTime=0x4a419250, ftLastWriteTime.dwHighDateTime=0x1d8c12d, nFileSizeHigh=0x0, nFileSizeLow=0x10fc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="5iATZtFB1RdzznP.ods", cAlternateFileName="5IATZT~1.ODS")) returned 1 [0265.421] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a743fe0, ftCreationTime.dwHighDateTime=0x1d8b9a5, ftLastAccessTime.dwLowDateTime=0x32fbba50, ftLastAccessTime.dwHighDateTime=0x1d8bde8, ftLastWriteTime.dwLowDateTime=0x32fbba50, ftLastWriteTime.dwHighDateTime=0x1d8bde8, nFileSizeHigh=0x0, nFileSizeLow=0xd2e8, dwReserved0=0x6e007a, dwReserved1=0x2e0070, cFileName="IzC9E.pps", cAlternateFileName="")) returned 1 [0265.422] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.422] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.422] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.422] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0265.422] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\IzC9E.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\izc9e.pps")) returned 0x20 [0265.423] VirtualAlloc (lpAddress=0x238c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x238c000 [0265.423] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\IzC9E.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\izc9e.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0265.424] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\IzC9E.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\izc9e.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0265.425] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.426] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.427] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.427] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.428] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.428] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.428] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.428] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.428] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.429] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.429] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.429] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.429] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.429] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.430] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.430] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.430] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.430] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.430] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.431] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.431] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.431] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.431] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.431] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.454] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.454] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.454] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x2e8, lpOverlapped=0x0) returned 1 [0265.454] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x2e8, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x2e8, lpOverlapped=0x0) returned 1 [0265.454] ReadFile (in: hFile=0x224, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0265.454] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0265.455] CloseHandle (hObject=0x224) returned 1 [0265.455] CloseHandle (hObject=0x220) returned 1 [0265.455] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\IzC9E.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\izc9e.pps"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\IzC9E.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\izc9e.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.455] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\IzC9E.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\izc9e.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.456] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\IzC9E.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\izc9e.pps"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a743fe0, ftCreationTime.dwHighDateTime=0x1d8b9a5, ftLastAccessTime.dwLowDateTime=0x32fbba50, ftLastAccessTime.dwHighDateTime=0x1d8bde8, ftLastWriteTime.dwLowDateTime=0x32fbba50, ftLastWriteTime.dwHighDateTime=0x1d8bde8, nFileSizeHigh=0x0, nFileSizeLow=0xd2e8, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="IzC9E.pps", cAlternateFileName="")) returned 0x55e910 [0265.456] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a743fe0, ftCreationTime.dwHighDateTime=0x1d8b9a5, ftLastAccessTime.dwLowDateTime=0x32fbba50, ftLastAccessTime.dwHighDateTime=0x1d8bde8, ftLastWriteTime.dwLowDateTime=0x32fbba50, ftLastWriteTime.dwHighDateTime=0x1d8bde8, nFileSizeHigh=0x0, nFileSizeLow=0xd2e8, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="IzC9E.pps", cAlternateFileName="")) returned 0 [0265.456] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0265.456] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\IzC9E.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\izc9e.pps")) returned 1 [0265.460] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\IzC9E.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\izc9e.pps")) returned 0xffffffff [0265.460] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6643220, ftCreationTime.dwHighDateTime=0x1d8ba6a, ftLastAccessTime.dwLowDateTime=0x95cc9840, ftLastAccessTime.dwHighDateTime=0x1d8bada, ftLastWriteTime.dwLowDateTime=0x95cc9840, ftLastWriteTime.dwHighDateTime=0x1d8bada, nFileSizeHigh=0x0, nFileSizeLow=0x62e2, dwReserved0=0x556860, dwReserved1=0x2000002, cFileName="LyzxRwKCPSt.odp", cAlternateFileName="LYZXRW~1.ODP")) returned 1 [0265.461] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7888760, ftCreationTime.dwHighDateTime=0x1d8b952, ftLastAccessTime.dwLowDateTime=0x439ac50, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x439ac50, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0xaab9, dwReserved0=0x64006f, dwReserved1=0x70, cFileName="NquTqUFX3Dwb1.docx", cAlternateFileName="NQUTQU~1.DOC")) returned 1 [0265.461] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.461] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.461] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.461] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0265.461] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\NquTqUFX3Dwb1.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\nqutqufx3dwb1.docx")) returned 0x20 [0265.462] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\NquTqUFX3Dwb1.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\nqutqufx3dwb1.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0265.462] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\NquTqUFX3Dwb1.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\nqutqufx3dwb1.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0265.467] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.521] WriteFile (in: hFile=0x224, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.541] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.541] WriteFile (in: hFile=0x224, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.541] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.541] WriteFile (in: hFile=0x224, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.542] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.542] WriteFile (in: hFile=0x224, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.542] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.542] WriteFile (in: hFile=0x224, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.542] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.542] WriteFile (in: hFile=0x224, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.543] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.543] WriteFile (in: hFile=0x224, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.543] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.543] WriteFile (in: hFile=0x224, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.543] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.543] WriteFile (in: hFile=0x224, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.544] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.544] WriteFile (in: hFile=0x224, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.544] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xab9, lpOverlapped=0x0) returned 1 [0265.544] WriteFile (in: hFile=0x224, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xab9, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xab9, lpOverlapped=0x0) returned 1 [0265.544] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0265.544] WriteFile (in: hFile=0x224, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0265.544] CloseHandle (hObject=0x220) returned 1 [0265.544] CloseHandle (hObject=0x224) returned 1 [0265.545] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\NquTqUFX3Dwb1.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\nqutqufx3dwb1.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\NquTqUFX3Dwb1.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\nqutqufx3dwb1.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.545] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\NquTqUFX3Dwb1.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\nqutqufx3dwb1.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.545] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\NquTqUFX3Dwb1.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\nqutqufx3dwb1.docx"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7888760, ftCreationTime.dwHighDateTime=0x1d8b952, ftLastAccessTime.dwLowDateTime=0x439ac50, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x439ac50, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0xaab9, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="NquTqUFX3Dwb1.docx", cAlternateFileName="NQUTQU~1.DOC")) returned 0x55e7d0 [0265.545] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7888760, ftCreationTime.dwHighDateTime=0x1d8b952, ftLastAccessTime.dwLowDateTime=0x439ac50, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x439ac50, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0xaab9, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="NquTqUFX3Dwb1.docx", cAlternateFileName="NQUTQU~1.DOC")) returned 0 [0265.545] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0265.546] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\NquTqUFX3Dwb1.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\nqutqufx3dwb1.docx")) returned 1 [0265.553] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\NquTqUFX3Dwb1.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\nqutqufx3dwb1.docx")) returned 0xffffffff [0265.553] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7888760, ftCreationTime.dwHighDateTime=0x1d8b952, ftLastAccessTime.dwLowDateTime=0x439ac50, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x439ac50, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0xaab9, dwReserved0=0x64006f, dwReserved1=0x70, cFileName="NquTqUFX3Dwb1.docx", cAlternateFileName="NQUTQU~1.DOC")) returned 0 [0265.553] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0265.553] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d19880, ftCreationTime.dwHighDateTime=0x1d8b593, ftLastAccessTime.dwLowDateTime=0xfef28970, ftLastAccessTime.dwHighDateTime=0x1d8beb7, ftLastWriteTime.dwLowDateTime=0xfef28970, ftLastWriteTime.dwHighDateTime=0x1d8beb7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77443358, dwReserved1=0x642e3162, cFileName="ALx4yvVwcZQdL", cAlternateFileName="ALX4YV~1")) returned 1 [0265.553] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\ALx4yvVwcZQdL\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\alx4yvvwczqdl\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d19880, ftCreationTime.dwHighDateTime=0x1d8b593, ftLastAccessTime.dwLowDateTime=0xfef28970, ftLastAccessTime.dwHighDateTime=0x1d8beb7, ftLastWriteTime.dwLowDateTime=0xfef28970, ftLastWriteTime.dwHighDateTime=0x1d8beb7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0265.553] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d19880, ftCreationTime.dwHighDateTime=0x1d8b593, ftLastAccessTime.dwLowDateTime=0xfef28970, ftLastAccessTime.dwHighDateTime=0x1d8beb7, ftLastWriteTime.dwLowDateTime=0xfef28970, ftLastWriteTime.dwHighDateTime=0x1d8beb7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0265.554] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0f2f870, ftCreationTime.dwHighDateTime=0x1d8b7ad, ftLastAccessTime.dwLowDateTime=0xc9feeb30, ftLastAccessTime.dwHighDateTime=0x1d8b879, ftLastWriteTime.dwLowDateTime=0xc9feeb30, ftLastWriteTime.dwHighDateTime=0x1d8b879, nFileSizeHigh=0x0, nFileSizeLow=0x5776, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="AiBxNvuTw_1M7cqH.odp", cAlternateFileName="AIBXNV~1.ODP")) returned 1 [0265.554] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0f2f870, ftCreationTime.dwHighDateTime=0x1d8b7ad, ftLastAccessTime.dwLowDateTime=0xc9feeb30, ftLastAccessTime.dwHighDateTime=0x1d8b879, ftLastWriteTime.dwLowDateTime=0xc9feeb30, ftLastWriteTime.dwHighDateTime=0x1d8b879, nFileSizeHigh=0x0, nFileSizeLow=0x5776, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="AiBxNvuTw_1M7cqH.odp", cAlternateFileName="AIBXNV~1.ODP")) returned 0 [0265.554] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0265.554] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ebeb6b0, ftCreationTime.dwHighDateTime=0x1d8c089, ftLastAccessTime.dwLowDateTime=0x7cc33800, ftLastAccessTime.dwHighDateTime=0x1d8c08d, ftLastWriteTime.dwLowDateTime=0x7cc33800, ftLastWriteTime.dwHighDateTime=0x1d8c08d, nFileSizeHigh=0x0, nFileSizeLow=0x17d68, dwReserved0=0x315f7754, dwReserved1=0x7163374d, cFileName="fxGkChym_qpotd.rtf", cAlternateFileName="FXGKCH~1.RTF")) returned 1 [0265.555] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.555] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.555] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.555] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0265.555] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\fxGkChym_qpotd.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\fxgkchym_qpotd.rtf")) returned 0x20 [0265.555] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\fxGkChym_qpotd.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\fxgkchym_qpotd.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0265.556] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\fxGkChym_qpotd.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\fxgkchym_qpotd.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0265.571] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.572] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.573] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.574] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.574] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.574] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.575] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.575] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.575] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.575] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.575] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.575] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.576] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.576] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.576] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.576] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.576] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.577] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.577] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.577] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.577] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.577] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.577] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.578] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.578] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.578] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.578] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.578] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.578] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.579] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.579] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.579] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.579] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.579] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.579] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.580] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.580] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.580] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.580] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.580] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.580] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.580] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.581] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.581] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.581] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.581] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.581] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xd68, lpOverlapped=0x0) returned 1 [0265.581] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xd68, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xd68, lpOverlapped=0x0) returned 1 [0265.582] ReadFile (in: hFile=0x210, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0265.582] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0265.582] CloseHandle (hObject=0x210) returned 1 [0265.582] CloseHandle (hObject=0x224) returned 1 [0265.582] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\fxGkChym_qpotd.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\fxgkchym_qpotd.rtf"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\fxGkChym_qpotd.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\fxgkchym_qpotd.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.582] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\fxGkChym_qpotd.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\fxgkchym_qpotd.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.582] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\fxGkChym_qpotd.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\fxgkchym_qpotd.rtf"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ebeb6b0, ftCreationTime.dwHighDateTime=0x1d8c089, ftLastAccessTime.dwLowDateTime=0x7cc33800, ftLastAccessTime.dwHighDateTime=0x1d8c08d, ftLastWriteTime.dwLowDateTime=0x7cc33800, ftLastWriteTime.dwHighDateTime=0x1d8c08d, nFileSizeHigh=0x0, nFileSizeLow=0x17d68, dwReserved0=0x550340, dwReserved1=0x6, cFileName="fxGkChym_qpotd.rtf", cAlternateFileName="FXGKCH~1.RTF")) returned 0x55e5d0 [0265.583] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ebeb6b0, ftCreationTime.dwHighDateTime=0x1d8c089, ftLastAccessTime.dwLowDateTime=0x7cc33800, ftLastAccessTime.dwHighDateTime=0x1d8c08d, ftLastWriteTime.dwLowDateTime=0x7cc33800, ftLastWriteTime.dwHighDateTime=0x1d8c08d, nFileSizeHigh=0x0, nFileSizeLow=0x17d68, dwReserved0=0x550340, dwReserved1=0x6, cFileName="fxGkChym_qpotd.rtf", cAlternateFileName="FXGKCH~1.RTF")) returned 0 [0265.583] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0265.583] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\fxGkChym_qpotd.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\fxgkchym_qpotd.rtf")) returned 1 [0265.587] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\fxGkChym_qpotd.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\fxgkchym_qpotd.rtf")) returned 0xffffffff [0265.587] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ebeb6b0, ftCreationTime.dwHighDateTime=0x1d8c089, ftLastAccessTime.dwLowDateTime=0x7cc33800, ftLastAccessTime.dwHighDateTime=0x1d8c08d, ftLastWriteTime.dwLowDateTime=0x7cc33800, ftLastWriteTime.dwHighDateTime=0x1d8c08d, nFileSizeHigh=0x0, nFileSizeLow=0x17d68, dwReserved0=0x315f7754, dwReserved1=0x7163374d, cFileName="fxGkChym_qpotd.rtf", cAlternateFileName="FXGKCH~1.RTF")) returned 0 [0265.587] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0265.587] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b99e20, ftCreationTime.dwHighDateTime=0x1d8b92c, ftLastAccessTime.dwLowDateTime=0x9de84340, ftLastAccessTime.dwHighDateTime=0x1d8ba89, ftLastWriteTime.dwLowDateTime=0x9de84340, ftLastWriteTime.dwHighDateTime=0x1d8ba89, nFileSizeHigh=0x0, nFileSizeLow=0xb617, dwReserved0=0x70715f6d, dwReserved1=0x2e64746f, cFileName="AOn1rEEg25j0A.pps", cAlternateFileName="AON1RE~1.PPS")) returned 1 [0265.605] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.605] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.605] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.605] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0265.605] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\AOn1rEEg25j0A.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\aon1reeg25j0a.pps")) returned 0x20 [0265.605] VirtualAlloc (lpAddress=0x2390000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2390000 [0265.606] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\AOn1rEEg25j0A.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\aon1reeg25j0a.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0265.606] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\AOn1rEEg25j0A.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\aon1reeg25j0a.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0265.607] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.608] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.609] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.609] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.609] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.610] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.610] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.610] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.610] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.610] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.610] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.611] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.611] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.611] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.611] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.611] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.611] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.612] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.612] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.612] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.612] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.612] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.612] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x617, lpOverlapped=0x0) returned 1 [0265.613] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x617, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x617, lpOverlapped=0x0) returned 1 [0265.613] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0265.613] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0265.613] CloseHandle (hObject=0x1e0) returned 1 [0265.613] CloseHandle (hObject=0x224) returned 1 [0265.613] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\AOn1rEEg25j0A.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\aon1reeg25j0a.pps"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\AOn1rEEg25j0A.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\aon1reeg25j0a.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.614] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\AOn1rEEg25j0A.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\aon1reeg25j0a.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.614] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\AOn1rEEg25j0A.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\aon1reeg25j0a.pps"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b99e20, ftCreationTime.dwHighDateTime=0x1d8b92c, ftLastAccessTime.dwLowDateTime=0x9de84340, ftLastAccessTime.dwHighDateTime=0x1d8ba89, ftLastWriteTime.dwLowDateTime=0x9de84340, ftLastWriteTime.dwHighDateTime=0x1d8ba89, nFileSizeHigh=0x0, nFileSizeLow=0xb617, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="AOn1rEEg25j0A.pps", cAlternateFileName="AON1RE~1.PPS")) returned 0x55e790 [0265.614] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b99e20, ftCreationTime.dwHighDateTime=0x1d8b92c, ftLastAccessTime.dwLowDateTime=0x9de84340, ftLastAccessTime.dwHighDateTime=0x1d8ba89, ftLastWriteTime.dwLowDateTime=0x9de84340, ftLastWriteTime.dwHighDateTime=0x1d8ba89, nFileSizeHigh=0x0, nFileSizeLow=0xb617, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="AOn1rEEg25j0A.pps", cAlternateFileName="AON1RE~1.PPS")) returned 0 [0265.614] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0265.614] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\AOn1rEEg25j0A.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\aon1reeg25j0a.pps")) returned 1 [0265.636] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\AOn1rEEg25j0A.pps" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\aon1reeg25j0a.pps")) returned 0xffffffff [0265.636] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ed75610, ftCreationTime.dwHighDateTime=0x1d8bbf4, ftLastAccessTime.dwLowDateTime=0x7ffbdb10, ftLastAccessTime.dwHighDateTime=0x1d8bc2a, ftLastWriteTime.dwLowDateTime=0x7ffbdb10, ftLastWriteTime.dwHighDateTime=0x1d8bc2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="LEWorMp4uRNygtAMs5", cAlternateFileName="LEWORM~1")) returned 1 [0265.636] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ed75610, ftCreationTime.dwHighDateTime=0x1d8bbf4, ftLastAccessTime.dwLowDateTime=0x7ffbdb10, ftLastAccessTime.dwHighDateTime=0x1d8bc2a, ftLastWriteTime.dwLowDateTime=0x7ffbdb10, ftLastWriteTime.dwHighDateTime=0x1d8bc2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0265.636] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ed75610, ftCreationTime.dwHighDateTime=0x1d8bbf4, ftLastAccessTime.dwLowDateTime=0x7ffbdb10, ftLastAccessTime.dwHighDateTime=0x1d8bc2a, ftLastWriteTime.dwLowDateTime=0x7ffbdb10, ftLastWriteTime.dwHighDateTime=0x1d8bc2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0265.637] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948fae60, ftCreationTime.dwHighDateTime=0x1d8b69b, ftLastAccessTime.dwLowDateTime=0x3d9415c0, ftLastAccessTime.dwHighDateTime=0x1d8bdf2, ftLastWriteTime.dwLowDateTime=0x3d9415c0, ftLastWriteTime.dwHighDateTime=0x1d8bdf2, nFileSizeHigh=0x0, nFileSizeLow=0x6fda, dwReserved0=0x0, dwReserved1=0x104, cFileName="0oOW.csv", cAlternateFileName="")) returned 1 [0265.637] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.637] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.637] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.637] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0265.637] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\0oOW.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\0oow.csv")) returned 0x20 [0265.637] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\0oOW.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\0oow.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0265.638] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\0oOW.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\0oow.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0265.639] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.640] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.640] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.641] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.641] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.641] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.641] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.641] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.641] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.642] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.642] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.642] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0265.642] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xfda, lpOverlapped=0x0) returned 1 [0265.642] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xfda, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xfda, lpOverlapped=0x0) returned 1 [0265.642] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0265.643] WriteFile (in: hFile=0x210, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0265.643] CloseHandle (hObject=0x1e0) returned 1 [0265.643] CloseHandle (hObject=0x210) returned 1 [0265.643] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\0oOW.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\0oow.csv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\0oOW.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\0oow.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.643] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\0oOW.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\0oow.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.643] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\0oOW.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\0oow.csv"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948fae60, ftCreationTime.dwHighDateTime=0x1d8b69b, ftLastAccessTime.dwLowDateTime=0x3d9415c0, ftLastAccessTime.dwHighDateTime=0x1d8bdf2, ftLastWriteTime.dwLowDateTime=0x3d9415c0, ftLastWriteTime.dwHighDateTime=0x1d8bdf2, nFileSizeHigh=0x0, nFileSizeLow=0x6fda, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="0oOW.csv", cAlternateFileName="")) returned 0x55e2d0 [0265.643] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x948fae60, ftCreationTime.dwHighDateTime=0x1d8b69b, ftLastAccessTime.dwLowDateTime=0x3d9415c0, ftLastAccessTime.dwHighDateTime=0x1d8bdf2, ftLastWriteTime.dwLowDateTime=0x3d9415c0, ftLastWriteTime.dwHighDateTime=0x1d8bdf2, nFileSizeHigh=0x0, nFileSizeLow=0x6fda, dwReserved0=0x777968c7, dwReserved1=0xec0ab369, cFileName="0oOW.csv", cAlternateFileName="")) returned 0 [0265.643] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0265.644] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\0oOW.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\0oow.csv")) returned 1 [0265.648] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\0oOW.csv" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\0oow.csv")) returned 0xffffffff [0265.648] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa430c5a0, ftCreationTime.dwHighDateTime=0x1d8befe, ftLastAccessTime.dwLowDateTime=0xa9219130, ftLastAccessTime.dwHighDateTime=0x1d8c047, ftLastWriteTime.dwLowDateTime=0xa9219130, ftLastWriteTime.dwHighDateTime=0x1d8c047, nFileSizeHigh=0x0, nFileSizeLow=0x96e4, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="pjxi.xls", cAlternateFileName="")) returned 1 [0265.648] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5537be0, ftCreationTime.dwHighDateTime=0x1d8bd45, ftLastAccessTime.dwLowDateTime=0x73085d90, ftLastAccessTime.dwHighDateTime=0x1d8c07e, ftLastWriteTime.dwLowDateTime=0x73085d90, ftLastWriteTime.dwHighDateTime=0x1d8c07e, nFileSizeHigh=0x0, nFileSizeLow=0x12d3a, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="QhgY.xlsx", cAlternateFileName="QHGY~1.XLS")) returned 1 [0265.649] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb785fd70, ftCreationTime.dwHighDateTime=0x1d8bbeb, ftLastAccessTime.dwLowDateTime=0x80b96010, ftLastAccessTime.dwHighDateTime=0x1d8beda, ftLastWriteTime.dwLowDateTime=0x80b96010, ftLastWriteTime.dwHighDateTime=0x1d8beda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="s89b6", cAlternateFileName="")) returned 1 [0265.649] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb785fd70, ftCreationTime.dwHighDateTime=0x1d8bbeb, ftLastAccessTime.dwLowDateTime=0x80b96010, ftLastAccessTime.dwHighDateTime=0x1d8beda, ftLastWriteTime.dwLowDateTime=0x80b96010, ftLastWriteTime.dwHighDateTime=0x1d8beda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName=".", cAlternateFileName="")) returned 0x55e1d0 [0265.649] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb785fd70, ftCreationTime.dwHighDateTime=0x1d8bbeb, ftLastAccessTime.dwLowDateTime=0x80b96010, ftLastAccessTime.dwHighDateTime=0x1d8beda, ftLastWriteTime.dwLowDateTime=0x80b96010, ftLastWriteTime.dwHighDateTime=0x1d8beda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x104, cFileName="..", cAlternateFileName="")) returned 1 [0265.649] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bf35b0, ftCreationTime.dwHighDateTime=0x1d8c02c, ftLastAccessTime.dwLowDateTime=0x8fbdb810, ftLastAccessTime.dwHighDateTime=0x1d8c11c, ftLastWriteTime.dwLowDateTime=0x8fbdb810, ftLastWriteTime.dwHighDateTime=0x1d8c11c, nFileSizeHigh=0x0, nFileSizeLow=0xfbae, dwReserved0=0x0, dwReserved1=0x104, cFileName="Cms8gjs.ots", cAlternateFileName="")) returned 1 [0265.649] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfd9130, ftCreationTime.dwHighDateTime=0x1d8b1b6, ftLastAccessTime.dwLowDateTime=0x6b28ddf0, ftLastAccessTime.dwHighDateTime=0x1d8be6e, ftLastWriteTime.dwLowDateTime=0x6b28ddf0, ftLastWriteTime.dwHighDateTime=0x1d8be6e, nFileSizeHigh=0x0, nFileSizeLow=0x8248, dwReserved0=0x0, dwReserved1=0x104, cFileName="hjW1.pptx", cAlternateFileName="HJW1~1.PPT")) returned 1 [0265.650] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d45f90, ftCreationTime.dwHighDateTime=0x1d8b175, ftLastAccessTime.dwLowDateTime=0x9cae9210, ftLastAccessTime.dwHighDateTime=0x1d8b186, ftLastWriteTime.dwLowDateTime=0x9cae9210, ftLastWriteTime.dwHighDateTime=0x1d8b186, nFileSizeHigh=0x0, nFileSizeLow=0x15a2f, dwReserved0=0x0, dwReserved1=0x104, cFileName="rFTnkA9Jc0y6Km6KDmoJ.rtf", cAlternateFileName="RFTNKA~1.RTF")) returned 1 [0265.657] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.657] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.658] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.658] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0265.658] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\rFTnkA9Jc0y6Km6KDmoJ.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\rftnka9jc0y6km6kdmoj.rtf")) returned 0x20 [0265.658] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\rFTnkA9Jc0y6Km6KDmoJ.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\rftnka9jc0y6km6kdmoj.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0265.659] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\rFTnkA9Jc0y6Km6KDmoJ.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\rftnka9jc0y6km6kdmoj.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0265.659] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.660] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.661] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.661] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.662] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.662] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.662] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.662] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.662] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.663] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.663] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.663] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.663] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.663] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.663] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.664] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.664] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.664] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.664] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.664] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.664] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.665] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.665] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.665] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.665] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.665] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.665] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.666] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.671] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.671] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.672] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.672] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.672] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.672] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.673] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.673] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.673] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.673] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.673] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.673] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.674] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.674] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.674] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0xa2f, lpOverlapped=0x0) returned 1 [0265.674] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0xa2f, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0xa2f, lpOverlapped=0x0) returned 1 [0265.674] ReadFile (in: hFile=0x1e0, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0265.674] WriteFile (in: hFile=0x220, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0265.674] CloseHandle (hObject=0x1e0) returned 1 [0265.674] CloseHandle (hObject=0x220) returned 1 [0265.675] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\rFTnkA9Jc0y6Km6KDmoJ.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\rftnka9jc0y6km6kdmoj.rtf"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\rFTnkA9Jc0y6Km6KDmoJ.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\rftnka9jc0y6km6kdmoj.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.675] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\rFTnkA9Jc0y6Km6KDmoJ.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\rftnka9jc0y6km6kdmoj.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.675] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\rFTnkA9Jc0y6Km6KDmoJ.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\rftnka9jc0y6km6kdmoj.rtf"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d45f90, ftCreationTime.dwHighDateTime=0x1d8b175, ftLastAccessTime.dwLowDateTime=0x9cae9210, ftLastAccessTime.dwHighDateTime=0x1d8b186, ftLastWriteTime.dwLowDateTime=0x9cae9210, ftLastWriteTime.dwHighDateTime=0x1d8b186, nFileSizeHigh=0x0, nFileSizeLow=0x15a2f, dwReserved0=0x550370, dwReserved1=0xf, cFileName="rFTnkA9Jc0y6Km6KDmoJ.rtf", cAlternateFileName="RFTNKA~1.RTF")) returned 0x55e390 [0265.675] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d45f90, ftCreationTime.dwHighDateTime=0x1d8b175, ftLastAccessTime.dwLowDateTime=0x9cae9210, ftLastAccessTime.dwHighDateTime=0x1d8b186, ftLastWriteTime.dwLowDateTime=0x9cae9210, ftLastWriteTime.dwHighDateTime=0x1d8b186, nFileSizeHigh=0x0, nFileSizeLow=0x15a2f, dwReserved0=0x550370, dwReserved1=0xf, cFileName="rFTnkA9Jc0y6Km6KDmoJ.rtf", cAlternateFileName="RFTNKA~1.RTF")) returned 0 [0265.675] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0265.675] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\rFTnkA9Jc0y6Km6KDmoJ.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\rftnka9jc0y6km6kdmoj.rtf")) returned 1 [0265.679] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\rFTnkA9Jc0y6Km6KDmoJ.rtf" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\rftnka9jc0y6km6kdmoj.rtf")) returned 0xffffffff [0265.679] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83386500, ftCreationTime.dwHighDateTime=0x1d8b572, ftLastAccessTime.dwLowDateTime=0x9080aa0, ftLastAccessTime.dwHighDateTime=0x1d8b6fe, ftLastWriteTime.dwLowDateTime=0x9080aa0, ftLastWriteTime.dwHighDateTime=0x1d8b6fe, nFileSizeHigh=0x0, nFileSizeLow=0x70b2, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="udCFH17BURL.ods", cAlternateFileName="UDCFH1~1.ODS")) returned 1 [0265.679] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb02de550, ftCreationTime.dwHighDateTime=0x1d8b601, ftLastAccessTime.dwLowDateTime=0xadb45530, ftLastAccessTime.dwHighDateTime=0x1d8b8f3, ftLastWriteTime.dwLowDateTime=0xadb45530, ftLastWriteTime.dwHighDateTime=0x1d8b8f3, nFileSizeHigh=0x0, nFileSizeLow=0xc82d, dwReserved0=0x64006f, dwReserved1=0x73, cFileName="usItM.ppt", cAlternateFileName="")) returned 1 [0265.680] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.680] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.680] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.680] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0265.680] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\usItM.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\usitm.ppt")) returned 0x20 [0265.680] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\usItM.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\usitm.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x220 [0265.681] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\usItM.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\usitm.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0265.682] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.683] WriteFile (in: hFile=0x1e0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.684] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.684] WriteFile (in: hFile=0x1e0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.685] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.685] WriteFile (in: hFile=0x1e0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.685] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.685] WriteFile (in: hFile=0x1e0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.685] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.686] WriteFile (in: hFile=0x1e0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.686] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.686] WriteFile (in: hFile=0x1e0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.686] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.686] WriteFile (in: hFile=0x1e0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.686] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.687] WriteFile (in: hFile=0x1e0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.687] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.687] WriteFile (in: hFile=0x1e0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.687] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.687] WriteFile (in: hFile=0x1e0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.687] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.688] WriteFile (in: hFile=0x1e0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.688] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.688] WriteFile (in: hFile=0x1e0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x1000, lpOverlapped=0x0) returned 1 [0265.688] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x82d, lpOverlapped=0x0) returned 1 [0265.688] WriteFile (in: hFile=0x1e0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x82d, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x82d, lpOverlapped=0x0) returned 1 [0265.688] ReadFile (in: hFile=0x220, lpBuffer=0x19ca40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19ca40*, lpNumberOfBytesRead=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0265.688] WriteFile (in: hFile=0x1e0, lpBuffer=0x19da40*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c78c, lpOverlapped=0x0 | out: lpBuffer=0x19da40*, lpNumberOfBytesWritten=0x19c78c*=0x0, lpOverlapped=0x0) returned 1 [0265.688] CloseHandle (hObject=0x220) returned 1 [0265.688] CloseHandle (hObject=0x1e0) returned 1 [0265.689] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\usItM.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\usitm.ppt"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\usItM.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\usitm.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.689] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\usItM.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\usitm.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.689] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\usItM.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\usitm.ppt"), lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb02de550, ftCreationTime.dwHighDateTime=0x1d8b601, ftLastAccessTime.dwLowDateTime=0xadb45530, ftLastAccessTime.dwHighDateTime=0x1d8b8f3, ftLastWriteTime.dwLowDateTime=0xadb45530, ftLastWriteTime.dwHighDateTime=0x1d8b8f3, nFileSizeHigh=0x0, nFileSizeLow=0xc82d, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="usItM.ppt", cAlternateFileName="")) returned 0x55e650 [0265.689] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e8dc | out: lpFindFileData=0x19e8dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb02de550, ftCreationTime.dwHighDateTime=0x1d8b601, ftLastAccessTime.dwLowDateTime=0xadb45530, ftLastAccessTime.dwHighDateTime=0x1d8b8f3, ftLastWriteTime.dwLowDateTime=0xadb45530, ftLastWriteTime.dwHighDateTime=0x1d8b8f3, nFileSizeHigh=0x0, nFileSizeLow=0xc82d, dwReserved0=0x777968c7, dwReserved1=0xec0abdf1, cFileName="usItM.ppt", cAlternateFileName="")) returned 0 [0265.689] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0265.689] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\usItM.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\usitm.ppt")) returned 1 [0265.710] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\usItM.ppt" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\usitm.ppt")) returned 0xffffffff [0265.710] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb02de550, ftCreationTime.dwHighDateTime=0x1d8b601, ftLastAccessTime.dwLowDateTime=0xadb45530, ftLastAccessTime.dwHighDateTime=0x1d8b8f3, ftLastWriteTime.dwLowDateTime=0xadb45530, ftLastWriteTime.dwHighDateTime=0x1d8b8f3, nFileSizeHigh=0x0, nFileSizeLow=0xc82d, dwReserved0=0x64006f, dwReserved1=0x73, cFileName="usItM.ppt", cAlternateFileName="")) returned 0 [0265.710] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0265.710] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678876d0, ftCreationTime.dwHighDateTime=0x1d8b156, ftLastAccessTime.dwLowDateTime=0x8b847db0, ftLastAccessTime.dwHighDateTime=0x1d8bfc8, ftLastWriteTime.dwLowDateTime=0x8b847db0, ftLastWriteTime.dwHighDateTime=0x1d8bfc8, nFileSizeHigh=0x0, nFileSizeLow=0xb0a9, dwReserved0=0x4c527470, dwReserved1=0x73646f2e, cFileName="ToW_sv.ots", cAlternateFileName="")) returned 1 [0265.711] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678876d0, ftCreationTime.dwHighDateTime=0x1d8b156, ftLastAccessTime.dwLowDateTime=0x8b847db0, ftLastAccessTime.dwHighDateTime=0x1d8bfc8, ftLastWriteTime.dwLowDateTime=0x8b847db0, ftLastWriteTime.dwHighDateTime=0x1d8bfc8, nFileSizeHigh=0x0, nFileSizeLow=0xb0a9, dwReserved0=0x4c527470, dwReserved1=0x73646f2e, cFileName="ToW_sv.ots", cAlternateFileName="")) returned 0 [0265.711] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0265.711] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c43cae0, ftCreationTime.dwHighDateTime=0x1d8b67f, ftLastAccessTime.dwLowDateTime=0x6a4a7f90, ftLastAccessTime.dwHighDateTime=0x1d8b902, ftLastWriteTime.dwLowDateTime=0x6a4a7f90, ftLastWriteTime.dwHighDateTime=0x1d8b902, nFileSizeHigh=0x0, nFileSizeLow=0x49a5, dwReserved0=0x73746f, dwReserved1=0x2000002, cFileName="tMlj6-2of.docx", cAlternateFileName="TMLJ6-~1.DOC")) returned 1 [0265.711] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.711] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.711] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.711] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.712] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0265.712] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\tMlj6-2of.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\tmlj6-2of.docx")) returned 0x20 [0265.712] VirtualAlloc (lpAddress=0x2394000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2394000 [0265.712] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\tMlj6-2of.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\tmlj6-2of.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0265.715] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\tMlj6-2of.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\tmlj6-2of.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0265.716] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.717] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.718] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.718] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.718] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.718] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.718] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.718] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.719] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x9a5, lpOverlapped=0x0) returned 1 [0265.719] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x9a5, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x9a5, lpOverlapped=0x0) returned 1 [0265.719] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0265.719] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0265.719] CloseHandle (hObject=0x224) returned 1 [0265.719] CloseHandle (hObject=0x210) returned 1 [0265.719] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\tMlj6-2of.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\tmlj6-2of.docx"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\tMlj6-2of.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\tmlj6-2of.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.720] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\tMlj6-2of.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\tmlj6-2of.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.720] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\tMlj6-2of.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\tmlj6-2of.docx"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c43cae0, ftCreationTime.dwHighDateTime=0x1d8b67f, ftLastAccessTime.dwLowDateTime=0x6a4a7f90, ftLastAccessTime.dwHighDateTime=0x1d8b902, ftLastWriteTime.dwLowDateTime=0x6a4a7f90, ftLastWriteTime.dwHighDateTime=0x1d8b902, nFileSizeHigh=0x0, nFileSizeLow=0x49a5, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="tMlj6-2of.docx", cAlternateFileName="TMLJ6-~1.DOC")) returned 0x55e8d0 [0265.720] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c43cae0, ftCreationTime.dwHighDateTime=0x1d8b67f, ftLastAccessTime.dwLowDateTime=0x6a4a7f90, ftLastAccessTime.dwHighDateTime=0x1d8b902, ftLastWriteTime.dwLowDateTime=0x6a4a7f90, ftLastWriteTime.dwHighDateTime=0x1d8b902, nFileSizeHigh=0x0, nFileSizeLow=0x49a5, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="tMlj6-2of.docx", cAlternateFileName="TMLJ6-~1.DOC")) returned 0 [0265.720] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0265.720] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\tMlj6-2of.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\tmlj6-2of.docx")) returned 1 [0265.728] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\tMlj6-2of.docx" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\tmlj6-2of.docx")) returned 0xffffffff [0265.729] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c43cae0, ftCreationTime.dwHighDateTime=0x1d8b67f, ftLastAccessTime.dwLowDateTime=0x6a4a7f90, ftLastAccessTime.dwHighDateTime=0x1d8b902, ftLastWriteTime.dwLowDateTime=0x6a4a7f90, ftLastWriteTime.dwHighDateTime=0x1d8b902, nFileSizeHigh=0x0, nFileSizeLow=0x49a5, dwReserved0=0x73746f, dwReserved1=0x2000002, cFileName="tMlj6-2of.docx", cAlternateFileName="TMLJ6-~1.DOC")) returned 0 [0265.729] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0265.729] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19db5970, ftCreationTime.dwHighDateTime=0x1d8b944, ftLastAccessTime.dwLowDateTime=0x3c7a4830, ftLastAccessTime.dwHighDateTime=0x1d8bf2d, ftLastWriteTime.dwLowDateTime=0x3c7a4830, ftLastWriteTime.dwHighDateTime=0x1d8bf2d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x670072, dwReserved1=0x6f0072, cFileName="ZhhStph4", cAlternateFileName="")) returned 0 [0265.729] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0265.729] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67b83d40, ftCreationTime.dwHighDateTime=0x1d8bc76, ftLastAccessTime.dwLowDateTime=0xebb8fb40, ftLastAccessTime.dwHighDateTime=0x1d8bfee, ftLastWriteTime.dwLowDateTime=0xebb8fb40, ftLastWriteTime.dwHighDateTime=0x1d8bfee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="VD4qBAi", cAlternateFileName="")) returned 0 [0265.729] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0265.729] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1a61c90, ftCreationTime.dwHighDateTime=0x1d8ba8b, ftLastAccessTime.dwLowDateTime=0x7cc56b00, ftLastAccessTime.dwHighDateTime=0x1d8bbe4, ftLastWriteTime.dwLowDateTime=0x7cc56b00, ftLastWriteTime.dwHighDateTime=0x1d8bbe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x670076, dwReserved1=0x790071, cFileName="_7kx8h", cAlternateFileName="")) returned 0 [0265.729] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0265.729] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5155374d, dwReserved1=0x51675659, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0265.729] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b477463, dwReserved1=0x6b384d74, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0265.730] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b477463, dwReserved1=0x6b384d74, cFileName="..", cAlternateFileName="")) returned 1 [0265.730] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x6b477463, dwReserved1=0x6b384d74, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0265.730] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.730] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.730] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.731] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.731] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0265.731] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\desktop.ini")) returned 0x26 [0265.731] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0265.732] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.732] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x11a, lpOverlapped=0x0) returned 1 [0265.733] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x11a, lpOverlapped=0x0) returned 1 [0265.735] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.735] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.735] CloseHandle (hObject=0x200) returned 1 [0265.735] CloseHandle (hObject=0x19c) returned 1 [0265.735] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.735] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.736] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e7d0 [0265.736] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0265.736] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0265.736] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\desktop.ini")) returned 1 [0265.737] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\desktop.ini")) returned 0xffffffff [0265.737] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x6b477463, dwReserved1=0x6b384d74, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0265.737] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0265.737] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x51675659, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0265.738] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0265.738] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0265.738] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43053b43, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43053b43, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="Bing.url", cAlternateFileName="")) returned 1 [0265.738] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0265.739] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.739] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.739] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.739] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0265.739] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\desktop.ini")) returned 0x26 [0265.740] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.740] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0265.774] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x192, lpOverlapped=0x0) returned 1 [0265.776] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x192, lpOverlapped=0x0) returned 1 [0265.777] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.778] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.778] CloseHandle (hObject=0x19c) returned 1 [0265.778] CloseHandle (hObject=0x200) returned 1 [0265.898] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.900] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.913] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e410 [0265.913] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0265.913] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0265.913] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\desktop.ini")) returned 1 [0265.915] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\desktop.ini")) returned 0xffffffff [0265.921] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43079e90, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="Links", cAlternateFileName="")) returned 1 [0265.921] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\Links\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\links\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43079e90, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0265.922] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43079e90, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0265.922] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43079e90, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43079e90, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0265.922] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.922] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.923] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.923] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0265.923] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\links\\desktop.ini")) returned 0x6 [0265.923] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\links\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0265.924] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\Links\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\links\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0265.925] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x50, lpOverlapped=0x0) returned 1 [0265.927] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x50, lpOverlapped=0x0) returned 1 [0265.928] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0265.928] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0265.928] CloseHandle (hObject=0x19c) returned 1 [0265.928] CloseHandle (hObject=0x218) returned 1 [0265.928] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\links\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\Links\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\links\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.929] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\Links\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\links\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.929] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\links\\desktop.ini"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43079e90, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43079e90, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e290 [0265.929] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43079e90, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43079e90, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0265.929] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0265.929] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\links\\desktop.ini")) returned 1 [0265.931] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\links\\desktop.ini")) returned 0xffffffff [0265.931] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43079e90, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43079e90, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0265.931] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0265.931] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43079e90, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="Links", cAlternateFileName="")) returned 0 [0265.931] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0265.931] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437ed538, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x51675659, cFileName="Links", cAlternateFileName="")) returned 1 [0265.931] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437ed538, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0265.932] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437ed538, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0265.932] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43754b80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437ed538, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x696e692e, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0265.932] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.932] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.933] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.933] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0265.933] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.ini")) returned 0x6 [0265.933] VirtualAlloc (lpAddress=0x2398000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2398000 [0265.934] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0265.934] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0265.938] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1f8, lpOverlapped=0x0) returned 1 [0265.939] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1f8, lpOverlapped=0x0) returned 1 [0265.941] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.941] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.941] CloseHandle (hObject=0x200) returned 1 [0265.941] CloseHandle (hObject=0x218) returned 1 [0265.941] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.942] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.942] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43754b80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437ed538, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e490 [0265.942] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x43754b80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437ed538, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0265.942] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0265.942] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.ini")) returned 1 [0265.943] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.ini")) returned 0xffffffff [0265.943] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437c7194, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437c7194, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0265.944] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.944] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.944] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.944] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.944] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.944] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0265.944] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.lnk")) returned 0x20 [0265.956] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0265.957] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0265.958] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x207, lpOverlapped=0x0) returned 1 [0265.959] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x207, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x207, lpOverlapped=0x0) returned 1 [0265.960] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.960] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.960] CloseHandle (hObject=0x218) returned 1 [0265.960] CloseHandle (hObject=0x200) returned 1 [0265.966] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.967] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.967] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.lnk"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437c7194, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437c7194, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="Desktop.lnk", cAlternateFileName="")) returned 0x55e1d0 [0265.967] FindNextFileA (in: hFindFile=0x55e1d0, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437c7194, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437c7194, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="Desktop.lnk", cAlternateFileName="")) returned 0 [0265.967] FindClose (in: hFindFile=0x55e1d0 | out: hFindFile=0x55e1d0) returned 1 [0265.967] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.lnk")) returned 1 [0265.968] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Desktop.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\desktop.lnk")) returned 0xffffffff [0265.968] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437c7194, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437c7194, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0265.969] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.969] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.969] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.969] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0265.969] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Downloads.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\downloads.lnk")) returned 0x20 [0265.970] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Downloads.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\downloads.lnk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0265.970] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Downloads.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\downloads.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0265.971] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x3d0, lpOverlapped=0x0) returned 1 [0265.973] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x3d0, lpOverlapped=0x0) returned 1 [0265.974] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.974] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.974] CloseHandle (hObject=0x200) returned 1 [0265.974] CloseHandle (hObject=0x218) returned 1 [0265.974] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Downloads.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Downloads.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\downloads.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.975] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Downloads.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\downloads.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.975] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Downloads.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\downloads.lnk"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437c7194, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437c7194, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 0x55e7d0 [0265.975] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437c7194, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437c7194, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 0 [0265.975] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0265.975] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Downloads.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\downloads.lnk")) returned 1 [0265.976] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\Downloads.lnk" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\downloads.lnk")) returned 0xffffffff [0265.976] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437c7194, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437c7194, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 0 [0265.976] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0265.977] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x51676b6e, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0265.977] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Local Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\local settings\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437c7194, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437c7194, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437c7194, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="Downloads.lnk", cAlternateFileName="\x90åU")) returned 0xffffffff [0265.977] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6faacc25, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6faacc25, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x51676b6e, cFileName="Music", cAlternateFileName="")) returned 1 [0265.977] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6faacc25, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6faacc25, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0265.977] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6faacc25, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6faacc25, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0265.977] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0265.978] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.978] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.981] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.981] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0265.981] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\desktop.ini")) returned 0x26 [0265.982] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0265.982] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0265.983] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1f8, lpOverlapped=0x0) returned 1 [0265.984] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1f8, lpOverlapped=0x0) returned 1 [0265.985] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.985] WriteFile (in: hFile=0x200, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0265.985] CloseHandle (hObject=0x218) returned 1 [0265.985] CloseHandle (hObject=0x200) returned 1 [0265.985] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0265.986] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0265.986] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e510 [0265.986] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43649a85, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436bc315, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0265.986] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0265.986] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\desktop.ini")) returned 1 [0265.987] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\desktop.ini")) returned 0xffffffff [0265.988] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5c270f0, ftCreationTime.dwHighDateTime=0x1d8be82, ftLastAccessTime.dwLowDateTime=0xfc0019b0, ftLastAccessTime.dwHighDateTime=0x1d8be91, ftLastWriteTime.dwLowDateTime=0xfc0019b0, ftLastWriteTime.dwHighDateTime=0x1d8be91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="JAB0S_rGExV_SLJ", cAlternateFileName="JAB0S_~1")) returned 1 [0265.988] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5c270f0, ftCreationTime.dwHighDateTime=0x1d8be82, ftLastAccessTime.dwLowDateTime=0xfc0019b0, ftLastAccessTime.dwHighDateTime=0x1d8be91, ftLastWriteTime.dwLowDateTime=0xfc0019b0, ftLastWriteTime.dwHighDateTime=0x1d8be91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0265.988] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5c270f0, ftCreationTime.dwHighDateTime=0x1d8be82, ftLastAccessTime.dwLowDateTime=0xfc0019b0, ftLastAccessTime.dwHighDateTime=0x1d8be91, ftLastWriteTime.dwLowDateTime=0xfc0019b0, ftLastWriteTime.dwHighDateTime=0x1d8be91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0265.988] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdff16190, ftCreationTime.dwHighDateTime=0x1d8bc55, ftLastAccessTime.dwLowDateTime=0xc6fd2ca0, ftLastAccessTime.dwHighDateTime=0x1d8bd4a, ftLastWriteTime.dwLowDateTime=0xc6fd2ca0, ftLastWriteTime.dwHighDateTime=0x1d8bd4a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="BuEKJlvF9UEYrFNSTJA", cAlternateFileName="BUEKJL~1")) returned 1 [0265.988] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdff16190, ftCreationTime.dwHighDateTime=0x1d8bc55, ftLastAccessTime.dwLowDateTime=0xc6fd2ca0, ftLastAccessTime.dwHighDateTime=0x1d8bd4a, ftLastWriteTime.dwLowDateTime=0xc6fd2ca0, ftLastWriteTime.dwHighDateTime=0x1d8bd4a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e8d0 [0265.988] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdff16190, ftCreationTime.dwHighDateTime=0x1d8bc55, ftLastAccessTime.dwLowDateTime=0xc6fd2ca0, ftLastAccessTime.dwHighDateTime=0x1d8bd4a, ftLastWriteTime.dwLowDateTime=0xc6fd2ca0, ftLastWriteTime.dwHighDateTime=0x1d8bd4a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0265.988] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe094b120, ftCreationTime.dwHighDateTime=0x1d8bace, ftLastAccessTime.dwLowDateTime=0x2fdc43b0, ftLastAccessTime.dwHighDateTime=0x1d8bbec, ftLastWriteTime.dwLowDateTime=0x2fdc43b0, ftLastWriteTime.dwHighDateTime=0x1d8bbec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="aQdi_mAs", cAlternateFileName="")) returned 1 [0265.988] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe094b120, ftCreationTime.dwHighDateTime=0x1d8bace, ftLastAccessTime.dwLowDateTime=0x2fdc43b0, ftLastAccessTime.dwHighDateTime=0x1d8bbec, ftLastWriteTime.dwLowDateTime=0x2fdc43b0, ftLastWriteTime.dwHighDateTime=0x1d8bbec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e850 [0265.989] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe094b120, ftCreationTime.dwHighDateTime=0x1d8bace, ftLastAccessTime.dwLowDateTime=0x2fdc43b0, ftLastAccessTime.dwHighDateTime=0x1d8bbec, ftLastWriteTime.dwLowDateTime=0x2fdc43b0, ftLastWriteTime.dwHighDateTime=0x1d8bbec, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.989] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ed38d80, ftCreationTime.dwHighDateTime=0x1d8b72f, ftLastAccessTime.dwLowDateTime=0x35508630, ftLastAccessTime.dwHighDateTime=0x1d8b84a, ftLastWriteTime.dwLowDateTime=0x35508630, ftLastWriteTime.dwHighDateTime=0x1d8b84a, nFileSizeHigh=0x0, nFileSizeLow=0xc620, dwReserved0=0x0, dwReserved1=0x0, cFileName="5fH-hdHKsmOh2NzWZaK.mp3", cAlternateFileName="5FH-HD~1.MP3")) returned 1 [0265.989] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0265.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0265.990] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0265.990] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0265.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0265.990] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\5fH-hdHKsmOh2NzWZaK.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\5fh-hdhksmoh2nzwzak.mp3")) returned 0x20 [0265.990] VirtualAlloc (lpAddress=0x239c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x239c000 [0265.991] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\5fH-hdHKsmOh2NzWZaK.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\5fh-hdhksmoh2nzwzak.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0265.991] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\5fH-hdHKsmOh2NzWZaK.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\5fh-hdhksmoh2nzwzak.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0265.992] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.993] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.995] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.995] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.995] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.996] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.996] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.996] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.996] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.996] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.997] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.997] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.997] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.997] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.998] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.998] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.998] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.998] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.998] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.999] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.999] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.999] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.999] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0265.999] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.000] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x620, lpOverlapped=0x0) returned 1 [0266.000] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x620, lpOverlapped=0x0) returned 1 [0266.000] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0266.000] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0266.000] CloseHandle (hObject=0x210) returned 1 [0266.000] CloseHandle (hObject=0x224) returned 1 [0266.000] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\5fH-hdHKsmOh2NzWZaK.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\5fh-hdhksmoh2nzwzak.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\5fH-hdHKsmOh2NzWZaK.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\5fh-hdhksmoh2nzwzak.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.001] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\5fH-hdHKsmOh2NzWZaK.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\5fh-hdhksmoh2nzwzak.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.001] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\5fH-hdHKsmOh2NzWZaK.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\5fh-hdhksmoh2nzwzak.mp3"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ed38d80, ftCreationTime.dwHighDateTime=0x1d8b72f, ftLastAccessTime.dwLowDateTime=0x35508630, ftLastAccessTime.dwHighDateTime=0x1d8b84a, ftLastWriteTime.dwLowDateTime=0x35508630, ftLastWriteTime.dwHighDateTime=0x1d8b84a, nFileSizeHigh=0x0, nFileSizeLow=0xc620, dwReserved0=0x550370, dwReserved1=0x11, cFileName="5fH-hdHKsmOh2NzWZaK.mp3", cAlternateFileName="5FH-HD~1.MP3")) returned 0x55e310 [0266.001] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ed38d80, ftCreationTime.dwHighDateTime=0x1d8b72f, ftLastAccessTime.dwLowDateTime=0x35508630, ftLastAccessTime.dwHighDateTime=0x1d8b84a, ftLastWriteTime.dwLowDateTime=0x35508630, ftLastWriteTime.dwHighDateTime=0x1d8b84a, nFileSizeHigh=0x0, nFileSizeLow=0xc620, dwReserved0=0x550370, dwReserved1=0x11, cFileName="5fH-hdHKsmOh2NzWZaK.mp3", cAlternateFileName="5FH-HD~1.MP3")) returned 0 [0266.001] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0266.001] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\5fH-hdHKsmOh2NzWZaK.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\5fh-hdhksmoh2nzwzak.mp3")) returned 1 [0266.003] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\5fH-hdHKsmOh2NzWZaK.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\5fh-hdhksmoh2nzwzak.mp3")) returned 0xffffffff [0266.003] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12764a00, ftCreationTime.dwHighDateTime=0x1d8bf84, ftLastAccessTime.dwLowDateTime=0xb2dd1500, ftLastAccessTime.dwHighDateTime=0x1d8c0b0, ftLastWriteTime.dwLowDateTime=0xb2dd1500, ftLastWriteTime.dwHighDateTime=0x1d8c0b0, nFileSizeHigh=0x0, nFileSizeLow=0x5ae4, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="AVvqNFqoKehakno.m4a", cAlternateFileName="AVVQNF~1.M4A")) returned 1 [0266.004] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80372b50, ftCreationTime.dwHighDateTime=0x1d8b885, ftLastAccessTime.dwLowDateTime=0x807ffd80, ftLastAccessTime.dwHighDateTime=0x1d8bd4e, ftLastWriteTime.dwLowDateTime=0x807ffd80, ftLastWriteTime.dwHighDateTime=0x1d8bd4e, nFileSizeHigh=0x0, nFileSizeLow=0xb953, dwReserved0=0x6e006b, dwReserved1=0x2e006f, cFileName="cEik3IcUKGk1fK.wav", cAlternateFileName="CEIK3I~1.WAV")) returned 1 [0266.004] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb603fd80, ftCreationTime.dwHighDateTime=0x1d8bb8c, ftLastAccessTime.dwLowDateTime=0xad00600, ftLastAccessTime.dwHighDateTime=0x1d8bfe9, ftLastWriteTime.dwLowDateTime=0xad00600, ftLastWriteTime.dwHighDateTime=0x1d8bfe9, nFileSizeHigh=0x0, nFileSizeLow=0xa889, dwReserved0=0x6b0066, dwReserved1=0x77002e, cFileName="d_X BLpyB.m4a", cAlternateFileName="D_XBLP~1.M4A")) returned 1 [0266.005] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c03cbe0, ftCreationTime.dwHighDateTime=0x1d8b902, ftLastAccessTime.dwLowDateTime=0xec5b9e0, ftLastAccessTime.dwHighDateTime=0x1d8be2b, ftLastWriteTime.dwLowDateTime=0xec5b9e0, ftLastWriteTime.dwHighDateTime=0x1d8be2b, nFileSizeHigh=0x0, nFileSizeLow=0x2071, dwReserved0=0x61, dwReserved1=0x77002e, cFileName="GK3uVMA.wav", cAlternateFileName="")) returned 1 [0266.006] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6340700, ftCreationTime.dwHighDateTime=0x1d8b747, ftLastAccessTime.dwLowDateTime=0x18d61c00, ftLastAccessTime.dwHighDateTime=0x1d8bc45, ftLastWriteTime.dwLowDateTime=0x18d61c00, ftLastWriteTime.dwHighDateTime=0x1d8bc45, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x61, dwReserved1=0x77002e, cFileName="ygowDOg.m4a", cAlternateFileName="")) returned 1 [0266.006] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e37c00, ftCreationTime.dwHighDateTime=0x1d8b7e6, ftLastAccessTime.dwLowDateTime=0x455f0c70, ftLastAccessTime.dwHighDateTime=0x1d8be14, ftLastWriteTime.dwLowDateTime=0x455f0c70, ftLastWriteTime.dwHighDateTime=0x1d8be14, nFileSizeHigh=0x0, nFileSizeLow=0x188aa, dwReserved0=0x61, dwReserved1=0x77002e, cFileName="ZEfz.mp3", cAlternateFileName="")) returned 1 [0266.007] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.007] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.007] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.007] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0266.007] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\ZEfz.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\zefz.mp3")) returned 0x20 [0266.007] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\ZEfz.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\zefz.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0266.008] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\ZEfz.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\zefz.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0266.009] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.011] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.012] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.013] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.013] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.013] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.013] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.014] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.014] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.014] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.014] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.015] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.015] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.015] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.015] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.015] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.016] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.016] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.016] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.016] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.016] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.017] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.017] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.017] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.017] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.017] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.018] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.018] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.018] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.018] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.018] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.019] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.019] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.019] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.019] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.019] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.020] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.020] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.020] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.020] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.021] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.021] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.021] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.021] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.021] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.022] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.022] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.022] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.022] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x8aa, lpOverlapped=0x0) returned 1 [0266.022] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x8aa, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x8aa, lpOverlapped=0x0) returned 1 [0266.023] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0266.023] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0266.023] CloseHandle (hObject=0x224) returned 1 [0266.023] CloseHandle (hObject=0x210) returned 1 [0266.023] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\ZEfz.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\zefz.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\ZEfz.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\zefz.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.024] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\ZEfz.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\zefz.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.024] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\ZEfz.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\zefz.mp3"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e37c00, ftCreationTime.dwHighDateTime=0x1d8b7e6, ftLastAccessTime.dwLowDateTime=0x455f0c70, ftLastAccessTime.dwHighDateTime=0x1d8be14, ftLastWriteTime.dwLowDateTime=0x455f0c70, ftLastWriteTime.dwHighDateTime=0x1d8be14, nFileSizeHigh=0x0, nFileSizeLow=0x188aa, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="ZEfz.mp3", cAlternateFileName="")) returned 0x55e5d0 [0266.024] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e37c00, ftCreationTime.dwHighDateTime=0x1d8b7e6, ftLastAccessTime.dwLowDateTime=0x455f0c70, ftLastAccessTime.dwHighDateTime=0x1d8be14, ftLastWriteTime.dwLowDateTime=0x455f0c70, ftLastWriteTime.dwHighDateTime=0x1d8be14, nFileSizeHigh=0x0, nFileSizeLow=0x188aa, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="ZEfz.mp3", cAlternateFileName="")) returned 0 [0266.024] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0266.024] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\ZEfz.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\zefz.mp3")) returned 1 [0266.027] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\ZEfz.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\zefz.mp3")) returned 0xffffffff [0266.027] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81e37c00, ftCreationTime.dwHighDateTime=0x1d8b7e6, ftLastAccessTime.dwLowDateTime=0x455f0c70, ftLastAccessTime.dwHighDateTime=0x1d8be14, ftLastWriteTime.dwLowDateTime=0x455f0c70, ftLastWriteTime.dwHighDateTime=0x1d8be14, nFileSizeHigh=0x0, nFileSizeLow=0x188aa, dwReserved0=0x61, dwReserved1=0x77002e, cFileName="ZEfz.mp3", cAlternateFileName="")) returned 0 [0266.027] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0266.027] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf20d1af0, ftCreationTime.dwHighDateTime=0x1d8b600, ftLastAccessTime.dwLowDateTime=0xc83bc530, ftLastAccessTime.dwHighDateTime=0x1d8b7ba, ftLastWriteTime.dwLowDateTime=0xc83bc530, ftLastWriteTime.dwHighDateTime=0x1d8b7ba, nFileSizeHigh=0x0, nFileSizeLow=0x18c21, dwReserved0=0x61346d33, dwReserved1=0x2e4b6134, cFileName="BhNn8N0WVSSOiyf.m4a", cAlternateFileName="BHNN8N~1.M4A")) returned 1 [0266.028] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ca7abc0, ftCreationTime.dwHighDateTime=0x1d8b259, ftLastAccessTime.dwLowDateTime=0x4e000660, ftLastAccessTime.dwHighDateTime=0x1d8b818, ftLastWriteTime.dwLowDateTime=0x4e000660, ftLastWriteTime.dwHighDateTime=0x1d8b818, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x790069, dwReserved1=0x2e0066, cFileName="yaRd", cAlternateFileName="")) returned 1 [0266.028] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ca7abc0, ftCreationTime.dwHighDateTime=0x1d8b259, ftLastAccessTime.dwLowDateTime=0x4e000660, ftLastAccessTime.dwHighDateTime=0x1d8b818, ftLastWriteTime.dwLowDateTime=0x4e000660, ftLastWriteTime.dwHighDateTime=0x1d8b818, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0266.028] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ca7abc0, ftCreationTime.dwHighDateTime=0x1d8b259, ftLastAccessTime.dwLowDateTime=0x4e000660, ftLastAccessTime.dwHighDateTime=0x1d8b818, ftLastWriteTime.dwLowDateTime=0x4e000660, ftLastWriteTime.dwHighDateTime=0x1d8b818, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0266.029] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6c8990, ftCreationTime.dwHighDateTime=0x1d8b7b1, ftLastAccessTime.dwLowDateTime=0xbd8434c0, ftLastAccessTime.dwHighDateTime=0x1d8bb9c, ftLastWriteTime.dwLowDateTime=0xbd8434c0, ftLastWriteTime.dwHighDateTime=0x1d8bb9c, nFileSizeHigh=0x0, nFileSizeLow=0x1168d, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="CjaCoa0VVG3jMjA13.wav", cAlternateFileName="CJACOA~1.WAV")) returned 1 [0266.029] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc53cf20, ftCreationTime.dwHighDateTime=0x1d8b889, ftLastAccessTime.dwLowDateTime=0x43566620, ftLastAccessTime.dwHighDateTime=0x1d8bf0f, ftLastWriteTime.dwLowDateTime=0x43566620, ftLastWriteTime.dwHighDateTime=0x1d8bf0f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6a006d, dwReserved1=0x310061, cFileName="FThXpfrBZPMJLX", cAlternateFileName="FTHXPF~1")) returned 1 [0266.029] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc53cf20, ftCreationTime.dwHighDateTime=0x1d8b889, ftLastAccessTime.dwLowDateTime=0x43566620, ftLastAccessTime.dwHighDateTime=0x1d8bf0f, ftLastWriteTime.dwLowDateTime=0x43566620, ftLastWriteTime.dwHighDateTime=0x1d8bf0f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0266.029] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc53cf20, ftCreationTime.dwHighDateTime=0x1d8b889, ftLastAccessTime.dwLowDateTime=0x43566620, ftLastAccessTime.dwHighDateTime=0x1d8bf0f, ftLastWriteTime.dwLowDateTime=0x43566620, ftLastWriteTime.dwHighDateTime=0x1d8bf0f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="..", cAlternateFileName="")) returned 1 [0266.030] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf809a0, ftCreationTime.dwHighDateTime=0x1d8b8ce, ftLastAccessTime.dwLowDateTime=0x1ddea300, ftLastAccessTime.dwHighDateTime=0x1d8bd46, ftLastWriteTime.dwLowDateTime=0x1ddea300, ftLastWriteTime.dwHighDateTime=0x1d8bd46, nFileSizeHigh=0x0, nFileSizeLow=0x146c7, dwReserved0=0x0, dwReserved1=0x1d00160b, cFileName="bM2Zf8u4-gGvo8ahkil.mp3", cAlternateFileName="BM2ZF8~1.MP3")) returned 1 [0266.030] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.030] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.030] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.030] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.030] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0266.031] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\bM2Zf8u4-gGvo8ahkil.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\bm2zf8u4-ggvo8ahkil.mp3")) returned 0x20 [0266.031] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\bM2Zf8u4-gGvo8ahkil.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\bm2zf8u4-ggvo8ahkil.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0266.032] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\bM2Zf8u4-gGvo8ahkil.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\bm2zf8u4-ggvo8ahkil.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.032] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.033] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.035] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.035] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.035] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.035] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.036] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.036] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.036] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.036] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.037] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.037] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.037] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.037] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.037] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.042] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.042] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.042] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.043] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.043] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.043] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.043] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.044] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.044] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.044] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.044] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.044] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.045] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.045] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.045] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.045] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.046] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.046] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.046] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.046] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.047] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.047] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.047] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.047] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.048] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.048] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x6c7, lpOverlapped=0x0) returned 1 [0266.048] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x6c7, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x6c7, lpOverlapped=0x0) returned 1 [0266.048] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0266.048] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0266.048] CloseHandle (hObject=0x224) returned 1 [0266.048] CloseHandle (hObject=0x1e0) returned 1 [0266.049] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\bM2Zf8u4-gGvo8ahkil.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\bm2zf8u4-ggvo8ahkil.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\bM2Zf8u4-gGvo8ahkil.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\bm2zf8u4-ggvo8ahkil.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.049] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\bM2Zf8u4-gGvo8ahkil.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\bm2zf8u4-ggvo8ahkil.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.050] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\bM2Zf8u4-gGvo8ahkil.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\bm2zf8u4-ggvo8ahkil.mp3"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf809a0, ftCreationTime.dwHighDateTime=0x1d8b8ce, ftLastAccessTime.dwLowDateTime=0x1ddea300, ftLastAccessTime.dwHighDateTime=0x1d8bd46, ftLastWriteTime.dwLowDateTime=0x1ddea300, ftLastWriteTime.dwHighDateTime=0x1d8bd46, nFileSizeHigh=0x0, nFileSizeLow=0x146c7, dwReserved0=0x550370, dwReserved1=0xf, cFileName="bM2Zf8u4-gGvo8ahkil.mp3", cAlternateFileName="BM2ZF8~1.MP3")) returned 0x55e310 [0266.050] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbf809a0, ftCreationTime.dwHighDateTime=0x1d8b8ce, ftLastAccessTime.dwLowDateTime=0x1ddea300, ftLastAccessTime.dwHighDateTime=0x1d8bd46, ftLastWriteTime.dwLowDateTime=0x1ddea300, ftLastWriteTime.dwHighDateTime=0x1d8bd46, nFileSizeHigh=0x0, nFileSizeLow=0x146c7, dwReserved0=0x550370, dwReserved1=0xf, cFileName="bM2Zf8u4-gGvo8ahkil.mp3", cAlternateFileName="BM2ZF8~1.MP3")) returned 0 [0266.050] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0266.050] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\bM2Zf8u4-gGvo8ahkil.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\bm2zf8u4-ggvo8ahkil.mp3")) returned 1 [0266.052] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\bM2Zf8u4-gGvo8ahkil.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\bm2zf8u4-ggvo8ahkil.mp3")) returned 0xffffffff [0266.052] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5129160, ftCreationTime.dwHighDateTime=0x1d8b2b4, ftLastAccessTime.dwLowDateTime=0xcd7d1b50, ftLastAccessTime.dwHighDateTime=0x1d8b4dd, ftLastWriteTime.dwLowDateTime=0xcd7d1b50, ftLastWriteTime.dwHighDateTime=0x1d8b4dd, nFileSizeHigh=0x0, nFileSizeLow=0x148ca, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="eXdi.wav", cAlternateFileName="")) returned 1 [0266.053] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce7ef0f0, ftCreationTime.dwHighDateTime=0x1d8bc9e, ftLastAccessTime.dwLowDateTime=0x10acac10, ftLastAccessTime.dwHighDateTime=0x1d8c0cd, ftLastWriteTime.dwLowDateTime=0x10acac10, ftLastWriteTime.dwHighDateTime=0x1d8c0cd, nFileSizeHigh=0x0, nFileSizeLow=0xeca0, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="FHzFkqjvUhy9UfbfPi.mp3", cAlternateFileName="FHZFKQ~1.MP3")) returned 1 [0266.053] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.053] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.053] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.053] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.053] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.053] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0266.054] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\FHzFkqjvUhy9UfbfPi.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\fhzfkqjvuhy9ufbfpi.mp3")) returned 0x20 [0266.054] VirtualAlloc (lpAddress=0x23a0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23a0000 [0266.054] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\FHzFkqjvUhy9UfbfPi.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\fhzfkqjvuhy9ufbfpi.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.055] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\FHzFkqjvUhy9UfbfPi.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\fhzfkqjvuhy9ufbfpi.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0266.056] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.057] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.058] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.058] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.059] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.059] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.059] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.059] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.060] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.060] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.060] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.060] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.060] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.061] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.061] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.061] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.061] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.061] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.062] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.062] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.062] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.062] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.063] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.063] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.063] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.063] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.063] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.064] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.064] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0xca0, lpOverlapped=0x0) returned 1 [0266.064] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0xca0, lpOverlapped=0x0) returned 1 [0266.064] ReadFile (in: hFile=0x1e0, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0266.064] WriteFile (in: hFile=0x224, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0266.064] CloseHandle (hObject=0x1e0) returned 1 [0266.064] CloseHandle (hObject=0x224) returned 1 [0266.065] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\FHzFkqjvUhy9UfbfPi.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\fhzfkqjvuhy9ufbfpi.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\FHzFkqjvUhy9UfbfPi.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\fhzfkqjvuhy9ufbfpi.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.065] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\FHzFkqjvUhy9UfbfPi.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\fhzfkqjvuhy9ufbfpi.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.065] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\FHzFkqjvUhy9UfbfPi.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\fhzfkqjvuhy9ufbfpi.mp3"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce7ef0f0, ftCreationTime.dwHighDateTime=0x1d8bc9e, ftLastAccessTime.dwLowDateTime=0x10acac10, ftLastAccessTime.dwHighDateTime=0x1d8c0cd, ftLastWriteTime.dwLowDateTime=0x10acac10, ftLastWriteTime.dwHighDateTime=0x1d8c0cd, nFileSizeHigh=0x0, nFileSizeLow=0xeca0, dwReserved0=0x550370, dwReserved1=0xf, cFileName="FHzFkqjvUhy9UfbfPi.mp3", cAlternateFileName="FHZFKQ~1.MP3")) returned 0x55e690 [0266.065] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce7ef0f0, ftCreationTime.dwHighDateTime=0x1d8bc9e, ftLastAccessTime.dwLowDateTime=0x10acac10, ftLastAccessTime.dwHighDateTime=0x1d8c0cd, ftLastWriteTime.dwLowDateTime=0x10acac10, ftLastWriteTime.dwHighDateTime=0x1d8c0cd, nFileSizeHigh=0x0, nFileSizeLow=0xeca0, dwReserved0=0x550370, dwReserved1=0xf, cFileName="FHzFkqjvUhy9UfbfPi.mp3", cAlternateFileName="FHZFKQ~1.MP3")) returned 0 [0266.065] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0266.066] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\FHzFkqjvUhy9UfbfPi.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\fhzfkqjvuhy9ufbfpi.mp3")) returned 1 [0266.067] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\FHzFkqjvUhy9UfbfPi.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\fhzfkqjvuhy9ufbfpi.mp3")) returned 0xffffffff [0266.067] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a63010, ftCreationTime.dwHighDateTime=0x1d8b9e3, ftLastAccessTime.dwLowDateTime=0x41e6ca20, ftLastAccessTime.dwHighDateTime=0x1d8bd5a, ftLastWriteTime.dwLowDateTime=0x41e6ca20, ftLastWriteTime.dwHighDateTime=0x1d8bd5a, nFileSizeHigh=0x0, nFileSizeLow=0x2d7d, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="sQONhex-nI.wav", cAlternateFileName="SQONHE~1.WAV")) returned 1 [0266.068] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a63010, ftCreationTime.dwHighDateTime=0x1d8b9e3, ftLastAccessTime.dwLowDateTime=0x41e6ca20, ftLastAccessTime.dwHighDateTime=0x1d8bd5a, ftLastWriteTime.dwLowDateTime=0x41e6ca20, ftLastWriteTime.dwHighDateTime=0x1d8bd5a, nFileSizeHigh=0x0, nFileSizeLow=0x2d7d, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="sQONhex-nI.wav", cAlternateFileName="SQONHE~1.WAV")) returned 0 [0266.068] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0266.068] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be43a50, ftCreationTime.dwHighDateTime=0x1d8be77, ftLastAccessTime.dwLowDateTime=0x731c15f0, ftLastAccessTime.dwHighDateTime=0x1d8c129, ftLastWriteTime.dwLowDateTime=0x731c15f0, ftLastWriteTime.dwHighDateTime=0x1d8c129, nFileSizeHigh=0x0, nFileSizeLow=0x10276, dwReserved0=0x2e496e2d, dwReserved1=0x62766177, cFileName="HsJ8R.m4a", cAlternateFileName="")) returned 1 [0266.069] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83dec8e0, ftCreationTime.dwHighDateTime=0x1d8b54b, ftLastAccessTime.dwLowDateTime=0xa5b123c0, ftLastAccessTime.dwHighDateTime=0x1d8bb7f, ftLastWriteTime.dwLowDateTime=0xa5b123c0, ftLastWriteTime.dwHighDateTime=0x1d8bb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10f2e, dwReserved0=0x2e496e2d, dwReserved1=0x62766177, cFileName="JnUbo9SAXwd v.mp3", cAlternateFileName="JNUBO9~1.MP3")) returned 1 [0266.069] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.069] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.069] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.069] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0266.070] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\JnUbo9SAXwd v.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\jnubo9saxwd v.mp3")) returned 0x20 [0266.070] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\JnUbo9SAXwd v.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\jnubo9saxwd v.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0266.070] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\JnUbo9SAXwd v.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\jnubo9saxwd v.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0266.071] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.074] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.075] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.075] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.075] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.076] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.076] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.076] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.076] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.076] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.077] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.077] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.077] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.077] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.077] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.078] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.078] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.078] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.078] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.078] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.079] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.079] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.079] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.079] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.080] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.080] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.080] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.080] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.080] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.081] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.081] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.081] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.081] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0xf2e, lpOverlapped=0x0) returned 1 [0266.081] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0xf2e, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0xf2e, lpOverlapped=0x0) returned 1 [0266.111] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0266.111] WriteFile (in: hFile=0x224, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0266.111] CloseHandle (hObject=0x210) returned 1 [0266.112] CloseHandle (hObject=0x224) returned 1 [0266.112] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\JnUbo9SAXwd v.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\jnubo9saxwd v.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\JnUbo9SAXwd v.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\jnubo9saxwd v.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.112] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\JnUbo9SAXwd v.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\jnubo9saxwd v.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.112] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\JnUbo9SAXwd v.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\jnubo9saxwd v.mp3"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83dec8e0, ftCreationTime.dwHighDateTime=0x1d8b54b, ftLastAccessTime.dwLowDateTime=0xa5b123c0, ftLastAccessTime.dwHighDateTime=0x1d8bb7f, ftLastWriteTime.dwLowDateTime=0xa5b123c0, ftLastWriteTime.dwHighDateTime=0x1d8bb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10f2e, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="JnUbo9SAXwd v.mp3", cAlternateFileName="JNUBO9~1.MP3")) returned 0x55e390 [0266.113] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83dec8e0, ftCreationTime.dwHighDateTime=0x1d8b54b, ftLastAccessTime.dwLowDateTime=0xa5b123c0, ftLastAccessTime.dwHighDateTime=0x1d8bb7f, ftLastWriteTime.dwLowDateTime=0xa5b123c0, ftLastWriteTime.dwHighDateTime=0x1d8bb7f, nFileSizeHigh=0x0, nFileSizeLow=0x10f2e, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="JnUbo9SAXwd v.mp3", cAlternateFileName="JNUBO9~1.MP3")) returned 0 [0266.113] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0266.113] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\JnUbo9SAXwd v.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\jnubo9saxwd v.mp3")) returned 1 [0266.114] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\JnUbo9SAXwd v.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\jnubo9saxwd v.mp3")) returned 0xffffffff [0266.115] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf60dda0, ftCreationTime.dwHighDateTime=0x1d8c09d, ftLastAccessTime.dwLowDateTime=0xb7d6d100, ftLastAccessTime.dwHighDateTime=0x1d8c0d7, ftLastWriteTime.dwLowDateTime=0xb7d6d100, ftLastWriteTime.dwHighDateTime=0x1d8c0d7, nFileSizeHigh=0x0, nFileSizeLow=0x2950, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="TbHNNivYDYJa.mp3", cAlternateFileName="TBHNNI~1.MP3")) returned 1 [0266.115] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.115] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.115] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.115] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0266.116] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\TbHNNivYDYJa.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\tbhnnivydyja.mp3")) returned 0x20 [0266.116] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\TbHNNivYDYJa.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\tbhnnivydyja.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0266.117] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\TbHNNivYDYJa.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\tbhnnivydyja.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0266.117] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.118] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.124] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.124] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.125] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x950, lpOverlapped=0x0) returned 1 [0266.125] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x950, lpOverlapped=0x0) returned 1 [0266.125] ReadFile (in: hFile=0x224, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0266.125] WriteFile (in: hFile=0x210, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0266.125] CloseHandle (hObject=0x224) returned 1 [0266.125] CloseHandle (hObject=0x210) returned 1 [0266.126] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\TbHNNivYDYJa.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\tbhnnivydyja.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\TbHNNivYDYJa.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\tbhnnivydyja.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.126] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\TbHNNivYDYJa.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\tbhnnivydyja.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.126] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\TbHNNivYDYJa.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\tbhnnivydyja.mp3"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf60dda0, ftCreationTime.dwHighDateTime=0x1d8c09d, ftLastAccessTime.dwLowDateTime=0xb7d6d100, ftLastAccessTime.dwHighDateTime=0x1d8c0d7, ftLastWriteTime.dwLowDateTime=0xb7d6d100, ftLastWriteTime.dwHighDateTime=0x1d8c0d7, nFileSizeHigh=0x0, nFileSizeLow=0x2950, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="TbHNNivYDYJa.mp3", cAlternateFileName="TBHNNI~1.MP3")) returned 0x55e890 [0266.126] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf60dda0, ftCreationTime.dwHighDateTime=0x1d8c09d, ftLastAccessTime.dwLowDateTime=0xb7d6d100, ftLastAccessTime.dwHighDateTime=0x1d8c0d7, ftLastWriteTime.dwLowDateTime=0xb7d6d100, ftLastWriteTime.dwHighDateTime=0x1d8c0d7, nFileSizeHigh=0x0, nFileSizeLow=0x2950, dwReserved0=0x777968c7, dwReserved1=0xec0ab101, cFileName="TbHNNivYDYJa.mp3", cAlternateFileName="TBHNNI~1.MP3")) returned 0 [0266.126] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0266.126] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\TbHNNivYDYJa.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\tbhnnivydyja.mp3")) returned 1 [0266.128] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\TbHNNivYDYJa.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\tbhnnivydyja.mp3")) returned 0xffffffff [0266.128] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadbee5e0, ftCreationTime.dwHighDateTime=0x1d8b8da, ftLastAccessTime.dwLowDateTime=0x64adee00, ftLastAccessTime.dwHighDateTime=0x1d8bc77, ftLastWriteTime.dwLowDateTime=0x64adee00, ftLastWriteTime.dwHighDateTime=0x1d8bc77, nFileSizeHigh=0x0, nFileSizeLow=0xeddf, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Z j4L7 8DgxbW.m4a", cAlternateFileName="ZJ4L78~1.M4A")) returned 1 [0266.128] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadbee5e0, ftCreationTime.dwHighDateTime=0x1d8b8da, ftLastAccessTime.dwLowDateTime=0x64adee00, ftLastAccessTime.dwHighDateTime=0x1d8bc77, ftLastWriteTime.dwLowDateTime=0x64adee00, ftLastWriteTime.dwHighDateTime=0x1d8bc77, nFileSizeHigh=0x0, nFileSizeLow=0xeddf, dwReserved0=0x55a2d0, dwReserved1=0x550284, cFileName="Z j4L7 8DgxbW.m4a", cAlternateFileName="ZJ4L78~1.M4A")) returned 0 [0266.129] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0266.129] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce6840, ftCreationTime.dwHighDateTime=0x1d8b79b, ftLastAccessTime.dwLowDateTime=0x5598dbf0, ftLastAccessTime.dwHighDateTime=0x1d8c0be, ftLastWriteTime.dwLowDateTime=0x5598dbf0, ftLastWriteTime.dwHighDateTime=0x1d8c0be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78674438, dwReserved1=0x6d2e5762, cFileName="yfv4lWxLPw", cAlternateFileName="YFV4LW~1")) returned 1 [0266.129] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce6840, ftCreationTime.dwHighDateTime=0x1d8b79b, ftLastAccessTime.dwLowDateTime=0x5598dbf0, ftLastAccessTime.dwHighDateTime=0x1d8c0be, ftLastWriteTime.dwLowDateTime=0x5598dbf0, ftLastWriteTime.dwHighDateTime=0x1d8c0be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0077, dwReserved1=0x34006d, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0266.129] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce6840, ftCreationTime.dwHighDateTime=0x1d8b79b, ftLastAccessTime.dwLowDateTime=0x5598dbf0, ftLastAccessTime.dwHighDateTime=0x1d8c0be, ftLastWriteTime.dwLowDateTime=0x5598dbf0, ftLastWriteTime.dwHighDateTime=0x1d8c0be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e0077, dwReserved1=0x34006d, cFileName="..", cAlternateFileName="")) returned 1 [0266.129] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7696f160, ftCreationTime.dwHighDateTime=0x1d8bc32, ftLastAccessTime.dwLowDateTime=0x2b589b20, ftLastAccessTime.dwHighDateTime=0x1d8c030, ftLastWriteTime.dwLowDateTime=0x2b589b20, ftLastWriteTime.dwHighDateTime=0x1d8c030, nFileSizeHigh=0x0, nFileSizeLow=0x1dc6, dwReserved0=0x2e0077, dwReserved1=0x34006d, cFileName="15fobDQKgftok_8F.m4a", cAlternateFileName="15FOBD~1.M4A")) returned 1 [0266.130] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x117f23f0, ftCreationTime.dwHighDateTime=0x1d8b7dd, ftLastAccessTime.dwLowDateTime=0x10afae80, ftLastAccessTime.dwHighDateTime=0x1d8ba18, ftLastWriteTime.dwLowDateTime=0x10afae80, ftLastWriteTime.dwHighDateTime=0x1d8ba18, nFileSizeHigh=0x0, nFileSizeLow=0x63fc, dwReserved0=0x5f006b, dwReserved1=0x660038, cFileName="eCZDYjnVaSKawkc.m4a", cAlternateFileName="ECZDYJ~1.M4A")) returned 1 [0266.130] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b56810, ftCreationTime.dwHighDateTime=0x1d8b5ef, ftLastAccessTime.dwLowDateTime=0x90f7e020, ftLastAccessTime.dwHighDateTime=0x1d8bf37, ftLastWriteTime.dwLowDateTime=0x90f7e020, ftLastWriteTime.dwHighDateTime=0x1d8bf37, nFileSizeHigh=0x0, nFileSizeLow=0x11d85, dwReserved0=0x6b0077, dwReserved1=0x2e0063, cFileName="jWScJhJn.wav", cAlternateFileName="")) returned 1 [0266.131] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf80a6da0, ftCreationTime.dwHighDateTime=0x1d8bfd2, ftLastAccessTime.dwLowDateTime=0x13370400, ftLastAccessTime.dwHighDateTime=0x1d8c11b, ftLastWriteTime.dwLowDateTime=0x13370400, ftLastWriteTime.dwHighDateTime=0x1d8c11b, nFileSizeHigh=0x0, nFileSizeLow=0x51e5, dwReserved0=0x6b0000, dwReserved1=0x2e0063, cFileName="KEr9ngVT2XB4gdmf.m4a", cAlternateFileName="KER9NG~1.M4A")) returned 1 [0266.131] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76982e30, ftCreationTime.dwHighDateTime=0x1d8baa3, ftLastAccessTime.dwLowDateTime=0x67197cc0, ftLastAccessTime.dwHighDateTime=0x1d8be59, ftLastWriteTime.dwLowDateTime=0x67197cc0, ftLastWriteTime.dwHighDateTime=0x1d8be59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x640067, dwReserved1=0x66006d, cFileName="Nr0iCrSGwQMcpOn9gZ", cAlternateFileName="NR0ICR~1")) returned 1 [0266.131] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\Nr0iCrSGwQMcpOn9gZ\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\nr0icrsgwqmcpon9gz\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76982e30, ftCreationTime.dwHighDateTime=0x1d8baa3, ftLastAccessTime.dwLowDateTime=0x67197cc0, ftLastAccessTime.dwHighDateTime=0x1d8be59, ftLastWriteTime.dwLowDateTime=0x67197cc0, ftLastWriteTime.dwHighDateTime=0x1d8be59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0266.132] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76982e30, ftCreationTime.dwHighDateTime=0x1d8baa3, ftLastAccessTime.dwLowDateTime=0x67197cc0, ftLastAccessTime.dwHighDateTime=0x1d8be59, ftLastWriteTime.dwLowDateTime=0x67197cc0, ftLastWriteTime.dwHighDateTime=0x1d8be59, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0266.132] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe5e8c0, ftCreationTime.dwHighDateTime=0x1d8b2b9, ftLastAccessTime.dwLowDateTime=0xe11e4bd0, ftLastAccessTime.dwHighDateTime=0x1d8b752, ftLastWriteTime.dwLowDateTime=0xe11e4bd0, ftLastWriteTime.dwHighDateTime=0x1d8b752, nFileSizeHigh=0x0, nFileSizeLow=0x102fb, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="3Mg0J3t-ptjcxV5wylC.wav", cAlternateFileName="3MG0J3~1.WAV")) returned 1 [0266.132] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384a60e0, ftCreationTime.dwHighDateTime=0x1d8b0d9, ftLastAccessTime.dwLowDateTime=0x7f015770, ftLastAccessTime.dwHighDateTime=0x1d8b474, ftLastWriteTime.dwLowDateTime=0x7f015770, ftLastWriteTime.dwHighDateTime=0x1d8b474, nFileSizeHigh=0x0, nFileSizeLow=0xf4e3, dwReserved0=0x760078, dwReserved1=0x770035, cFileName="kN7akgVC.wav", cAlternateFileName="")) returned 1 [0266.133] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb18a71d0, ftCreationTime.dwHighDateTime=0x1d8b150, ftLastAccessTime.dwLowDateTime=0x157fc2f0, ftLastAccessTime.dwHighDateTime=0x1d8b901, ftLastWriteTime.dwLowDateTime=0x157fc2f0, ftLastWriteTime.dwHighDateTime=0x1d8b901, nFileSizeHigh=0x0, nFileSizeLow=0x1791f, dwReserved0=0x760000, dwReserved1=0x770035, cFileName="p6xFnK5SfNIY7K.wav", cAlternateFileName="P6XFNK~1.WAV")) returned 1 [0266.134] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f17f050, ftCreationTime.dwHighDateTime=0x1d8b425, ftLastAccessTime.dwLowDateTime=0xddbb96d0, ftLastAccessTime.dwHighDateTime=0x1d8bc4a, ftLastWriteTime.dwLowDateTime=0xddbb96d0, ftLastWriteTime.dwHighDateTime=0x1d8bc4a, nFileSizeHigh=0x0, nFileSizeLow=0x4f4a, dwReserved0=0x6b0037, dwReserved1=0x77002e, cFileName="qnFY7nvUpa7At.wav", cAlternateFileName="QNFY7N~1.WAV")) returned 1 [0266.134] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x299c8490, ftCreationTime.dwHighDateTime=0x1d8b5ae, ftLastAccessTime.dwLowDateTime=0x49b4ebf0, ftLastAccessTime.dwHighDateTime=0x1d8bb49, ftLastWriteTime.dwLowDateTime=0x49b4ebf0, ftLastWriteTime.dwHighDateTime=0x1d8bb49, nFileSizeHigh=0x0, nFileSizeLow=0x2f63, dwReserved0=0x2e0074, dwReserved1=0x610077, cFileName="Uc10D.m4a", cAlternateFileName="")) returned 1 [0266.137] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65b4170, ftCreationTime.dwHighDateTime=0x1d8b993, ftLastAccessTime.dwLowDateTime=0x3b409420, ftLastAccessTime.dwHighDateTime=0x1d8b9a5, ftLastWriteTime.dwLowDateTime=0x3b409420, ftLastWriteTime.dwHighDateTime=0x1d8b9a5, nFileSizeHigh=0x0, nFileSizeLow=0xd70f, dwReserved0=0x2e0074, dwReserved1=0x610077, cFileName="Xezfm.mp3", cAlternateFileName="")) returned 1 [0266.137] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.137] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.137] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.137] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0266.138] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\Nr0iCrSGwQMcpOn9gZ\\Xezfm.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\nr0icrsgwqmcpon9gz\\xezfm.mp3")) returned 0x20 [0266.138] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\Nr0iCrSGwQMcpOn9gZ\\Xezfm.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\nr0icrsgwqmcpon9gz\\xezfm.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x224 [0266.139] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\Nr0iCrSGwQMcpOn9gZ\\Xezfm.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\nr0icrsgwqmcpon9gz\\xezfm.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.140] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.141] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.142] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.142] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.142] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.143] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.143] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.143] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.143] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.143] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.144] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.144] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.144] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.144] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.145] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.145] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.145] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.145] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.145] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.146] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.146] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.146] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.146] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.146] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.147] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.147] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x1000, lpOverlapped=0x0) returned 1 [0266.147] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x70f, lpOverlapped=0x0) returned 1 [0266.147] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x70f, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x70f, lpOverlapped=0x0) returned 1 [0266.147] ReadFile (in: hFile=0x224, lpBuffer=0x19cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19cca8*, lpNumberOfBytesRead=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0266.147] WriteFile (in: hFile=0x1e0, lpBuffer=0x19dca8*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19c9f4, lpOverlapped=0x0 | out: lpBuffer=0x19dca8*, lpNumberOfBytesWritten=0x19c9f4*=0x0, lpOverlapped=0x0) returned 1 [0266.147] CloseHandle (hObject=0x224) returned 1 [0266.147] CloseHandle (hObject=0x1e0) returned 1 [0266.148] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\Nr0iCrSGwQMcpOn9gZ\\Xezfm.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\nr0icrsgwqmcpon9gz\\xezfm.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\Nr0iCrSGwQMcpOn9gZ\\Xezfm.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\nr0icrsgwqmcpon9gz\\xezfm.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.148] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\Nr0iCrSGwQMcpOn9gZ\\Xezfm.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\nr0icrsgwqmcpon9gz\\xezfm.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.148] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\Nr0iCrSGwQMcpOn9gZ\\Xezfm.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\nr0icrsgwqmcpon9gz\\xezfm.mp3"), lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65b4170, ftCreationTime.dwHighDateTime=0x1d8b993, ftLastAccessTime.dwLowDateTime=0x3b409420, ftLastAccessTime.dwHighDateTime=0x1d8b9a5, ftLastWriteTime.dwLowDateTime=0x3b409420, ftLastWriteTime.dwHighDateTime=0x1d8b9a5, nFileSizeHigh=0x0, nFileSizeLow=0xd70f, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Xezfm.mp3", cAlternateFileName="")) returned 0x55e250 [0266.148] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19eb44 | out: lpFindFileData=0x19eb44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65b4170, ftCreationTime.dwHighDateTime=0x1d8b993, ftLastAccessTime.dwLowDateTime=0x3b409420, ftLastAccessTime.dwHighDateTime=0x1d8b9a5, ftLastWriteTime.dwLowDateTime=0x3b409420, ftLastWriteTime.dwHighDateTime=0x1d8b9a5, nFileSizeHigh=0x0, nFileSizeLow=0xd70f, dwReserved0=0x10000010, dwReserved1=0x10, cFileName="Xezfm.mp3", cAlternateFileName="")) returned 0 [0266.149] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0266.149] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\Nr0iCrSGwQMcpOn9gZ\\Xezfm.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\nr0icrsgwqmcpon9gz\\xezfm.mp3")) returned 1 [0266.152] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\Nr0iCrSGwQMcpOn9gZ\\Xezfm.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\nr0icrsgwqmcpon9gz\\xezfm.mp3")) returned 0xffffffff [0266.152] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc65b4170, ftCreationTime.dwHighDateTime=0x1d8b993, ftLastAccessTime.dwLowDateTime=0x3b409420, ftLastAccessTime.dwHighDateTime=0x1d8b9a5, ftLastWriteTime.dwLowDateTime=0x3b409420, ftLastWriteTime.dwHighDateTime=0x1d8b9a5, nFileSizeHigh=0x0, nFileSizeLow=0xd70f, dwReserved0=0x2e0074, dwReserved1=0x610077, cFileName="Xezfm.mp3", cAlternateFileName="")) returned 0 [0266.152] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0266.152] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf690eab0, ftCreationTime.dwHighDateTime=0x1d8b787, ftLastAccessTime.dwLowDateTime=0xecb425a0, ftLastAccessTime.dwHighDateTime=0x1d8bea5, ftLastWriteTime.dwLowDateTime=0xecb425a0, ftLastWriteTime.dwHighDateTime=0x1d8bea5, nFileSizeHigh=0x0, nFileSizeLow=0x55f4, dwReserved0=0x37613370, dwReserved1=0x772e7441, cFileName="O hafpyo08HaHxT.wav", cAlternateFileName="OHAFPY~1.WAV")) returned 1 [0266.153] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15c97cc0, ftCreationTime.dwHighDateTime=0x1d8b388, ftLastAccessTime.dwLowDateTime=0x1d95a570, ftLastAccessTime.dwHighDateTime=0x1d8b52a, ftLastWriteTime.dwLowDateTime=0x1d95a570, ftLastWriteTime.dwHighDateTime=0x1d8b52a, nFileSizeHigh=0x0, nFileSizeLow=0x93e1, dwReserved0=0x780068, dwReserved1=0x2e0074, cFileName="TiCRJaJzkoxMi1--lQCA.mp3", cAlternateFileName="TICRJA~1.MP3")) returned 1 [0266.153] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.153] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.153] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.153] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0266.154] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\TiCRJaJzkoxMi1--lQCA.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\ticrjajzkoxmi1--lqca.mp3")) returned 0x20 [0266.154] VirtualAlloc (lpAddress=0x23a4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23a4000 [0266.154] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\TiCRJaJzkoxMi1--lQCA.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\ticrjajzkoxmi1--lqca.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0266.155] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\TiCRJaJzkoxMi1--lQCA.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\ticrjajzkoxmi1--lqca.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.156] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.157] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.158] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.158] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.158] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.159] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.159] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.159] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.159] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.159] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.160] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.160] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.160] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.160] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.161] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.161] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.161] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.161] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x1000, lpOverlapped=0x0) returned 1 [0266.161] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x3e1, lpOverlapped=0x0) returned 1 [0266.161] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x3e1, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x3e1, lpOverlapped=0x0) returned 1 [0266.162] ReadFile (in: hFile=0x210, lpBuffer=0x19cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19cf10*, lpNumberOfBytesRead=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0266.162] WriteFile (in: hFile=0x1e0, lpBuffer=0x19df10*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cc5c, lpOverlapped=0x0 | out: lpBuffer=0x19df10*, lpNumberOfBytesWritten=0x19cc5c*=0x0, lpOverlapped=0x0) returned 1 [0266.162] CloseHandle (hObject=0x210) returned 1 [0266.162] CloseHandle (hObject=0x1e0) returned 1 [0266.162] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\TiCRJaJzkoxMi1--lQCA.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\ticrjajzkoxmi1--lqca.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\TiCRJaJzkoxMi1--lQCA.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\ticrjajzkoxmi1--lqca.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.162] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\TiCRJaJzkoxMi1--lQCA.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\ticrjajzkoxmi1--lqca.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.163] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\TiCRJaJzkoxMi1--lQCA.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\ticrjajzkoxmi1--lqca.mp3"), lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15c97cc0, ftCreationTime.dwHighDateTime=0x1d8b388, ftLastAccessTime.dwLowDateTime=0x1d95a570, ftLastAccessTime.dwHighDateTime=0x1d8b52a, ftLastWriteTime.dwLowDateTime=0x1d95a570, ftLastWriteTime.dwHighDateTime=0x1d8b52a, nFileSizeHigh=0x0, nFileSizeLow=0x93e1, dwReserved0=0x550370, dwReserved1=0x11, cFileName="TiCRJaJzkoxMi1--lQCA.mp3", cAlternateFileName="TICRJA~1.MP3")) returned 0x55e210 [0266.163] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19edac | out: lpFindFileData=0x19edac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15c97cc0, ftCreationTime.dwHighDateTime=0x1d8b388, ftLastAccessTime.dwLowDateTime=0x1d95a570, ftLastAccessTime.dwHighDateTime=0x1d8b52a, ftLastWriteTime.dwLowDateTime=0x1d95a570, ftLastWriteTime.dwHighDateTime=0x1d8b52a, nFileSizeHigh=0x0, nFileSizeLow=0x93e1, dwReserved0=0x550370, dwReserved1=0x11, cFileName="TiCRJaJzkoxMi1--lQCA.mp3", cAlternateFileName="TICRJA~1.MP3")) returned 0 [0266.163] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0266.163] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\TiCRJaJzkoxMi1--lQCA.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\ticrjajzkoxmi1--lqca.mp3")) returned 1 [0266.164] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\TiCRJaJzkoxMi1--lQCA.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\ticrjajzkoxmi1--lqca.mp3")) returned 0xffffffff [0266.165] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15c97cc0, ftCreationTime.dwHighDateTime=0x1d8b388, ftLastAccessTime.dwLowDateTime=0x1d95a570, ftLastAccessTime.dwHighDateTime=0x1d8b52a, ftLastWriteTime.dwLowDateTime=0x1d95a570, ftLastWriteTime.dwHighDateTime=0x1d8b52a, nFileSizeHigh=0x0, nFileSizeLow=0x93e1, dwReserved0=0x780068, dwReserved1=0x2e0074, cFileName="TiCRJaJzkoxMi1--lQCA.mp3", cAlternateFileName="TICRJA~1.MP3")) returned 0 [0266.165] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0266.165] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce6840, ftCreationTime.dwHighDateTime=0x1d8b79b, ftLastAccessTime.dwLowDateTime=0x5598dbf0, ftLastAccessTime.dwHighDateTime=0x1d8c0be, ftLastWriteTime.dwLowDateTime=0x5598dbf0, ftLastWriteTime.dwHighDateTime=0x1d8c0be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78674438, dwReserved1=0x6d2e5762, cFileName="yfv4lWxLPw", cAlternateFileName="YFV4LW~1")) returned 0 [0266.165] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0266.165] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feec3c0, ftCreationTime.dwHighDateTime=0x1d8b123, ftLastAccessTime.dwLowDateTime=0xfb9954b0, ftLastAccessTime.dwHighDateTime=0x1d8bc38, ftLastWriteTime.dwLowDateTime=0xfb9954b0, ftLastWriteTime.dwHighDateTime=0x1d8bc38, nFileSizeHigh=0x0, nFileSizeLow=0x7481, dwReserved0=0x5377504c, dwReserved1=0x6679694f, cFileName="JH QbUa.wav", cAlternateFileName="JHQBUA~1.WAV")) returned 1 [0266.165] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d54750, ftCreationTime.dwHighDateTime=0x1d8b384, ftLastAccessTime.dwLowDateTime=0xd663b160, ftLastAccessTime.dwHighDateTime=0x1d8b592, ftLastWriteTime.dwLowDateTime=0xd663b160, ftLastWriteTime.dwHighDateTime=0x1d8b592, nFileSizeHigh=0x0, nFileSizeLow=0x8d74, dwReserved0=0x5377504c, dwReserved1=0x6679694f, cFileName="X10hz.m4a", cAlternateFileName="")) returned 1 [0266.167] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d54750, ftCreationTime.dwHighDateTime=0x1d8b384, ftLastAccessTime.dwLowDateTime=0xd663b160, ftLastAccessTime.dwHighDateTime=0x1d8b592, ftLastWriteTime.dwLowDateTime=0xd663b160, ftLastWriteTime.dwHighDateTime=0x1d8b592, nFileSizeHigh=0x0, nFileSizeLow=0x8d74, dwReserved0=0x5377504c, dwReserved1=0x6679694f, cFileName="X10hz.m4a", cAlternateFileName="")) returned 0 [0266.167] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0266.167] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88deb090, ftCreationTime.dwHighDateTime=0x1d8b26b, ftLastAccessTime.dwLowDateTime=0xbf478f50, ftLastAccessTime.dwHighDateTime=0x1d8b81d, ftLastWriteTime.dwLowDateTime=0xbf478f50, ftLastWriteTime.dwHighDateTime=0x1d8b81d, nFileSizeHigh=0x0, nFileSizeLow=0x13af5, dwReserved0=0x76616134, dwReserved1=0x4e467259, cFileName="qg6rQLteOW6jCe.mp3", cAlternateFileName="QG6RQL~1.MP3")) returned 1 [0266.167] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.167] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.168] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.168] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0266.168] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\qg6rQLteOW6jCe.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\qg6rqlteow6jce.mp3")) returned 0x20 [0266.168] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\qg6rQLteOW6jCe.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\qg6rqlteow6jce.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0266.169] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\qg6rQLteOW6jCe.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\qg6rqlteow6jce.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0266.169] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.171] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.172] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.172] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.172] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.173] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.173] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.173] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.173] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.173] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.174] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.174] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.174] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.174] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.174] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.175] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.175] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.175] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.175] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.175] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.176] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.176] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.176] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.176] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.176] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.177] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.177] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.177] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.177] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.177] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.178] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.178] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.178] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.178] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.178] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.180] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.180] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.180] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.180] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xaf5, lpOverlapped=0x0) returned 1 [0266.181] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xaf5, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xaf5, lpOverlapped=0x0) returned 1 [0266.181] ReadFile (in: hFile=0x200, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0266.181] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0266.181] CloseHandle (hObject=0x200) returned 1 [0266.181] CloseHandle (hObject=0x218) returned 1 [0266.182] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\qg6rQLteOW6jCe.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\qg6rqlteow6jce.mp3"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\qg6rQLteOW6jCe.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\qg6rqlteow6jce.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.182] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\qg6rQLteOW6jCe.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\qg6rqlteow6jce.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.182] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\qg6rQLteOW6jCe.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\qg6rqlteow6jce.mp3"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88deb090, ftCreationTime.dwHighDateTime=0x1d8b26b, ftLastAccessTime.dwLowDateTime=0xbf478f50, ftLastAccessTime.dwHighDateTime=0x1d8b81d, ftLastWriteTime.dwLowDateTime=0xbf478f50, ftLastWriteTime.dwHighDateTime=0x1d8b81d, nFileSizeHigh=0x0, nFileSizeLow=0x13af5, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="qg6rQLteOW6jCe.mp3", cAlternateFileName="QG6RQL~1.MP3")) returned 0x55e8d0 [0266.183] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88deb090, ftCreationTime.dwHighDateTime=0x1d8b26b, ftLastAccessTime.dwLowDateTime=0xbf478f50, ftLastAccessTime.dwHighDateTime=0x1d8b81d, ftLastWriteTime.dwLowDateTime=0xbf478f50, ftLastWriteTime.dwHighDateTime=0x1d8b81d, nFileSizeHigh=0x0, nFileSizeLow=0x13af5, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="qg6rQLteOW6jCe.mp3", cAlternateFileName="QG6RQL~1.MP3")) returned 0 [0266.183] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0266.183] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\qg6rQLteOW6jCe.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\qg6rqlteow6jce.mp3")) returned 1 [0266.184] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\qg6rQLteOW6jCe.mp3" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\qg6rqlteow6jce.mp3")) returned 0xffffffff [0266.185] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ab9090, ftCreationTime.dwHighDateTime=0x1d8b2a9, ftLastAccessTime.dwLowDateTime=0x1dbac800, ftLastAccessTime.dwHighDateTime=0x1d8be9e, ftLastWriteTime.dwLowDateTime=0x1dbac800, ftLastWriteTime.dwHighDateTime=0x1d8be9e, nFileSizeHigh=0x0, nFileSizeLow=0x1588d, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="TaZ0jZ6-p.m4a", cAlternateFileName="TAZ0JZ~1.M4A")) returned 1 [0266.185] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ab9090, ftCreationTime.dwHighDateTime=0x1d8b2a9, ftLastAccessTime.dwLowDateTime=0x1dbac800, ftLastAccessTime.dwHighDateTime=0x1d8be9e, ftLastWriteTime.dwLowDateTime=0x1dbac800, ftLastWriteTime.dwHighDateTime=0x1d8be9e, nFileSizeHigh=0x0, nFileSizeLow=0x1588d, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="TaZ0jZ6-p.m4a", cAlternateFileName="TAZ0JZ~1.M4A")) returned 0 [0266.185] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0266.185] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2e656134, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0266.185] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\My Documents\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\my documents\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ab9090, ftCreationTime.dwHighDateTime=0x1d8b2a9, ftLastAccessTime.dwLowDateTime=0x1dbac800, ftLastAccessTime.dwHighDateTime=0x1d8be9e, ftLastWriteTime.dwLowDateTime=0x1dbac800, ftLastWriteTime.dwHighDateTime=0x1d8be9e, nFileSizeHigh=0x0, nFileSizeLow=0x1588d, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="TaZ0jZ6-p.m4a", cAlternateFileName="\x90åU")) returned 0xffffffff [0266.186] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2e656134, cFileName="NetHood", cAlternateFileName="")) returned 1 [0266.186] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\NetHood\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\nethood\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ab9090, ftCreationTime.dwHighDateTime=0x1d8b2a9, ftLastAccessTime.dwLowDateTime=0x1dbac800, ftLastAccessTime.dwHighDateTime=0x1d8be9e, ftLastWriteTime.dwLowDateTime=0x1dbac800, ftLastWriteTime.dwHighDateTime=0x1d8be9e, nFileSizeHigh=0x0, nFileSizeLow=0x1588d, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="TaZ0jZ6-p.m4a", cAlternateFileName="\x90åU")) returned 0xffffffff [0266.186] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x3ce3dbd0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6021d26, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x6021d26, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0xa0000003, dwReserved1=0x2e656134, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0266.186] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.186] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.186] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.186] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.187] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0266.187] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\NTUSER.DAT" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.dat")) returned 0x2026 [0266.187] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\NTUSER.DAT" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0266.187] GetLastError () returned 0x20 [0266.187] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\NTUSER.DAT.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1a0 [0266.188] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\NTUSER.DAT" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.dat"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\NTUSER.DAT.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.188] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\NTUSER.DAT.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.188] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\NTUSER.DAT" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.dat"), lpFindFileData=0x19f74c | out: lpFindFileData=0x19f74c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x3ce3dbd0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6021d26, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x6021d26, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x55a1d0, dwReserved1=0x55a408, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 0x55e210 [0266.189] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f74c | out: lpFindFileData=0x19f74c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x3ce3dbd0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6021d26, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x6021d26, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x55a1d0, dwReserved1=0x55a408, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 0 [0266.189] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0266.189] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\NTUSER.DAT" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.dat")) returned 0 [0266.189] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\NTUSER.DAT" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.dat")) returned 0x2026 [0266.189] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d2dc444, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x553860, dwReserved1=0x2000002, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0266.190] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d2dc444, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xb3000, dwReserved0=0x67006f, dwReserved1=0x31, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0266.190] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63434853, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x67006f, dwReserved1=0x32, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0266.191] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d3026e1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d3026e1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6340e659, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x650032, dwReserved1=0x330031, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0266.192] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d3026e1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d3026e1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6340e659, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x650032, dwReserved1=0x330031, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0266.193] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x650032, dwReserved1=0x330031, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0266.194] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.194] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.194] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.194] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0266.194] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\ntuser.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.ini")) returned 0x6 [0266.195] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\ntuser.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0266.195] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\ntuser.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0266.196] ReadFile (in: hFile=0x218, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x14, lpOverlapped=0x0) returned 1 [0266.202] WriteFile (in: hFile=0x200, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x14, lpOverlapped=0x0) returned 1 [0266.203] ReadFile (in: hFile=0x218, lpBuffer=0x19d8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19d8b0*, lpNumberOfBytesRead=0x19d5fc*=0x0, lpOverlapped=0x0) returned 1 [0266.203] WriteFile (in: hFile=0x200, lpBuffer=0x19e8b0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d5fc, lpOverlapped=0x0 | out: lpBuffer=0x19e8b0*, lpNumberOfBytesWritten=0x19d5fc*=0x0, lpOverlapped=0x0) returned 1 [0266.203] CloseHandle (hObject=0x218) returned 1 [0266.203] CloseHandle (hObject=0x200) returned 1 [0266.203] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\ntuser.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\ntuser.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.204] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\ntuser.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.204] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\ntuser.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.ini"), lpFindFileData=0x19f74c | out: lpFindFileData=0x19f74c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x55a1d0, dwReserved1=0x55a408, cFileName="ntuser.ini", cAlternateFileName="")) returned 0x55e890 [0266.204] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f74c | out: lpFindFileData=0x19f74c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x55a1d0, dwReserved1=0x55a408, cFileName="ntuser.ini", cAlternateFileName="")) returned 0 [0266.204] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0266.204] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\ntuser.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.ini")) returned 1 [0266.205] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\ntuser.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\ntuser.ini")) returned 0xffffffff [0266.205] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x84ac775d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x553860, dwReserved1=0x2000002, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0266.206] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x84ac775d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0266.206] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x84ac775d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0266.206] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x84aeda3c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0266.206] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.206] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.206] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.206] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.207] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.207] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0266.207] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\desktop.ini")) returned 0x6 [0266.207] VirtualAlloc (lpAddress=0x23a8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23a8000 [0266.207] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0266.208] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.211] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x67, lpOverlapped=0x0) returned 1 [0266.212] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x67, lpOverlapped=0x0) returned 1 [0266.214] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0266.214] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0266.214] CloseHandle (hObject=0x218) returned 1 [0266.214] CloseHandle (hObject=0x19c) returned 1 [0266.238] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.238] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.238] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x84aeda3c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e650 [0266.238] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x84aeda3c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0266.238] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0266.239] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\desktop.ini")) returned 1 [0266.271] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\desktop.ini")) returned 0xffffffff [0266.271] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x84aeda3c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x84aeda3c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84aeda3c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x563b90, dwReserved1=0x550260, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0266.272] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0266.272] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6fbdde19, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6fbdde19, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x2000002, cFileName="Pictures", cAlternateFileName="")) returned 1 [0266.272] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6fbdde19, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6fbdde19, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e410 [0266.272] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6fbdde19, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6fbdde19, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0266.272] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe453b40, ftCreationTime.dwHighDateTime=0x1d8b15e, ftLastAccessTime.dwLowDateTime=0x20c1a260, ftLastAccessTime.dwHighDateTime=0x1d8b4b9, ftLastWriteTime.dwLowDateTime=0x20c1a260, ftLastWriteTime.dwHighDateTime=0x1d8b4b9, nFileSizeHigh=0x0, nFileSizeLow=0x9475, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="270n1ChiZI_1.gif", cAlternateFileName="270N1C~1.GIF")) returned 1 [0266.273] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.273] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.273] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.273] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.273] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.273] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0266.273] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\270n1ChiZI_1.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\270n1chizi_1.gif")) returned 0x20 [0266.274] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\270n1ChiZI_1.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\270n1chizi_1.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.275] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\270n1ChiZI_1.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\270n1chizi_1.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0266.281] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.282] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.283] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.283] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.284] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.284] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.284] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.284] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.284] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.284] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.284] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.285] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.285] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.285] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.285] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.285] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.285] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.286] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0266.286] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x475, lpOverlapped=0x0) returned 1 [0266.286] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x475, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x475, lpOverlapped=0x0) returned 1 [0266.286] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0266.286] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0266.286] CloseHandle (hObject=0x19c) returned 1 [0266.286] CloseHandle (hObject=0x218) returned 1 [0266.286] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\270n1ChiZI_1.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\270n1chizi_1.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\270n1ChiZI_1.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\270n1chizi_1.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.287] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\270n1ChiZI_1.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\270n1chizi_1.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.287] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\270n1ChiZI_1.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\270n1chizi_1.gif"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe453b40, ftCreationTime.dwHighDateTime=0x1d8b15e, ftLastAccessTime.dwLowDateTime=0x20c1a260, ftLastAccessTime.dwHighDateTime=0x1d8b4b9, ftLastWriteTime.dwLowDateTime=0x20c1a260, ftLastWriteTime.dwHighDateTime=0x1d8b4b9, nFileSizeHigh=0x0, nFileSizeLow=0x9475, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="270n1ChiZI_1.gif", cAlternateFileName="270N1C~1.GIF")) returned 0x55e490 [0266.287] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe453b40, ftCreationTime.dwHighDateTime=0x1d8b15e, ftLastAccessTime.dwLowDateTime=0x20c1a260, ftLastAccessTime.dwHighDateTime=0x1d8b4b9, ftLastWriteTime.dwLowDateTime=0x20c1a260, ftLastWriteTime.dwHighDateTime=0x1d8b4b9, nFileSizeHigh=0x0, nFileSizeLow=0x9475, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="270n1ChiZI_1.gif", cAlternateFileName="270N1C~1.GIF")) returned 0 [0266.287] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0266.287] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\270n1ChiZI_1.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\270n1chizi_1.gif")) returned 1 [0266.293] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\270n1ChiZI_1.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\270n1chizi_1.gif")) returned 0xffffffff [0266.293] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1ec9c20, ftCreationTime.dwHighDateTime=0x1d8c077, ftLastAccessTime.dwLowDateTime=0xf831d510, ftLastAccessTime.dwHighDateTime=0x1d8c07d, ftLastWriteTime.dwLowDateTime=0xf831d510, ftLastWriteTime.dwHighDateTime=0x1d8c07d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="6MHrGlVxhYS", cAlternateFileName="6MHRGL~1")) returned 1 [0266.293] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1ec9c20, ftCreationTime.dwHighDateTime=0x1d8c077, ftLastAccessTime.dwLowDateTime=0xf831d510, ftLastAccessTime.dwHighDateTime=0x1d8c07d, ftLastWriteTime.dwLowDateTime=0xf831d510, ftLastWriteTime.dwHighDateTime=0x1d8c07d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0266.293] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1ec9c20, ftCreationTime.dwHighDateTime=0x1d8c077, ftLastAccessTime.dwLowDateTime=0xf831d510, ftLastAccessTime.dwHighDateTime=0x1d8c07d, ftLastWriteTime.dwLowDateTime=0xf831d510, ftLastWriteTime.dwHighDateTime=0x1d8c07d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0266.293] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522fd760, ftCreationTime.dwHighDateTime=0x1d8b539, ftLastAccessTime.dwLowDateTime=0x66db0d30, ftLastAccessTime.dwHighDateTime=0x1d8c117, ftLastWriteTime.dwLowDateTime=0x66db0d30, ftLastWriteTime.dwHighDateTime=0x1d8c117, nFileSizeHigh=0x0, nFileSizeLow=0x1189e, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="7eWaq5.bmp", cAlternateFileName="")) returned 1 [0266.294] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.294] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.294] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.294] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.294] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.294] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0266.294] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\7eWaq5.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\7ewaq5.bmp")) returned 0x20 [0266.294] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\7eWaq5.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\7ewaq5.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.295] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\7eWaq5.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\7ewaq5.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.295] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.296] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.297] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.297] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.298] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.298] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.298] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.298] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.298] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.298] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.299] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.299] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.299] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.299] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.299] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.299] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.299] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.300] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.300] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.300] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.300] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.300] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.300] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.301] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.301] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.301] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.301] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.301] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.301] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.301] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.302] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.302] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.302] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.302] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.302] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x89e, lpOverlapped=0x0) returned 1 [0266.302] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x89e, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x89e, lpOverlapped=0x0) returned 1 [0266.303] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.303] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.303] CloseHandle (hObject=0x19c) returned 1 [0266.303] CloseHandle (hObject=0x1e0) returned 1 [0266.303] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\7eWaq5.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\7ewaq5.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\7eWaq5.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\7ewaq5.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.303] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\7eWaq5.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\7ewaq5.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.303] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\7eWaq5.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\7ewaq5.bmp"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522fd760, ftCreationTime.dwHighDateTime=0x1d8b539, ftLastAccessTime.dwLowDateTime=0x66db0d30, ftLastAccessTime.dwHighDateTime=0x1d8c117, ftLastWriteTime.dwLowDateTime=0x66db0d30, ftLastWriteTime.dwHighDateTime=0x1d8c117, nFileSizeHigh=0x0, nFileSizeLow=0x1189e, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="7eWaq5.bmp", cAlternateFileName="")) returned 0x55e650 [0266.303] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522fd760, ftCreationTime.dwHighDateTime=0x1d8b539, ftLastAccessTime.dwLowDateTime=0x66db0d30, ftLastAccessTime.dwHighDateTime=0x1d8c117, ftLastWriteTime.dwLowDateTime=0x66db0d30, ftLastWriteTime.dwHighDateTime=0x1d8c117, nFileSizeHigh=0x0, nFileSizeLow=0x1189e, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="7eWaq5.bmp", cAlternateFileName="")) returned 0 [0266.304] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0266.304] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\7eWaq5.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\7ewaq5.bmp")) returned 1 [0266.308] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\7eWaq5.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\7ewaq5.bmp")) returned 0xffffffff [0266.309] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f2f39d0, ftCreationTime.dwHighDateTime=0x1d8b344, ftLastAccessTime.dwLowDateTime=0x4c9d1160, ftLastAccessTime.dwHighDateTime=0x1d8bdb2, ftLastWriteTime.dwLowDateTime=0x4c9d1160, ftLastWriteTime.dwHighDateTime=0x1d8bdb2, nFileSizeHigh=0x0, nFileSizeLow=0x5b13, dwReserved0=0x0, dwReserved1=0x0, cFileName="9xZXIJPvpfTMPJSEH.gif", cAlternateFileName="9XZXIJ~1.GIF")) returned 1 [0266.309] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.309] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.309] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.309] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0266.309] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\9xZXIJPvpfTMPJSEH.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\9xzxijpvpftmpjseh.gif")) returned 0x20 [0266.309] VirtualAlloc (lpAddress=0x23ac000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23ac000 [0266.310] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\9xZXIJPvpfTMPJSEH.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\9xzxijpvpftmpjseh.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.310] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\9xZXIJPvpfTMPJSEH.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\9xzxijpvpftmpjseh.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.311] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.312] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.313] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.313] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.313] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.313] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.313] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.314] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.314] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.314] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.314] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xb13, lpOverlapped=0x0) returned 1 [0266.314] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xb13, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xb13, lpOverlapped=0x0) returned 1 [0266.314] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.314] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.315] CloseHandle (hObject=0x1e0) returned 1 [0266.315] CloseHandle (hObject=0x19c) returned 1 [0266.315] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\9xZXIJPvpfTMPJSEH.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\9xzxijpvpftmpjseh.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\9xZXIJPvpfTMPJSEH.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\9xzxijpvpftmpjseh.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.315] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\9xZXIJPvpfTMPJSEH.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\9xzxijpvpftmpjseh.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.315] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\9xZXIJPvpfTMPJSEH.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\9xzxijpvpftmpjseh.gif"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f2f39d0, ftCreationTime.dwHighDateTime=0x1d8b344, ftLastAccessTime.dwLowDateTime=0x4c9d1160, ftLastAccessTime.dwHighDateTime=0x1d8bdb2, ftLastWriteTime.dwLowDateTime=0x4c9d1160, ftLastWriteTime.dwHighDateTime=0x1d8bdb2, nFileSizeHigh=0x0, nFileSizeLow=0x5b13, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="9xZXIJPvpfTMPJSEH.gif", cAlternateFileName="9XZXIJ~1.GIF")) returned 0x55e310 [0266.315] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f2f39d0, ftCreationTime.dwHighDateTime=0x1d8b344, ftLastAccessTime.dwLowDateTime=0x4c9d1160, ftLastAccessTime.dwHighDateTime=0x1d8bdb2, ftLastWriteTime.dwLowDateTime=0x4c9d1160, ftLastWriteTime.dwHighDateTime=0x1d8bdb2, nFileSizeHigh=0x0, nFileSizeLow=0x5b13, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="9xZXIJPvpfTMPJSEH.gif", cAlternateFileName="9XZXIJ~1.GIF")) returned 0 [0266.315] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0266.315] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\9xZXIJPvpfTMPJSEH.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\9xzxijpvpftmpjseh.gif")) returned 1 [0266.337] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\9xZXIJPvpfTMPJSEH.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\9xzxijpvpftmpjseh.gif")) returned 0xffffffff [0266.337] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583c58d0, ftCreationTime.dwHighDateTime=0x1d8b274, ftLastAccessTime.dwLowDateTime=0xe4f24850, ftLastAccessTime.dwHighDateTime=0x1d8bed3, ftLastWriteTime.dwLowDateTime=0xe4f24850, ftLastWriteTime.dwHighDateTime=0x1d8bed3, nFileSizeHigh=0x0, nFileSizeLow=0x155c, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="boIZ.jpg", cAlternateFileName="")) returned 1 [0266.337] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.337] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.337] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.337] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.337] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.337] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0266.338] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\boIZ.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\boiz.jpg")) returned 0x20 [0266.338] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\boIZ.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\boiz.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.339] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\boIZ.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\boiz.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.339] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.340] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.341] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x55c, lpOverlapped=0x0) returned 1 [0266.341] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x55c, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x55c, lpOverlapped=0x0) returned 1 [0266.341] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.341] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.342] CloseHandle (hObject=0x19c) returned 1 [0266.342] CloseHandle (hObject=0x1e0) returned 1 [0266.342] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\boIZ.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\boiz.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\boIZ.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\boiz.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.342] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\boIZ.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\boiz.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.342] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\boIZ.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\boiz.jpg"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583c58d0, ftCreationTime.dwHighDateTime=0x1d8b274, ftLastAccessTime.dwLowDateTime=0xe4f24850, ftLastAccessTime.dwHighDateTime=0x1d8bed3, ftLastWriteTime.dwLowDateTime=0xe4f24850, ftLastWriteTime.dwHighDateTime=0x1d8bed3, nFileSizeHigh=0x0, nFileSizeLow=0x155c, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="boIZ.jpg", cAlternateFileName="")) returned 0x55e490 [0266.342] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x583c58d0, ftCreationTime.dwHighDateTime=0x1d8b274, ftLastAccessTime.dwLowDateTime=0xe4f24850, ftLastAccessTime.dwHighDateTime=0x1d8bed3, ftLastWriteTime.dwLowDateTime=0xe4f24850, ftLastWriteTime.dwHighDateTime=0x1d8bed3, nFileSizeHigh=0x0, nFileSizeLow=0x155c, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="boIZ.jpg", cAlternateFileName="")) returned 0 [0266.342] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0266.342] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\boIZ.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\boiz.jpg")) returned 1 [0266.347] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\boIZ.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\boiz.jpg")) returned 0xffffffff [0266.347] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57174c80, ftCreationTime.dwHighDateTime=0x1d8b4b3, ftLastAccessTime.dwLowDateTime=0xa4845670, ftLastAccessTime.dwHighDateTime=0x1d8b643, ftLastWriteTime.dwLowDateTime=0xa4845670, ftLastWriteTime.dwHighDateTime=0x1d8b643, nFileSizeHigh=0x0, nFileSizeLow=0xc4fa, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="dsd4xng9Vd1K.bmp", cAlternateFileName="DSD4XN~1.BMP")) returned 1 [0266.348] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.348] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.348] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.348] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.348] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.348] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0266.348] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\dsd4xng9Vd1K.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\dsd4xng9vd1k.bmp")) returned 0x20 [0266.348] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\dsd4xng9Vd1K.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\dsd4xng9vd1k.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.349] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\dsd4xng9Vd1K.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\dsd4xng9vd1k.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.350] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.351] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.352] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.352] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.352] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.353] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.353] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.353] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.353] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.355] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.356] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.356] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.356] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.356] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.356] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.357] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.357] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.357] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.357] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.357] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.357] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.358] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.358] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.358] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.358] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x4fa, lpOverlapped=0x0) returned 1 [0266.358] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x4fa, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x4fa, lpOverlapped=0x0) returned 1 [0266.358] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.358] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.358] CloseHandle (hObject=0x1e0) returned 1 [0266.358] CloseHandle (hObject=0x19c) returned 1 [0266.359] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\dsd4xng9Vd1K.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\dsd4xng9vd1k.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\dsd4xng9Vd1K.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\dsd4xng9vd1k.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.359] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\dsd4xng9Vd1K.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\dsd4xng9vd1k.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.359] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\dsd4xng9Vd1K.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\dsd4xng9vd1k.bmp"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57174c80, ftCreationTime.dwHighDateTime=0x1d8b4b3, ftLastAccessTime.dwLowDateTime=0xa4845670, ftLastAccessTime.dwHighDateTime=0x1d8b643, ftLastWriteTime.dwLowDateTime=0xa4845670, ftLastWriteTime.dwHighDateTime=0x1d8b643, nFileSizeHigh=0x0, nFileSizeLow=0xc4fa, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="dsd4xng9Vd1K.bmp", cAlternateFileName="DSD4XN~1.BMP")) returned 0x55e5d0 [0266.359] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57174c80, ftCreationTime.dwHighDateTime=0x1d8b4b3, ftLastAccessTime.dwLowDateTime=0xa4845670, ftLastAccessTime.dwHighDateTime=0x1d8b643, ftLastWriteTime.dwLowDateTime=0xa4845670, ftLastWriteTime.dwHighDateTime=0x1d8b643, nFileSizeHigh=0x0, nFileSizeLow=0xc4fa, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="dsd4xng9Vd1K.bmp", cAlternateFileName="DSD4XN~1.BMP")) returned 0 [0266.359] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0266.359] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\dsd4xng9Vd1K.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\dsd4xng9vd1k.bmp")) returned 1 [0266.361] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\dsd4xng9Vd1K.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\dsd4xng9vd1k.bmp")) returned 0xffffffff [0266.361] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf95b7c0, ftCreationTime.dwHighDateTime=0x1d8b269, ftLastAccessTime.dwLowDateTime=0x61370ed0, ftLastAccessTime.dwHighDateTime=0x1d8be7c, ftLastWriteTime.dwLowDateTime=0x61370ed0, ftLastWriteTime.dwHighDateTime=0x1d8be7c, nFileSizeHigh=0x0, nFileSizeLow=0x1325d, dwReserved0=0x0, dwReserved1=0x0, cFileName="gzCcmy5r.gif", cAlternateFileName="")) returned 1 [0266.361] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.361] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.361] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.361] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0266.361] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\gzCcmy5r.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\gzccmy5r.gif")) returned 0x20 [0266.361] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\gzCcmy5r.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\gzccmy5r.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.362] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\gzCcmy5r.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\gzccmy5r.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.362] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.363] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.364] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.364] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.364] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.365] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.365] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.365] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.365] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.365] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.365] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.366] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.366] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.366] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.366] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.366] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.367] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.367] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.367] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.367] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.367] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.367] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.368] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.368] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.368] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.368] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.368] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.368] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.369] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.369] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.372] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.373] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.373] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.373] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.373] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.373] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.373] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.374] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.374] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x25d, lpOverlapped=0x0) returned 1 [0266.374] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x25d, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x25d, lpOverlapped=0x0) returned 1 [0266.374] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.374] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.374] CloseHandle (hObject=0x19c) returned 1 [0266.374] CloseHandle (hObject=0x1e0) returned 1 [0266.374] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\gzCcmy5r.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\gzccmy5r.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\gzCcmy5r.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\gzccmy5r.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.375] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\gzCcmy5r.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\gzccmy5r.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.375] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\gzCcmy5r.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\gzccmy5r.gif"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf95b7c0, ftCreationTime.dwHighDateTime=0x1d8b269, ftLastAccessTime.dwLowDateTime=0x61370ed0, ftLastAccessTime.dwHighDateTime=0x1d8be7c, ftLastWriteTime.dwLowDateTime=0x61370ed0, ftLastWriteTime.dwHighDateTime=0x1d8be7c, nFileSizeHigh=0x0, nFileSizeLow=0x1325d, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="gzCcmy5r.gif", cAlternateFileName="")) returned 0x55e650 [0266.375] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf95b7c0, ftCreationTime.dwHighDateTime=0x1d8b269, ftLastAccessTime.dwLowDateTime=0x61370ed0, ftLastAccessTime.dwHighDateTime=0x1d8be7c, ftLastWriteTime.dwLowDateTime=0x61370ed0, ftLastWriteTime.dwHighDateTime=0x1d8be7c, nFileSizeHigh=0x0, nFileSizeLow=0x1325d, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="gzCcmy5r.gif", cAlternateFileName="")) returned 0 [0266.375] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0266.375] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\gzCcmy5r.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\gzccmy5r.gif")) returned 1 [0266.398] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\gzCcmy5r.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\gzccmy5r.gif")) returned 0xffffffff [0266.398] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a91c4b0, ftCreationTime.dwHighDateTime=0x1d8b75b, ftLastAccessTime.dwLowDateTime=0xff538210, ftLastAccessTime.dwHighDateTime=0x1d8bc2e, ftLastWriteTime.dwLowDateTime=0xff538210, ftLastWriteTime.dwHighDateTime=0x1d8bc2e, nFileSizeHigh=0x0, nFileSizeLow=0xb69a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IHUUW_UC0Nn8T.png", cAlternateFileName="IHUUW_~1.PNG")) returned 1 [0266.398] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.398] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.398] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.398] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.398] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0266.399] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\IHUUW_UC0Nn8T.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ihuuw_uc0nn8t.png")) returned 0x20 [0266.399] VirtualAlloc (lpAddress=0x23b0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23b0000 [0266.399] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\IHUUW_UC0Nn8T.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ihuuw_uc0nn8t.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.400] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\IHUUW_UC0Nn8T.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ihuuw_uc0nn8t.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.401] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.402] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.403] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.403] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.403] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.403] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.403] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.403] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.404] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.404] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.404] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.404] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.404] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.404] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.405] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.405] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.405] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.405] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.405] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.405] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.406] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.406] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.406] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x69a, lpOverlapped=0x0) returned 1 [0266.406] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x69a, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x69a, lpOverlapped=0x0) returned 1 [0266.406] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.406] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.406] CloseHandle (hObject=0x1e0) returned 1 [0266.406] CloseHandle (hObject=0x19c) returned 1 [0266.407] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\IHUUW_UC0Nn8T.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ihuuw_uc0nn8t.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\IHUUW_UC0Nn8T.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ihuuw_uc0nn8t.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.407] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\IHUUW_UC0Nn8T.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ihuuw_uc0nn8t.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.407] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\IHUUW_UC0Nn8T.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ihuuw_uc0nn8t.png"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a91c4b0, ftCreationTime.dwHighDateTime=0x1d8b75b, ftLastAccessTime.dwLowDateTime=0xff538210, ftLastAccessTime.dwHighDateTime=0x1d8bc2e, ftLastWriteTime.dwLowDateTime=0xff538210, ftLastWriteTime.dwHighDateTime=0x1d8bc2e, nFileSizeHigh=0x0, nFileSizeLow=0xb69a, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="IHUUW_UC0Nn8T.png", cAlternateFileName="IHUUW_~1.PNG")) returned 0x55e510 [0266.407] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a91c4b0, ftCreationTime.dwHighDateTime=0x1d8b75b, ftLastAccessTime.dwLowDateTime=0xff538210, ftLastAccessTime.dwHighDateTime=0x1d8bc2e, ftLastWriteTime.dwLowDateTime=0xff538210, ftLastWriteTime.dwHighDateTime=0x1d8bc2e, nFileSizeHigh=0x0, nFileSizeLow=0xb69a, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="IHUUW_UC0Nn8T.png", cAlternateFileName="IHUUW_~1.PNG")) returned 0 [0266.407] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0266.407] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\IHUUW_UC0Nn8T.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ihuuw_uc0nn8t.png")) returned 1 [0266.445] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\IHUUW_UC0Nn8T.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ihuuw_uc0nn8t.png")) returned 0xffffffff [0266.445] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4852170, ftCreationTime.dwHighDateTime=0x1d8bf64, ftLastAccessTime.dwLowDateTime=0x219b2740, ftLastAccessTime.dwHighDateTime=0x1d8bfe2, ftLastWriteTime.dwLowDateTime=0x219b2740, ftLastWriteTime.dwHighDateTime=0x1d8bfe2, nFileSizeHigh=0x0, nFileSizeLow=0x3512, dwReserved0=0x0, dwReserved1=0x0, cFileName="iV1eysp19dqsXKWg2u0.jpg", cAlternateFileName="IV1EYS~1.JPG")) returned 1 [0266.446] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.446] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.446] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.446] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.446] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.446] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0266.446] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\iV1eysp19dqsXKWg2u0.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\iv1eysp19dqsxkwg2u0.jpg")) returned 0x20 [0266.447] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\iV1eysp19dqsXKWg2u0.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\iv1eysp19dqsxkwg2u0.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.450] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\iV1eysp19dqsXKWg2u0.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\iv1eysp19dqsxkwg2u0.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.451] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.452] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.453] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.453] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.453] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.454] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.454] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x512, lpOverlapped=0x0) returned 1 [0266.454] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x512, lpOverlapped=0x0) returned 1 [0266.454] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.454] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.454] CloseHandle (hObject=0x19c) returned 1 [0266.454] CloseHandle (hObject=0x1e0) returned 1 [0266.454] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\iV1eysp19dqsXKWg2u0.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\iv1eysp19dqsxkwg2u0.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\iV1eysp19dqsXKWg2u0.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\iv1eysp19dqsxkwg2u0.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.455] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\iV1eysp19dqsXKWg2u0.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\iv1eysp19dqsxkwg2u0.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.455] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\iV1eysp19dqsXKWg2u0.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\iv1eysp19dqsxkwg2u0.jpg"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4852170, ftCreationTime.dwHighDateTime=0x1d8bf64, ftLastAccessTime.dwLowDateTime=0x219b2740, ftLastAccessTime.dwHighDateTime=0x1d8bfe2, ftLastWriteTime.dwLowDateTime=0x219b2740, ftLastWriteTime.dwHighDateTime=0x1d8bfe2, nFileSizeHigh=0x0, nFileSizeLow=0x3512, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="iV1eysp19dqsXKWg2u0.jpg", cAlternateFileName="IV1EYS~1.JPG")) returned 0x55e5d0 [0266.455] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4852170, ftCreationTime.dwHighDateTime=0x1d8bf64, ftLastAccessTime.dwLowDateTime=0x219b2740, ftLastAccessTime.dwHighDateTime=0x1d8bfe2, ftLastWriteTime.dwLowDateTime=0x219b2740, ftLastWriteTime.dwHighDateTime=0x1d8bfe2, nFileSizeHigh=0x0, nFileSizeLow=0x3512, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="iV1eysp19dqsXKWg2u0.jpg", cAlternateFileName="IV1EYS~1.JPG")) returned 0 [0266.455] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0266.455] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\iV1eysp19dqsXKWg2u0.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\iv1eysp19dqsxkwg2u0.jpg")) returned 1 [0266.462] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\iV1eysp19dqsXKWg2u0.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\iv1eysp19dqsxkwg2u0.jpg")) returned 0xffffffff [0266.462] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf137e70, ftCreationTime.dwHighDateTime=0x1d8b101, ftLastAccessTime.dwLowDateTime=0x18081410, ftLastAccessTime.dwHighDateTime=0x1d8b275, ftLastWriteTime.dwLowDateTime=0x18081410, ftLastWriteTime.dwHighDateTime=0x1d8b275, nFileSizeHigh=0x0, nFileSizeLow=0xfcec, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="nE6sHIObtlA7xNApjaL4.gif", cAlternateFileName="NE6SHI~1.GIF")) returned 1 [0266.462] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.462] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.463] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.463] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.463] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.463] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0266.463] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\nE6sHIObtlA7xNApjaL4.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ne6shiobtla7xnapjal4.gif")) returned 0x20 [0266.463] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\nE6sHIObtlA7xNApjaL4.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ne6shiobtla7xnapjal4.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.464] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\nE6sHIObtlA7xNApjaL4.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ne6shiobtla7xnapjal4.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.465] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.466] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.467] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.467] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.467] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.467] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.468] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.468] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.468] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.468] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.468] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.468] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.469] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.469] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.469] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.469] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.469] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.470] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.470] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.470] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.470] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.470] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.471] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.471] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.471] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.471] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.471] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.471] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.472] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.472] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.472] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xcec, lpOverlapped=0x0) returned 1 [0266.472] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xcec, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xcec, lpOverlapped=0x0) returned 1 [0266.472] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.472] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.472] CloseHandle (hObject=0x1e0) returned 1 [0266.472] CloseHandle (hObject=0x19c) returned 1 [0266.472] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\nE6sHIObtlA7xNApjaL4.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ne6shiobtla7xnapjal4.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\nE6sHIObtlA7xNApjaL4.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ne6shiobtla7xnapjal4.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.473] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\nE6sHIObtlA7xNApjaL4.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ne6shiobtla7xnapjal4.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.473] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\nE6sHIObtlA7xNApjaL4.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ne6shiobtla7xnapjal4.gif"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf137e70, ftCreationTime.dwHighDateTime=0x1d8b101, ftLastAccessTime.dwLowDateTime=0x18081410, ftLastAccessTime.dwHighDateTime=0x1d8b275, ftLastWriteTime.dwLowDateTime=0x18081410, ftLastWriteTime.dwHighDateTime=0x1d8b275, nFileSizeHigh=0x0, nFileSizeLow=0xfcec, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="nE6sHIObtlA7xNApjaL4.gif", cAlternateFileName="NE6SHI~1.GIF")) returned 0x55e210 [0266.473] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf137e70, ftCreationTime.dwHighDateTime=0x1d8b101, ftLastAccessTime.dwLowDateTime=0x18081410, ftLastAccessTime.dwHighDateTime=0x1d8b275, ftLastWriteTime.dwLowDateTime=0x18081410, ftLastWriteTime.dwHighDateTime=0x1d8b275, nFileSizeHigh=0x0, nFileSizeLow=0xfcec, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="nE6sHIObtlA7xNApjaL4.gif", cAlternateFileName="NE6SHI~1.GIF")) returned 0 [0266.473] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0266.473] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\nE6sHIObtlA7xNApjaL4.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ne6shiobtla7xnapjal4.gif")) returned 1 [0266.500] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\nE6sHIObtlA7xNApjaL4.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\ne6shiobtla7xnapjal4.gif")) returned 0xffffffff [0266.500] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19c1f30, ftCreationTime.dwHighDateTime=0x1d8b27b, ftLastAccessTime.dwLowDateTime=0x11564c0, ftLastAccessTime.dwHighDateTime=0x1d8bd8c, ftLastWriteTime.dwLowDateTime=0x11564c0, ftLastWriteTime.dwHighDateTime=0x1d8bd8c, nFileSizeHigh=0x0, nFileSizeLow=0x12352, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="qJQGc1JI O8.gif", cAlternateFileName="QJQGC1~1.GIF")) returned 1 [0266.500] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.500] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.501] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.501] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0266.501] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qJQGc1JI O8.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qjqgc1ji o8.gif")) returned 0x20 [0266.501] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qJQGc1JI O8.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qjqgc1ji o8.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.502] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qJQGc1JI O8.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qjqgc1ji o8.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.502] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.503] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.504] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.505] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.505] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.505] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.505] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.505] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.506] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.506] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.506] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.506] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.506] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.506] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.507] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.507] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.507] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.507] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.507] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.507] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.508] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.508] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.508] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.508] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.508] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.509] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.509] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.509] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.509] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.509] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.510] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.511] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.511] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.511] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.511] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.511] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.512] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x352, lpOverlapped=0x0) returned 1 [0266.512] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x352, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x352, lpOverlapped=0x0) returned 1 [0266.512] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.512] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.512] CloseHandle (hObject=0x19c) returned 1 [0266.512] CloseHandle (hObject=0x1e0) returned 1 [0266.512] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qJQGc1JI O8.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qjqgc1ji o8.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qJQGc1JI O8.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qjqgc1ji o8.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.513] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qJQGc1JI O8.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qjqgc1ji o8.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.513] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qJQGc1JI O8.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qjqgc1ji o8.gif"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19c1f30, ftCreationTime.dwHighDateTime=0x1d8b27b, ftLastAccessTime.dwLowDateTime=0x11564c0, ftLastAccessTime.dwHighDateTime=0x1d8bd8c, ftLastWriteTime.dwLowDateTime=0x11564c0, ftLastWriteTime.dwHighDateTime=0x1d8bd8c, nFileSizeHigh=0x0, nFileSizeLow=0x12352, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="qJQGc1JI O8.gif", cAlternateFileName="QJQGC1~1.GIF")) returned 0x55e310 [0266.513] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19c1f30, ftCreationTime.dwHighDateTime=0x1d8b27b, ftLastAccessTime.dwLowDateTime=0x11564c0, ftLastAccessTime.dwHighDateTime=0x1d8bd8c, ftLastWriteTime.dwLowDateTime=0x11564c0, ftLastWriteTime.dwHighDateTime=0x1d8bd8c, nFileSizeHigh=0x0, nFileSizeLow=0x12352, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="qJQGc1JI O8.gif", cAlternateFileName="QJQGC1~1.GIF")) returned 0 [0266.513] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0266.513] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qJQGc1JI O8.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qjqgc1ji o8.gif")) returned 1 [0266.520] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qJQGc1JI O8.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qjqgc1ji o8.gif")) returned 0xffffffff [0266.520] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x180884a0, ftCreationTime.dwHighDateTime=0x1d8bcba, ftLastAccessTime.dwLowDateTime=0x76b92690, ftLastAccessTime.dwHighDateTime=0x1d8be7b, ftLastWriteTime.dwLowDateTime=0x76b92690, ftLastWriteTime.dwHighDateTime=0x1d8be7b, nFileSizeHigh=0x0, nFileSizeLow=0x6a0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZUaC4VwVU.gif", cAlternateFileName="QZUAC4~1.GIF")) returned 1 [0266.520] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.520] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.520] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.520] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.520] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.521] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0266.521] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qZUaC4VwVU.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qzuac4vwvu.gif")) returned 0x20 [0266.521] VirtualAlloc (lpAddress=0x23b4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23b4000 [0266.521] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qZUaC4VwVU.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qzuac4vwvu.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.522] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qZUaC4VwVU.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qzuac4vwvu.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.523] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.524] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.525] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.525] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.525] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.526] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.526] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.526] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.526] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.527] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.527] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.527] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.528] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xa0b, lpOverlapped=0x0) returned 1 [0266.528] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xa0b, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xa0b, lpOverlapped=0x0) returned 1 [0266.528] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.528] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.528] CloseHandle (hObject=0x1e0) returned 1 [0266.528] CloseHandle (hObject=0x19c) returned 1 [0266.528] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qZUaC4VwVU.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qzuac4vwvu.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qZUaC4VwVU.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qzuac4vwvu.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.529] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qZUaC4VwVU.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qzuac4vwvu.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.529] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qZUaC4VwVU.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qzuac4vwvu.gif"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x180884a0, ftCreationTime.dwHighDateTime=0x1d8bcba, ftLastAccessTime.dwLowDateTime=0x76b92690, ftLastAccessTime.dwHighDateTime=0x1d8be7b, ftLastWriteTime.dwLowDateTime=0x76b92690, ftLastWriteTime.dwHighDateTime=0x1d8be7b, nFileSizeHigh=0x0, nFileSizeLow=0x6a0b, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="qZUaC4VwVU.gif", cAlternateFileName="QZUAC4~1.GIF")) returned 0x55e5d0 [0266.529] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x180884a0, ftCreationTime.dwHighDateTime=0x1d8bcba, ftLastAccessTime.dwLowDateTime=0x76b92690, ftLastAccessTime.dwHighDateTime=0x1d8be7b, ftLastWriteTime.dwLowDateTime=0x76b92690, ftLastWriteTime.dwHighDateTime=0x1d8be7b, nFileSizeHigh=0x0, nFileSizeLow=0x6a0b, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="qZUaC4VwVU.gif", cAlternateFileName="QZUAC4~1.GIF")) returned 0 [0266.529] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0266.529] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qZUaC4VwVU.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qzuac4vwvu.gif")) returned 1 [0266.533] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\qZUaC4VwVU.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\qzuac4vwvu.gif")) returned 0xffffffff [0266.533] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3de9ee0, ftCreationTime.dwHighDateTime=0x1d8b5b9, ftLastAccessTime.dwLowDateTime=0x9d5b3a90, ftLastAccessTime.dwHighDateTime=0x1d8b7cd, ftLastWriteTime.dwLowDateTime=0x9d5b3a90, ftLastWriteTime.dwHighDateTime=0x1d8b7cd, nFileSizeHigh=0x0, nFileSizeLow=0x1252c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SU6aI2.png", cAlternateFileName="")) returned 1 [0266.534] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.534] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.534] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.534] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0266.534] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\SU6aI2.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\su6ai2.png")) returned 0x20 [0266.535] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\SU6aI2.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\su6ai2.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.535] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\SU6aI2.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\su6ai2.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.536] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.537] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.538] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.538] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.538] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.539] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.539] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.539] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.539] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.539] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.539] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.540] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.540] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.540] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.540] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.540] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.540] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.541] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.566] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.567] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.567] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.567] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.567] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.567] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.567] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.568] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.568] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.568] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.568] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.568] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.568] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.569] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.569] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.569] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.569] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.569] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.570] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x52c, lpOverlapped=0x0) returned 1 [0266.570] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x52c, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x52c, lpOverlapped=0x0) returned 1 [0266.570] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.570] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.570] CloseHandle (hObject=0x19c) returned 1 [0266.570] CloseHandle (hObject=0x1e0) returned 1 [0266.570] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\SU6aI2.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\su6ai2.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\SU6aI2.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\su6ai2.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.571] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\SU6aI2.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\su6ai2.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.571] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\SU6aI2.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\su6ai2.png"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3de9ee0, ftCreationTime.dwHighDateTime=0x1d8b5b9, ftLastAccessTime.dwLowDateTime=0x9d5b3a90, ftLastAccessTime.dwHighDateTime=0x1d8b7cd, ftLastWriteTime.dwLowDateTime=0x9d5b3a90, ftLastWriteTime.dwHighDateTime=0x1d8b7cd, nFileSizeHigh=0x0, nFileSizeLow=0x1252c, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="SU6aI2.png", cAlternateFileName="")) returned 0x55e290 [0266.571] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3de9ee0, ftCreationTime.dwHighDateTime=0x1d8b5b9, ftLastAccessTime.dwLowDateTime=0x9d5b3a90, ftLastAccessTime.dwHighDateTime=0x1d8b7cd, ftLastWriteTime.dwLowDateTime=0x9d5b3a90, ftLastWriteTime.dwHighDateTime=0x1d8b7cd, nFileSizeHigh=0x0, nFileSizeLow=0x1252c, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="SU6aI2.png", cAlternateFileName="")) returned 0 [0266.571] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0266.571] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\SU6aI2.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\su6ai2.png")) returned 1 [0266.608] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\SU6aI2.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\su6ai2.png")) returned 0xffffffff [0266.609] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc143d5b0, ftCreationTime.dwHighDateTime=0x1d8baa8, ftLastAccessTime.dwLowDateTime=0x320f2900, ftLastAccessTime.dwHighDateTime=0x1d8befc, ftLastWriteTime.dwLowDateTime=0x320f2900, ftLastWriteTime.dwHighDateTime=0x1d8befc, nFileSizeHigh=0x0, nFileSizeLow=0x178e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="tJzY.gif", cAlternateFileName="")) returned 1 [0266.609] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.609] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.609] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.609] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0266.609] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\tJzY.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\tjzy.gif")) returned 0x20 [0266.610] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\tJzY.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\tjzy.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.610] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\tJzY.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\tjzy.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.611] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.612] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.613] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.613] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.613] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.613] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.614] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.614] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.614] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.614] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.614] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.614] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.615] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.615] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.615] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.615] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.615] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.615] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.616] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.616] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.616] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.616] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.616] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.616] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.617] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.617] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.617] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.617] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.617] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.617] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.618] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.618] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.618] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.618] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.618] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.618] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.619] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.619] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.619] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.619] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.619] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.619] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.620] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.620] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.620] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.620] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.620] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x8e3, lpOverlapped=0x0) returned 1 [0266.620] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x8e3, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x8e3, lpOverlapped=0x0) returned 1 [0266.620] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.621] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.621] CloseHandle (hObject=0x1e0) returned 1 [0266.621] CloseHandle (hObject=0x19c) returned 1 [0266.621] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\tJzY.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\tjzy.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\tJzY.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\tjzy.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.621] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\tJzY.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\tjzy.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.621] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\tJzY.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\tjzy.gif"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc143d5b0, ftCreationTime.dwHighDateTime=0x1d8baa8, ftLastAccessTime.dwLowDateTime=0x320f2900, ftLastAccessTime.dwHighDateTime=0x1d8befc, ftLastWriteTime.dwLowDateTime=0x320f2900, ftLastWriteTime.dwHighDateTime=0x1d8befc, nFileSizeHigh=0x0, nFileSizeLow=0x178e3, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="tJzY.gif", cAlternateFileName="")) returned 0x55e390 [0266.621] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc143d5b0, ftCreationTime.dwHighDateTime=0x1d8baa8, ftLastAccessTime.dwLowDateTime=0x320f2900, ftLastAccessTime.dwHighDateTime=0x1d8befc, ftLastWriteTime.dwLowDateTime=0x320f2900, ftLastWriteTime.dwHighDateTime=0x1d8befc, nFileSizeHigh=0x0, nFileSizeLow=0x178e3, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="tJzY.gif", cAlternateFileName="")) returned 0 [0266.622] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0266.622] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\tJzY.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\tjzy.gif")) returned 1 [0266.684] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\tJzY.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\tjzy.gif")) returned 0xffffffff [0266.684] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x354392a0, ftCreationTime.dwHighDateTime=0x1d8b3d0, ftLastAccessTime.dwLowDateTime=0xa6d97c0, ftLastAccessTime.dwHighDateTime=0x1d8b7f3, ftLastWriteTime.dwLowDateTime=0xa6d97c0, ftLastWriteTime.dwHighDateTime=0x1d8b7f3, nFileSizeHigh=0x0, nFileSizeLow=0x13a7e, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="u1C0tTQR_1SPifEt0TEn.bmp", cAlternateFileName="U1C0TT~1.BMP")) returned 1 [0266.684] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.684] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.685] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.685] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.685] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.685] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0266.685] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\u1C0tTQR_1SPifEt0TEn.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\u1c0ttqr_1spifet0ten.bmp")) returned 0x20 [0266.685] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\u1C0tTQR_1SPifEt0TEn.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\u1c0ttqr_1spifet0ten.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.686] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\u1C0tTQR_1SPifEt0TEn.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\u1c0ttqr_1spifet0ten.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.686] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.687] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.688] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.688] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.688] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.689] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.689] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.689] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.689] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.689] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.690] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.690] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.690] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.690] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.690] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.690] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.691] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.691] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.691] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.691] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.691] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.691] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.692] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.692] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.692] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.692] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.692] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.692] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.693] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.693] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.693] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.693] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.693] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.693] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.694] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.694] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.694] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.694] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.694] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xa7e, lpOverlapped=0x0) returned 1 [0266.694] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xa7e, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xa7e, lpOverlapped=0x0) returned 1 [0266.694] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.695] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.695] CloseHandle (hObject=0x19c) returned 1 [0266.695] CloseHandle (hObject=0x1e0) returned 1 [0266.695] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\u1C0tTQR_1SPifEt0TEn.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\u1c0ttqr_1spifet0ten.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\u1C0tTQR_1SPifEt0TEn.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\u1c0ttqr_1spifet0ten.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.695] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\u1C0tTQR_1SPifEt0TEn.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\u1c0ttqr_1spifet0ten.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.695] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\u1C0tTQR_1SPifEt0TEn.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\u1c0ttqr_1spifet0ten.bmp"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x354392a0, ftCreationTime.dwHighDateTime=0x1d8b3d0, ftLastAccessTime.dwLowDateTime=0xa6d97c0, ftLastAccessTime.dwHighDateTime=0x1d8b7f3, ftLastWriteTime.dwLowDateTime=0xa6d97c0, ftLastWriteTime.dwHighDateTime=0x1d8b7f3, nFileSizeHigh=0x0, nFileSizeLow=0x13a7e, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="u1C0tTQR_1SPifEt0TEn.bmp", cAlternateFileName="U1C0TT~1.BMP")) returned 0x55e750 [0266.695] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x354392a0, ftCreationTime.dwHighDateTime=0x1d8b3d0, ftLastAccessTime.dwLowDateTime=0xa6d97c0, ftLastAccessTime.dwHighDateTime=0x1d8b7f3, ftLastWriteTime.dwLowDateTime=0xa6d97c0, ftLastWriteTime.dwHighDateTime=0x1d8b7f3, nFileSizeHigh=0x0, nFileSizeLow=0x13a7e, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="u1C0tTQR_1SPifEt0TEn.bmp", cAlternateFileName="U1C0TT~1.BMP")) returned 0 [0266.696] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0266.696] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\u1C0tTQR_1SPifEt0TEn.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\u1c0ttqr_1spifet0ten.bmp")) returned 1 [0266.705] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\u1C0tTQR_1SPifEt0TEn.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\u1c0ttqr_1spifet0ten.bmp")) returned 0xffffffff [0266.705] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x943e71f0, ftCreationTime.dwHighDateTime=0x1d8b239, ftLastAccessTime.dwLowDateTime=0x93795390, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x93795390, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0xa322, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="uz_9Msior_qUWWI.png", cAlternateFileName="UZ_9MS~1.PNG")) returned 1 [0266.705] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.705] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.706] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.706] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0266.706] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\uz_9Msior_qUWWI.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\uz_9msior_quwwi.png")) returned 0x20 [0266.706] VirtualAlloc (lpAddress=0x23b8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23b8000 [0266.706] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\uz_9Msior_qUWWI.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\uz_9msior_quwwi.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.707] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\uz_9Msior_qUWWI.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\uz_9msior_quwwi.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.707] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.708] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.709] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.709] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.710] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.710] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.710] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.710] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.710] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.710] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.711] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.711] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.711] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.711] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.711] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.711] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.712] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.712] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.712] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.712] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.712] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x322, lpOverlapped=0x0) returned 1 [0266.712] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x322, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x322, lpOverlapped=0x0) returned 1 [0266.712] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.713] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.715] CloseHandle (hObject=0x1e0) returned 1 [0266.715] CloseHandle (hObject=0x19c) returned 1 [0266.715] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\uz_9Msior_qUWWI.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\uz_9msior_quwwi.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\uz_9Msior_qUWWI.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\uz_9msior_quwwi.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.715] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\uz_9Msior_qUWWI.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\uz_9msior_quwwi.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.715] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\uz_9Msior_qUWWI.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\uz_9msior_quwwi.png"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x943e71f0, ftCreationTime.dwHighDateTime=0x1d8b239, ftLastAccessTime.dwLowDateTime=0x93795390, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x93795390, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0xa322, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="uz_9Msior_qUWWI.png", cAlternateFileName="UZ_9MS~1.PNG")) returned 0x55e290 [0266.715] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x943e71f0, ftCreationTime.dwHighDateTime=0x1d8b239, ftLastAccessTime.dwLowDateTime=0x93795390, ftLastAccessTime.dwHighDateTime=0x1d8be76, ftLastWriteTime.dwLowDateTime=0x93795390, ftLastWriteTime.dwHighDateTime=0x1d8be76, nFileSizeHigh=0x0, nFileSizeLow=0xa322, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="uz_9Msior_qUWWI.png", cAlternateFileName="UZ_9MS~1.PNG")) returned 0 [0266.716] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0266.716] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\uz_9Msior_qUWWI.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\uz_9msior_quwwi.png")) returned 1 [0266.734] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\uz_9Msior_qUWWI.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\uz_9msior_quwwi.png")) returned 0xffffffff [0266.734] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bbf49c0, ftCreationTime.dwHighDateTime=0x1d8b7e6, ftLastAccessTime.dwLowDateTime=0xda516390, ftLastAccessTime.dwHighDateTime=0x1d8bed8, ftLastWriteTime.dwLowDateTime=0xda516390, ftLastWriteTime.dwHighDateTime=0x1d8bed8, nFileSizeHigh=0x0, nFileSizeLow=0x7c32, dwReserved0=0x0, dwReserved1=0x0, cFileName="wrrB3.gif", cAlternateFileName="")) returned 1 [0266.735] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.735] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.735] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.735] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0266.735] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\wrrB3.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\wrrb3.gif")) returned 0x20 [0266.735] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\wrrB3.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\wrrb3.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.736] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\wrrB3.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\wrrb3.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.737] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.738] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.742] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.742] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.742] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.742] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.743] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.743] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.743] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.743] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.743] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.743] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.743] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.744] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.744] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xc32, lpOverlapped=0x0) returned 1 [0266.744] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xc32, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xc32, lpOverlapped=0x0) returned 1 [0266.744] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.744] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.744] CloseHandle (hObject=0x19c) returned 1 [0266.772] CloseHandle (hObject=0x1e0) returned 1 [0266.772] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\wrrB3.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\wrrb3.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\wrrB3.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\wrrb3.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.772] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\wrrB3.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\wrrb3.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.773] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\wrrB3.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\wrrb3.gif"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bbf49c0, ftCreationTime.dwHighDateTime=0x1d8b7e6, ftLastAccessTime.dwLowDateTime=0xda516390, ftLastAccessTime.dwHighDateTime=0x1d8bed8, ftLastWriteTime.dwLowDateTime=0xda516390, ftLastWriteTime.dwHighDateTime=0x1d8bed8, nFileSizeHigh=0x0, nFileSizeLow=0x7c32, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="wrrB3.gif", cAlternateFileName="")) returned 0x55e490 [0266.773] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bbf49c0, ftCreationTime.dwHighDateTime=0x1d8b7e6, ftLastAccessTime.dwLowDateTime=0xda516390, ftLastAccessTime.dwHighDateTime=0x1d8bed8, ftLastWriteTime.dwLowDateTime=0xda516390, ftLastWriteTime.dwHighDateTime=0x1d8bed8, nFileSizeHigh=0x0, nFileSizeLow=0x7c32, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="wrrB3.gif", cAlternateFileName="")) returned 0 [0266.773] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0266.773] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\wrrB3.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\wrrb3.gif")) returned 1 [0266.777] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\wrrB3.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\wrrb3.gif")) returned 0xffffffff [0266.777] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c708330, ftCreationTime.dwHighDateTime=0x1d8b65e, ftLastAccessTime.dwLowDateTime=0xee9b67b0, ftLastAccessTime.dwHighDateTime=0x1d8bf5f, ftLastWriteTime.dwLowDateTime=0xee9b67b0, ftLastWriteTime.dwHighDateTime=0x1d8bf5f, nFileSizeHigh=0x0, nFileSizeLow=0x111ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="xBS0G9T4s0KTw2EN.bmp", cAlternateFileName="XBS0G9~1.BMP")) returned 1 [0266.777] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.777] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.778] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.778] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.778] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.778] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0266.778] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xBS0G9T4s0KTw2EN.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xbs0g9t4s0ktw2en.bmp")) returned 0x20 [0266.778] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xBS0G9T4s0KTw2EN.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xbs0g9t4s0ktw2en.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.779] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xBS0G9T4s0KTw2EN.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xbs0g9t4s0ktw2en.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.779] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.780] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.781] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.781] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.782] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.782] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.782] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.782] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.782] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.783] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.783] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.783] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.783] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.783] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.783] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.784] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.784] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.784] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.789] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.789] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.789] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.790] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.790] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.790] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.790] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.790] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.790] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.791] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.792] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.792] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.792] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.792] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.792] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.792] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.793] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1ef, lpOverlapped=0x0) returned 1 [0266.793] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1ef, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1ef, lpOverlapped=0x0) returned 1 [0266.793] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.793] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.793] CloseHandle (hObject=0x1e0) returned 1 [0266.793] CloseHandle (hObject=0x19c) returned 1 [0266.793] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xBS0G9T4s0KTw2EN.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xbs0g9t4s0ktw2en.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xBS0G9T4s0KTw2EN.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xbs0g9t4s0ktw2en.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.794] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xBS0G9T4s0KTw2EN.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xbs0g9t4s0ktw2en.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.794] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xBS0G9T4s0KTw2EN.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xbs0g9t4s0ktw2en.bmp"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c708330, ftCreationTime.dwHighDateTime=0x1d8b65e, ftLastAccessTime.dwLowDateTime=0xee9b67b0, ftLastAccessTime.dwHighDateTime=0x1d8bf5f, ftLastWriteTime.dwLowDateTime=0xee9b67b0, ftLastWriteTime.dwHighDateTime=0x1d8bf5f, nFileSizeHigh=0x0, nFileSizeLow=0x111ef, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="xBS0G9T4s0KTw2EN.bmp", cAlternateFileName="XBS0G9~1.BMP")) returned 0x55e490 [0266.794] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c708330, ftCreationTime.dwHighDateTime=0x1d8b65e, ftLastAccessTime.dwLowDateTime=0xee9b67b0, ftLastAccessTime.dwHighDateTime=0x1d8bf5f, ftLastWriteTime.dwLowDateTime=0xee9b67b0, ftLastWriteTime.dwHighDateTime=0x1d8bf5f, nFileSizeHigh=0x0, nFileSizeLow=0x111ef, dwReserved0=0x55a2d8, dwReserved1=0x556868, cFileName="xBS0G9T4s0KTw2EN.bmp", cAlternateFileName="XBS0G9~1.BMP")) returned 0 [0266.794] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0266.794] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xBS0G9T4s0KTw2EN.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xbs0g9t4s0ktw2en.bmp")) returned 1 [0266.820] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xBS0G9T4s0KTw2EN.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xbs0g9t4s0ktw2en.bmp")) returned 0xffffffff [0266.820] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2068dd10, ftCreationTime.dwHighDateTime=0x1d8b603, ftLastAccessTime.dwLowDateTime=0x9739e9d0, ftLastAccessTime.dwHighDateTime=0x1d8b67a, ftLastWriteTime.dwLowDateTime=0x9739e9d0, ftLastWriteTime.dwHighDateTime=0x1d8b67a, nFileSizeHigh=0x0, nFileSizeLow=0x34fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="xRz0 CrxkDW.bmp", cAlternateFileName="XRZ0CR~1.BMP")) returned 1 [0266.821] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.821] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.821] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.821] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0266.821] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xRz0 CrxkDW.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xrz0 crxkdw.bmp")) returned 0x20 [0266.821] VirtualAlloc (lpAddress=0x23bc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23bc000 [0266.822] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xRz0 CrxkDW.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xrz0 crxkdw.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0266.897] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xRz0 CrxkDW.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xrz0 crxkdw.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.938] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.939] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.958] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.959] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.959] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.959] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0266.959] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x4fa, lpOverlapped=0x0) returned 1 [0266.959] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x4fa, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x4fa, lpOverlapped=0x0) returned 1 [0266.959] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.959] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0266.959] CloseHandle (hObject=0x19c) returned 1 [0266.960] CloseHandle (hObject=0x1e0) returned 1 [0266.960] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xRz0 CrxkDW.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xrz0 crxkdw.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xRz0 CrxkDW.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xrz0 crxkdw.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0266.960] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xRz0 CrxkDW.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xrz0 crxkdw.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0266.980] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xRz0 CrxkDW.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xrz0 crxkdw.bmp"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2068dd10, ftCreationTime.dwHighDateTime=0x1d8b603, ftLastAccessTime.dwLowDateTime=0x9739e9d0, ftLastAccessTime.dwHighDateTime=0x1d8b67a, ftLastWriteTime.dwLowDateTime=0x9739e9d0, ftLastWriteTime.dwHighDateTime=0x1d8b67a, nFileSizeHigh=0x0, nFileSizeLow=0x34fa, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="xRz0 CrxkDW.bmp", cAlternateFileName="XRZ0CR~1.BMP")) returned 0x55e5d0 [0266.980] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2068dd10, ftCreationTime.dwHighDateTime=0x1d8b603, ftLastAccessTime.dwLowDateTime=0x9739e9d0, ftLastAccessTime.dwHighDateTime=0x1d8b67a, ftLastWriteTime.dwLowDateTime=0x9739e9d0, ftLastWriteTime.dwHighDateTime=0x1d8b67a, nFileSizeHigh=0x0, nFileSizeLow=0x34fa, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="xRz0 CrxkDW.bmp", cAlternateFileName="XRZ0CR~1.BMP")) returned 0 [0266.980] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0266.980] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xRz0 CrxkDW.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xrz0 crxkdw.bmp")) returned 1 [0266.983] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\xRz0 CrxkDW.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\xrz0 crxkdw.bmp")) returned 0xffffffff [0266.983] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2068dd10, ftCreationTime.dwHighDateTime=0x1d8b603, ftLastAccessTime.dwLowDateTime=0x9739e9d0, ftLastAccessTime.dwHighDateTime=0x1d8b67a, ftLastWriteTime.dwLowDateTime=0x9739e9d0, ftLastWriteTime.dwHighDateTime=0x1d8b67a, nFileSizeHigh=0x0, nFileSizeLow=0x34fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="xRz0 CrxkDW.bmp", cAlternateFileName="XRZ0CR~1.BMP")) returned 0 [0266.983] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0266.983] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa5d320, ftCreationTime.dwHighDateTime=0x1d8b11f, ftLastAccessTime.dwLowDateTime=0xf9f02080, ftLastAccessTime.dwHighDateTime=0x1d8be04, ftLastWriteTime.dwLowDateTime=0xf9f02080, ftLastWriteTime.dwHighDateTime=0x1d8be04, nFileSizeHigh=0x0, nFileSizeLow=0xcbb, dwReserved0=0x57446b78, dwReserved1=0x706d622e, cFileName="BRFxsko.png", cAlternateFileName="")) returned 1 [0266.983] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0266.983] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0266.984] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0266.984] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0266.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0266.984] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\BRFxsko.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\brfxsko.png")) returned 0x20 [0266.984] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\BRFxsko.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\brfxsko.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0266.985] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\BRFxsko.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\brfxsko.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0266.985] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xcbb, lpOverlapped=0x0) returned 1 [0267.037] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xcbb, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xcbb, lpOverlapped=0x0) returned 1 [0267.038] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.038] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.038] CloseHandle (hObject=0x218) returned 1 [0267.038] CloseHandle (hObject=0x1e0) returned 1 [0267.038] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\BRFxsko.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\brfxsko.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\BRFxsko.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\brfxsko.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.039] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\BRFxsko.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\brfxsko.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.039] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\BRFxsko.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\brfxsko.png"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa5d320, ftCreationTime.dwHighDateTime=0x1d8b11f, ftLastAccessTime.dwLowDateTime=0xf9f02080, ftLastAccessTime.dwHighDateTime=0x1d8be04, ftLastWriteTime.dwLowDateTime=0xf9f02080, ftLastWriteTime.dwHighDateTime=0x1d8be04, nFileSizeHigh=0x0, nFileSizeLow=0xcbb, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="BRFxsko.png", cAlternateFileName="")) returned 0x55e890 [0267.039] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa5d320, ftCreationTime.dwHighDateTime=0x1d8b11f, ftLastAccessTime.dwLowDateTime=0xf9f02080, ftLastAccessTime.dwHighDateTime=0x1d8be04, ftLastWriteTime.dwLowDateTime=0xf9f02080, ftLastWriteTime.dwHighDateTime=0x1d8be04, nFileSizeHigh=0x0, nFileSizeLow=0xcbb, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="BRFxsko.png", cAlternateFileName="")) returned 0 [0267.039] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0267.039] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\BRFxsko.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\brfxsko.png")) returned 1 [0267.041] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\BRFxsko.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\brfxsko.png")) returned 0xffffffff [0267.041] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0267.042] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0267.042] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0267.042] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0267.042] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.042] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.042] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.042] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.043] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0267.043] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini")) returned 0x6 [0267.043] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0267.043] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.044] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xbe, lpOverlapped=0x0) returned 1 [0267.045] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xbe, lpOverlapped=0x0) returned 1 [0267.046] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.046] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.046] CloseHandle (hObject=0x218) returned 1 [0267.046] CloseHandle (hObject=0x19c) returned 1 [0267.046] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.047] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.047] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e610 [0267.047] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0267.047] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0267.047] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini")) returned 1 [0267.048] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\desktop.ini")) returned 0xffffffff [0267.048] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0267.048] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0267.048] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x696e692e, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0267.049] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.049] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.049] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.049] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.049] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.049] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0267.049] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\desktop.ini")) returned 0x26 [0267.049] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.049] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.050] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1f8, lpOverlapped=0x0) returned 1 [0267.051] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1f8, lpOverlapped=0x0) returned 1 [0267.052] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.052] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.052] CloseHandle (hObject=0x1e0) returned 1 [0267.052] CloseHandle (hObject=0x19c) returned 1 [0267.052] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.052] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.052] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e490 [0267.052] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0267.053] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0267.053] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\desktop.ini")) returned 1 [0267.054] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\desktop.ini")) returned 0xffffffff [0267.054] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b28a550, ftCreationTime.dwHighDateTime=0x1d8c08f, ftLastAccessTime.dwLowDateTime=0x15836ad0, ftLastAccessTime.dwHighDateTime=0x1d8c0b4, ftLastWriteTime.dwLowDateTime=0x15836ad0, ftLastWriteTime.dwHighDateTime=0x1d8c0b4, nFileSizeHigh=0x0, nFileSizeLow=0x18118, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="gJbDSP9uu5zxm.jpg", cAlternateFileName="GJBDSP~1.JPG")) returned 1 [0267.054] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.054] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.054] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.054] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.054] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.054] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0267.054] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\gJbDSP9uu5zxm.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gjbdsp9uu5zxm.jpg")) returned 0x20 [0267.054] VirtualAlloc (lpAddress=0x23c0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23c0000 [0267.055] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\gJbDSP9uu5zxm.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gjbdsp9uu5zxm.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.055] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\gJbDSP9uu5zxm.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gjbdsp9uu5zxm.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.056] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.081] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.082] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.082] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.082] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.082] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.083] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.083] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.083] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.083] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.083] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.083] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.084] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.084] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.084] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.084] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.084] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.084] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.085] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.085] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.085] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.085] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.085] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.085] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.086] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.086] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.086] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.086] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.086] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.086] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.087] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.087] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.087] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.087] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.087] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.087] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.096] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.096] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.096] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.097] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.097] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.097] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.097] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.097] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.098] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.098] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.098] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.098] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.098] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x118, lpOverlapped=0x0) returned 1 [0267.099] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x118, lpOverlapped=0x0) returned 1 [0267.099] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.099] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.099] CloseHandle (hObject=0x19c) returned 1 [0267.099] CloseHandle (hObject=0x1e0) returned 1 [0267.099] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\gJbDSP9uu5zxm.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gjbdsp9uu5zxm.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\gJbDSP9uu5zxm.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gjbdsp9uu5zxm.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.100] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\gJbDSP9uu5zxm.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gjbdsp9uu5zxm.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.100] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\gJbDSP9uu5zxm.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gjbdsp9uu5zxm.jpg"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b28a550, ftCreationTime.dwHighDateTime=0x1d8c08f, ftLastAccessTime.dwLowDateTime=0x15836ad0, ftLastAccessTime.dwHighDateTime=0x1d8c0b4, ftLastWriteTime.dwLowDateTime=0x15836ad0, ftLastWriteTime.dwHighDateTime=0x1d8c0b4, nFileSizeHigh=0x0, nFileSizeLow=0x18118, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="gJbDSP9uu5zxm.jpg", cAlternateFileName="GJBDSP~1.JPG")) returned 0x55e510 [0267.100] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b28a550, ftCreationTime.dwHighDateTime=0x1d8c08f, ftLastAccessTime.dwLowDateTime=0x15836ad0, ftLastAccessTime.dwHighDateTime=0x1d8c0b4, ftLastWriteTime.dwLowDateTime=0x15836ad0, ftLastWriteTime.dwHighDateTime=0x1d8c0b4, nFileSizeHigh=0x0, nFileSizeLow=0x18118, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="gJbDSP9uu5zxm.jpg", cAlternateFileName="GJBDSP~1.JPG")) returned 0 [0267.100] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0267.100] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\gJbDSP9uu5zxm.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gjbdsp9uu5zxm.jpg")) returned 1 [0267.108] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\gJbDSP9uu5zxm.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gjbdsp9uu5zxm.jpg")) returned 0xffffffff [0267.108] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c5f1870, ftCreationTime.dwHighDateTime=0x1d8b90d, ftLastAccessTime.dwLowDateTime=0xeaa7b500, ftLastAccessTime.dwHighDateTime=0x1d8bebf, ftLastWriteTime.dwLowDateTime=0xeaa7b500, ftLastWriteTime.dwHighDateTime=0x1d8bebf, nFileSizeHigh=0x0, nFileSizeLow=0x13d88, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="GT MqBo1IsSDe6tEL9w.gif", cAlternateFileName="GTMQBO~1.GIF")) returned 1 [0267.108] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.108] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.108] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.108] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.109] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0267.109] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\GT MqBo1IsSDe6tEL9w.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gt mqbo1issde6tel9w.gif")) returned 0x20 [0267.109] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\GT MqBo1IsSDe6tEL9w.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gt mqbo1issde6tel9w.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.109] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\GT MqBo1IsSDe6tEL9w.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gt mqbo1issde6tel9w.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.110] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.111] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.112] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.112] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.112] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.112] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.113] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.113] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.113] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.113] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.113] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.113] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.114] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.114] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.114] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.114] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.114] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.114] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.115] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.115] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.115] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.115] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.115] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.116] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.116] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.116] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.116] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.116] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.117] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.117] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.117] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.117] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.117] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.120] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.120] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.121] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.121] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.121] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.121] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xd88, lpOverlapped=0x0) returned 1 [0267.121] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xd88, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xd88, lpOverlapped=0x0) returned 1 [0267.121] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.121] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.122] CloseHandle (hObject=0x1e0) returned 1 [0267.122] CloseHandle (hObject=0x19c) returned 1 [0267.122] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\GT MqBo1IsSDe6tEL9w.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gt mqbo1issde6tel9w.gif"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\GT MqBo1IsSDe6tEL9w.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gt mqbo1issde6tel9w.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.122] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\GT MqBo1IsSDe6tEL9w.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gt mqbo1issde6tel9w.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.122] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\GT MqBo1IsSDe6tEL9w.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gt mqbo1issde6tel9w.gif"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c5f1870, ftCreationTime.dwHighDateTime=0x1d8b90d, ftLastAccessTime.dwLowDateTime=0xeaa7b500, ftLastAccessTime.dwHighDateTime=0x1d8bebf, ftLastWriteTime.dwLowDateTime=0xeaa7b500, ftLastWriteTime.dwHighDateTime=0x1d8bebf, nFileSizeHigh=0x0, nFileSizeLow=0x13d88, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="GT MqBo1IsSDe6tEL9w.gif", cAlternateFileName="GTMQBO~1.GIF")) returned 0x55e390 [0267.123] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c5f1870, ftCreationTime.dwHighDateTime=0x1d8b90d, ftLastAccessTime.dwLowDateTime=0xeaa7b500, ftLastAccessTime.dwHighDateTime=0x1d8bebf, ftLastWriteTime.dwLowDateTime=0xeaa7b500, ftLastWriteTime.dwHighDateTime=0x1d8bebf, nFileSizeHigh=0x0, nFileSizeLow=0x13d88, dwReserved0=0x2000002, dwReserved1=0x2, cFileName="GT MqBo1IsSDe6tEL9w.gif", cAlternateFileName="GTMQBO~1.GIF")) returned 0 [0267.123] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0267.123] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\GT MqBo1IsSDe6tEL9w.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gt mqbo1issde6tel9w.gif")) returned 1 [0267.125] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\GT MqBo1IsSDe6tEL9w.gif" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\gt mqbo1issde6tel9w.gif")) returned 0xffffffff [0267.125] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f05870, ftCreationTime.dwHighDateTime=0x1d8b7c0, ftLastAccessTime.dwLowDateTime=0xe305ccb0, ftLastAccessTime.dwHighDateTime=0x1d8bc85, ftLastWriteTime.dwLowDateTime=0xe305ccb0, ftLastWriteTime.dwHighDateTime=0x1d8bc85, nFileSizeHigh=0x0, nFileSizeLow=0xd15f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IK2lOrscFawass.bmp", cAlternateFileName="IK2LOR~1.BMP")) returned 1 [0267.126] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.126] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.126] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.126] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0267.126] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IK2lOrscFawass.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ik2lorscfawass.bmp")) returned 0x20 [0267.126] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IK2lOrscFawass.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ik2lorscfawass.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.127] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IK2lOrscFawass.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ik2lorscfawass.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.127] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.128] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.129] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.129] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.130] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.130] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.130] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.130] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.131] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.133] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.133] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.133] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.133] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.133] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.133] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.134] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.134] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.134] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.134] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.134] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.135] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.135] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.135] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.136] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.136] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.136] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.136] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x15f, lpOverlapped=0x0) returned 1 [0267.136] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x15f, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x15f, lpOverlapped=0x0) returned 1 [0267.136] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.136] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.136] CloseHandle (hObject=0x19c) returned 1 [0267.137] CloseHandle (hObject=0x1e0) returned 1 [0267.137] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IK2lOrscFawass.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ik2lorscfawass.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IK2lOrscFawass.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ik2lorscfawass.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.137] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IK2lOrscFawass.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ik2lorscfawass.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.137] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IK2lOrscFawass.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ik2lorscfawass.bmp"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f05870, ftCreationTime.dwHighDateTime=0x1d8b7c0, ftLastAccessTime.dwLowDateTime=0xe305ccb0, ftLastAccessTime.dwHighDateTime=0x1d8bc85, ftLastWriteTime.dwLowDateTime=0xe305ccb0, ftLastWriteTime.dwHighDateTime=0x1d8bc85, nFileSizeHigh=0x0, nFileSizeLow=0xd15f, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="IK2lOrscFawass.bmp", cAlternateFileName="IK2LOR~1.BMP")) returned 0x55e390 [0267.137] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f05870, ftCreationTime.dwHighDateTime=0x1d8b7c0, ftLastAccessTime.dwLowDateTime=0xe305ccb0, ftLastAccessTime.dwHighDateTime=0x1d8bc85, ftLastWriteTime.dwLowDateTime=0xe305ccb0, ftLastWriteTime.dwHighDateTime=0x1d8bc85, nFileSizeHigh=0x0, nFileSizeLow=0xd15f, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="IK2lOrscFawass.bmp", cAlternateFileName="IK2LOR~1.BMP")) returned 0 [0267.137] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0267.138] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IK2lOrscFawass.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ik2lorscfawass.bmp")) returned 1 [0267.145] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IK2lOrscFawass.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\ik2lorscfawass.bmp")) returned 0xffffffff [0267.145] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232bb040, ftCreationTime.dwHighDateTime=0x1d8b487, ftLastAccessTime.dwLowDateTime=0x41bbbc20, ftLastAccessTime.dwHighDateTime=0x1d8bfc3, ftLastWriteTime.dwLowDateTime=0x41bbbc20, ftLastWriteTime.dwHighDateTime=0x1d8bfc3, nFileSizeHigh=0x0, nFileSizeLow=0x13d97, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="PcrR2Lm.png", cAlternateFileName="")) returned 1 [0267.145] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.145] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.145] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.145] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0267.146] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\PcrR2Lm.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pcrr2lm.png")) returned 0x20 [0267.146] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\PcrR2Lm.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pcrr2lm.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.146] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\PcrR2Lm.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pcrr2lm.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.147] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.148] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.149] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.149] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.149] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.149] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.149] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.155] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.155] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.155] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.156] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.156] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.156] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.156] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.156] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.157] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.157] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.157] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.157] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.157] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.157] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.158] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.158] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.158] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.158] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.158] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.158] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.159] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.159] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.159] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.159] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.159] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.159] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.160] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.160] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.160] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.160] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.160] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.160] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xd97, lpOverlapped=0x0) returned 1 [0267.161] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xd97, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xd97, lpOverlapped=0x0) returned 1 [0267.161] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.161] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.161] CloseHandle (hObject=0x1e0) returned 1 [0267.161] CloseHandle (hObject=0x19c) returned 1 [0267.161] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\PcrR2Lm.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pcrr2lm.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\PcrR2Lm.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pcrr2lm.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.167] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\PcrR2Lm.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pcrr2lm.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.167] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\PcrR2Lm.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pcrr2lm.png"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232bb040, ftCreationTime.dwHighDateTime=0x1d8b487, ftLastAccessTime.dwLowDateTime=0x41bbbc20, ftLastAccessTime.dwHighDateTime=0x1d8bfc3, ftLastWriteTime.dwLowDateTime=0x41bbbc20, ftLastWriteTime.dwHighDateTime=0x1d8bfc3, nFileSizeHigh=0x0, nFileSizeLow=0x13d97, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="PcrR2Lm.png", cAlternateFileName="")) returned 0x55e510 [0267.168] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232bb040, ftCreationTime.dwHighDateTime=0x1d8b487, ftLastAccessTime.dwLowDateTime=0x41bbbc20, ftLastAccessTime.dwHighDateTime=0x1d8bfc3, ftLastWriteTime.dwLowDateTime=0x41bbbc20, ftLastWriteTime.dwHighDateTime=0x1d8bfc3, nFileSizeHigh=0x0, nFileSizeLow=0x13d97, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="PcrR2Lm.png", cAlternateFileName="")) returned 0 [0267.168] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0267.168] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\PcrR2Lm.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pcrr2lm.png")) returned 1 [0267.171] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\PcrR2Lm.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\pcrr2lm.png")) returned 0xffffffff [0267.171] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3914fe10, ftCreationTime.dwHighDateTime=0x1d8bfe6, ftLastAccessTime.dwLowDateTime=0x6919330, ftLastAccessTime.dwHighDateTime=0x1d8c050, ftLastWriteTime.dwLowDateTime=0x6919330, ftLastWriteTime.dwHighDateTime=0x1d8c050, nFileSizeHigh=0x0, nFileSizeLow=0x15c1, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="rWi_LKN_vlOUM.png", cAlternateFileName="RWI_LK~1.PNG")) returned 1 [0267.172] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.172] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.174] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.174] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.174] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.174] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0267.174] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\rWi_LKN_vlOUM.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\rwi_lkn_vloum.png")) returned 0x20 [0267.174] VirtualAlloc (lpAddress=0x23c4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23c4000 [0267.175] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\rWi_LKN_vlOUM.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\rwi_lkn_vloum.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.175] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\rWi_LKN_vlOUM.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\rwi_lkn_vloum.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.176] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.177] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.179] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x5c1, lpOverlapped=0x0) returned 1 [0267.179] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x5c1, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x5c1, lpOverlapped=0x0) returned 1 [0267.179] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.179] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.179] CloseHandle (hObject=0x19c) returned 1 [0267.179] CloseHandle (hObject=0x1e0) returned 1 [0267.180] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\rWi_LKN_vlOUM.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\rwi_lkn_vloum.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\rWi_LKN_vlOUM.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\rwi_lkn_vloum.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.180] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\rWi_LKN_vlOUM.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\rwi_lkn_vloum.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.180] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\rWi_LKN_vlOUM.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\rwi_lkn_vloum.png"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3914fe10, ftCreationTime.dwHighDateTime=0x1d8bfe6, ftLastAccessTime.dwLowDateTime=0x6919330, ftLastAccessTime.dwHighDateTime=0x1d8c050, ftLastWriteTime.dwLowDateTime=0x6919330, ftLastWriteTime.dwHighDateTime=0x1d8c050, nFileSizeHigh=0x0, nFileSizeLow=0x15c1, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="rWi_LKN_vlOUM.png", cAlternateFileName="RWI_LK~1.PNG")) returned 0x55e490 [0267.180] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3914fe10, ftCreationTime.dwHighDateTime=0x1d8bfe6, ftLastAccessTime.dwLowDateTime=0x6919330, ftLastAccessTime.dwHighDateTime=0x1d8c050, ftLastWriteTime.dwLowDateTime=0x6919330, ftLastWriteTime.dwHighDateTime=0x1d8c050, nFileSizeHigh=0x0, nFileSizeLow=0x15c1, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="rWi_LKN_vlOUM.png", cAlternateFileName="RWI_LK~1.PNG")) returned 0 [0267.180] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0267.181] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\rWi_LKN_vlOUM.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\rwi_lkn_vloum.png")) returned 1 [0267.185] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\rWi_LKN_vlOUM.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\rwi_lkn_vloum.png")) returned 0xffffffff [0267.185] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa09be30, ftCreationTime.dwHighDateTime=0x1d8bd9d, ftLastAccessTime.dwLowDateTime=0xa9c461a0, ftLastAccessTime.dwHighDateTime=0x1d8c0db, ftLastWriteTime.dwLowDateTime=0xa9c461a0, ftLastWriteTime.dwHighDateTime=0x1d8c0db, nFileSizeHigh=0x0, nFileSizeLow=0x11d71, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="S22voOMZ0nN.png", cAlternateFileName="S22VOO~1.PNG")) returned 1 [0267.186] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.186] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.191] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.191] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.191] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.191] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0267.191] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\S22voOMZ0nN.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\s22voomz0nn.png")) returned 0x20 [0267.192] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\S22voOMZ0nN.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\s22voomz0nn.png"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.192] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\S22voOMZ0nN.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\s22voomz0nn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.193] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.198] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.207] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.207] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.207] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.207] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.208] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.208] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.210] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.210] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.211] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.216] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.216] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.218] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.220] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.220] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.220] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.221] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.223] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.223] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.224] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.224] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.224] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.224] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.224] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.232] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.232] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.232] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.232] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.232] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.232] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.233] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.233] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.233] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.233] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xd71, lpOverlapped=0x0) returned 1 [0267.233] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xd71, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xd71, lpOverlapped=0x0) returned 1 [0267.233] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.234] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.234] CloseHandle (hObject=0x1e0) returned 1 [0267.234] CloseHandle (hObject=0x19c) returned 1 [0267.234] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\S22voOMZ0nN.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\s22voomz0nn.png"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\S22voOMZ0nN.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\s22voomz0nn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.235] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\S22voOMZ0nN.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\s22voomz0nn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.235] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\S22voOMZ0nN.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\s22voomz0nn.png"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa09be30, ftCreationTime.dwHighDateTime=0x1d8bd9d, ftLastAccessTime.dwLowDateTime=0xa9c461a0, ftLastAccessTime.dwHighDateTime=0x1d8c0db, ftLastWriteTime.dwLowDateTime=0xa9c461a0, ftLastWriteTime.dwHighDateTime=0x1d8c0db, nFileSizeHigh=0x0, nFileSizeLow=0x11d71, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="S22voOMZ0nN.png", cAlternateFileName="S22VOO~1.PNG")) returned 0x55e890 [0267.235] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa09be30, ftCreationTime.dwHighDateTime=0x1d8bd9d, ftLastAccessTime.dwLowDateTime=0xa9c461a0, ftLastAccessTime.dwHighDateTime=0x1d8c0db, ftLastWriteTime.dwLowDateTime=0xa9c461a0, ftLastWriteTime.dwHighDateTime=0x1d8c0db, nFileSizeHigh=0x0, nFileSizeLow=0x11d71, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="S22voOMZ0nN.png", cAlternateFileName="S22VOO~1.PNG")) returned 0 [0267.235] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0267.235] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\S22voOMZ0nN.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\s22voomz0nn.png")) returned 1 [0267.238] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\S22voOMZ0nN.png" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\s22voomz0nn.png")) returned 0xffffffff [0267.238] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0267.238] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0267.238] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0267.238] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0267.238] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.238] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.239] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.239] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0267.239] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini")) returned 0x6 [0267.239] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.240] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0267.240] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xbe, lpOverlapped=0x0) returned 1 [0267.242] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xbe, lpOverlapped=0x0) returned 1 [0267.243] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.243] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.243] CloseHandle (hObject=0x1e0) returned 1 [0267.243] CloseHandle (hObject=0x218) returned 1 [0267.243] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.244] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.244] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e5d0 [0267.244] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0267.244] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0267.244] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini")) returned 1 [0267.245] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\desktop.ini")) returned 0xffffffff [0267.246] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1a6533, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1a6533, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0267.246] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0267.246] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31842850, ftCreationTime.dwHighDateTime=0x1d8b48e, ftLastAccessTime.dwLowDateTime=0x95321e80, ftLastAccessTime.dwHighDateTime=0x1d8b7d0, ftLastWriteTime.dwLowDateTime=0x95321e80, ftLastWriteTime.dwHighDateTime=0x1d8b7d0, nFileSizeHigh=0x0, nFileSizeLow=0x3e20, dwReserved0=0x696e692e, dwReserved1=0x2000002, cFileName="uuLOLCY.bmp", cAlternateFileName="")) returned 1 [0267.246] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.246] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.246] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.246] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.246] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.246] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0267.246] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\uuLOLCY.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\uulolcy.bmp")) returned 0x20 [0267.246] VirtualAlloc (lpAddress=0x23c8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23c8000 [0267.247] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\uuLOLCY.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\uulolcy.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.247] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\uuLOLCY.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\uulolcy.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0267.248] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.249] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.250] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.250] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.250] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.250] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.251] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xe20, lpOverlapped=0x0) returned 1 [0267.251] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xe20, lpOverlapped=0x0) returned 1 [0267.251] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.251] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.251] CloseHandle (hObject=0x19c) returned 1 [0267.251] CloseHandle (hObject=0x218) returned 1 [0267.251] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\uuLOLCY.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\uulolcy.bmp"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\uuLOLCY.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\uulolcy.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.252] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\uuLOLCY.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\uulolcy.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.252] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\uuLOLCY.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\uulolcy.bmp"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31842850, ftCreationTime.dwHighDateTime=0x1d8b48e, ftLastAccessTime.dwLowDateTime=0x95321e80, ftLastAccessTime.dwHighDateTime=0x1d8b7d0, ftLastWriteTime.dwLowDateTime=0x95321e80, ftLastWriteTime.dwHighDateTime=0x1d8b7d0, nFileSizeHigh=0x0, nFileSizeLow=0x3e20, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="uuLOLCY.bmp", cAlternateFileName="")) returned 0x55e290 [0267.252] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31842850, ftCreationTime.dwHighDateTime=0x1d8b48e, ftLastAccessTime.dwLowDateTime=0x95321e80, ftLastAccessTime.dwHighDateTime=0x1d8b7d0, ftLastWriteTime.dwLowDateTime=0x95321e80, ftLastWriteTime.dwHighDateTime=0x1d8b7d0, nFileSizeHigh=0x0, nFileSizeLow=0x3e20, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="uuLOLCY.bmp", cAlternateFileName="")) returned 0 [0267.252] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0267.252] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\uuLOLCY.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\uulolcy.bmp")) returned 1 [0267.254] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\uuLOLCY.bmp" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\uulolcy.bmp")) returned 0xffffffff [0267.254] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d87bd10, ftCreationTime.dwHighDateTime=0x1d8c065, ftLastAccessTime.dwLowDateTime=0xa5a0f1f0, ftLastAccessTime.dwHighDateTime=0x1d8c073, ftLastWriteTime.dwLowDateTime=0xa5a0f1f0, ftLastWriteTime.dwHighDateTime=0x1d8c073, nFileSizeHigh=0x0, nFileSizeLow=0x167e9, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="ZrVCQnLs.jpg", cAlternateFileName="")) returned 1 [0267.255] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.255] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.255] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.255] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0267.255] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\ZrVCQnLs.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\zrvcqnls.jpg")) returned 0x20 [0267.255] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\ZrVCQnLs.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\zrvcqnls.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0267.256] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\ZrVCQnLs.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\zrvcqnls.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.258] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.259] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.261] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.261] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.261] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.261] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.261] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.262] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.262] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.262] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.262] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.262] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.262] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.263] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.263] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.263] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.263] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.263] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.263] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.264] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.264] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.264] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.264] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.264] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.264] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.265] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.265] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.265] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.265] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.265] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.265] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.266] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.266] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.266] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.266] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.266] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.266] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.267] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.267] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.267] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.267] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.267] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.267] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.267] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.268] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x7e9, lpOverlapped=0x0) returned 1 [0267.268] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x7e9, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x7e9, lpOverlapped=0x0) returned 1 [0267.268] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.268] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.268] CloseHandle (hObject=0x218) returned 1 [0267.268] CloseHandle (hObject=0x19c) returned 1 [0267.268] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\ZrVCQnLs.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\zrvcqnls.jpg"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\ZrVCQnLs.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\zrvcqnls.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.269] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\ZrVCQnLs.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\zrvcqnls.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.269] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\ZrVCQnLs.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\zrvcqnls.jpg"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d87bd10, ftCreationTime.dwHighDateTime=0x1d8c065, ftLastAccessTime.dwLowDateTime=0xa5a0f1f0, ftLastAccessTime.dwHighDateTime=0x1d8c073, ftLastWriteTime.dwLowDateTime=0xa5a0f1f0, ftLastWriteTime.dwHighDateTime=0x1d8c073, nFileSizeHigh=0x0, nFileSizeLow=0x167e9, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="ZrVCQnLs.jpg", cAlternateFileName="")) returned 0x55e490 [0267.269] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d87bd10, ftCreationTime.dwHighDateTime=0x1d8c065, ftLastAccessTime.dwLowDateTime=0xa5a0f1f0, ftLastAccessTime.dwHighDateTime=0x1d8c073, ftLastWriteTime.dwLowDateTime=0xa5a0f1f0, ftLastWriteTime.dwHighDateTime=0x1d8c073, nFileSizeHigh=0x0, nFileSizeLow=0x167e9, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="ZrVCQnLs.jpg", cAlternateFileName="")) returned 0 [0267.269] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0267.269] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\ZrVCQnLs.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\zrvcqnls.jpg")) returned 1 [0267.272] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\ZrVCQnLs.jpg" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\zrvcqnls.jpg")) returned 0xffffffff [0267.272] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d87bd10, ftCreationTime.dwHighDateTime=0x1d8c065, ftLastAccessTime.dwLowDateTime=0xa5a0f1f0, ftLastAccessTime.dwHighDateTime=0x1d8c073, ftLastWriteTime.dwLowDateTime=0xa5a0f1f0, ftLastWriteTime.dwHighDateTime=0x1d8c073, nFileSizeHigh=0x0, nFileSizeLow=0x167e9, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="ZrVCQnLs.jpg", cAlternateFileName="")) returned 0 [0267.272] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0267.272] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x67736567, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0267.272] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\PrintHood\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\printhood\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d87bd10, ftCreationTime.dwHighDateTime=0x1d8c065, ftLastAccessTime.dwLowDateTime=0xa5a0f1f0, ftLastAccessTime.dwHighDateTime=0x1d8c073, ftLastWriteTime.dwLowDateTime=0xa5a0f1f0, ftLastWriteTime.dwHighDateTime=0x1d8c073, nFileSizeHigh=0x0, nFileSizeLow=0x167e9, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="ZrVCQnLs.jpg", cAlternateFileName="\x90åU")) returned 0xffffffff [0267.272] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x67736567, cFileName="Recent", cAlternateFileName="")) returned 1 [0267.272] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Recent\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\recent\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d87bd10, ftCreationTime.dwHighDateTime=0x1d8c065, ftLastAccessTime.dwLowDateTime=0xa5a0f1f0, ftLastAccessTime.dwHighDateTime=0x1d8c073, ftLastWriteTime.dwLowDateTime=0xa5a0f1f0, ftLastWriteTime.dwHighDateTime=0x1d8c073, nFileSizeHigh=0x0, nFileSizeLow=0x167e9, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="ZrVCQnLs.jpg", cAlternateFileName="\x90åU")) returned 0xffffffff [0267.272] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x67736567, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0267.272] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e890 [0267.273] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0267.273] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43754b80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0267.273] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.273] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.273] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.273] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.273] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.273] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0267.273] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\desktop.ini")) returned 0x26 [0267.274] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.274] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0267.275] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x11a, lpOverlapped=0x0) returned 1 [0267.276] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x11a, lpOverlapped=0x0) returned 1 [0267.277] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.277] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.277] CloseHandle (hObject=0x19c) returned 1 [0267.277] CloseHandle (hObject=0x218) returned 1 [0267.277] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.277] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.277] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43754b80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e490 [0267.278] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43754b80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0267.278] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0267.278] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\desktop.ini")) returned 1 [0267.279] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\desktop.ini")) returned 0xffffffff [0267.279] FindNextFileA (in: hFindFile=0x55e890, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43754b80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0267.279] FindClose (in: hFindFile=0x55e890 | out: hFindFile=0x55e890) returned 1 [0267.279] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e692e, dwReserved1=0x67736567, cFileName="Searches", cAlternateFileName="")) returned 1 [0267.279] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Searches\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x55e510 [0267.279] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0267.279] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0267.280] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.280] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.280] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.280] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.280] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.280] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0267.280] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Searches\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\desktop.ini")) returned 0x6 [0267.280] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Searches\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0267.281] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Searches\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.282] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x20c, lpOverlapped=0x0) returned 1 [0267.283] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x20c, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x20c, lpOverlapped=0x0) returned 1 [0267.284] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.284] WriteFile (in: hFile=0x19c, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.284] CloseHandle (hObject=0x218) returned 1 [0267.284] CloseHandle (hObject=0x19c) returned 1 [0267.285] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Searches\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Searches\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.285] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Searches\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.285] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Searches\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e410 [0267.285] FindNextFileA (in: hFindFile=0x55e410, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436bc315, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0267.285] FindClose (in: hFindFile=0x55e410 | out: hFindFile=0x55e410) returned 1 [0267.285] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Searches\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\desktop.ini")) returned 1 [0267.286] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Searches\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\desktop.ini")) returned 0xffffffff [0267.286] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x437a1142, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0267.287] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x4377acca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4377acca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4377acca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x610065, dwReserved1=0x630072, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0267.287] FindNextFileA (in: hFindFile=0x55e510, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x4377acca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4377acca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4377acca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x610065, dwReserved1=0x630072, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0267.287] FindClose (in: hFindFile=0x55e510 | out: hFindFile=0x55e510) returned 1 [0267.287] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6f697461, cFileName="SendTo", cAlternateFileName="")) returned 1 [0267.288] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\SendTo\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\sendto\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x4377acca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4377acca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4377acca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x610065, dwReserved1=0x630072, cFileName="Indexed Locations.search-ms", cAlternateFileName="\x90åU")) returned 0xffffffff [0267.288] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6f697461, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0267.288] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Start Menu\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\start menu\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x4377acca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4377acca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4377acca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x610065, dwReserved1=0x630072, cFileName="Indexed Locations.search-ms", cAlternateFileName="\x90åU")) returned 0xffffffff [0267.288] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6f697461, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0267.288] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Templates\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\templates\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x4377acca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4377acca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4377acca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x610065, dwReserved1=0x630072, cFileName="Indexed Locations.search-ms", cAlternateFileName="\x90åU")) returned 0xffffffff [0267.288] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6fc2a1c5, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6fc2a1c5, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6f697461, cFileName="Videos", cAlternateFileName="")) returned 1 [0267.288] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6fc2a1c5, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6fc2a1c5, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690074, dwReserved1=0x6e006f, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0267.288] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6fc2a1c5, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6fc2a1c5, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x690074, dwReserved1=0x6e006f, cFileName="..", cAlternateFileName="")) returned 1 [0267.288] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33df26b0, ftCreationTime.dwHighDateTime=0x1d8b7ac, ftLastAccessTime.dwLowDateTime=0x99019220, ftLastAccessTime.dwHighDateTime=0x1d8bed8, ftLastWriteTime.dwLowDateTime=0x99019220, ftLastWriteTime.dwHighDateTime=0x1d8bed8, nFileSizeHigh=0x0, nFileSizeLow=0x14c19, dwReserved0=0x690074, dwReserved1=0x6e006f, cFileName="1QvM.swf", cAlternateFileName="")) returned 1 [0267.289] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe220d520, ftCreationTime.dwHighDateTime=0x1d8b649, ftLastAccessTime.dwLowDateTime=0x46663b80, ftLastAccessTime.dwHighDateTime=0x1d8b8eb, ftLastWriteTime.dwLowDateTime=0x46663b80, ftLastWriteTime.dwHighDateTime=0x1d8b8eb, nFileSizeHigh=0x0, nFileSizeLow=0xb718, dwReserved0=0x690074, dwReserved1=0x6e006f, cFileName="Ayt0.mkv", cAlternateFileName="")) returned 1 [0267.289] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.289] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.289] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.289] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.289] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.289] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0267.289] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\Ayt0.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\ayt0.mkv")) returned 0x20 [0267.290] VirtualAlloc (lpAddress=0x23cc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23cc000 [0267.290] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\Ayt0.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\ayt0.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.291] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\Ayt0.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\ayt0.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0267.292] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.293] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.294] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.294] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.294] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.294] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.295] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.295] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.295] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.295] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.295] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.295] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.296] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.296] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.296] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.296] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.296] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.297] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.297] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.297] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.297] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.297] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.297] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x718, lpOverlapped=0x0) returned 1 [0267.298] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x718, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x718, lpOverlapped=0x0) returned 1 [0267.298] ReadFile (in: hFile=0x19c, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.298] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.298] CloseHandle (hObject=0x19c) returned 1 [0267.298] CloseHandle (hObject=0x218) returned 1 [0267.298] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\Ayt0.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\ayt0.mkv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\Ayt0.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\ayt0.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.298] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\Ayt0.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\ayt0.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.299] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\Ayt0.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\ayt0.mkv"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe220d520, ftCreationTime.dwHighDateTime=0x1d8b649, ftLastAccessTime.dwLowDateTime=0x46663b80, ftLastAccessTime.dwHighDateTime=0x1d8b8eb, ftLastWriteTime.dwLowDateTime=0x46663b80, ftLastWriteTime.dwHighDateTime=0x1d8b8eb, nFileSizeHigh=0x0, nFileSizeLow=0xb718, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="Ayt0.mkv", cAlternateFileName="")) returned 0x55e850 [0267.299] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe220d520, ftCreationTime.dwHighDateTime=0x1d8b649, ftLastAccessTime.dwLowDateTime=0x46663b80, ftLastAccessTime.dwHighDateTime=0x1d8b8eb, ftLastWriteTime.dwLowDateTime=0x46663b80, ftLastWriteTime.dwHighDateTime=0x1d8b8eb, nFileSizeHigh=0x0, nFileSizeLow=0xb718, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="Ayt0.mkv", cAlternateFileName="")) returned 0 [0267.299] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0267.299] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\Ayt0.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\ayt0.mkv")) returned 1 [0267.300] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\Ayt0.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\ayt0.mkv")) returned 0xffffffff [0267.300] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970c2e10, ftCreationTime.dwHighDateTime=0x1d8b11f, ftLastAccessTime.dwLowDateTime=0x421884e0, ftLastAccessTime.dwHighDateTime=0x1d8b40c, ftLastWriteTime.dwLowDateTime=0x421884e0, ftLastWriteTime.dwHighDateTime=0x1d8b40c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="BdHdcndlyia--o2TJO", cAlternateFileName="BDHDCN~1")) returned 1 [0267.300] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970c2e10, ftCreationTime.dwHighDateTime=0x1d8b11f, ftLastAccessTime.dwLowDateTime=0x421884e0, ftLastAccessTime.dwHighDateTime=0x1d8b40c, ftLastWriteTime.dwLowDateTime=0x421884e0, ftLastWriteTime.dwHighDateTime=0x1d8b40c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0267.301] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970c2e10, ftCreationTime.dwHighDateTime=0x1d8b11f, ftLastAccessTime.dwLowDateTime=0x421884e0, ftLastAccessTime.dwHighDateTime=0x1d8b40c, ftLastWriteTime.dwLowDateTime=0x421884e0, ftLastWriteTime.dwHighDateTime=0x1d8b40c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0267.301] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1e3e510, ftCreationTime.dwHighDateTime=0x1d8b5ac, ftLastAccessTime.dwLowDateTime=0x17a4cf00, ftLastAccessTime.dwHighDateTime=0x1d8bb34, ftLastWriteTime.dwLowDateTime=0x17a4cf00, ftLastWriteTime.dwHighDateTime=0x1d8bb34, nFileSizeHigh=0x0, nFileSizeLow=0x1ca2, dwReserved0=0x556a70, dwReserved1=0x550260, cFileName="a3itWRZvWpmLXsozDFw.mp4", cAlternateFileName="A3ITWR~1.MP4")) returned 1 [0267.301] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e391a0, ftCreationTime.dwHighDateTime=0x1d8b0c8, ftLastAccessTime.dwLowDateTime=0x5defe6d0, ftLastAccessTime.dwHighDateTime=0x1d8b20a, ftLastWriteTime.dwLowDateTime=0x5defe6d0, ftLastWriteTime.dwHighDateTime=0x1d8b20a, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x730078, dwReserved1=0x7a006f, cFileName="aZA Bm1.mkv", cAlternateFileName="AZABM1~1.MKV")) returned 1 [0267.301] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.302] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.302] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.302] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.302] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.302] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0267.302] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\aZA Bm1.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\aza bm1.mkv")) returned 0x20 [0267.302] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\aZA Bm1.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\aza bm1.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.303] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\aZA Bm1.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\aza bm1.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.303] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.304] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.305] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xa3e, lpOverlapped=0x0) returned 1 [0267.306] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xa3e, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xa3e, lpOverlapped=0x0) returned 1 [0267.306] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.306] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.306] CloseHandle (hObject=0x19c) returned 1 [0267.306] CloseHandle (hObject=0x1e0) returned 1 [0267.306] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\aZA Bm1.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\aza bm1.mkv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\aZA Bm1.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\aza bm1.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.308] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\aZA Bm1.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\aza bm1.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.308] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\aZA Bm1.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\aza bm1.mkv"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e391a0, ftCreationTime.dwHighDateTime=0x1d8b0c8, ftLastAccessTime.dwLowDateTime=0x5defe6d0, ftLastAccessTime.dwHighDateTime=0x1d8b20a, ftLastWriteTime.dwLowDateTime=0x5defe6d0, ftLastWriteTime.dwHighDateTime=0x1d8b20a, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="aZA Bm1.mkv", cAlternateFileName="AZABM1~1.MKV")) returned 0x55e390 [0267.308] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e391a0, ftCreationTime.dwHighDateTime=0x1d8b0c8, ftLastAccessTime.dwLowDateTime=0x5defe6d0, ftLastAccessTime.dwHighDateTime=0x1d8b20a, ftLastWriteTime.dwLowDateTime=0x5defe6d0, ftLastWriteTime.dwHighDateTime=0x1d8b20a, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="aZA Bm1.mkv", cAlternateFileName="AZABM1~1.MKV")) returned 0 [0267.308] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0267.308] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\aZA Bm1.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\aza bm1.mkv")) returned 1 [0267.309] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\aZA Bm1.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\aza bm1.mkv")) returned 0xffffffff [0267.309] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5743a50, ftCreationTime.dwHighDateTime=0x1d8bfa2, ftLastAccessTime.dwLowDateTime=0x6647010, ftLastAccessTime.dwHighDateTime=0x1d8c04d, ftLastWriteTime.dwLowDateTime=0x6647010, ftLastWriteTime.dwHighDateTime=0x1d8c04d, nFileSizeHigh=0x0, nFileSizeLow=0x8144, dwReserved0=0x0, dwReserved1=0x0, cFileName="b1e_wUWCHFNA7nDr8n.avi", cAlternateFileName="B1E_WU~1.AVI")) returned 1 [0267.310] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.310] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.310] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.310] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.310] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.310] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0267.310] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\b1e_wUWCHFNA7nDr8n.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\b1e_wuwchfna7ndr8n.avi")) returned 0x20 [0267.310] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\b1e_wUWCHFNA7nDr8n.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\b1e_wuwchfna7ndr8n.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.311] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\b1e_wUWCHFNA7nDr8n.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\b1e_wuwchfna7ndr8n.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.312] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.313] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.314] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.314] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.314] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.314] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.314] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.315] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.315] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.315] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.315] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.315] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.315] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.316] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.316] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.316] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.316] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x144, lpOverlapped=0x0) returned 1 [0267.316] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x144, lpOverlapped=0x0) returned 1 [0267.317] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.317] WriteFile (in: hFile=0x19c, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.317] CloseHandle (hObject=0x1e0) returned 1 [0267.317] CloseHandle (hObject=0x19c) returned 1 [0267.317] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\b1e_wUWCHFNA7nDr8n.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\b1e_wuwchfna7ndr8n.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\b1e_wUWCHFNA7nDr8n.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\b1e_wuwchfna7ndr8n.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.317] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\b1e_wUWCHFNA7nDr8n.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\b1e_wuwchfna7ndr8n.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.317] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\b1e_wUWCHFNA7nDr8n.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\b1e_wuwchfna7ndr8n.avi"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5743a50, ftCreationTime.dwHighDateTime=0x1d8bfa2, ftLastAccessTime.dwLowDateTime=0x6647010, ftLastAccessTime.dwHighDateTime=0x1d8c04d, ftLastWriteTime.dwLowDateTime=0x6647010, ftLastWriteTime.dwHighDateTime=0x1d8c04d, nFileSizeHigh=0x0, nFileSizeLow=0x8144, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="b1e_wUWCHFNA7nDr8n.avi", cAlternateFileName="B1E_WU~1.AVI")) returned 0x55e650 [0267.317] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5743a50, ftCreationTime.dwHighDateTime=0x1d8bfa2, ftLastAccessTime.dwLowDateTime=0x6647010, ftLastAccessTime.dwHighDateTime=0x1d8c04d, ftLastWriteTime.dwLowDateTime=0x6647010, ftLastWriteTime.dwHighDateTime=0x1d8c04d, nFileSizeHigh=0x0, nFileSizeLow=0x8144, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="b1e_wUWCHFNA7nDr8n.avi", cAlternateFileName="B1E_WU~1.AVI")) returned 0 [0267.318] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0267.318] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\b1e_wUWCHFNA7nDr8n.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\b1e_wuwchfna7ndr8n.avi")) returned 1 [0267.319] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\b1e_wUWCHFNA7nDr8n.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\b1e_wuwchfna7ndr8n.avi")) returned 0xffffffff [0267.319] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5537ea0, ftCreationTime.dwHighDateTime=0x1d8ba8e, ftLastAccessTime.dwLowDateTime=0x2ccb4520, ftLastAccessTime.dwHighDateTime=0x1d8c008, ftLastWriteTime.dwLowDateTime=0x2ccb4520, ftLastWriteTime.dwHighDateTime=0x1d8c008, nFileSizeHigh=0x0, nFileSizeLow=0x114f7, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="cdad4T_Z0CG2NFrmq2Q.avi", cAlternateFileName="CDAD4T~1.AVI")) returned 1 [0267.319] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.319] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.319] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.319] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0267.320] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\cdad4T_Z0CG2NFrmq2Q.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\cdad4t_z0cg2nfrmq2q.avi")) returned 0x20 [0267.320] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\cdad4T_Z0CG2NFrmq2Q.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\cdad4t_z0cg2nfrmq2q.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.320] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\cdad4T_Z0CG2NFrmq2Q.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\cdad4t_z0cg2nfrmq2q.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.321] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.322] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.323] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.323] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.323] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.324] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.324] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.324] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.324] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.324] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.324] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.325] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.325] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.325] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.325] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.325] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.325] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.326] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.326] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.326] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.326] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.326] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.327] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.327] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.327] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.327] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.327] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.327] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.328] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.328] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.328] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.328] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.328] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.329] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.329] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x4f7, lpOverlapped=0x0) returned 1 [0267.329] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x4f7, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x4f7, lpOverlapped=0x0) returned 1 [0267.329] ReadFile (in: hFile=0x19c, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.329] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.329] CloseHandle (hObject=0x19c) returned 1 [0267.329] CloseHandle (hObject=0x1e0) returned 1 [0267.329] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\cdad4T_Z0CG2NFrmq2Q.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\cdad4t_z0cg2nfrmq2q.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\cdad4T_Z0CG2NFrmq2Q.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\cdad4t_z0cg2nfrmq2q.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.330] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\cdad4T_Z0CG2NFrmq2Q.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\cdad4t_z0cg2nfrmq2q.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.330] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\cdad4T_Z0CG2NFrmq2Q.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\cdad4t_z0cg2nfrmq2q.avi"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5537ea0, ftCreationTime.dwHighDateTime=0x1d8ba8e, ftLastAccessTime.dwLowDateTime=0x2ccb4520, ftLastAccessTime.dwHighDateTime=0x1d8c008, ftLastWriteTime.dwLowDateTime=0x2ccb4520, ftLastWriteTime.dwHighDateTime=0x1d8c008, nFileSizeHigh=0x0, nFileSizeLow=0x114f7, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="cdad4T_Z0CG2NFrmq2Q.avi", cAlternateFileName="CDAD4T~1.AVI")) returned 0x55e710 [0267.330] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5537ea0, ftCreationTime.dwHighDateTime=0x1d8ba8e, ftLastAccessTime.dwLowDateTime=0x2ccb4520, ftLastAccessTime.dwHighDateTime=0x1d8c008, ftLastWriteTime.dwLowDateTime=0x2ccb4520, ftLastWriteTime.dwHighDateTime=0x1d8c008, nFileSizeHigh=0x0, nFileSizeLow=0x114f7, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="cdad4T_Z0CG2NFrmq2Q.avi", cAlternateFileName="CDAD4T~1.AVI")) returned 0 [0267.330] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0267.330] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\cdad4T_Z0CG2NFrmq2Q.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\cdad4t_z0cg2nfrmq2q.avi")) returned 1 [0267.332] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\cdad4T_Z0CG2NFrmq2Q.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\cdad4t_z0cg2nfrmq2q.avi")) returned 0xffffffff [0267.332] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf50ab3d0, ftCreationTime.dwHighDateTime=0x1d8bb40, ftLastAccessTime.dwLowDateTime=0x65f02180, ftLastAccessTime.dwHighDateTime=0x1d8c0d6, ftLastWriteTime.dwLowDateTime=0x65f02180, ftLastWriteTime.dwHighDateTime=0x1d8c0d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="msy2N7n2 mhY", cAlternateFileName="MSY2N7~1")) returned 1 [0267.332] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf50ab3d0, ftCreationTime.dwHighDateTime=0x1d8bb40, ftLastAccessTime.dwLowDateTime=0x65f02180, ftLastAccessTime.dwHighDateTime=0x1d8c0d6, ftLastWriteTime.dwLowDateTime=0x65f02180, ftLastWriteTime.dwHighDateTime=0x1d8c0d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0267.332] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf50ab3d0, ftCreationTime.dwHighDateTime=0x1d8bb40, ftLastAccessTime.dwLowDateTime=0x65f02180, ftLastAccessTime.dwHighDateTime=0x1d8c0d6, ftLastWriteTime.dwLowDateTime=0x65f02180, ftLastWriteTime.dwHighDateTime=0x1d8c0d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0267.332] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f53fc40, ftCreationTime.dwHighDateTime=0x1d8bc6d, ftLastAccessTime.dwLowDateTime=0x69263560, ftLastAccessTime.dwHighDateTime=0x1d8c009, ftLastWriteTime.dwLowDateTime=0x69263560, ftLastWriteTime.dwHighDateTime=0x1d8c009, nFileSizeHigh=0x0, nFileSizeLow=0xe72a, dwReserved0=0x55a260, dwReserved1=0x550260, cFileName="Hnf-2cDg-V5mRQgzfb.swf", cAlternateFileName="HNF-2C~1.SWF")) returned 1 [0267.333] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38cfbfd0, ftCreationTime.dwHighDateTime=0x1d8b6b3, ftLastAccessTime.dwLowDateTime=0xc7448fb0, ftLastAccessTime.dwHighDateTime=0x1d8bfd8, ftLastWriteTime.dwLowDateTime=0xc7448fb0, ftLastWriteTime.dwHighDateTime=0x1d8bfd8, nFileSizeHigh=0x0, nFileSizeLow=0x49f1, dwReserved0=0x710072, dwReserved1=0x7a0067, cFileName="PAU1zPeoNTZTO1prSM.flv", cAlternateFileName="PAU1ZP~1.FLV")) returned 1 [0267.333] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.333] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.333] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.333] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0267.333] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\PAU1zPeoNTZTO1prSM.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\pau1zpeontzto1prsm.flv")) returned 0x20 [0267.333] VirtualAlloc (lpAddress=0x23d0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23d0000 [0267.334] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\PAU1zPeoNTZTO1prSM.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\pau1zpeontzto1prsm.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.335] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\PAU1zPeoNTZTO1prSM.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\pau1zpeontzto1prsm.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0267.335] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.336] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.337] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.337] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.344] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.344] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.344] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.344] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.344] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x9f1, lpOverlapped=0x0) returned 1 [0267.344] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x9f1, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x9f1, lpOverlapped=0x0) returned 1 [0267.345] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0267.345] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0267.345] CloseHandle (hObject=0x19c) returned 1 [0267.345] CloseHandle (hObject=0x210) returned 1 [0267.345] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\PAU1zPeoNTZTO1prSM.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\pau1zpeontzto1prsm.flv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\PAU1zPeoNTZTO1prSM.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\pau1zpeontzto1prsm.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.345] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\PAU1zPeoNTZTO1prSM.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\pau1zpeontzto1prsm.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.345] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\PAU1zPeoNTZTO1prSM.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\pau1zpeontzto1prsm.flv"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38cfbfd0, ftCreationTime.dwHighDateTime=0x1d8b6b3, ftLastAccessTime.dwLowDateTime=0xc7448fb0, ftLastAccessTime.dwHighDateTime=0x1d8bfd8, ftLastWriteTime.dwLowDateTime=0xc7448fb0, ftLastWriteTime.dwHighDateTime=0x1d8bfd8, nFileSizeHigh=0x0, nFileSizeLow=0x49f1, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="PAU1zPeoNTZTO1prSM.flv", cAlternateFileName="PAU1ZP~1.FLV")) returned 0x55e790 [0267.346] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38cfbfd0, ftCreationTime.dwHighDateTime=0x1d8b6b3, ftLastAccessTime.dwLowDateTime=0xc7448fb0, ftLastAccessTime.dwHighDateTime=0x1d8bfd8, ftLastWriteTime.dwLowDateTime=0xc7448fb0, ftLastWriteTime.dwHighDateTime=0x1d8bfd8, nFileSizeHigh=0x0, nFileSizeLow=0x49f1, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="PAU1zPeoNTZTO1prSM.flv", cAlternateFileName="PAU1ZP~1.FLV")) returned 0 [0267.346] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0267.346] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\PAU1zPeoNTZTO1prSM.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\pau1zpeontzto1prsm.flv")) returned 1 [0267.348] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\PAU1zPeoNTZTO1prSM.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\pau1zpeontzto1prsm.flv")) returned 0xffffffff [0267.348] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x584f4dc0, ftCreationTime.dwHighDateTime=0x1d8b236, ftLastAccessTime.dwLowDateTime=0x7b516b10, ftLastAccessTime.dwHighDateTime=0x1d8bdc5, ftLastWriteTime.dwLowDateTime=0x7b516b10, ftLastWriteTime.dwHighDateTime=0x1d8bdc5, nFileSizeHigh=0x0, nFileSizeLow=0xc680, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ptMheWgNMc.swf", cAlternateFileName="PTMHEW~1.SWF")) returned 1 [0267.349] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c7b2b0, ftCreationTime.dwHighDateTime=0x1d8b898, ftLastAccessTime.dwLowDateTime=0x52888710, ftLastAccessTime.dwHighDateTime=0x1d8ba0d, ftLastWriteTime.dwLowDateTime=0x52888710, ftLastWriteTime.dwHighDateTime=0x1d8ba0d, nFileSizeHigh=0x0, nFileSizeLow=0x9d24, dwReserved0=0x660077, dwReserved1=0x2000000, cFileName="QntZJev21J.swf", cAlternateFileName="QNTZJE~1.SWF")) returned 1 [0267.349] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6332aed0, ftCreationTime.dwHighDateTime=0x1d8bbaa, ftLastAccessTime.dwLowDateTime=0x7c43a880, ftLastAccessTime.dwHighDateTime=0x1d8beb0, ftLastWriteTime.dwLowDateTime=0x7c43a880, ftLastWriteTime.dwHighDateTime=0x1d8beb0, nFileSizeHigh=0x0, nFileSizeLow=0xcbd1, dwReserved0=0x660077, dwReserved1=0x2000000, cFileName="rOdVWBBX9Gqw6r7kRh.avi", cAlternateFileName="RODVWB~1.AVI")) returned 1 [0267.349] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.349] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0267.349] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\rOdVWBBX9Gqw6r7kRh.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\rodvwbbx9gqw6r7krh.avi")) returned 0x20 [0267.350] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\rOdVWBBX9Gqw6r7kRh.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\rodvwbbx9gqw6r7krh.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0267.350] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\rOdVWBBX9Gqw6r7kRh.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\rodvwbbx9gqw6r7krh.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.351] ReadFile (in: hFile=0x210, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.352] WriteFile (in: hFile=0x19c, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.353] ReadFile (in: hFile=0x210, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.353] WriteFile (in: hFile=0x19c, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.353] ReadFile (in: hFile=0x210, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.354] WriteFile (in: hFile=0x19c, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.354] ReadFile (in: hFile=0x210, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.354] WriteFile (in: hFile=0x19c, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.354] ReadFile (in: hFile=0x210, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.354] WriteFile (in: hFile=0x19c, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.355] ReadFile (in: hFile=0x210, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.355] WriteFile (in: hFile=0x19c, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.355] ReadFile (in: hFile=0x210, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.355] WriteFile (in: hFile=0x19c, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.355] ReadFile (in: hFile=0x210, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.355] WriteFile (in: hFile=0x19c, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.356] ReadFile (in: hFile=0x210, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.356] WriteFile (in: hFile=0x19c, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.356] ReadFile (in: hFile=0x210, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.356] WriteFile (in: hFile=0x19c, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.356] ReadFile (in: hFile=0x210, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.356] WriteFile (in: hFile=0x19c, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.357] ReadFile (in: hFile=0x210, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.357] WriteFile (in: hFile=0x19c, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.357] ReadFile (in: hFile=0x210, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0xbd1, lpOverlapped=0x0) returned 1 [0267.357] WriteFile (in: hFile=0x19c, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0xbd1, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0xbd1, lpOverlapped=0x0) returned 1 [0267.357] ReadFile (in: hFile=0x210, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0267.357] WriteFile (in: hFile=0x19c, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0267.357] CloseHandle (hObject=0x210) returned 1 [0267.358] CloseHandle (hObject=0x19c) returned 1 [0267.358] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\rOdVWBBX9Gqw6r7kRh.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\rodvwbbx9gqw6r7krh.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\rOdVWBBX9Gqw6r7kRh.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\rodvwbbx9gqw6r7krh.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.358] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\rOdVWBBX9Gqw6r7kRh.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\rodvwbbx9gqw6r7krh.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.358] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\rOdVWBBX9Gqw6r7kRh.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\rodvwbbx9gqw6r7krh.avi"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6332aed0, ftCreationTime.dwHighDateTime=0x1d8bbaa, ftLastAccessTime.dwLowDateTime=0x7c43a880, ftLastAccessTime.dwHighDateTime=0x1d8beb0, ftLastWriteTime.dwLowDateTime=0x7c43a880, ftLastWriteTime.dwHighDateTime=0x1d8beb0, nFileSizeHigh=0x0, nFileSizeLow=0xcbd1, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="rOdVWBBX9Gqw6r7kRh.avi", cAlternateFileName="RODVWB~1.AVI")) returned 0x55e5d0 [0267.358] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6332aed0, ftCreationTime.dwHighDateTime=0x1d8bbaa, ftLastAccessTime.dwLowDateTime=0x7c43a880, ftLastAccessTime.dwHighDateTime=0x1d8beb0, ftLastWriteTime.dwLowDateTime=0x7c43a880, ftLastWriteTime.dwHighDateTime=0x1d8beb0, nFileSizeHigh=0x0, nFileSizeLow=0xcbd1, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="rOdVWBBX9Gqw6r7kRh.avi", cAlternateFileName="RODVWB~1.AVI")) returned 0 [0267.358] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0267.358] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\rOdVWBBX9Gqw6r7kRh.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\rodvwbbx9gqw6r7krh.avi")) returned 1 [0267.360] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\rOdVWBBX9Gqw6r7kRh.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\rodvwbbx9gqw6r7krh.avi")) returned 0xffffffff [0267.360] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a8b780, ftCreationTime.dwHighDateTime=0x1d8b146, ftLastAccessTime.dwLowDateTime=0x274998a0, ftLastAccessTime.dwHighDateTime=0x1d8baf8, ftLastWriteTime.dwLowDateTime=0x274998a0, ftLastWriteTime.dwHighDateTime=0x1d8baf8, nFileSizeHigh=0x0, nFileSizeLow=0xf39c, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="YyZCa.flv", cAlternateFileName="")) returned 1 [0267.361] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.361] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.361] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.361] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0267.361] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\YyZCa.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\yyzca.flv")) returned 0x20 [0267.362] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\YyZCa.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\yyzca.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c [0267.362] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\YyZCa.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\yyzca.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0267.363] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.364] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.365] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.365] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.365] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.365] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.366] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.366] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.366] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.366] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.366] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.367] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.367] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.367] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.367] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.367] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.367] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.368] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.368] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.368] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.368] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.368] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.369] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.369] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.369] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.369] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.370] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.370] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.370] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.370] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x1000, lpOverlapped=0x0) returned 1 [0267.370] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x39c, lpOverlapped=0x0) returned 1 [0267.370] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x39c, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x39c, lpOverlapped=0x0) returned 1 [0267.371] ReadFile (in: hFile=0x19c, lpBuffer=0x19d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19d178*, lpNumberOfBytesRead=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0267.371] WriteFile (in: hFile=0x210, lpBuffer=0x19e178*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19cec4, lpOverlapped=0x0 | out: lpBuffer=0x19e178*, lpNumberOfBytesWritten=0x19cec4*=0x0, lpOverlapped=0x0) returned 1 [0267.371] CloseHandle (hObject=0x19c) returned 1 [0267.371] CloseHandle (hObject=0x210) returned 1 [0267.371] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\YyZCa.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\yyzca.flv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\YyZCa.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\yyzca.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.372] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\YyZCa.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\yyzca.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.372] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\YyZCa.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\yyzca.flv"), lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a8b780, ftCreationTime.dwHighDateTime=0x1d8b146, ftLastAccessTime.dwLowDateTime=0x274998a0, ftLastAccessTime.dwHighDateTime=0x1d8baf8, ftLastWriteTime.dwLowDateTime=0x274998a0, ftLastWriteTime.dwHighDateTime=0x1d8baf8, nFileSizeHigh=0x0, nFileSizeLow=0xf39c, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="YyZCa.flv", cAlternateFileName="")) returned 0x55e650 [0267.372] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f014 | out: lpFindFileData=0x19f014*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a8b780, ftCreationTime.dwHighDateTime=0x1d8b146, ftLastAccessTime.dwLowDateTime=0x274998a0, ftLastAccessTime.dwHighDateTime=0x1d8baf8, ftLastWriteTime.dwLowDateTime=0x274998a0, ftLastWriteTime.dwHighDateTime=0x1d8baf8, nFileSizeHigh=0x0, nFileSizeLow=0xf39c, dwReserved0=0x777968c7, dwReserved1=0xec0ab4b9, cFileName="YyZCa.flv", cAlternateFileName="")) returned 0 [0267.372] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0267.372] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\YyZCa.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\yyzca.flv")) returned 1 [0267.376] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\YyZCa.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\yyzca.flv")) returned 0xffffffff [0267.376] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a8b780, ftCreationTime.dwHighDateTime=0x1d8b146, ftLastAccessTime.dwLowDateTime=0x274998a0, ftLastAccessTime.dwHighDateTime=0x1d8baf8, ftLastWriteTime.dwLowDateTime=0x274998a0, ftLastWriteTime.dwHighDateTime=0x1d8baf8, nFileSizeHigh=0x0, nFileSizeLow=0xf39c, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="YyZCa.flv", cAlternateFileName="")) returned 0 [0267.376] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0267.376] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80228a80, ftCreationTime.dwHighDateTime=0x1d8b3a6, ftLastAccessTime.dwLowDateTime=0x9c2ac110, ftLastAccessTime.dwHighDateTime=0x1d8b8a2, ftLastWriteTime.dwLowDateTime=0x9c2ac110, ftLastWriteTime.dwHighDateTime=0x1d8b8a2, nFileSizeHigh=0x0, nFileSizeLow=0xceda, dwReserved0=0x7147766c, dwReserved1=0x37723677, cFileName="T7NndB1TqdAPY7tj.mkv", cAlternateFileName="T7NNDB~1.MKV")) returned 1 [0267.376] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.376] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.377] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.377] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0267.377] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\T7NndB1TqdAPY7tj.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\t7nndb1tqdapy7tj.mkv")) returned 0x20 [0267.377] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\T7NndB1TqdAPY7tj.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\t7nndb1tqdapy7tj.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.378] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\T7NndB1TqdAPY7tj.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\t7nndb1tqdapy7tj.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0267.378] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.379] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.380] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.380] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.380] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.381] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.381] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.381] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.381] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.381] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.382] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.382] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.382] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.382] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.382] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.382] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.383] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.383] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.383] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.383] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.383] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.384] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.384] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.385] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.385] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xeda, lpOverlapped=0x0) returned 1 [0267.385] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xeda, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xeda, lpOverlapped=0x0) returned 1 [0267.385] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.385] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.385] CloseHandle (hObject=0x1e0) returned 1 [0267.385] CloseHandle (hObject=0x210) returned 1 [0267.386] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\T7NndB1TqdAPY7tj.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\t7nndb1tqdapy7tj.mkv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\T7NndB1TqdAPY7tj.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\t7nndb1tqdapy7tj.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.408] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\T7NndB1TqdAPY7tj.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\t7nndb1tqdapy7tj.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.408] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\T7NndB1TqdAPY7tj.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\t7nndb1tqdapy7tj.mkv"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80228a80, ftCreationTime.dwHighDateTime=0x1d8b3a6, ftLastAccessTime.dwLowDateTime=0x9c2ac110, ftLastAccessTime.dwHighDateTime=0x1d8b8a2, ftLastWriteTime.dwLowDateTime=0x9c2ac110, ftLastWriteTime.dwHighDateTime=0x1d8b8a2, nFileSizeHigh=0x0, nFileSizeLow=0xceda, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="T7NndB1TqdAPY7tj.mkv", cAlternateFileName="T7NNDB~1.MKV")) returned 0x55e290 [0267.408] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80228a80, ftCreationTime.dwHighDateTime=0x1d8b3a6, ftLastAccessTime.dwLowDateTime=0x9c2ac110, ftLastAccessTime.dwHighDateTime=0x1d8b8a2, ftLastWriteTime.dwLowDateTime=0x9c2ac110, ftLastWriteTime.dwHighDateTime=0x1d8b8a2, nFileSizeHigh=0x0, nFileSizeLow=0xceda, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="T7NndB1TqdAPY7tj.mkv", cAlternateFileName="T7NNDB~1.MKV")) returned 0 [0267.408] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0267.408] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\T7NndB1TqdAPY7tj.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\t7nndb1tqdapy7tj.mkv")) returned 1 [0267.410] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\T7NndB1TqdAPY7tj.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\t7nndb1tqdapy7tj.mkv")) returned 0xffffffff [0267.410] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91d8cf0, ftCreationTime.dwHighDateTime=0x1d8b2c8, ftLastAccessTime.dwLowDateTime=0x9fe02fa0, ftLastAccessTime.dwHighDateTime=0x1d8b9ad, ftLastWriteTime.dwLowDateTime=0x9fe02fa0, ftLastWriteTime.dwHighDateTime=0x1d8b9ad, nFileSizeHigh=0x0, nFileSizeLow=0xd4d0, dwReserved0=0x55a400, dwReserved1=0x2000002, cFileName="tIs2ezheQuxi.avi", cAlternateFileName="TIS2EZ~1.AVI")) returned 1 [0267.410] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.410] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.410] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.410] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0267.410] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\tIs2ezheQuxi.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\tis2ezhequxi.avi")) returned 0x20 [0267.411] VirtualAlloc (lpAddress=0x23d4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23d4000 [0267.411] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\tIs2ezheQuxi.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\tis2ezhequxi.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0267.412] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\tIs2ezheQuxi.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\tis2ezhequxi.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.413] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.414] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.415] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.415] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.415] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.415] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.415] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.416] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.416] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.416] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.416] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.416] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.417] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.417] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.417] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.417] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.417] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.418] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.418] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.419] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.419] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.419] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.419] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.419] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.420] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.420] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.420] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x4d0, lpOverlapped=0x0) returned 1 [0267.420] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x4d0, lpOverlapped=0x0) returned 1 [0267.420] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.420] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.420] CloseHandle (hObject=0x210) returned 1 [0267.420] CloseHandle (hObject=0x1e0) returned 1 [0267.421] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\tIs2ezheQuxi.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\tis2ezhequxi.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\tIs2ezheQuxi.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\tis2ezhequxi.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.421] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\tIs2ezheQuxi.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\tis2ezhequxi.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.421] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\tIs2ezheQuxi.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\tis2ezhequxi.avi"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91d8cf0, ftCreationTime.dwHighDateTime=0x1d8b2c8, ftLastAccessTime.dwLowDateTime=0x9fe02fa0, ftLastAccessTime.dwHighDateTime=0x1d8b9ad, ftLastWriteTime.dwLowDateTime=0x9fe02fa0, ftLastWriteTime.dwHighDateTime=0x1d8b9ad, nFileSizeHigh=0x0, nFileSizeLow=0xd4d0, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="tIs2ezheQuxi.avi", cAlternateFileName="TIS2EZ~1.AVI")) returned 0x55e490 [0267.421] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc91d8cf0, ftCreationTime.dwHighDateTime=0x1d8b2c8, ftLastAccessTime.dwLowDateTime=0x9fe02fa0, ftLastAccessTime.dwHighDateTime=0x1d8b9ad, ftLastWriteTime.dwLowDateTime=0x9fe02fa0, ftLastWriteTime.dwHighDateTime=0x1d8b9ad, nFileSizeHigh=0x0, nFileSizeLow=0xd4d0, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="tIs2ezheQuxi.avi", cAlternateFileName="TIS2EZ~1.AVI")) returned 0 [0267.421] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0267.421] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\tIs2ezheQuxi.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\tis2ezhequxi.avi")) returned 1 [0267.423] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\tIs2ezheQuxi.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\tis2ezhequxi.avi")) returned 0xffffffff [0267.423] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc603b070, ftCreationTime.dwHighDateTime=0x1d8b120, ftLastAccessTime.dwLowDateTime=0xa399fe00, ftLastAccessTime.dwHighDateTime=0x1d8b183, ftLastWriteTime.dwLowDateTime=0xa399fe00, ftLastWriteTime.dwHighDateTime=0x1d8b183, nFileSizeHigh=0x0, nFileSizeLow=0x15d22, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="Wnyk20dy85PKi.flv", cAlternateFileName="WNYK20~1.FLV")) returned 1 [0267.423] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.423] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.424] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.424] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0267.424] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\Wnyk20dy85PKi.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\wnyk20dy85pki.flv")) returned 0x20 [0267.424] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\Wnyk20dy85PKi.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\wnyk20dy85pki.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.425] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\Wnyk20dy85PKi.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\wnyk20dy85pki.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0267.425] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.426] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.428] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.428] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.428] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.429] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.429] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.429] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.429] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.429] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.430] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.430] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.430] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.430] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.430] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.431] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.431] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.431] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.433] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.433] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.433] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.433] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.434] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.434] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.434] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.434] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.434] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.435] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.435] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.435] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.435] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.435] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.436] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.436] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.436] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.436] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.436] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.437] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.437] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.437] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.437] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.437] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.438] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xd22, lpOverlapped=0x0) returned 1 [0267.438] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xd22, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xd22, lpOverlapped=0x0) returned 1 [0267.438] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.438] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.438] CloseHandle (hObject=0x1e0) returned 1 [0267.438] CloseHandle (hObject=0x210) returned 1 [0267.438] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\Wnyk20dy85PKi.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\wnyk20dy85pki.flv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\Wnyk20dy85PKi.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\wnyk20dy85pki.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.439] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\Wnyk20dy85PKi.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\wnyk20dy85pki.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.439] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\Wnyk20dy85PKi.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\wnyk20dy85pki.flv"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc603b070, ftCreationTime.dwHighDateTime=0x1d8b120, ftLastAccessTime.dwLowDateTime=0xa399fe00, ftLastAccessTime.dwHighDateTime=0x1d8b183, ftLastWriteTime.dwLowDateTime=0xa399fe00, ftLastWriteTime.dwHighDateTime=0x1d8b183, nFileSizeHigh=0x0, nFileSizeLow=0x15d22, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="Wnyk20dy85PKi.flv", cAlternateFileName="WNYK20~1.FLV")) returned 0x55e8d0 [0267.439] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc603b070, ftCreationTime.dwHighDateTime=0x1d8b120, ftLastAccessTime.dwLowDateTime=0xa399fe00, ftLastAccessTime.dwHighDateTime=0x1d8b183, ftLastWriteTime.dwLowDateTime=0xa399fe00, ftLastWriteTime.dwHighDateTime=0x1d8b183, nFileSizeHigh=0x0, nFileSizeLow=0x15d22, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="Wnyk20dy85PKi.flv", cAlternateFileName="WNYK20~1.FLV")) returned 0 [0267.439] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0267.439] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\Wnyk20dy85PKi.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\wnyk20dy85pki.flv")) returned 1 [0267.442] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\Wnyk20dy85PKi.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\wnyk20dy85pki.flv")) returned 0xffffffff [0267.442] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eadb50, ftCreationTime.dwHighDateTime=0x1d8bd3a, ftLastAccessTime.dwLowDateTime=0x62f118b0, ftLastAccessTime.dwHighDateTime=0x1d8be6d, ftLastWriteTime.dwLowDateTime=0x62f118b0, ftLastWriteTime.dwHighDateTime=0x1d8be6d, nFileSizeHigh=0x0, nFileSizeLow=0xfc4d, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="yF5D.mp4", cAlternateFileName="")) returned 1 [0267.442] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd850a80, ftCreationTime.dwHighDateTime=0x1d8ba83, ftLastAccessTime.dwLowDateTime=0xf5834ba0, ftLastAccessTime.dwHighDateTime=0x1d8bcb3, ftLastWriteTime.dwLowDateTime=0xf5834ba0, ftLastWriteTime.dwHighDateTime=0x1d8bcb3, nFileSizeHigh=0x0, nFileSizeLow=0x7bd0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="z2Sa.avi", cAlternateFileName="")) returned 1 [0267.442] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.442] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.443] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.443] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0267.443] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\z2Sa.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\z2sa.avi")) returned 0x20 [0267.443] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\z2Sa.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\z2sa.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0267.444] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\z2Sa.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\z2sa.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.444] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.445] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.446] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.446] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.446] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.446] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.446] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.447] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.447] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.448] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.448] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.448] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.449] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.449] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.449] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xbd0, lpOverlapped=0x0) returned 1 [0267.449] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xbd0, lpOverlapped=0x0) returned 1 [0267.450] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.450] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.450] CloseHandle (hObject=0x210) returned 1 [0267.450] CloseHandle (hObject=0x1e0) returned 1 [0267.450] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\z2Sa.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\z2sa.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\z2Sa.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\z2sa.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.450] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\z2Sa.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\z2sa.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.450] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\z2Sa.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\z2sa.avi"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd850a80, ftCreationTime.dwHighDateTime=0x1d8ba83, ftLastAccessTime.dwLowDateTime=0xf5834ba0, ftLastAccessTime.dwHighDateTime=0x1d8bcb3, ftLastWriteTime.dwLowDateTime=0xf5834ba0, ftLastWriteTime.dwHighDateTime=0x1d8bcb3, nFileSizeHigh=0x0, nFileSizeLow=0x7bd0, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="z2Sa.avi", cAlternateFileName="")) returned 0x55e8d0 [0267.450] FindNextFileA (in: hFindFile=0x55e8d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd850a80, ftCreationTime.dwHighDateTime=0x1d8ba83, ftLastAccessTime.dwLowDateTime=0xf5834ba0, ftLastAccessTime.dwHighDateTime=0x1d8bcb3, ftLastWriteTime.dwLowDateTime=0xf5834ba0, ftLastWriteTime.dwHighDateTime=0x1d8bcb3, nFileSizeHigh=0x0, nFileSizeLow=0x7bd0, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="z2Sa.avi", cAlternateFileName="")) returned 0 [0267.451] FindClose (in: hFindFile=0x55e8d0 | out: hFindFile=0x55e8d0) returned 1 [0267.451] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\z2Sa.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\z2sa.avi")) returned 1 [0267.452] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\z2Sa.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\z2sa.avi")) returned 0xffffffff [0267.452] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd850a80, ftCreationTime.dwHighDateTime=0x1d8ba83, ftLastAccessTime.dwLowDateTime=0xf5834ba0, ftLastAccessTime.dwHighDateTime=0x1d8bcb3, ftLastWriteTime.dwLowDateTime=0xf5834ba0, ftLastWriteTime.dwHighDateTime=0x1d8bcb3, nFileSizeHigh=0x0, nFileSizeLow=0x7bd0, dwReserved0=0x55a1c8, dwReserved1=0x550284, cFileName="z2Sa.avi", cAlternateFileName="")) returned 0 [0267.452] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0267.452] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4347fe61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4347fe61, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x50353869, dwReserved1=0x662e694b, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0267.452] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.452] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.453] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.453] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.453] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0267.453] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\desktop.ini")) returned 0x26 [0267.453] VirtualAlloc (lpAddress=0x23d8000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23d8000 [0267.453] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0267.454] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.454] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1f8, lpOverlapped=0x0) returned 1 [0267.455] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1f8, lpOverlapped=0x0) returned 1 [0267.456] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.456] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.456] CloseHandle (hObject=0x218) returned 1 [0267.456] CloseHandle (hObject=0x1e0) returned 1 [0267.456] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\desktop.ini"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.457] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.457] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\desktop.ini"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4347fe61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4347fe61, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0x55e310 [0267.457] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4347fe61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4347fe61, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0267.457] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0267.457] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\desktop.ini")) returned 1 [0267.458] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\desktop.ini" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\desktop.ini")) returned 0xffffffff [0267.458] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a9b8860, ftCreationTime.dwHighDateTime=0x1d8b1b9, ftLastAccessTime.dwLowDateTime=0xe1de420, ftLastAccessTime.dwHighDateTime=0x1d8b446, ftLastWriteTime.dwLowDateTime=0xe1de420, ftLastWriteTime.dwHighDateTime=0x1d8b446, nFileSizeHigh=0x0, nFileSizeLow=0x1812b, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="mwNhvkt.mp4", cAlternateFileName="")) returned 1 [0267.459] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26097430, ftCreationTime.dwHighDateTime=0x1d8b2b8, ftLastAccessTime.dwLowDateTime=0xc92ecb50, ftLastAccessTime.dwHighDateTime=0x1d8c00b, ftLastWriteTime.dwLowDateTime=0xc92ecb50, ftLastWriteTime.dwHighDateTime=0x1d8c00b, nFileSizeHigh=0x0, nFileSizeLow=0x7a5e, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="n8JDFGSB2.flv", cAlternateFileName="N8JDFG~1.FLV")) returned 1 [0267.459] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.459] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.459] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.459] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.459] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.459] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0267.459] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\n8JDFGSB2.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\n8jdfgsb2.flv")) returned 0x20 [0267.460] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\n8JDFGSB2.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\n8jdfgsb2.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.460] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\n8JDFGSB2.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\n8jdfgsb2.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0267.460] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.461] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.462] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.463] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.463] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.463] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.463] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.464] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.464] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.464] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.464] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.464] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.465] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.465] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.465] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xa5e, lpOverlapped=0x0) returned 1 [0267.465] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xa5e, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xa5e, lpOverlapped=0x0) returned 1 [0267.465] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.465] WriteFile (in: hFile=0x218, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.465] CloseHandle (hObject=0x1e0) returned 1 [0267.466] CloseHandle (hObject=0x218) returned 1 [0267.466] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\n8JDFGSB2.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\n8jdfgsb2.flv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\n8JDFGSB2.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\n8jdfgsb2.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.466] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\n8JDFGSB2.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\n8jdfgsb2.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.466] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\n8JDFGSB2.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\n8jdfgsb2.flv"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26097430, ftCreationTime.dwHighDateTime=0x1d8b2b8, ftLastAccessTime.dwLowDateTime=0xc92ecb50, ftLastAccessTime.dwHighDateTime=0x1d8c00b, ftLastWriteTime.dwLowDateTime=0xc92ecb50, ftLastWriteTime.dwHighDateTime=0x1d8c00b, nFileSizeHigh=0x0, nFileSizeLow=0x7a5e, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="n8JDFGSB2.flv", cAlternateFileName="N8JDFG~1.FLV")) returned 0x55e690 [0267.466] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26097430, ftCreationTime.dwHighDateTime=0x1d8b2b8, ftLastAccessTime.dwLowDateTime=0xc92ecb50, ftLastAccessTime.dwHighDateTime=0x1d8c00b, ftLastWriteTime.dwLowDateTime=0xc92ecb50, ftLastWriteTime.dwHighDateTime=0x1d8c00b, nFileSizeHigh=0x0, nFileSizeLow=0x7a5e, dwReserved0=0x5000005, dwReserved1=0x5, cFileName="n8JDFGSB2.flv", cAlternateFileName="N8JDFG~1.FLV")) returned 0 [0267.466] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0267.467] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\n8JDFGSB2.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\n8jdfgsb2.flv")) returned 1 [0267.469] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\n8JDFGSB2.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\n8jdfgsb2.flv")) returned 0xffffffff [0267.469] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5def99d0, ftCreationTime.dwHighDateTime=0x1d8b559, ftLastAccessTime.dwLowDateTime=0xa9e1a320, ftLastAccessTime.dwHighDateTime=0x1d8bb34, ftLastWriteTime.dwLowDateTime=0xa9e1a320, ftLastWriteTime.dwHighDateTime=0x1d8bb34, nFileSizeHigh=0x0, nFileSizeLow=0x2a10, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="oiFOzr1sMX1.mkv", cAlternateFileName="OIFOZR~1.MKV")) returned 1 [0267.469] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.469] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.469] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.470] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.470] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0267.470] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\oiFOzr1sMX1.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\oifozr1smx1.mkv")) returned 0x20 [0267.470] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\oiFOzr1sMX1.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\oifozr1smx1.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0267.470] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\oiFOzr1sMX1.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\oifozr1smx1.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.471] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.472] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.473] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.473] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.473] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xa10, lpOverlapped=0x0) returned 1 [0267.473] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xa10, lpOverlapped=0x0) returned 1 [0267.473] ReadFile (in: hFile=0x218, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.473] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.474] CloseHandle (hObject=0x218) returned 1 [0267.474] CloseHandle (hObject=0x1e0) returned 1 [0267.474] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\oiFOzr1sMX1.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\oifozr1smx1.mkv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\oiFOzr1sMX1.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\oifozr1smx1.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.474] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\oiFOzr1sMX1.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\oifozr1smx1.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.474] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\oiFOzr1sMX1.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\oifozr1smx1.mkv"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5def99d0, ftCreationTime.dwHighDateTime=0x1d8b559, ftLastAccessTime.dwLowDateTime=0xa9e1a320, ftLastAccessTime.dwHighDateTime=0x1d8bb34, ftLastWriteTime.dwLowDateTime=0xa9e1a320, ftLastWriteTime.dwHighDateTime=0x1d8bb34, nFileSizeHigh=0x0, nFileSizeLow=0x2a10, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="oiFOzr1sMX1.mkv", cAlternateFileName="OIFOZR~1.MKV")) returned 0x55e710 [0267.474] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5def99d0, ftCreationTime.dwHighDateTime=0x1d8b559, ftLastAccessTime.dwLowDateTime=0xa9e1a320, ftLastAccessTime.dwHighDateTime=0x1d8bb34, ftLastWriteTime.dwLowDateTime=0xa9e1a320, ftLastWriteTime.dwHighDateTime=0x1d8bb34, nFileSizeHigh=0x0, nFileSizeLow=0x2a10, dwReserved0=0x4000004, dwReserved1=0x4, cFileName="oiFOzr1sMX1.mkv", cAlternateFileName="OIFOZR~1.MKV")) returned 0 [0267.474] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0267.474] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\oiFOzr1sMX1.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\oifozr1smx1.mkv")) returned 1 [0267.475] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\oiFOzr1sMX1.mkv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\oifozr1smx1.mkv")) returned 0xffffffff [0267.476] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbde04c40, ftCreationTime.dwHighDateTime=0x1d8bf72, ftLastAccessTime.dwLowDateTime=0xc85c56b0, ftLastAccessTime.dwHighDateTime=0x1d8c0e8, ftLastWriteTime.dwLowDateTime=0xc85c56b0, ftLastWriteTime.dwHighDateTime=0x1d8c0e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ac, dwReserved0=0x552668, dwReserved1=0x2000002, cFileName="Qr0CzuC_rb.swf", cAlternateFileName="QR0CZU~1.SWF")) returned 1 [0267.476] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2fd70, ftCreationTime.dwHighDateTime=0x1d8b9f0, ftLastAccessTime.dwLowDateTime=0x3ca151f0, ftLastAccessTime.dwHighDateTime=0x1d8bd9d, ftLastWriteTime.dwLowDateTime=0x3ca151f0, ftLastWriteTime.dwHighDateTime=0x1d8bd9d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x660077, dwReserved1=0x2000000, cFileName="sIWWQ-WC9", cAlternateFileName="SIWWQ-~1")) returned 1 [0267.476] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2fd70, ftCreationTime.dwHighDateTime=0x1d8b9f0, ftLastAccessTime.dwLowDateTime=0x3ca151f0, ftLastAccessTime.dwHighDateTime=0x1d8bd9d, ftLastWriteTime.dwLowDateTime=0x3ca151f0, ftLastWriteTime.dwHighDateTime=0x1d8bd9d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName=".", cAlternateFileName="")) returned 0x55e850 [0267.476] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2fd70, ftCreationTime.dwHighDateTime=0x1d8b9f0, ftLastAccessTime.dwLowDateTime=0x3ca151f0, ftLastAccessTime.dwHighDateTime=0x1d8bd9d, ftLastWriteTime.dwLowDateTime=0x3ca151f0, ftLastWriteTime.dwHighDateTime=0x1d8bd9d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="..", cAlternateFileName="")) returned 1 [0267.476] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa50ac550, ftCreationTime.dwHighDateTime=0x1d8b613, ftLastAccessTime.dwLowDateTime=0xcc88ed30, ftLastAccessTime.dwHighDateTime=0x1d8b944, ftLastWriteTime.dwLowDateTime=0xcc88ed30, ftLastWriteTime.dwHighDateTime=0x1d8b944, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x556ac0, dwReserved1=0x550260, cFileName="LcmxR7.avi", cAlternateFileName="")) returned 1 [0267.476] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.477] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.477] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.477] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0267.477] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\LcmxR7.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\lcmxr7.avi")) returned 0x20 [0267.477] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\LcmxR7.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\lcmxr7.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0267.477] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\LcmxR7.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\lcmxr7.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0267.478] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.479] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.480] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.480] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.480] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.481] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.481] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x5f0, lpOverlapped=0x0) returned 1 [0267.481] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x5f0, lpOverlapped=0x0) returned 1 [0267.481] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.481] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.481] CloseHandle (hObject=0x218) returned 1 [0267.481] CloseHandle (hObject=0x210) returned 1 [0267.481] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\LcmxR7.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\lcmxr7.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\LcmxR7.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\lcmxr7.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.482] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\LcmxR7.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\lcmxr7.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.482] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\LcmxR7.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\lcmxr7.avi"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa50ac550, ftCreationTime.dwHighDateTime=0x1d8b613, ftLastAccessTime.dwLowDateTime=0xcc88ed30, ftLastAccessTime.dwHighDateTime=0x1d8b944, ftLastWriteTime.dwLowDateTime=0xcc88ed30, ftLastWriteTime.dwHighDateTime=0x1d8b944, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="LcmxR7.avi", cAlternateFileName="")) returned 0x55e5d0 [0267.482] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa50ac550, ftCreationTime.dwHighDateTime=0x1d8b613, ftLastAccessTime.dwLowDateTime=0xcc88ed30, ftLastAccessTime.dwHighDateTime=0x1d8b944, ftLastWriteTime.dwLowDateTime=0xcc88ed30, ftLastWriteTime.dwHighDateTime=0x1d8b944, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="LcmxR7.avi", cAlternateFileName="")) returned 0 [0267.482] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0267.482] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\LcmxR7.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\lcmxr7.avi")) returned 1 [0267.483] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\LcmxR7.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\lcmxr7.avi")) returned 0xffffffff [0267.483] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba92c7a0, ftCreationTime.dwHighDateTime=0x1d8b9cf, ftLastAccessTime.dwLowDateTime=0x63ef5720, ftLastAccessTime.dwHighDateTime=0x1d8ba41, ftLastWriteTime.dwLowDateTime=0x63ef5720, ftLastWriteTime.dwHighDateTime=0x1d8ba41, nFileSizeHigh=0x0, nFileSizeLow=0x6c40, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Mnnvfs8UvOlcl.flv", cAlternateFileName="MNNVFS~1.FLV")) returned 1 [0267.483] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.483] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.484] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.484] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0267.484] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\Mnnvfs8UvOlcl.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\mnnvfs8uvolcl.flv")) returned 0x20 [0267.484] VirtualAlloc (lpAddress=0x23dc000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23dc000 [0267.484] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\Mnnvfs8UvOlcl.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\mnnvfs8uvolcl.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0267.485] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\Mnnvfs8UvOlcl.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\mnnvfs8uvolcl.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0267.485] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.486] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.487] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.487] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.487] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.488] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.488] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.488] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.488] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.488] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.488] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.489] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.489] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0xc40, lpOverlapped=0x0) returned 1 [0267.489] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0xc40, lpOverlapped=0x0) returned 1 [0267.489] ReadFile (in: hFile=0x210, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.489] WriteFile (in: hFile=0x218, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.489] CloseHandle (hObject=0x210) returned 1 [0267.489] CloseHandle (hObject=0x218) returned 1 [0267.489] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\Mnnvfs8UvOlcl.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\mnnvfs8uvolcl.flv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\Mnnvfs8UvOlcl.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\mnnvfs8uvolcl.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.490] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\Mnnvfs8UvOlcl.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\mnnvfs8uvolcl.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.490] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\Mnnvfs8UvOlcl.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\mnnvfs8uvolcl.flv"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba92c7a0, ftCreationTime.dwHighDateTime=0x1d8b9cf, ftLastAccessTime.dwLowDateTime=0x63ef5720, ftLastAccessTime.dwHighDateTime=0x1d8ba41, ftLastWriteTime.dwLowDateTime=0x63ef5720, ftLastWriteTime.dwHighDateTime=0x1d8ba41, nFileSizeHigh=0x0, nFileSizeLow=0x6c40, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="Mnnvfs8UvOlcl.flv", cAlternateFileName="MNNVFS~1.FLV")) returned 0x55e5d0 [0267.490] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba92c7a0, ftCreationTime.dwHighDateTime=0x1d8b9cf, ftLastAccessTime.dwLowDateTime=0x63ef5720, ftLastAccessTime.dwHighDateTime=0x1d8ba41, ftLastWriteTime.dwLowDateTime=0x63ef5720, ftLastWriteTime.dwHighDateTime=0x1d8ba41, nFileSizeHigh=0x0, nFileSizeLow=0x6c40, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="Mnnvfs8UvOlcl.flv", cAlternateFileName="MNNVFS~1.FLV")) returned 0 [0267.490] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0267.490] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\Mnnvfs8UvOlcl.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\mnnvfs8uvolcl.flv")) returned 1 [0267.492] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\Mnnvfs8UvOlcl.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\mnnvfs8uvolcl.flv")) returned 0xffffffff [0267.492] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ca0ca0, ftCreationTime.dwHighDateTime=0x1d8ba06, ftLastAccessTime.dwLowDateTime=0x2a0fb690, ftLastAccessTime.dwHighDateTime=0x1d8bcf2, ftLastWriteTime.dwLowDateTime=0x2a0fb690, ftLastWriteTime.dwHighDateTime=0x1d8bcf2, nFileSizeHigh=0x0, nFileSizeLow=0x1392, dwReserved0=0x0, dwReserved1=0x0, cFileName="X72qAh71Gd3CZ5l.avi", cAlternateFileName="X72QAH~1.AVI")) returned 1 [0267.492] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.492] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.493] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.493] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.493] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.493] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0267.493] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\X72qAh71Gd3CZ5l.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\x72qah71gd3cz5l.avi")) returned 0x20 [0267.493] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\X72qAh71Gd3CZ5l.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\x72qah71gd3cz5l.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x218 [0267.494] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\X72qAh71Gd3CZ5l.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\x72qah71gd3cz5l.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0267.494] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.495] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x1000, lpOverlapped=0x0) returned 1 [0267.496] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x392, lpOverlapped=0x0) returned 1 [0267.496] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x392, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x392, lpOverlapped=0x0) returned 1 [0267.496] ReadFile (in: hFile=0x218, lpBuffer=0x19d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19d3e0*, lpNumberOfBytesRead=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.496] WriteFile (in: hFile=0x210, lpBuffer=0x19e3e0*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d12c, lpOverlapped=0x0 | out: lpBuffer=0x19e3e0*, lpNumberOfBytesWritten=0x19d12c*=0x0, lpOverlapped=0x0) returned 1 [0267.496] CloseHandle (hObject=0x218) returned 1 [0267.496] CloseHandle (hObject=0x210) returned 1 [0267.496] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\X72qAh71Gd3CZ5l.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\x72qah71gd3cz5l.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\X72qAh71Gd3CZ5l.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\x72qah71gd3cz5l.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.497] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\X72qAh71Gd3CZ5l.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\x72qah71gd3cz5l.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.497] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\X72qAh71Gd3CZ5l.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\x72qah71gd3cz5l.avi"), lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ca0ca0, ftCreationTime.dwHighDateTime=0x1d8ba06, ftLastAccessTime.dwLowDateTime=0x2a0fb690, ftLastAccessTime.dwHighDateTime=0x1d8bcf2, ftLastWriteTime.dwLowDateTime=0x2a0fb690, ftLastWriteTime.dwHighDateTime=0x1d8bcf2, nFileSizeHigh=0x0, nFileSizeLow=0x1392, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="X72qAh71Gd3CZ5l.avi", cAlternateFileName="X72QAH~1.AVI")) returned 0x55e750 [0267.497] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f27c | out: lpFindFileData=0x19f27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ca0ca0, ftCreationTime.dwHighDateTime=0x1d8ba06, ftLastAccessTime.dwLowDateTime=0x2a0fb690, ftLastAccessTime.dwHighDateTime=0x1d8bcf2, ftLastWriteTime.dwLowDateTime=0x2a0fb690, ftLastWriteTime.dwHighDateTime=0x1d8bcf2, nFileSizeHigh=0x0, nFileSizeLow=0x1392, dwReserved0=0x777968c7, dwReserved1=0xec0aaa51, cFileName="X72qAh71Gd3CZ5l.avi", cAlternateFileName="X72QAH~1.AVI")) returned 0 [0267.497] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0267.497] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\X72qAh71Gd3CZ5l.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\x72qah71gd3cz5l.avi")) returned 1 [0267.498] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\X72qAh71Gd3CZ5l.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\x72qah71gd3cz5l.avi")) returned 0xffffffff [0267.498] FindNextFileA (in: hFindFile=0x55e850, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ca0ca0, ftCreationTime.dwHighDateTime=0x1d8ba06, ftLastAccessTime.dwLowDateTime=0x2a0fb690, ftLastAccessTime.dwHighDateTime=0x1d8bcf2, ftLastWriteTime.dwLowDateTime=0x2a0fb690, ftLastWriteTime.dwHighDateTime=0x1d8bcf2, nFileSizeHigh=0x0, nFileSizeLow=0x1392, dwReserved0=0x0, dwReserved1=0x0, cFileName="X72qAh71Gd3CZ5l.avi", cAlternateFileName="X72QAH~1.AVI")) returned 0 [0267.498] FindClose (in: hFindFile=0x55e850 | out: hFindFile=0x55e850) returned 1 [0267.498] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831b0ea0, ftCreationTime.dwHighDateTime=0x1d8b596, ftLastAccessTime.dwLowDateTime=0xa6810d10, ftLastAccessTime.dwHighDateTime=0x1d8b5d0, ftLastWriteTime.dwLowDateTime=0xa6810d10, ftLastWriteTime.dwHighDateTime=0x1d8b5d0, nFileSizeHigh=0x0, nFileSizeLow=0xfd26, dwReserved0=0x33644731, dwReserved1=0x6c355a43, cFileName="sk2Tn_0.swf", cAlternateFileName="")) returned 1 [0267.499] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc093b800, ftCreationTime.dwHighDateTime=0x1d8ba86, ftLastAccessTime.dwLowDateTime=0x41588990, ftLastAccessTime.dwHighDateTime=0x1d8bf2b, ftLastWriteTime.dwLowDateTime=0x41588990, ftLastWriteTime.dwHighDateTime=0x1d8bf2b, nFileSizeHigh=0x0, nFileSizeLow=0x11020, dwReserved0=0x33644731, dwReserved1=0x6c355a43, cFileName="WKrUZfIi7AKxe1iu.mp4", cAlternateFileName="WKRUZF~1.MP4")) returned 1 [0267.499] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6064f0, ftCreationTime.dwHighDateTime=0x1d8bd88, ftLastAccessTime.dwLowDateTime=0x87b10c70, ftLastAccessTime.dwHighDateTime=0x1d8c055, ftLastWriteTime.dwLowDateTime=0x87b10c70, ftLastWriteTime.dwHighDateTime=0x1d8c055, nFileSizeHigh=0x0, nFileSizeLow=0x1548d, dwReserved0=0x310065, dwReserved1=0x750069, cFileName="wUWg61_zdaLIjlPP9.avi", cAlternateFileName="WUWG61~1.AVI")) returned 1 [0267.499] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.499] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.500] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.500] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0267.500] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\wUWg61_zdaLIjlPP9.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\wuwg61_zdalijlpp9.avi")) returned 0x20 [0267.500] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\wUWg61_zdaLIjlPP9.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\wuwg61_zdalijlpp9.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.500] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\wUWg61_zdaLIjlPP9.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\wuwg61_zdalijlpp9.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0267.501] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.502] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.503] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.503] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.503] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.503] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.503] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.504] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.504] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.504] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.505] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.505] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.505] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.505] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.505] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.505] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.506] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.506] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.506] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.506] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.506] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.506] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.507] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.507] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.507] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.507] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.507] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.508] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.508] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.508] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.508] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.508] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.508] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.509] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.510] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.510] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.510] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.510] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.510] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.511] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.511] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.511] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.511] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x48d, lpOverlapped=0x0) returned 1 [0267.511] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x48d, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x48d, lpOverlapped=0x0) returned 1 [0267.511] ReadFile (in: hFile=0x1e0, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.511] WriteFile (in: hFile=0x210, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.511] CloseHandle (hObject=0x1e0) returned 1 [0267.511] CloseHandle (hObject=0x210) returned 1 [0267.512] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\wUWg61_zdaLIjlPP9.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\wuwg61_zdalijlpp9.avi"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\wUWg61_zdaLIjlPP9.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\wuwg61_zdalijlpp9.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.512] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\wUWg61_zdaLIjlPP9.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\wuwg61_zdalijlpp9.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.512] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\wUWg61_zdaLIjlPP9.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\wuwg61_zdalijlpp9.avi"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6064f0, ftCreationTime.dwHighDateTime=0x1d8bd88, ftLastAccessTime.dwLowDateTime=0x87b10c70, ftLastAccessTime.dwHighDateTime=0x1d8c055, ftLastWriteTime.dwLowDateTime=0x87b10c70, ftLastWriteTime.dwHighDateTime=0x1d8c055, nFileSizeHigh=0x0, nFileSizeLow=0x1548d, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="wUWg61_zdaLIjlPP9.avi", cAlternateFileName="WUWG61~1.AVI")) returned 0x55e490 [0267.512] FindNextFileA (in: hFindFile=0x55e490, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6064f0, ftCreationTime.dwHighDateTime=0x1d8bd88, ftLastAccessTime.dwLowDateTime=0x87b10c70, ftLastAccessTime.dwHighDateTime=0x1d8c055, ftLastWriteTime.dwLowDateTime=0x87b10c70, ftLastWriteTime.dwHighDateTime=0x1d8c055, nFileSizeHigh=0x0, nFileSizeLow=0x1548d, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="wUWg61_zdaLIjlPP9.avi", cAlternateFileName="WUWG61~1.AVI")) returned 0 [0267.512] FindClose (in: hFindFile=0x55e490 | out: hFindFile=0x55e490) returned 1 [0267.512] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\wUWg61_zdaLIjlPP9.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\wuwg61_zdalijlpp9.avi")) returned 1 [0267.514] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\wUWg61_zdaLIjlPP9.avi" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\wuwg61_zdalijlpp9.avi")) returned 0xffffffff [0267.514] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59b398c0, ftCreationTime.dwHighDateTime=0x1d8bb36, ftLastAccessTime.dwLowDateTime=0x69510de0, ftLastAccessTime.dwHighDateTime=0x1d8bc43, ftLastWriteTime.dwLowDateTime=0x69510de0, ftLastWriteTime.dwHighDateTime=0x1d8bc43, nFileSizeHigh=0x0, nFileSizeLow=0x16c60, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ZSGop.flv", cAlternateFileName="")) returned 1 [0267.514] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.514] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.514] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.515] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.515] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.515] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0267.515] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\ZSGop.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\zsgop.flv")) returned 0x20 [0267.515] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\ZSGop.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\zsgop.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0267.516] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\ZSGop.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\zsgop.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e0 [0267.516] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.517] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.518] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.518] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.518] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.518] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.519] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.519] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.519] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.519] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.519] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.519] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.520] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.520] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.520] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.520] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.520] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.520] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.521] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.521] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.521] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.521] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.521] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.521] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.522] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.522] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.522] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.522] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.522] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.522] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.523] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.523] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.523] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.523] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.523] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.523] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.524] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.524] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.524] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.524] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.524] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.524] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.524] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.525] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x1000, lpOverlapped=0x0) returned 1 [0267.525] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0xc60, lpOverlapped=0x0) returned 1 [0267.525] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0xc60, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0xc60, lpOverlapped=0x0) returned 1 [0267.525] ReadFile (in: hFile=0x210, lpBuffer=0x19d648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19d648*, lpNumberOfBytesRead=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.525] WriteFile (in: hFile=0x1e0, lpBuffer=0x19e648*, nNumberOfBytesToWrite=0x0, lpNumberOfBytesWritten=0x19d394, lpOverlapped=0x0 | out: lpBuffer=0x19e648*, lpNumberOfBytesWritten=0x19d394*=0x0, lpOverlapped=0x0) returned 1 [0267.525] CloseHandle (hObject=0x210) returned 1 [0267.525] CloseHandle (hObject=0x1e0) returned 1 [0267.526] MoveFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\ZSGop.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\zsgop.flv"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\ZSGop.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\zsgop.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0 [0267.526] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\ZSGop.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\zsgop.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx")) returned 0x20 [0267.526] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\ZSGop.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\zsgop.flv"), lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59b398c0, ftCreationTime.dwHighDateTime=0x1d8bb36, ftLastAccessTime.dwLowDateTime=0x69510de0, ftLastAccessTime.dwHighDateTime=0x1d8bc43, ftLastWriteTime.dwLowDateTime=0x69510de0, ftLastWriteTime.dwHighDateTime=0x1d8bc43, nFileSizeHigh=0x0, nFileSizeLow=0x16c60, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="ZSGop.flv", cAlternateFileName="")) returned 0x55e390 [0267.526] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f4e4 | out: lpFindFileData=0x19f4e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59b398c0, ftCreationTime.dwHighDateTime=0x1d8bb36, ftLastAccessTime.dwLowDateTime=0x69510de0, ftLastAccessTime.dwHighDateTime=0x1d8bc43, ftLastWriteTime.dwLowDateTime=0x69510de0, ftLastWriteTime.dwHighDateTime=0x1d8bc43, nFileSizeHigh=0x0, nFileSizeLow=0x16c60, dwReserved0=0x777968c7, dwReserved1=0xec0aa9c9, cFileName="ZSGop.flv", cAlternateFileName="")) returned 0 [0267.526] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0267.526] DeleteFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\ZSGop.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\zsgop.flv")) returned 1 [0267.531] GetFileAttributesA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\ZSGop.flv" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\zsgop.flv")) returned 0xffffffff [0267.531] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59b398c0, ftCreationTime.dwHighDateTime=0x1d8bb36, ftLastAccessTime.dwLowDateTime=0x69510de0, ftLastAccessTime.dwHighDateTime=0x1d8bc43, ftLastWriteTime.dwLowDateTime=0x69510de0, ftLastWriteTime.dwHighDateTime=0x1d8bc43, nFileSizeHigh=0x0, nFileSizeLow=0x16c60, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="ZSGop.flv", cAlternateFileName="")) returned 0 [0267.531] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0267.531] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6fc2a1c5, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6fc2a1c5, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6f697461, cFileName="Videos", cAlternateFileName="")) returned 0 [0267.532] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0267.532] FindNextFileA (in: hFindFile=0x55e3d0, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x84ac775d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x84ac775d, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x696e7373, dwReserved1=0x73657275, cFileName="RDhJ0CNFevzX", cAlternateFileName="RDHJ0C~1")) returned 0 [0267.532] FindClose (in: hFindFile=0x55e3d0 | out: hFindFile=0x55e3d0) returned 1 [0267.532] GetWindowTextLengthA (hWnd=0xa001e) returned 8 [0267.532] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0267.532] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0267.532] GetWindowTextA (in: hWnd=0xa001e, lpString=0x70262c, nMaxCount=9 | out: lpString="C:\\Users") returned 8 [0267.532] GetPropA (hWnd=0xa001e, lpString="SELF_") returned 0x1e74d60 [0267.532] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0xa001e, Msg=0xd, wParam=0x9, lParam=0x70262c) returned 0x8 [0267.532] FindFirstFileA (in: lpFileName="C:\\Users\\*.*" (normalized: "c:\\users\\*.*"), lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x2949c3c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2949c3c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19fa1c, dwReserved1=0x75639ef5, cFileName=".", cAlternateFileName="")) returned 0x55e250 [0267.533] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x2949c3c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2949c3c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19fa1c, dwReserved1=0x75639ef5, cFileName="..", cAlternateFileName="")) returned 1 [0267.533] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x4f6643a1, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x4f6643a1, ftLastAccessTime.dwHighDateTime=0x1d112ea, ftLastWriteTime.dwLowDateTime=0x4f6643a1, ftLastWriteTime.dwHighDateTime=0x1d112ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x75639ef5, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0267.533] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0267.533] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0267.533] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0267.533] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0267.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0267.533] CryptAcquireContextA (in: phProv=0x19fb24, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19fb24*=0x570f40) returned 1 [0268.107] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19fadc | out: phHash=0x19fadc) returned 1 [0268.109] CryptHashData (hHash=0x55e390, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.109] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19fb20 | out: phKey=0x19fb20*=0x55e650) returned 1 [0268.110] CryptDestroyHash (hHash=0x55e390) returned 1 [0268.110] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19fb30*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19fb30*=0x18) returned 1 [0268.110] GetLastError () returned 0x0 [0268.110] GetLastError () returned 0x0 [0268.113] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.114] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.114] CreateFileA (lpFileName="C:\\Users\\All Users\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0268.115] WriteFile (in: hFile=0x200, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f858, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19f858*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.116] SetEndOfFile (hFile=0x200) returned 1 [0268.116] CloseHandle (hObject=0x200) returned 1 [0268.116] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.129] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.129] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0268.130] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.130] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.131] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.131] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.131] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.131] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.131] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.132] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.132] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.332] CryptDestroyKey (hKey=0x55e650) returned 1 [0268.332] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0268.332] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\*.*" (normalized: "c:\\users\\all users\\*.*"), lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x43ba1ce8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0268.334] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x43ba1ce8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.334] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0268.334] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.334] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.334] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.334] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.334] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.334] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0268.334] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570858) returned 1 [0268.335] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0268.335] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.335] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e610) returned 1 [0268.335] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0268.335] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0268.335] GetLastError () returned 0x0 [0268.335] GetLastError () returned 0x0 [0268.336] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.336] CreateFileA (lpFileName="C:\\Users\\All Users\\Application Data\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\application data\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0268.337] WriteFile (in: hFile=0x23c, lpBuffer=0x23e529c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e529c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.337] SetEndOfFile (hFile=0x23c) returned 1 [0268.337] CloseHandle (hObject=0x23c) returned 1 [0268.337] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.339] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.339] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.339] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.339] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.339] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.339] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0268.339] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.340] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.340] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.340] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.340] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.340] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.340] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.340] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.340] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.340] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.340] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.341] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.341] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.341] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.341] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0268.341] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.341] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.341] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.341] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.341] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.342] CryptDestroyKey (hKey=0x55e610) returned 1 [0268.342] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0268.342] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Application Data\\*.*" (normalized: "c:\\users\\all users\\application data\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0268.342] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x20, cFileName="Comms", cAlternateFileName="")) returned 1 [0268.342] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.342] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.342] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.342] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.343] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.343] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0268.343] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571518) returned 1 [0268.343] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0268.343] CryptHashData (hHash=0x55e310, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.343] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e910) returned 1 [0268.344] CryptDestroyHash (hHash=0x55e310) returned 1 [0268.344] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0268.344] GetLastError () returned 0x0 [0268.344] GetLastError () returned 0x0 [0268.344] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.344] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.345] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.345] CreateFileA (lpFileName="C:\\Users\\All Users\\Comms\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\comms\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0268.346] WriteFile (in: hFile=0x23c, lpBuffer=0x23e35a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e35a4*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.347] SetEndOfFile (hFile=0x23c) returned 1 [0268.348] CloseHandle (hObject=0x23c) returned 1 [0268.348] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.349] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.349] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.349] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.349] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0268.349] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.349] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.350] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.350] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.350] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.350] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.350] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.350] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.350] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.350] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.351] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.351] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.351] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.351] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.351] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.351] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.351] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.351] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.352] CryptDestroyKey (hKey=0x55e910) returned 1 [0268.352] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0268.352] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Comms\\*.*" (normalized: "c:\\users\\all users\\comms\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x43ddeca7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0268.352] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcb9c8f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x43ddeca7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.352] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ddeca7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43ddeca7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43ddeca7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.352] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ddeca7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43ddeca7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43ddeca7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.352] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0268.352] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="Desktop", cAlternateFileName="")) returned 1 [0268.352] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.352] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.353] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.353] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.353] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.353] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0268.353] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570fc8) returned 1 [0268.354] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0268.354] CryptHashData (hHash=0x55e690, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.354] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e750) returned 1 [0268.354] CryptDestroyHash (hHash=0x55e690) returned 1 [0268.354] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0268.354] GetLastError () returned 0x0 [0268.354] GetLastError () returned 0x0 [0268.354] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.355] CreateFileA (lpFileName="C:\\Users\\All Users\\Desktop\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\desktop\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0268.361] WriteFile (in: hFile=0x23c, lpBuffer=0x23e35b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e35b4*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.363] SetEndOfFile (hFile=0x23c) returned 1 [0268.369] CloseHandle (hObject=0x23c) returned 1 [0268.369] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.370] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.370] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0268.371] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.371] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.371] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.371] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.371] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.371] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.371] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.371] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.371] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.371] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.371] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.372] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.372] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0268.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.372] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.372] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.372] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.372] CryptDestroyKey (hKey=0x55e750) returned 1 [0268.372] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0268.372] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Desktop\\*.*" (normalized: "c:\\users\\all users\\desktop\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0268.373] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x20, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0268.373] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.373] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.373] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.373] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.373] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.373] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0268.373] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570748) returned 1 [0268.374] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0268.374] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.374] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e190) returned 1 [0268.374] CryptDestroyHash (hHash=0x55e910) returned 1 [0268.374] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0268.374] GetLastError () returned 0x0 [0268.374] GetLastError () returned 0x0 [0268.374] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.375] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.375] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.376] CreateFileA (lpFileName="C:\\Users\\All Users\\Documents\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\documents\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0268.378] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.379] SetEndOfFile (hFile=0x23c) returned 1 [0268.379] CloseHandle (hObject=0x23c) returned 1 [0268.379] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.380] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.380] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.385] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0268.386] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.386] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.386] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.386] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.386] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.387] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.387] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.387] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.387] CryptDestroyKey (hKey=0x55e190) returned 1 [0268.387] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0268.388] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Documents\\*.*" (normalized: "c:\\users\\all users\\documents\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0268.388] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ba1ce8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43ba1ce8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43ba1ce8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x556ac0, dwReserved1=0x20, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.388] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1b54cf26, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b54cf26, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x556ac0, dwReserved1=0x20, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0268.388] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.388] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.388] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.388] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.388] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.388] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0268.388] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570f40) returned 1 [0268.389] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0268.389] CryptHashData (hHash=0x55e7d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.389] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e210) returned 1 [0268.389] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0268.389] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0268.389] GetLastError () returned 0x0 [0268.389] GetLastError () returned 0x0 [0268.389] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.390] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0268.391] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.392] SetEndOfFile (hFile=0x23c) returned 1 [0268.393] CloseHandle (hObject=0x23c) returned 1 [0268.393] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.393] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.394] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.394] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0268.394] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.394] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.394] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.394] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.395] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.395] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.395] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.395] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.396] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.396] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.396] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.396] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.396] CryptDestroyKey (hKey=0x55e210) returned 1 [0268.396] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0268.396] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*.*" (normalized: "c:\\users\\all users\\microsoft\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1b54cf26, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x43e5139b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0268.396] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1b54cf26, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x43e5139b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.397] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5e44e88, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0268.397] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.397] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.397] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.397] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.397] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.397] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0268.397] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570fc8) returned 1 [0268.398] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0268.398] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.398] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e210) returned 1 [0268.398] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0268.398] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f660*=0x18) returned 1 [0268.398] GetLastError () returned 0x0 [0268.398] GetLastError () returned 0x0 [0268.398] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.399] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.402] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.403] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0268.404] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.406] SetEndOfFile (hFile=0x240) returned 1 [0268.407] CloseHandle (hObject=0x240) returned 1 [0268.407] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.407] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.407] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.407] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.408] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.408] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.408] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0268.408] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.408] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.408] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.408] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.408] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.408] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.408] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.409] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.409] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.409] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.409] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.409] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0268.409] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.409] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.409] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.409] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.410] CryptDestroyKey (hKey=0x55e210) returned 1 [0268.410] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0268.410] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x43e765d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0268.410] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x43e765d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.410] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b641eb6, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4BAD322A-C043-4DED-A97A-6FE0C4412FBE", cAlternateFileName="4BAD32~1")) returned 1 [0268.410] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.410] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.410] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.411] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.411] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0268.411] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570f40) returned 1 [0268.411] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.411] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.411] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0268.411] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0268.412] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.412] GetLastError () returned 0x0 [0268.412] GetLastError () returned 0x0 [0268.412] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.412] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.413] WriteFile (in: hFile=0x244, lpBuffer=0x23e5294*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e5294*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.414] SetEndOfFile (hFile=0x244) returned 1 [0268.415] CloseHandle (hObject=0x244) returned 1 [0268.415] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.415] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.416] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0268.418] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.418] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.418] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.418] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.418] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.418] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.418] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.418] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.418] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.418] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.418] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.419] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.419] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.419] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.419] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.419] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.419] CryptDestroyKey (hKey=0x55e610) returned 1 [0268.419] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0268.419] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x43e765d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0268.420] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b641eb6, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x43e765d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.420] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe34da4f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe34da4f3, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0268.420] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.420] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.420] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.420] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0268.420] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570a78) returned 1 [0268.421] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.421] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.421] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e310) returned 1 [0268.421] CryptDestroyHash (hHash=0x55e710) returned 1 [0268.421] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.421] GetLastError () returned 0x0 [0268.421] GetLastError () returned 0x0 [0268.421] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.422] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.422] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.423] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\en-us.16\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.424] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.425] SetEndOfFile (hFile=0x248) returned 1 [0268.425] CloseHandle (hObject=0x248) returned 1 [0268.425] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.426] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.426] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0268.426] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.427] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.427] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.427] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.427] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.427] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.428] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.428] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.428] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.428] CryptDestroyKey (hKey=0x55e310) returned 1 [0268.428] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0268.428] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\en-us.16\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\en-us.16\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe34da4f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x43e9c4f7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0268.428] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe34da4f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x43e9c4f7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.428] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e9c4f7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43e9c4f7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43e9c4f7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.428] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f0737, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f0737, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x22d02900, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5765, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0268.428] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5f1a63, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b5f1a63, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x405534, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0268.428] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3382b8a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe3382b8a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe34b3e69, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STREAM~1.CRY")) returned 1 [0268.429] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3382b8a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe3382b8a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe34b3e69, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STREAM~1.CRY")) returned 0 [0268.429] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0268.429] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e765d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43e765d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43e765d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x2e363878, dwReserved1=0x752d6e65, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.429] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe399ed3b, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe399ed3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363878, dwReserved1=0x752d6e65, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0268.429] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.429] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.429] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.429] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.429] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.429] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0268.429] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570858) returned 1 [0268.430] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.430] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.430] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e710) returned 1 [0268.430] CryptDestroyHash (hHash=0x55e610) returned 1 [0268.430] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.430] GetLastError () returned 0x0 [0268.430] GetLastError () returned 0x0 [0268.430] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.431] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\x-none.16\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.431] WriteFile (in: hFile=0x248, lpBuffer=0x23e5254*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e5254*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.433] SetEndOfFile (hFile=0x248) returned 1 [0268.434] CloseHandle (hObject=0x248) returned 1 [0268.434] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.435] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.435] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0268.435] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.435] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.436] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.436] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.436] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.436] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.436] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.436] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.436] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.436] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0268.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.437] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.437] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.437] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.437] CryptDestroyKey (hKey=0x55e710) returned 1 [0268.437] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0268.437] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\4BAD322A-C043-4DED-A97A-6FE0C4412FBE\\x-none.16\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\4bad322a-c043-4ded-a97a-6fe0c4412fbe\\x-none.16\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe399ed3b, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x43e9c4f7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0268.437] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe399ed3b, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x43e9c4f7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.437] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e9c4f7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43e9c4f7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43ec28f6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.437] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x206dcf00, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5220, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0268.437] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61bc49, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b61bc49, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x405534, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0268.437] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3500394, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe3500394, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe3978a21, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x405534, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STREAM~1.CRY")) returned 1 [0268.438] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3500394, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe3500394, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe3978a21, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x405534, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STREAM~1.CRY")) returned 0 [0268.438] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0268.438] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b5f5640, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe399ed3b, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe399ed3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363878, dwReserved1=0x752d6e65, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0268.438] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0268.438] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd58489b0, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd584c46a, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5911742, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e3631, dwReserved1=0x5f4f545f, cFileName="9566930B-D1DD-4075-BFE6-74DD69B13189", cAlternateFileName="956693~1")) returned 1 [0268.438] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.438] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.438] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.438] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0268.438] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5710d8) returned 1 [0268.439] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.439] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.439] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e290) returned 1 [0268.439] CryptDestroyHash (hHash=0x55e910) returned 1 [0268.439] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.439] GetLastError () returned 0x0 [0268.439] GetLastError () returned 0x0 [0268.439] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.440] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.440] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.441] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.443] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.444] SetEndOfFile (hFile=0x244) returned 1 [0268.444] CloseHandle (hObject=0x244) returned 1 [0268.444] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.446] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.446] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.446] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.446] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0268.446] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.446] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.447] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.447] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.447] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.447] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0268.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.448] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.448] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.448] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.448] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.448] CryptDestroyKey (hKey=0x55e290) returned 1 [0268.448] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0268.448] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd58489b0, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd584c46a, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x43ec28f6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0268.448] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd58489b0, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd584c46a, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x43ec28f6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.448] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5911742, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xe3c053a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe3c053a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0268.449] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.449] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.449] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.449] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0268.449] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571270) returned 1 [0268.450] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.450] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.450] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0268.450] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0268.450] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.450] GetLastError () returned 0x0 [0268.450] GetLastError () returned 0x0 [0268.450] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.451] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\en-us.16\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.452] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.453] SetEndOfFile (hFile=0x248) returned 1 [0268.453] CloseHandle (hObject=0x248) returned 1 [0268.453] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.454] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.454] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.454] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.454] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.454] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.454] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0268.455] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.455] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.455] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.455] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.455] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.455] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.455] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.455] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.455] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.456] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.456] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.456] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.456] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.456] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.456] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.456] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.456] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.456] CryptDestroyKey (hKey=0x55e610) returned 1 [0268.456] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0268.457] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\en-us.16\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\en-us.16\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5911742, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xe3c053a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x43ee8a37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0268.457] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5911742, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xe3c053a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x43ee8a37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.457] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ee8a37, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43ee8a37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43ee8a37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.457] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5916623, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5916623, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x22d02900, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5765, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0268.457] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd59215d7, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd59215d7, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x405534, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0268.457] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe39c4e79, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe39c4e79, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe3c053a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STREAM~1.CRY")) returned 1 [0268.457] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe39c4e79, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe39c4e79, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe3c053a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0xd81d4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STREAM~1.CRY")) returned 0 [0268.457] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0268.457] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ec28f6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43ec28f6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43ec28f6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x2e363878, dwReserved1=0x752d6e65, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.457] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xe40ebed6, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe40ebed6, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363878, dwReserved1=0x752d6e65, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0268.457] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.457] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.457] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.457] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0268.458] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571408) returned 1 [0268.458] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.458] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.458] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0268.458] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0268.458] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.458] GetLastError () returned 0x0 [0268.458] GetLastError () returned 0x0 [0268.458] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.459] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.460] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.460] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\x-none.16\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.462] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.464] SetEndOfFile (hFile=0x248) returned 1 [0268.464] CloseHandle (hObject=0x248) returned 1 [0268.464] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.465] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.465] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.465] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.466] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.466] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.466] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.466] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.466] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.467] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.467] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.467] CryptDestroyKey (hKey=0x55e910) returned 1 [0268.467] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0268.467] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\9566930B-D1DD-4075-BFE6-74DD69B13189\\x-none.16\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\9566930b-d1dd-4075-bfe6-74dd69b13189\\x-none.16\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xe40ebed6, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x43ee8a37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0268.467] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xe40ebed6, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x43ee8a37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.467] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ee8a37, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43ee8a37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43f0ec3f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.467] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd585af2f, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd585af2f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x206dcf00, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5220, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0268.468] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5876774, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5876774, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x341a3500, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x405534, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0268.468] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3c27487, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe3c27487, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe40ebed6, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x405534, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STREAM~1.CRY")) returned 1 [0268.468] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3c27487, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe3c27487, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe40ebed6, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x38b5ce, dwReserved0=0x405534, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STREAM~1.CRY")) returned 0 [0268.468] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0268.468] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd584b1e3, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xe40ebed6, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe40ebed6, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e363878, dwReserved1=0x752d6e65, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0268.468] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0268.468] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d04153d, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d04153d, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d04153d, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x544e3631, dwReserved1=0x5f4f545f, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0268.468] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5e44e88, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xd5e44e88, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xd5e47593, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x544e3631, dwReserved1=0x5f4f545f, cFileName="DeploymentConfig.1.xml", cAlternateFileName="DEPLOY~3.XML")) returned 1 [0268.468] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c5095b, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x85c5095b, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x85c5095b, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x544e3631, dwReserved1=0x5f4f545f, cFileName="DeploymentConfig.2.xml", cAlternateFileName="DEPLOY~2.XML")) returned 1 [0268.468] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e765d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43e765d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43e765d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e3631, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.468] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e3631, dwReserved1=0x5f4f545f, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0268.468] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.468] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.468] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.468] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0268.468] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570748) returned 1 [0268.469] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.469] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.469] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0268.469] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0268.469] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.469] GetLastError () returned 0x0 [0268.469] GetLastError () returned 0x0 [0268.469] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.470] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.472] WriteFile (in: hFile=0x244, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.473] SetEndOfFile (hFile=0x244) returned 1 [0268.473] CloseHandle (hObject=0x244) returned 1 [0268.473] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.474] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.474] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.474] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.474] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.474] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.474] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0268.475] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.475] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.475] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.475] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.475] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.475] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0268.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.476] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.476] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.476] CryptDestroyKey (hKey=0x55e610) returned 1 [0268.476] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0268.476] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x43f0ec3f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0268.476] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x43f0ec3f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.477] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1d7a4d6f, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1 [0268.477] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.477] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.477] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.477] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0268.477] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5708e0) returned 1 [0268.478] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.478] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.478] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0268.478] CryptDestroyHash (hHash=0x55e790) returned 1 [0268.478] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.478] GetLastError () returned 0x0 [0268.478] GetLastError () returned 0x0 [0268.478] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.479] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.479] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.480] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.480] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.481] SetEndOfFile (hFile=0x248) returned 1 [0268.481] CloseHandle (hObject=0x248) returned 1 [0268.482] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.483] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.483] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.483] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.483] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.483] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.483] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0268.483] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.483] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.484] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.484] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.484] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.484] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.484] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.484] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.484] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.484] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.484] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.484] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0268.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.485] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.485] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.485] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0268.485] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0268.485] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x43f35d01, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0268.485] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1d7a4d6f, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x43f35d01, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.485] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f35d01, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43f35d01, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43f35d01, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.485] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xfc9e8858, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9e8858, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0268.485] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.485] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.486] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.486] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0268.486] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0268.486] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0268.486] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.486] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0268.486] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0268.486] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0268.486] GetLastError () returned 0x0 [0268.487] GetLastError () returned 0x0 [0268.487] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.487] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0268.488] WriteFile (in: hFile=0x24c, lpBuffer=0x23e5244*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e5244*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.489] SetEndOfFile (hFile=0x24c) returned 1 [0268.489] CloseHandle (hObject=0x24c) returned 1 [0268.489] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.490] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.490] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.490] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.490] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.491] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.491] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.491] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.491] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.491] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.491] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.491] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.491] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.491] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.491] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.492] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.492] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.492] CryptDestroyKey (hKey=0x55e750) returned 1 [0268.492] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0268.492] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xfc9e8858, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x43f35d01, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0268.492] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xfc9e8858, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x43f35d01, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.492] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f35d01, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43f35d01, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43f35d01, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.492] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f35d01, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43f35d01, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43f35d01, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.492] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0268.492] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d7a4d6f, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xfc9e8858, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9e8858, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0 [0268.492] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0268.492] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f0ec3f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43f0ec3f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43f0ec3f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.493] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0268.493] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.493] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.493] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.493] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.493] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.493] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0268.493] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570fc8) returned 1 [0268.494] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.494] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.494] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e2d0) returned 1 [0268.494] CryptDestroyHash (hHash=0x55e290) returned 1 [0268.494] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.494] GetLastError () returned 0x0 [0268.494] GetLastError () returned 0x0 [0268.494] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.497] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.497] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.498] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.498] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.499] SetEndOfFile (hFile=0x248) returned 1 [0268.500] CloseHandle (hObject=0x248) returned 1 [0268.500] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.500] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.500] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.500] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.500] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0268.501] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.501] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.501] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.501] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.502] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.502] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.502] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.502] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.502] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0268.502] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0268.503] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x43f5c1ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0268.503] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x43f5c1ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.503] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f5c1ca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43f5c1ca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43f5c1ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.503] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 1 [0268.503] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.503] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.503] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.503] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.503] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.503] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0268.503] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0268.504] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0268.504] CryptHashData (hHash=0x55e310, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.504] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0268.504] CryptDestroyHash (hHash=0x55e310) returned 1 [0268.504] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0268.504] GetLastError () returned 0x0 [0268.504] GetLastError () returned 0x0 [0268.504] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.505] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0268.505] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.506] SetEndOfFile (hFile=0x24c) returned 1 [0268.506] CloseHandle (hObject=0x24c) returned 1 [0268.506] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.507] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.507] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.507] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.507] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.508] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.508] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0268.508] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.513] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.514] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.514] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.514] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.514] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.514] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.514] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.514] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.514] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.514] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.514] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.514] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.514] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.514] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0268.514] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.515] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.515] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.515] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.515] CryptDestroyKey (hKey=0x55e910) returned 1 [0268.515] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0268.515] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x43f5c1ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0268.515] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x43f5c1ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.515] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f5c1ca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43f5c1ca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43f5c1ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.515] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f5c1ca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43f5c1ca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43f5c1ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.516] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0268.516] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 0 [0268.516] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0268.516] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da7a7ac, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1da7a7ac, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1da7a7ac, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 0 [0268.516] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0268.516] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1c4bfed4, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e6f6974, dwReserved1=0x5f4f545f, cFileName="UserData", cAlternateFileName="")) returned 1 [0268.516] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.516] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.516] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.516] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.517] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0268.517] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571518) returned 1 [0268.517] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.517] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.517] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0268.518] CryptDestroyHash (hHash=0x55e910) returned 1 [0268.518] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.518] GetLastError () returned 0x0 [0268.518] GetLastError () returned 0x0 [0268.518] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.519] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.519] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.520] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\userdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.521] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.522] SetEndOfFile (hFile=0x244) returned 1 [0268.523] CloseHandle (hObject=0x244) returned 1 [0268.523] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.523] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.524] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.524] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.524] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.524] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.524] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.524] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.524] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.524] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.524] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.525] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.525] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.525] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.526] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0268.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.526] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.526] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.526] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0268.526] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0268.527] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\userdata\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x43f8a02c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0268.527] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4bfed4, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1c4bfed4, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x43f8a02c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.527] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f8a02c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43f8a02c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43f8a02c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.527] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f8a02c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43f8a02c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43f8a02c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.527] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0268.527] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe25ce006, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0268.527] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.527] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.527] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.527] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0268.528] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571050) returned 1 [0268.528] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.528] CryptHashData (hHash=0x55e290, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.528] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e690) returned 1 [0268.528] CryptDestroyHash (hHash=0x55e290) returned 1 [0268.528] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.528] GetLastError () returned 0x0 [0268.528] GetLastError () returned 0x0 [0268.529] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.529] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.530] WriteFile (in: hFile=0x244, lpBuffer=0x23e5270*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e5270*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.531] SetEndOfFile (hFile=0x244) returned 1 [0268.532] CloseHandle (hObject=0x244) returned 1 [0268.532] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.533] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.533] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0268.534] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.535] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.535] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.536] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.536] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.536] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.537] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.537] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.537] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.538] CryptDestroyKey (hKey=0x55e690) returned 1 [0268.538] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0268.538] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x43fa76a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0268.538] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x43fa76a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.538] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fa76a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43fa76a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43fa76a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.538] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x828cdbb9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x64e40818, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0xd1e70, dwReserved0=0x405534, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0268.539] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x828cdbb9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x64e40818, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0xd1e70, dwReserved0=0x405534, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 0 [0268.539] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0268.539] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x828cdbb9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe25ce006, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xe25ce006, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0268.539] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0268.539] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x322d3939, dwReserved1=0x2d423033, cFileName="Crypto", cAlternateFileName="")) returned 1 [0268.539] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.539] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.539] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.539] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.540] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0268.540] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570748) returned 1 [0268.541] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0268.541] CryptHashData (hHash=0x55e210, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.543] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e390) returned 1 [0268.543] CryptDestroyHash (hHash=0x55e210) returned 1 [0268.543] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18) returned 1 [0268.543] GetLastError () returned 0x0 [0268.543] GetLastError () returned 0x0 [0268.543] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.544] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.545] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.545] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\crypto\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0268.548] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.549] SetEndOfFile (hFile=0x240) returned 1 [0268.549] CloseHandle (hObject=0x240) returned 1 [0268.550] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.550] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.551] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0268.551] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.551] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.552] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.552] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.552] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.552] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.552] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.552] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.552] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.552] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.552] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.552] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.553] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.553] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.553] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.553] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.553] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.553] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.553] CryptDestroyKey (hKey=0x55e390) returned 1 [0268.553] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0268.553] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x43fcda4c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0268.554] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x43fcda4c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.554] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0268.554] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.554] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.554] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.554] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0268.554] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570c98) returned 1 [0268.555] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.555] CryptHashData (hHash=0x55e910, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.555] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e750) returned 1 [0268.555] CryptDestroyHash (hHash=0x55e910) returned 1 [0268.555] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.555] GetLastError () returned 0x0 [0268.555] GetLastError () returned 0x0 [0268.556] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.556] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.558] WriteFile (in: hFile=0x244, lpBuffer=0x23e35dc*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e35dc*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.560] SetEndOfFile (hFile=0x244) returned 1 [0268.560] CloseHandle (hObject=0x244) returned 1 [0268.560] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.561] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.561] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.561] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.562] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.562] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.562] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.562] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.562] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.563] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.563] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0268.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.563] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.563] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.563] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.564] CryptDestroyKey (hKey=0x55e750) returned 1 [0268.564] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0268.564] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x43ff3c11, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0268.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x43ff3c11, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ff3c11, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43ff3c11, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43ff3c11, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0268.564] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.564] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.564] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.565] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0268.565] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570a78) returned 1 [0268.565] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.565] CryptHashData (hHash=0x55e390, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.565] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e210) returned 1 [0268.566] CryptDestroyHash (hHash=0x55e390) returned 1 [0268.566] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.566] GetLastError () returned 0x0 [0268.566] GetLastError () returned 0x0 [0268.566] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.567] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.568] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.569] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.571] WriteFile (in: hFile=0x248, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.573] SetEndOfFile (hFile=0x248) returned 1 [0268.574] CloseHandle (hObject=0x248) returned 1 [0268.580] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.580] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.580] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.581] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0268.581] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.581] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.581] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.582] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.582] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.582] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.582] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.582] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.583] CryptDestroyKey (hKey=0x55e210) returned 1 [0268.583] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0268.583] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\dss\\machinekeys\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x43ff3c11, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0268.583] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x43ff3c11, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.583] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ff3c11, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43ff3c11, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44019f88, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.583] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ff3c11, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43ff3c11, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44019f88, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.583] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0268.583] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0268.584] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0268.584] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fcda4c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43fcda4c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43fcda4c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x7379654b, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.584] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7379654b, dwReserved1=0x5f4f545f, cFileName="Keys", cAlternateFileName="")) returned 1 [0268.584] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.584] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.584] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.584] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0268.584] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570eb8) returned 1 [0268.585] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.585] CryptHashData (hHash=0x55e210, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.585] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0268.585] CryptDestroyHash (hHash=0x55e210) returned 1 [0268.585] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.585] GetLastError () returned 0x0 [0268.585] GetLastError () returned 0x0 [0268.585] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.585] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.586] WriteFile (in: hFile=0x244, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.587] SetEndOfFile (hFile=0x244) returned 1 [0268.587] CloseHandle (hObject=0x244) returned 1 [0268.587] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.593] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.594] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0268.594] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.594] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.594] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.595] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.595] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.595] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.595] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.595] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.596] CryptDestroyKey (hKey=0x55e610) returned 1 [0268.596] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0268.596] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\keys\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x44019f88, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0268.596] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x44019f88, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.596] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44019f88, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44019f88, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44019f88, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.596] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44019f88, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44019f88, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44019f88, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.596] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0268.596] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="PCPKSP", cAlternateFileName="")) returned 1 [0268.596] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.596] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.596] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.596] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.596] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0268.597] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570da8) returned 1 [0268.597] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.597] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.597] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e790) returned 1 [0268.597] CryptDestroyHash (hHash=0x55e290) returned 1 [0268.597] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.597] GetLastError () returned 0x0 [0268.597] GetLastError () returned 0x0 [0268.597] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.598] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.599] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.599] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\crypto\\pcpksp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.600] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.601] SetEndOfFile (hFile=0x244) returned 1 [0268.601] CloseHandle (hObject=0x244) returned 1 [0268.601] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.602] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.602] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.602] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.602] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.602] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.602] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.602] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.602] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.603] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.603] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.603] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.603] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.603] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.604] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.604] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.604] CryptDestroyKey (hKey=0x55e790) returned 1 [0268.604] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0268.604] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\pcpksp\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4404351c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0268.604] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4404351c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.604] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4404351c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4404351c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4404351c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.604] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 1 [0268.605] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.605] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.605] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.605] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0268.605] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570eb8) returned 1 [0268.605] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.605] CryptHashData (hHash=0x55e690, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.606] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e710) returned 1 [0268.606] CryptDestroyHash (hHash=0x55e690) returned 1 [0268.606] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.606] GetLastError () returned 0x0 [0268.606] GetLastError () returned 0x0 [0268.606] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.606] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\crypto\\pcpksp\\windowsaik\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.607] WriteFile (in: hFile=0x248, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.608] SetEndOfFile (hFile=0x248) returned 1 [0268.609] CloseHandle (hObject=0x248) returned 1 [0268.609] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.609] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.610] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0268.610] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.610] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.610] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.611] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.611] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.611] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0268.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.611] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.611] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.612] CryptDestroyKey (hKey=0x55e710) returned 1 [0268.612] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0268.612] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\pcpksp\\windowsaik\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x440662dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0268.612] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x440662dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.612] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440662dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x440662dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x440662dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.612] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440662dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x440662dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x440662dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.612] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0268.612] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 0 [0268.612] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0268.612] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4a8a1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc4a8a1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544b4941, dwReserved1=0x5f4f545f, cFileName="RSA", cAlternateFileName="")) returned 1 [0268.612] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.612] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.612] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.613] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.613] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0268.613] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570fc8) returned 1 [0268.613] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.613] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.613] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e190) returned 1 [0268.613] CryptDestroyHash (hHash=0x55e910) returned 1 [0268.613] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.613] GetLastError () returned 0x0 [0268.613] GetLastError () returned 0x0 [0268.613] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.614] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.615] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.615] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.616] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.617] SetEndOfFile (hFile=0x244) returned 1 [0268.617] CloseHandle (hObject=0x244) returned 1 [0268.617] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.618] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.618] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0268.618] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.618] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.619] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.619] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.619] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.619] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0268.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.620] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.620] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.620] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.620] CryptDestroyKey (hKey=0x55e190) returned 1 [0268.620] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0268.620] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4a8a1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x440662dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0268.620] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4a8a1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x440662dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.620] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440662dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x440662dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x440662dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.620] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0268.621] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.621] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.621] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.621] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0268.621] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570858) returned 1 [0268.621] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.621] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.622] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e710) returned 1 [0268.622] CryptDestroyHash (hHash=0x55e610) returned 1 [0268.622] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.622] GetLastError () returned 0x0 [0268.622] GetLastError () returned 0x0 [0268.622] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.622] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.623] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.624] SetEndOfFile (hFile=0x248) returned 1 [0268.624] CloseHandle (hObject=0x248) returned 1 [0268.624] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.625] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.625] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.625] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.626] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.626] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.626] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.626] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.626] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.626] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.626] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.626] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.626] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.626] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.626] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.626] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.626] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.626] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.627] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.627] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.627] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.627] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.627] CryptDestroyKey (hKey=0x55e710) returned 1 [0268.627] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0268.627] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4408c577, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0268.627] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4408c577, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.627] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4408c577, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4408c577, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4408c577, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.627] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4408c577, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4408c577, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4408c577, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.627] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0268.628] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc4a8a1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc4a8a1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc70b72, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0268.628] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.628] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.628] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.628] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.628] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.628] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0268.628] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571160) returned 1 [0268.629] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.629] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.629] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e290) returned 1 [0268.629] CryptDestroyHash (hHash=0x55e610) returned 1 [0268.629] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.629] GetLastError () returned 0x0 [0268.629] GetLastError () returned 0x0 [0268.629] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.630] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.630] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.631] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.631] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.632] SetEndOfFile (hFile=0x248) returned 1 [0268.632] CloseHandle (hObject=0x248) returned 1 [0268.632] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.633] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.633] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0268.634] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.634] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.634] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.634] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.637] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.637] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.637] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.637] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.637] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.637] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.637] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.637] CryptDestroyKey (hKey=0x55e290) returned 1 [0268.638] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0268.638] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc4a8a1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc70b72, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4408c577, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0268.638] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc4a8a1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc70b72, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4408c577, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.638] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xc70b72, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc70b72, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc70b72, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4eccd106f69e31c1b12304e5463bb71d_03845cb8-7441-4a2f-8c0f-c90408af5778", cAlternateFileName="4ECCD1~1")) returned 1 [0268.638] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4408c577, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4408c577, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4408c577, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.638] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4408c577, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4408c577, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4408c577, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.638] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0268.638] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc4a8a1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0xc4a8a1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xc70b72, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0268.638] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0268.638] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd54314ca, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73796538, dwReserved1=0x5f4f545f, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 1 [0268.638] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.638] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.641] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.642] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.642] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0268.642] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571270) returned 1 [0268.642] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.642] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.642] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e290) returned 1 [0268.642] CryptDestroyHash (hHash=0x55e790) returned 1 [0268.642] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.642] GetLastError () returned 0x0 [0268.642] GetLastError () returned 0x0 [0268.643] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.643] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\crypto\\systemkeys\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.647] WriteFile (in: hFile=0x244, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.648] SetEndOfFile (hFile=0x244) returned 1 [0268.648] CloseHandle (hObject=0x244) returned 1 [0268.648] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.649] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.649] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0268.649] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.649] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.650] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.650] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.650] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.658] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0268.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.658] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.658] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.659] CryptDestroyKey (hKey=0x55e290) returned 1 [0268.659] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0268.659] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\*.*" (normalized: "c:\\users\\all users\\microsoft\\crypto\\systemkeys\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd54314ca, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x440b26cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0268.659] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd54314ca, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x440b26cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.659] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xd54314ca, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1fd8a841971dc8f18facf1d9475e3f87_03845cb8-7441-4a2f-8c0f-c90408af5778", cAlternateFileName="1FD8A8~1")) returned 1 [0268.659] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440b26cd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x440b26cd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x440b26cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.659] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440b26cd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x440b26cd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x440b26cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.659] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0268.659] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd54314ca, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd54314ca, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd54314ca, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73796538, dwReserved1=0x5f4f545f, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 0 [0268.659] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0268.659] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54737965, dwReserved1=0x5f4f545f, cFileName="DataMart", cAlternateFileName="")) returned 1 [0268.660] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.660] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.660] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.660] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0268.660] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5709f0) returned 1 [0268.661] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0268.661] CryptHashData (hHash=0x55e5d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.661] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e610) returned 1 [0268.661] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0268.661] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0268.661] GetLastError () returned 0x0 [0268.661] GetLastError () returned 0x0 [0268.661] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.662] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.662] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.663] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\datamart\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0268.663] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.664] SetEndOfFile (hFile=0x240) returned 1 [0268.665] CloseHandle (hObject=0x240) returned 1 [0268.665] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.665] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.665] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.666] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.666] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.666] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.666] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.666] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.667] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.667] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.667] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.667] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.667] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.667] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.667] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.667] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.667] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.667] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.667] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.667] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.667] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.667] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0268.667] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.668] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.668] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.668] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.668] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.668] CryptDestroyKey (hKey=0x55e610) returned 1 [0268.668] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0268.668] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\*.*" (normalized: "c:\\users\\all users\\microsoft\\datamart\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x440d88e7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0268.668] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x440d88e7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.668] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d88e7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x440d88e7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x440d88e7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.668] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 1 [0268.669] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.669] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.669] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.669] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.669] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.669] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0268.669] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571518) returned 1 [0268.669] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.670] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.670] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e690) returned 1 [0268.670] CryptDestroyHash (hHash=0x55e750) returned 1 [0268.670] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.670] GetLastError () returned 0x0 [0268.670] GetLastError () returned 0x0 [0268.670] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.670] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\datamart\\paidwifi\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.671] WriteFile (in: hFile=0x244, lpBuffer=0x23e5270*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e5270*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.672] SetEndOfFile (hFile=0x244) returned 1 [0268.672] CloseHandle (hObject=0x244) returned 1 [0268.672] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.673] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.673] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.673] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.673] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.673] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.673] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0268.674] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.674] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.674] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.674] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.674] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.674] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.674] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.674] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.674] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.674] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.675] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.675] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.675] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.675] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.675] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.675] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.676] CryptDestroyKey (hKey=0x55e690) returned 1 [0268.676] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0268.676] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\*.*" (normalized: "c:\\users\\all users\\microsoft\\datamart\\paidwifi\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x440fecb4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0268.676] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x440fecb4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.676] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440fecb4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x440fecb4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x440fecb4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.676] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440fecb4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x440fecb4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x440fecb4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.676] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0268.676] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 0 [0268.676] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0268.676] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4169, dwReserved1=0x5f4f545f, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0268.676] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.676] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.677] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.677] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0268.677] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570c98) returned 1 [0268.677] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0268.677] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.677] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e790) returned 1 [0268.677] CryptDestroyHash (hHash=0x55e610) returned 1 [0268.677] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18) returned 1 [0268.678] GetLastError () returned 0x0 [0268.678] GetLastError () returned 0x0 [0268.678] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.678] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.679] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.679] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\device stage\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0268.680] WriteFile (in: hFile=0x240, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.681] SetEndOfFile (hFile=0x240) returned 1 [0268.681] CloseHandle (hObject=0x240) returned 1 [0268.681] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.718] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.718] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.718] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.718] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.718] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.718] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0268.718] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.719] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.719] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.719] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.719] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.719] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.720] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.720] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.720] CryptDestroyKey (hKey=0x55e790) returned 1 [0268.720] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0268.720] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x440fecb4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0268.721] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x440fecb4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.721] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0268.721] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.721] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.721] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.721] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0268.721] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570d20) returned 1 [0268.722] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.722] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.722] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e290) returned 1 [0268.722] CryptDestroyHash (hHash=0x55e610) returned 1 [0268.722] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.722] GetLastError () returned 0x0 [0268.722] GetLastError () returned 0x0 [0268.722] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.723] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.726] WriteFile (in: hFile=0x244, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.727] SetEndOfFile (hFile=0x244) returned 1 [0268.727] CloseHandle (hObject=0x244) returned 1 [0268.727] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.728] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.729] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.729] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.730] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.730] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.730] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.730] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.730] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0268.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.731] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.731] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.731] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.731] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.731] CryptDestroyKey (hKey=0x55e290) returned 1 [0268.731] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0268.731] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x441711ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0268.731] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x441711ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.731] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x441711ac, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x441711ac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x441711ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.731] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4243449, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4243449, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0268.732] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.732] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.732] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.732] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0268.732] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571408) returned 1 [0268.733] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.733] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.733] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0268.733] CryptDestroyHash (hHash=0x55e610) returned 1 [0268.733] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.733] GetLastError () returned 0x0 [0268.733] GetLastError () returned 0x0 [0268.733] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.733] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.735] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.735] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.736] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.737] SetEndOfFile (hFile=0x248) returned 1 [0268.737] CloseHandle (hObject=0x248) returned 1 [0268.738] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.738] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.739] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0268.739] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.739] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.740] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.740] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.740] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.740] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.740] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.741] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.741] CryptDestroyKey (hKey=0x55e910) returned 1 [0268.741] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0268.741] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4243449, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x4419750d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0268.741] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4243449, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x4419750d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.741] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0268.741] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe415ebc5, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe415ebc5, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe41d0d6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="background.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="BACKGR~1.CRY")) returned 1 [0268.741] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x405534, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0268.742] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0268.742] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe41d0d6b, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe41d0d6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe41f6f7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="device.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DEVICE~1.CRY")) returned 1 [0268.742] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4419750d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4419750d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4419750d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.742] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0268.742] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe421e277, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe421e277, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4243449, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="overlay.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="OVERLA~1.CRY")) returned 1 [0268.742] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0268.742] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4243449, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe4243449, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4243449, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="superbar.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SUPERB~1.CRY")) returned 1 [0268.742] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4243449, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe4243449, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4243449, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="superbar.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SUPERB~1.CRY")) returned 0 [0268.742] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0268.742] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe42bdcd7, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe42bdcd7, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e702e72, dwReserved1=0x72632e67, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0268.742] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.742] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.742] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.743] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.743] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0268.743] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571160) returned 1 [0268.743] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.744] CryptHashData (hHash=0x55e610, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.744] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e690) returned 1 [0268.744] CryptDestroyHash (hHash=0x55e610) returned 1 [0268.744] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.744] GetLastError () returned 0x0 [0268.744] GetLastError () returned 0x0 [0268.744] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.745] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.745] WriteFile (in: hFile=0x248, lpBuffer=0x23e52a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e52a4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.746] SetEndOfFile (hFile=0x248) returned 1 [0268.747] CloseHandle (hObject=0x248) returned 1 [0268.747] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.747] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.748] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0268.748] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.748] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.749] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.749] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.749] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.749] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0268.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.749] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.749] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.750] CryptDestroyKey (hKey=0x55e690) returned 1 [0268.750] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0268.750] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe42bdcd7, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x441bd856, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0268.750] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe42bdcd7, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x441bd856, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.750] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0268.750] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe426985f, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe426985f, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe428f9e7, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="background.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="BACKGR~1.CRY")) returned 1 [0268.750] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x405534, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0268.750] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x441bd856, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x441bd856, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x441bd856, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.750] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0268.750] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42bdcd7, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe42bdcd7, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe42dbe57, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="watermark.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WATERM~1.CRY")) returned 1 [0268.750] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42bdcd7, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe42bdcd7, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe42dbe57, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="watermark.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WATERM~1.CRY")) returned 0 [0268.751] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0268.751] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe42bdcd7, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe42bdcd7, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e702e72, dwReserved1=0x72632e67, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0268.751] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0268.751] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440fecb4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x440fecb4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x440fecb4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x352d3731, dwReserved1=0x2d646161, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.751] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x352d3731, dwReserved1=0x2d646161, cFileName="Task", cAlternateFileName="")) returned 1 [0268.751] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.751] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.751] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.751] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0268.751] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570c98) returned 1 [0268.752] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.752] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.752] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e750) returned 1 [0268.752] CryptDestroyHash (hHash=0x55e910) returned 1 [0268.752] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.752] GetLastError () returned 0x0 [0268.752] GetLastError () returned 0x0 [0268.752] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.753] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.753] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.754] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.768] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.769] SetEndOfFile (hFile=0x244) returned 1 [0268.769] CloseHandle (hObject=0x244) returned 1 [0268.769] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.770] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.770] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.772] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.772] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.773] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.773] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.773] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.773] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.773] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.773] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.773] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.774] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.774] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.774] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.774] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.774] CryptDestroyKey (hKey=0x55e750) returned 1 [0268.774] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0268.774] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x441e3934, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0268.775] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x441e3934, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.775] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x441bd856, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x441bd856, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x441e3934, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.775] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe440d094, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe440d094, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0268.775] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.775] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.775] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.775] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0268.775] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570858) returned 1 [0268.776] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.776] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.776] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e710) returned 1 [0268.776] CryptDestroyHash (hHash=0x55e610) returned 1 [0268.776] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.776] GetLastError () returned 0x0 [0268.776] GetLastError () returned 0x0 [0268.776] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.777] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.778] WriteFile (in: hFile=0x248, lpBuffer=0x23e5270*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e5270*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.779] SetEndOfFile (hFile=0x248) returned 1 [0268.779] CloseHandle (hObject=0x248) returned 1 [0268.779] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.780] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.780] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0268.781] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.781] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.781] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.781] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.782] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.782] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0268.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.782] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.782] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.783] CryptDestroyKey (hKey=0x55e710) returned 1 [0268.783] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0268.783] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe440d094, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x44209d0e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0268.783] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe440d094, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x44209d0e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.783] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0268.783] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.783] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.783] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.783] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0268.784] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0268.784] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0268.784] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.784] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0268.784] CryptDestroyHash (hHash=0x55e610) returned 1 [0268.784] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0268.784] GetLastError () returned 0x0 [0268.784] GetLastError () returned 0x0 [0268.784] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.785] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.786] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.786] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0268.787] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.788] SetEndOfFile (hFile=0x24c) returned 1 [0268.788] CloseHandle (hObject=0x24c) returned 1 [0268.788] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.789] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.789] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0268.790] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.790] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.790] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.790] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.790] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.790] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.790] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.790] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.790] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.791] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.791] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.791] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.792] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.792] CryptDestroyKey (hKey=0x55e710) returned 1 [0268.792] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0268.792] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x44209d0e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0268.792] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x44209d0e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.792] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44209d0e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44209d0e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44209d0e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.792] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb0c2e2, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0x9eb0c2e2, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x9eb0c2e2, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x405534, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0268.792] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb0c2e2, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0x9eb0c2e2, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x9eb0c2e2, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x405534, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0268.793] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42dbe57, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe42dbe57, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4301ffe, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="folder.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FOLDER~1.CRY")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44209d0e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44209d0e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44209d0e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4301ffe, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe4301ffe, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4328262, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="netfol.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NETFOL~1.CRY")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4328262, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe4328262, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe434e506, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="pictures.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PICTUR~1.CRY")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe434e506, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe434e506, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4374819, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="ringtones.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RINGTO~1.CRY")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4374819, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe4374819, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe43e8753, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="settings.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe43e8753, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe43e8753, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe440d094, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="sync.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SYNCIC~1.CRY")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5026e6f8, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5026e6f8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5026e6f8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2aff, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe440d094, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe440d094, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4433375, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="wmp.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WMPICO~1.CRY")) returned 1 [0268.793] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe440d094, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe440d094, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4433375, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="wmp.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WMPICO~1.CRY")) returned 0 [0268.793] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0268.794] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4518104, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4518104, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7972632e, dwReserved1=0x64657470, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0268.794] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.794] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.794] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.794] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.794] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.794] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0268.794] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5708e0) returned 1 [0268.795] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.795] CryptHashData (hHash=0x55e750, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.795] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e290) returned 1 [0268.795] CryptDestroyHash (hHash=0x55e750) returned 1 [0268.795] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.795] GetLastError () returned 0x0 [0268.795] GetLastError () returned 0x0 [0268.795] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.796] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.797] WriteFile (in: hFile=0x248, lpBuffer=0x23e52a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e52a4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.798] SetEndOfFile (hFile=0x248) returned 1 [0268.798] CloseHandle (hObject=0x248) returned 1 [0268.798] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.799] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.799] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.800] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.800] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.800] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.800] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.800] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.800] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.800] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.800] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.801] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.801] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0268.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.801] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.801] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.802] CryptDestroyKey (hKey=0x55e290) returned 1 [0268.802] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0268.802] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4518104, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x4422ff09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0268.802] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4518104, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x4422ff09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.802] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0268.802] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.803] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.803] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.803] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0268.803] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0268.804] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0268.804] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.804] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0268.804] CryptDestroyHash (hHash=0x55e290) returned 1 [0268.804] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0268.804] GetLastError () returned 0x0 [0268.804] GetLastError () returned 0x0 [0268.804] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.805] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.806] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.806] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0268.822] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.824] SetEndOfFile (hFile=0x24c) returned 1 [0268.824] CloseHandle (hObject=0x24c) returned 1 [0268.824] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.827] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.827] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0268.828] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.828] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.828] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.830] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.830] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.830] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.831] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.831] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.831] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.832] CryptDestroyKey (hKey=0x55e210) returned 1 [0268.832] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0268.832] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*.*" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x4427737c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0268.832] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x4427737c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.832] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4427737c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4427737c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x442801ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.832] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f57a684, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0x9f57a684, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x9f57a684, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0268.832] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f57a684, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0x9f57a684, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x9f57a684, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0268.832] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44594da, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe44594da, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe44594da, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="folder.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FOLDER~1.CRY")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4422ff09, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4422ff09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4422ff09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44594da, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe44594da, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe447f6ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="print_pref.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PRINT_~1.CRY")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe447f6ea, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe447f6ea, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe44a5929, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="print_property.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PRINT_~2.CRY")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44a5929, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe44a5929, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe44cbc53, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="print_queue.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PRINT_~3.CRY")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44cbc53, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe44cbc53, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe44f205f, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="scan_.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SCAN_I~1.CRY")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44f205f, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe44f205f, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4518104, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="scan_property.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SCAN_P~1.CRY")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21344266, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x21344266, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4518104, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe4518104, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4565a81, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="scan_settings.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SCAN_S~1.CRY")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0268.833] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x6d782e65, dwReserved1=0x5f4f546c, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0268.834] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0268.834] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4518104, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4518104, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7972632e, dwReserved1=0x64657470, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0268.834] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0268.834] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x352d3731, dwReserved1=0x2d646161, cFileName="Task", cAlternateFileName="")) returned 0 [0268.834] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0268.834] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0268.834] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.834] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.835] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.835] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0268.835] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571270) returned 1 [0268.836] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0268.836] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.836] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e310) returned 1 [0268.836] CryptDestroyHash (hHash=0x55e790) returned 1 [0268.836] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18) returned 1 [0268.836] GetLastError () returned 0x0 [0268.836] GetLastError () returned 0x0 [0268.836] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.837] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\devicesync\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0268.840] WriteFile (in: hFile=0x240, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.841] SetEndOfFile (hFile=0x240) returned 1 [0268.841] CloseHandle (hObject=0x240) returned 1 [0268.842] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.843] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.843] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0268.844] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.844] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.844] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.844] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.844] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.845] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.845] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.845] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.845] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.845] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.845] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.845] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.846] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.846] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.846] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.846] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.846] CryptDestroyKey (hKey=0x55e310) returned 1 [0268.846] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0268.846] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*.*" (normalized: "c:\\users\\all users\\microsoft\\devicesync\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x442a454b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0268.847] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcdfeea, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x442a454b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.847] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442a454b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x442a454b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x442a7f4d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.847] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442a454b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x442a454b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x442a7f4d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.847] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0268.847] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe45b0b82, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe45b0b82, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Diagnosis", cAlternateFileName="DIAGNO~1")) returned 1 [0268.847] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.847] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.847] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.847] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.848] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.848] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0268.848] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571270) returned 1 [0268.848] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0268.848] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.849] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0268.849] CryptDestroyHash (hHash=0x55e710) returned 1 [0268.849] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0268.849] GetLastError () returned 0x0 [0268.849] GetLastError () returned 0x0 [0268.849] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.850] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.850] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.851] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0268.852] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.853] SetEndOfFile (hFile=0x240) returned 1 [0268.853] CloseHandle (hObject=0x240) returned 1 [0268.853] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.854] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.854] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.855] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.855] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.855] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.855] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.855] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.855] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.857] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.857] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.857] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.857] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.857] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.857] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.858] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.858] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0268.858] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.858] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.858] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.858] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.858] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.858] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0268.859] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0268.859] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe45b0b82, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x442a7f4d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0268.859] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe45b0b82, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x442a7f4d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.859] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AsimovUploader", cAlternateFileName="ASIMOV~1")) returned 1 [0268.859] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.859] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.859] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.859] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0268.860] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570fc8) returned 1 [0268.860] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.860] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.860] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e7d0) returned 1 [0268.861] CryptDestroyHash (hHash=0x55e610) returned 1 [0268.861] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.861] GetLastError () returned 0x0 [0268.861] GetLastError () returned 0x0 [0268.861] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.862] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\asimovuploader\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.863] WriteFile (in: hFile=0x244, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.864] SetEndOfFile (hFile=0x244) returned 1 [0268.864] CloseHandle (hObject=0x244) returned 1 [0268.864] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.865] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.865] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.865] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.866] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.866] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0268.866] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.866] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.866] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.866] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.866] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.866] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.867] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.867] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.867] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.867] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.867] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.867] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.868] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.868] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.868] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0268.868] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0268.868] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\asimovuploader\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x442ce4f6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0268.869] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x442ce4f6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.869] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442ce4f6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x442ce4f6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x442ce4f6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.869] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442ce4f6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x442ce4f6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x442ce4f6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.869] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0268.869] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe080ca95, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe080ca95, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="DownloadedScenarios", cAlternateFileName="DOWNLO~1")) returned 1 [0268.869] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.869] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.869] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.869] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0268.869] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571160) returned 1 [0268.870] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.870] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.870] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e390) returned 1 [0268.870] CryptDestroyHash (hHash=0x55e910) returned 1 [0268.870] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.870] GetLastError () returned 0x0 [0268.870] GetLastError () returned 0x0 [0268.870] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.874] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.875] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.875] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedscenarios\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.877] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.878] SetEndOfFile (hFile=0x244) returned 1 [0268.879] CloseHandle (hObject=0x244) returned 1 [0268.879] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.880] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.880] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.880] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.880] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.880] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.880] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0268.880] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.880] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.881] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.881] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.881] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.881] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.882] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.882] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.882] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.882] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.882] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.882] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.882] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.882] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.883] CryptDestroyKey (hKey=0x55e390) returned 1 [0268.883] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0268.883] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedscenarios\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe080ca95, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x442f4809, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0268.883] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe080ca95, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x442f4809, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.883] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442f4809, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x442f4809, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x442f4809, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.883] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xe010bd8d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe010bd8d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe010bd8d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WINDOWS.DIAGNOSTICS.xml", cAlternateFileName="WINDOW~1.XML")) returned 1 [0268.883] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xe042cf6a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe042cf6a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe042cf6a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WINDOWS.PERFTRACKESCALATIONS.xml", cAlternateFileName="WINDOW~3.XML")) returned 1 [0268.883] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xe05d08a5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe05d08a5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe05d08a5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WINDOWS.PERFTRACKPOINTDATA.xml", cAlternateFileName="WINDOW~4.XML")) returned 1 [0268.883] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xe0263207, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe0263207, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe0263207, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WINDOWS.SIUF.xml", cAlternateFileName="WINDOW~2.XML")) returned 1 [0268.883] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35b42b5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972ca54f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows.Uif.static", cAlternateFileName="WINDOW~1.STA")) returned 1 [0268.883] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xe080ca95, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe080ca95, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe080ca95, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WINDOWS.UIF.xml", cAlternateFileName="WICECA~1.XML")) returned 1 [0268.883] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xe080ca95, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe080ca95, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe080ca95, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WINDOWS.UIF.xml", cAlternateFileName="WICECA~1.XML")) returned 0 [0268.883] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0268.884] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe458a86a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe458a86a, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4649552e, dwReserved1=0x6c6d782e, cFileName="DownloadedSettings", cAlternateFileName="DOWNLO~2")) returned 1 [0268.884] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.884] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.884] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.884] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0268.884] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570638) returned 1 [0268.885] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.885] CryptHashData (hHash=0x55e750, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.885] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e2d0) returned 1 [0268.885] CryptDestroyHash (hHash=0x55e750) returned 1 [0268.885] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.885] GetLastError () returned 0x0 [0268.886] GetLastError () returned 0x0 [0268.886] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.887] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.889] WriteFile (in: hFile=0x244, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.890] SetEndOfFile (hFile=0x244) returned 1 [0268.890] CloseHandle (hObject=0x244) returned 1 [0268.890] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.891] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.892] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.892] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.893] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.893] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.893] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.893] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.894] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.894] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.894] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.894] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0268.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.895] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.895] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.895] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.896] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0268.896] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0268.896] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe458a86a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x4431aa3a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0268.896] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe458a86a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x4431aa3a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.896] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe458a86a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe458a86a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe458a86a, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cfc.flights.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CFCFLI~1.CRY")) returned 1 [0268.896] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4431aa3a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4431aa3a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4431aa3a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.896] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35b42b5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972ca54f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x405534, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json.bk", cAlternateFileName="TELEME~1.BK")) returned 1 [0268.897] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe458a86a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe458a86a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe458a86a, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TELEME~1.CRY")) returned 1 [0268.897] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972ca54f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x598, dwReserved0=0x405534, dwReserved1=0x0, cFileName="utc.app.json.bk", cAlternateFileName="UTCAPP~1.BK")) returned 1 [0268.897] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe458a86a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe458a86a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe458a86a, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="utc.app.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UTCAPP~1.CRY")) returned 1 [0268.897] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe458a86a, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe458a86a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe458a86a, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="utc.app.json.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UTCAPP~1.CRY")) returned 0 [0268.897] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0268.897] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f736a2e, dwReserved1=0x72632e6e, cFileName="ETLLogs", cAlternateFileName="")) returned 1 [0268.897] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.897] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.897] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.897] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.898] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0268.898] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570858) returned 1 [0268.898] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.899] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.899] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0268.899] CryptDestroyHash (hHash=0x55e790) returned 1 [0268.899] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.899] GetLastError () returned 0x0 [0268.899] GetLastError () returned 0x0 [0268.899] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.900] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.900] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.901] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.903] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.905] SetEndOfFile (hFile=0x244) returned 1 [0268.905] CloseHandle (hObject=0x244) returned 1 [0268.905] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.906] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.906] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.906] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.906] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.906] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0268.907] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.907] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.908] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.908] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.908] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.908] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.908] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.908] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.908] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.909] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.909] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.909] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.909] CryptDestroyKey (hKey=0x55e610) returned 1 [0268.909] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0268.909] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x44340bfc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0268.910] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x44340bfc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.910] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36f2be13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x36f2be13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AutoLogger", cAlternateFileName="AUTOLO~1")) returned 1 [0268.910] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.910] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.910] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.910] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.910] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.910] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0268.910] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570fc8) returned 1 [0268.911] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.911] CryptHashData (hHash=0x55e610, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.911] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e690) returned 1 [0268.911] CryptDestroyHash (hHash=0x55e610) returned 1 [0268.911] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.911] GetLastError () returned 0x0 [0268.911] GetLastError () returned 0x0 [0268.911] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.912] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\autologger\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.917] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.918] SetEndOfFile (hFile=0x248) returned 1 [0268.919] CloseHandle (hObject=0x248) returned 1 [0268.919] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.919] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.920] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0268.920] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.921] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.921] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.921] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.921] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.921] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.921] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.921] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.921] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.921] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.921] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.921] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.921] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.922] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.922] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.922] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.922] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.922] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.922] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.922] CryptDestroyKey (hKey=0x55e690) returned 1 [0268.922] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0268.922] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\autologger\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc088dfed, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x44340bfc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0268.923] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc088dfed, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x44340bfc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.923] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xc088dfed, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xc088dfed, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x673f10ad, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0268.923] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44340bfc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44340bfc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44366e4e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.923] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44340bfc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44340bfc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44366e4e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.923] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0268.923] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4431aa3a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4431aa3a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44340bfc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.923] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x371b45ea, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x371b45ea, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 1 [0268.923] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.923] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.924] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.924] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0268.924] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570b00) returned 1 [0268.924] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0268.925] CryptHashData (hHash=0x55e690, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.925] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0268.925] CryptDestroyHash (hHash=0x55e690) returned 1 [0268.925] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0268.925] GetLastError () returned 0x0 [0268.925] GetLastError () returned 0x0 [0268.925] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.926] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.927] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.927] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\shutdownlogger\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0268.928] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.929] SetEndOfFile (hFile=0x248) returned 1 [0268.929] CloseHandle (hObject=0x248) returned 1 [0268.929] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.930] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.930] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.930] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.930] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.931] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.931] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.931] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.932] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.932] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.932] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0268.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.932] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.932] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.933] CryptDestroyKey (hKey=0x55e910) returned 1 [0268.933] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0268.933] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\shutdownlogger\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x371b45ea, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44366e4e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0268.933] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x371b45ea, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44366e4e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.933] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44366e4e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44366e4e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44366e4e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.933] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44366e4e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44366e4e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44366e4e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.933] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0268.934] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x371b45ea, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x371b45ea, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 0 [0268.934] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0268.934] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf380d4, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xcdf380d4, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3509fbde, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3000000, dwReserved0=0x676f4c6e, dwReserved1=0x5f726567, cFileName="events00.rbs", cAlternateFileName="")) returned 1 [0268.934] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf5e2a3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xcdf5e2a3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3509fbde, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc28f5c, dwReserved0=0x676f4c6e, dwReserved1=0x5f726567, cFileName="events01.rbs", cAlternateFileName="")) returned 1 [0268.937] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf5e2a3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xcdf5e2a3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3509fbde, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf5c28, dwReserved0=0x676f4c6e, dwReserved1=0x5f726567, cFileName="events10.rbs", cAlternateFileName="")) returned 1 [0268.937] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf5e2a3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xcdf5e2a3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3509fbde, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x2e147a, dwReserved0=0x676f4c6e, dwReserved1=0x5f726567, cFileName="events11.rbs", cAlternateFileName="")) returned 1 [0268.937] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442a7f4d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x442a7f4d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x442a7f4d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x676f4c6e, dwReserved1=0x5f726567, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.937] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676f4c6e, dwReserved1=0x5f726567, cFileName="LocalTraceStore", cAlternateFileName="LOCALT~1")) returned 1 [0268.937] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.937] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.937] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.937] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.937] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.937] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0268.937] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571380) returned 1 [0268.938] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.938] CryptHashData (hHash=0x55e390, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.938] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e290) returned 1 [0268.938] CryptDestroyHash (hHash=0x55e390) returned 1 [0268.938] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.938] GetLastError () returned 0x0 [0268.938] GetLastError () returned 0x0 [0268.938] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.939] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\localtracestore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.940] WriteFile (in: hFile=0x244, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.942] SetEndOfFile (hFile=0x244) returned 1 [0268.942] CloseHandle (hObject=0x244) returned 1 [0268.942] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.943] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.943] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.943] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.943] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.943] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.943] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0268.944] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.944] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.944] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.944] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.944] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.944] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.944] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.944] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.944] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.944] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.944] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.945] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.945] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.945] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.945] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.945] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.945] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.945] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.945] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.945] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.945] CryptDestroyKey (hKey=0x55e290) returned 1 [0268.946] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0268.946] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\localtracestore\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4438d4a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0268.946] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4438d4a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.946] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4438d4a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4438d4a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4438d4a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.946] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4438d4a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4438d4a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4438d4a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.946] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0268.946] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45b0b82, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe45b0b82, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe45b0b82, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="parse.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PARSED~1.CRY")) returned 1 [0268.946] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Sideload", cAlternateFileName="")) returned 1 [0268.946] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.946] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.947] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.947] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0268.947] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570748) returned 1 [0268.947] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.947] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.948] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e390) returned 1 [0268.948] CryptDestroyHash (hHash=0x55e210) returned 1 [0268.948] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.948] GetLastError () returned 0x0 [0268.948] GetLastError () returned 0x0 [0268.948] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.949] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.949] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.950] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\sideload\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.951] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.952] SetEndOfFile (hFile=0x244) returned 1 [0268.952] CloseHandle (hObject=0x244) returned 1 [0268.952] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.953] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.953] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.953] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0268.954] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.954] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.954] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.955] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.955] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.955] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.955] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.955] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.956] CryptDestroyKey (hKey=0x55e390) returned 1 [0268.956] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0268.956] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\sideload\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x443b34c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0268.956] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x443b34c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.956] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b34c4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x443b34c4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x443b34c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.956] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b34c4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x443b34c4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x443b34c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.956] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0268.956] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Siufloc", cAlternateFileName="")) returned 1 [0268.957] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.957] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.957] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.957] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0268.957] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571490) returned 1 [0268.958] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.958] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.958] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e910) returned 1 [0268.958] CryptDestroyHash (hHash=0x55e710) returned 1 [0268.958] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.958] GetLastError () returned 0x0 [0268.958] GetLastError () returned 0x0 [0268.958] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.959] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\siufloc\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.959] WriteFile (in: hFile=0x244, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.961] SetEndOfFile (hFile=0x244) returned 1 [0268.961] CloseHandle (hObject=0x244) returned 1 [0268.961] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.962] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.962] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.963] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.963] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.963] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.963] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.963] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.963] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.963] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.963] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.963] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.964] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.964] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0268.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.964] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.968] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.969] CryptDestroyKey (hKey=0x55e910) returned 1 [0268.969] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0268.969] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\siufloc\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x443b34c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0268.969] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x443b34c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.969] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b34c4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x443b34c4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x443b34c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.969] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b34c4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x443b34c4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x443b34c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.969] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0268.969] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SoftLanding", cAlternateFileName="SOFTLA~1")) returned 1 [0268.970] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.970] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.970] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.970] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.970] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.970] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0268.970] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570748) returned 1 [0268.971] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.971] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.971] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e2d0) returned 1 [0268.971] CryptDestroyHash (hHash=0x55e610) returned 1 [0268.971] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.971] GetLastError () returned 0x0 [0268.971] GetLastError () returned 0x0 [0268.971] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.972] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.973] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.973] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.974] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.975] SetEndOfFile (hFile=0x244) returned 1 [0268.975] CloseHandle (hObject=0x244) returned 1 [0268.975] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.976] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.976] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.976] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.977] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0268.977] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.977] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.977] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.978] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.978] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.978] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0268.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.978] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.978] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.979] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0268.979] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0268.979] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x443da244, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0268.979] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x443da244, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.979] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443da244, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x443da244, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x443da244, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.980] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443da244, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x443da244, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x443da244, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.980] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0268.980] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SoftLandingStage", cAlternateFileName="SOFTLA~2")) returned 1 [0268.980] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.980] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.980] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.980] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0268.980] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570eb8) returned 1 [0268.981] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0268.982] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.982] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0268.982] CryptDestroyHash (hHash=0x55e210) returned 1 [0268.982] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0268.982] GetLastError () returned 0x0 [0268.982] GetLastError () returned 0x0 [0268.982] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.983] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlandingstage\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0268.984] WriteFile (in: hFile=0x244, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.985] SetEndOfFile (hFile=0x244) returned 1 [0268.985] CloseHandle (hObject=0x244) returned 1 [0268.985] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.986] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.987] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0268.987] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.987] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.987] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.988] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.988] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.988] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0268.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.988] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.988] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.989] CryptDestroyKey (hKey=0x55e610) returned 1 [0268.989] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0268.989] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage\\*.*" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlandingstage\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x443ff86c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0268.989] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x443ff86c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.989] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443ff86c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x443ff86c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x443ff86c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.989] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443ff86c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x443ff86c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x443ff86c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0268.989] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0268.990] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SoftLandingStage", cAlternateFileName="SOFTLA~2")) returned 0 [0268.990] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0268.990] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676e6964, dwReserved1=0x67617453, cFileName="DRM", cAlternateFileName="")) returned 1 [0268.990] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.990] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0268.990] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0268.990] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0268.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0268.990] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570e30) returned 1 [0268.991] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0268.991] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0268.991] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0268.991] CryptDestroyHash (hHash=0x55e310) returned 1 [0268.991] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0268.991] GetLastError () returned 0x0 [0268.991] GetLastError () returned 0x0 [0268.991] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.992] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0268.993] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0268.993] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\drm\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0268.994] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0268.995] SetEndOfFile (hFile=0x240) returned 1 [0268.995] CloseHandle (hObject=0x240) returned 1 [0268.995] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0268.996] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.996] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0268.996] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0268.996] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0268.997] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.997] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0268.997] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0268.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.997] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.998] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0268.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0268.998] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0268.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0268.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0268.998] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0268.998] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0268.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0268.999] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0268.999] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0268.999] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*.*" (normalized: "c:\\users\\all users\\microsoft\\drm\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x443ff86c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0268.999] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x443ff86c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.999] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443ff86c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x443ff86c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x443ff86c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0268.999] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0268.999] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0268.999] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.000] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.000] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.000] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.001] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.001] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570b00) returned 1 [0269.001] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.001] CryptHashData (hHash=0x55e5d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.001] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0269.001] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0269.001] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.001] GetLastError () returned 0x0 [0269.001] GetLastError () returned 0x0 [0269.002] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.002] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.003] WriteFile (in: hFile=0x244, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.004] SetEndOfFile (hFile=0x244) returned 1 [0269.004] CloseHandle (hObject=0x244) returned 1 [0269.005] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.006] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.006] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.006] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.006] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.006] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.006] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.006] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.006] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.007] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.007] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.007] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.007] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.007] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.007] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.007] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.007] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0269.008] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.008] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.008] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.008] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.008] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.008] CryptDestroyKey (hKey=0x55e610) returned 1 [0269.008] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0269.008] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*.*" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x44425ad8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0269.009] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x44425ad8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.009] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44425ad8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44425ad8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44425ad8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.009] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44425ad8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44425ad8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44425ad8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0269.009] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0269.009] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0269.009] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0269.009] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0269.009] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.009] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.009] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.009] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.009] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.009] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0269.010] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570c98) returned 1 [0269.010] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0269.010] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.010] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e750) returned 1 [0269.010] CryptDestroyHash (hHash=0x55e910) returned 1 [0269.010] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18) returned 1 [0269.010] GetLastError () returned 0x0 [0269.010] GetLastError () returned 0x0 [0269.011] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.011] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.015] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.016] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0269.018] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.019] SetEndOfFile (hFile=0x240) returned 1 [0269.019] CloseHandle (hObject=0x240) returned 1 [0269.019] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.020] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.020] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.021] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.021] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.021] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.021] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0269.021] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.021] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.021] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.021] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.021] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.022] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.022] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.022] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.022] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.022] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.022] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.022] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.022] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.022] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.022] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0269.022] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.022] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.023] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.023] CryptDestroyKey (hKey=0x55e750) returned 1 [0269.023] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0269.023] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*.*" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4444bd80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0269.023] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4444bd80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.023] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4444bd80, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4444bd80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4444bd80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.024] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe45d6d72, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe45d6d72, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INT", cAlternateFileName="")) returned 1 [0269.024] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.024] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.024] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.024] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0269.024] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570748) returned 1 [0269.025] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.025] CryptHashData (hHash=0x55e610, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.025] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e2d0) returned 1 [0269.025] CryptDestroyHash (hHash=0x55e610) returned 1 [0269.025] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.025] GetLastError () returned 0x0 [0269.025] GetLastError () returned 0x0 [0269.025] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.026] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.027] WriteFile (in: hFile=0x244, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.029] SetEndOfFile (hFile=0x244) returned 1 [0269.029] CloseHandle (hObject=0x244) returned 1 [0269.029] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.030] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.030] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.030] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.030] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.030] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.030] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0269.030] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.030] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.031] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.031] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.031] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.031] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.031] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0269.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.032] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.032] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.032] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0269.032] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0269.032] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\*.*" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe45d6d72, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x4444bd80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0269.033] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe45d6d72, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x4444bd80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.033] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4444bd80, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4444bd80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44471e18, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.033] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d6d72, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe45d6d72, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe45d6d72, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x5ed8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PPCRLC~1.CRY")) returned 1 [0269.033] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d6d72, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe45d6d72, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe45d6d72, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x5ed8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PPCRLC~1.CRY")) returned 0 [0269.033] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0269.033] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe45fce37, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe45fce37, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="production", cAlternateFileName="PRODUC~1")) returned 1 [0269.033] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.033] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.033] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.033] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.033] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570eb8) returned 1 [0269.034] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.034] CryptHashData (hHash=0x55e210, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.034] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0269.034] CryptDestroyHash (hHash=0x55e210) returned 1 [0269.034] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.034] GetLastError () returned 0x0 [0269.034] GetLastError () returned 0x0 [0269.034] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.036] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.036] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.037] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.038] WriteFile (in: hFile=0x244, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.039] SetEndOfFile (hFile=0x244) returned 1 [0269.039] CloseHandle (hObject=0x244) returned 1 [0269.039] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.040] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.040] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.041] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.041] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.041] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.041] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.041] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.041] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.041] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.041] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.041] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.042] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0269.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.042] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.042] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.043] CryptDestroyKey (hKey=0x55e610) returned 1 [0269.043] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0269.043] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\*.*" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe45fce37, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x44471e18, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0269.043] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe45fce37, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x44471e18, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.043] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44471e18, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44471e18, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44471e18, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.058] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d6d72, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe45d6d72, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe45fce37, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x6988, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ppcrlconfig600.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PPCRLC~1.CRY")) returned 1 [0269.058] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b9d2ab4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5b9d2ab4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5b9d2ab4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 1 [0269.058] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.058] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.059] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.059] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0269.059] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5708e0) returned 1 [0269.060] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0269.060] CryptHashData (hHash=0x55e690, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.060] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e2d0) returned 1 [0269.060] CryptDestroyHash (hHash=0x55e690) returned 1 [0269.060] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0269.060] GetLastError () returned 0x0 [0269.060] GetLastError () returned 0x0 [0269.060] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.061] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0269.097] WriteFile (in: hFile=0x248, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.098] SetEndOfFile (hFile=0x248) returned 1 [0269.103] CloseHandle (hObject=0x248) returned 1 [0269.103] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.104] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.105] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.106] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0269.106] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.107] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.107] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.107] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.107] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.108] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.108] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0269.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.108] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.108] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.108] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.108] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0269.108] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0269.109] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp\\*.*" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\temp\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b9d2ab4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5b9d2ab4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x4450a7bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0269.109] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b9d2ab4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5b9d2ab4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x4450a7bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.109] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4450a7bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4450a7bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4450a7bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.109] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4450a7bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4450a7bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4450a7bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0269.109] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0269.109] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b9d2ab4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5b9d2ab4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5b9d2ab4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 0 [0269.109] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0269.109] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe45fce37, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe45fce37, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6769666e, dwReserved1=0x2e303036, cFileName="production", cAlternateFileName="PRODUC~1")) returned 0 [0269.109] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0269.110] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e5139b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43e5139b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43e5139b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x546e6f69, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.110] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x546e6f69, dwReserved1=0x5f4f545f, cFileName="MapData", cAlternateFileName="")) returned 1 [0269.110] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.110] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.110] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.110] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.110] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.110] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0269.110] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5712f8) returned 1 [0269.111] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0269.111] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.111] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e7d0) returned 1 [0269.111] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0269.111] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0269.111] GetLastError () returned 0x0 [0269.111] GetLastError () returned 0x0 [0269.111] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.112] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.113] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.113] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\MapData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\mapdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0269.115] WriteFile (in: hFile=0x240, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.116] SetEndOfFile (hFile=0x240) returned 1 [0269.116] CloseHandle (hObject=0x240) returned 1 [0269.117] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.117] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.117] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.118] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.118] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.118] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.118] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0269.118] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.118] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.118] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.118] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.119] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.119] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.119] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.119] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.119] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.119] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.119] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.119] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0269.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.120] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.120] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.120] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.120] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.120] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0269.120] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0269.120] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MapData\\*.*" (normalized: "c:\\users\\all users\\microsoft\\mapdata\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x445309d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0269.121] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x445309d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.121] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445309d8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x445309d8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x445309d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.121] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445309d8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x445309d8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x445309d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0269.121] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0269.121] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35da50f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x35da50f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="MF", cAlternateFileName="")) returned 1 [0269.121] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.121] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.122] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.122] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.122] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570fc8) returned 1 [0269.123] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0269.123] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.123] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e190) returned 1 [0269.123] CryptDestroyHash (hHash=0x55e910) returned 1 [0269.123] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18) returned 1 [0269.123] GetLastError () returned 0x0 [0269.123] GetLastError () returned 0x0 [0269.123] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.124] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\mf\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0269.125] WriteFile (in: hFile=0x240, lpBuffer=0x23e35c8*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e35c8*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.127] SetEndOfFile (hFile=0x240) returned 1 [0269.127] CloseHandle (hObject=0x240) returned 1 [0269.127] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.128] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.128] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.131] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.131] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.132] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.132] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.132] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.132] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0269.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.132] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.133] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.133] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.133] CryptDestroyKey (hKey=0x55e190) returned 1 [0269.133] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0269.133] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*.*" (normalized: "c:\\users\\all users\\microsoft\\mf\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35da50f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x44556cd5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0269.133] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35da50f, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x44556cd5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.133] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972ca54f, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972ca54f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0269.133] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44556cd5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44556cd5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44556cd5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.133] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0269.133] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da50f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x972f07a6, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x972f07a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0269.134] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0269.134] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4c52472e, dwReserved1=0x5f4f545f, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0269.134] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.134] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.134] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.134] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0269.134] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5708e0) returned 1 [0269.135] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0269.135] CryptHashData (hHash=0x55e2d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.135] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e690) returned 1 [0269.135] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0269.135] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18) returned 1 [0269.135] GetLastError () returned 0x0 [0269.135] GetLastError () returned 0x0 [0269.135] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.136] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\netframework\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0269.137] WriteFile (in: hFile=0x240, lpBuffer=0x23e52b0*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e52b0*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.140] SetEndOfFile (hFile=0x240) returned 1 [0269.140] CloseHandle (hObject=0x240) returned 1 [0269.140] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.141] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.141] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.141] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.141] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.141] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0269.142] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.142] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.142] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.143] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.143] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.143] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.143] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.143] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.143] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0269.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.143] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.143] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.143] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.144] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.144] CryptDestroyKey (hKey=0x55e690) returned 1 [0269.144] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0269.144] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*.*" (normalized: "c:\\users\\all users\\microsoft\\netframework\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x44556cd5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0269.144] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x44556cd5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.144] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0269.144] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.144] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.145] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.145] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0269.145] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571160) returned 1 [0269.146] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.146] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.146] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e290) returned 1 [0269.146] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0269.146] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.146] GetLastError () returned 0x0 [0269.146] GetLastError () returned 0x0 [0269.146] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.147] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.147] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.148] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.149] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.150] SetEndOfFile (hFile=0x244) returned 1 [0269.150] CloseHandle (hObject=0x244) returned 1 [0269.150] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.151] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.151] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.151] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.151] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0269.151] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.152] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.152] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.152] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.152] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.153] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0269.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.153] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.153] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.155] CryptDestroyKey (hKey=0x55e290) returned 1 [0269.155] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0269.155] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*.*" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4457d048, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0269.156] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4457d048, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.156] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4457d048, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4457d048, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4457d048, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.156] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4457d048, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4457d048, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4457d048, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0269.156] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0269.156] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44556cd5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44556cd5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4457d048, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.156] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44556cd5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44556cd5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4457d048, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0269.156] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0269.156] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Network", cAlternateFileName="")) returned 1 [0269.156] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.156] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.156] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.156] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.156] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.157] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571270) returned 1 [0269.157] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0269.157] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.157] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e290) returned 1 [0269.157] CryptDestroyHash (hHash=0x55e790) returned 1 [0269.157] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18) returned 1 [0269.157] GetLastError () returned 0x0 [0269.157] GetLastError () returned 0x0 [0269.158] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.158] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\network\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0269.160] WriteFile (in: hFile=0x240, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.161] SetEndOfFile (hFile=0x240) returned 1 [0269.161] CloseHandle (hObject=0x240) returned 1 [0269.161] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.162] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.162] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.162] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.163] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.163] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.163] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.163] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.163] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.163] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.164] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.164] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.164] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0269.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.164] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.164] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.165] CryptDestroyKey (hKey=0x55e290) returned 1 [0269.165] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0269.165] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*.*" (normalized: "c:\\users\\all users\\microsoft\\network\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x445a321f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0269.165] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x445a321f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.165] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0269.165] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.165] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.165] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.165] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0269.166] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571160) returned 1 [0269.166] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.166] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.166] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0269.166] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0269.166] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.166] GetLastError () returned 0x0 [0269.166] GetLastError () returned 0x0 [0269.166] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.167] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.168] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.168] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.189] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.190] SetEndOfFile (hFile=0x244) returned 1 [0269.190] CloseHandle (hObject=0x244) returned 1 [0269.190] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.191] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.191] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.192] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0269.192] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.192] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.192] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.193] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.193] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.193] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0269.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.193] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.193] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.194] CryptDestroyKey (hKey=0x55e610) returned 1 [0269.194] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0269.194] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*.*" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x445ef648, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0269.194] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd06144, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x445ef648, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.194] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445ef648, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x445ef648, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x445ef648, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.194] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445ef648, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x445ef648, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x445ef648, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0269.194] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0269.194] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe46741e7, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe46741e7, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0269.194] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.195] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.195] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.195] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0269.195] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571518) returned 1 [0269.196] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.196] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.196] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e690) returned 1 [0269.196] CryptDestroyHash (hHash=0x55e750) returned 1 [0269.196] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.196] GetLastError () returned 0x0 [0269.196] GetLastError () returned 0x0 [0269.196] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.197] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.197] WriteFile (in: hFile=0x244, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.198] SetEndOfFile (hFile=0x244) returned 1 [0269.198] CloseHandle (hObject=0x244) returned 1 [0269.198] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.199] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.200] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.200] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0269.201] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.201] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.201] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.201] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.201] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.201] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.202] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.202] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.202] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0269.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.202] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.202] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.203] CryptDestroyKey (hKey=0x55e690) returned 1 [0269.203] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0269.203] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*.*" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe46741e7, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x445ef648, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0269.203] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe46741e7, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x445ef648, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.203] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445ef648, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x445ef648, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x445ef648, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.203] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06db82a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe06db82a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x55147dc1, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1 [0269.203] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fce37, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe45fce37, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe46741e7, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="qmgr0.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="QMGR0D~1.CRY")) returned 1 [0269.203] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06db82a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe06db82a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x5516dafa, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1 [0269.203] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46741e7, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe46741e7, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4695adc, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="qmgr1.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="QMGR1D~1.CRY")) returned 1 [0269.203] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46741e7, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe46741e7, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4695adc, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="qmgr1.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="QMGR1D~1.CRY")) returned 0 [0269.203] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0269.203] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445a321f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x445a321f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x445a321f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x632e7461, dwReserved1=0x74707972, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.203] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445a321f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x445a321f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x445a321f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x632e7461, dwReserved1=0x74707972, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0269.203] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0269.204] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe4ab1600, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4ab1600, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Office", cAlternateFileName="")) returned 1 [0269.204] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.204] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.204] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.204] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.204] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570c98) returned 1 [0269.205] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0269.205] CryptHashData (hHash=0x55e610, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.205] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e790) returned 1 [0269.205] CryptDestroyHash (hHash=0x55e610) returned 1 [0269.205] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18) returned 1 [0269.205] GetLastError () returned 0x0 [0269.205] GetLastError () returned 0x0 [0269.205] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.206] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.206] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.207] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\office\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0269.208] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.209] SetEndOfFile (hFile=0x240) returned 1 [0269.209] CloseHandle (hObject=0x240) returned 1 [0269.209] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.210] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.210] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.210] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.210] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.211] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.211] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.211] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.211] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0269.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.212] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.212] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.212] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.212] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.212] CryptDestroyKey (hKey=0x55e790) returned 1 [0269.212] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0269.212] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\*.*" (normalized: "c:\\users\\all users\\microsoft\\office\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe4ab1600, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x4461592d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0269.212] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xe4ab1600, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x4461592d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.212] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4695adc, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe4695adc, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe46bba7c, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AssetLibrary.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ASSETL~1.CRY")) returned 1 [0269.212] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b54cf26, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1b54cf26, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1b54cf26, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 1 [0269.212] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46bba7c, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe46bba7c, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe46e1e93, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DocumentRepository.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DOCUME~1.CRY")) returned 1 [0269.212] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8eea4a6, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xa8eea4a6, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xa8eea4a6, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Heartbeat", cAlternateFileName="HEARTB~1")) returned 1 [0269.213] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.213] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.213] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.213] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.213] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.213] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0269.213] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570d20) returned 1 [0269.213] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.214] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.214] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e290) returned 1 [0269.214] CryptDestroyHash (hHash=0x55e610) returned 1 [0269.214] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.214] GetLastError () returned 0x0 [0269.214] GetLastError () returned 0x0 [0269.214] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.214] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\Heartbeat\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\office\\heartbeat\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.215] WriteFile (in: hFile=0x244, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.216] SetEndOfFile (hFile=0x244) returned 1 [0269.216] CloseHandle (hObject=0x244) returned 1 [0269.216] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.217] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.217] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0269.218] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.218] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.218] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.218] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.219] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.219] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0269.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.219] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.219] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.219] CryptDestroyKey (hKey=0x55e290) returned 1 [0269.220] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0269.220] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\Heartbeat\\*.*" (normalized: "c:\\users\\all users\\microsoft\\office\\heartbeat\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8eea4a6, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xa8eea4a6, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x4461592d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0269.220] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8eea4a6, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xa8eea4a6, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x4461592d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.220] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4461592d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4461592d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4463bff6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.220] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4461592d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4461592d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4463bff6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0269.220] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0269.220] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4461592d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4461592d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4461592d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.220] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47c6c75, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe47c6c75, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe47ece1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="MySharePoints.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MYSHAR~1.CRY")) returned 1 [0269.220] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe481313e, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe481313e, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4a53663, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="MySite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MYSITE~1.CRY")) returned 1 [0269.220] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a7297d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe4a7297d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4a8b000, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SharePointPortalSite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SHAREP~1.CRY")) returned 1 [0269.220] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a8b000, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe4a8b000, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4ab1600, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SharePointTeamSite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SHAREP~2.CRY")) returned 1 [0269.220] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a8b000, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe4a8b000, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe4ab1600, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SharePointTeamSite.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SHAREP~2.CRY")) returned 0 [0269.220] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0269.220] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54746e69, dwReserved1=0x536d6165, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1 [0269.220] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.220] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.221] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.221] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.221] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.221] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0269.221] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571408) returned 1 [0269.221] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0269.221] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.221] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e910) returned 1 [0269.222] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0269.222] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0269.222] GetLastError () returned 0x0 [0269.222] GetLastError () returned 0x0 [0269.222] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.222] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.223] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.223] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0269.225] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.226] SetEndOfFile (hFile=0x240) returned 1 [0269.227] CloseHandle (hObject=0x240) returned 1 [0269.227] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.227] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.227] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.227] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.227] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.228] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.228] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0269.228] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.228] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.228] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.228] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.228] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.228] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.228] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.228] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.229] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.229] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.229] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.229] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.229] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0269.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.229] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.229] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.229] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.230] CryptDestroyKey (hKey=0x55e910) returned 1 [0269.230] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0269.230] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x4463bff6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0269.230] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x4463bff6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.230] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11be8600, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x11be8600, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x11be8600, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x6815, dwReserved0=0x405534, dwReserved1=0x0, cFileName="countrytable.xml", cAlternateFileName="")) returned 1 [0269.230] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4463bff6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4463bff6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4463bff6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.230] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", cAlternateFileName="{18DCF~1")) returned 1 [0269.230] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.230] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.230] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.230] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.230] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.230] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.231] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5709f0) returned 1 [0269.231] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.231] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.231] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e690) returned 1 [0269.232] CryptDestroyHash (hHash=0x55e610) returned 1 [0269.232] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.232] GetLastError () returned 0x0 [0269.232] GetLastError () returned 0x0 [0269.232] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.232] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.234] WriteFile (in: hFile=0x244, lpBuffer=0x23e5260*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e5260*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.235] SetEndOfFile (hFile=0x244) returned 1 [0269.235] CloseHandle (hObject=0x244) returned 1 [0269.235] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.236] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.237] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.237] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.237] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.238] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.238] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.238] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.238] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.238] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.238] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.239] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0269.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.239] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.239] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.239] CryptDestroyKey (hKey=0x55e690) returned 1 [0269.239] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0269.240] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44661d80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0269.240] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44661d80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.240] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0f6b62d, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0f6b62d, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0f6b62d, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xe90, dwReserved0=0x405534, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0269.240] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44661d80, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44661d80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44661d80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.240] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eac9f1, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0eac9f1, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0eac9f1, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0269.240] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0269.240] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.240] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.240] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.240] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.240] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.241] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0269.241] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571518) returned 1 [0269.241] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0269.241] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.241] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e690) returned 1 [0269.241] CryptDestroyHash (hHash=0x55e750) returned 1 [0269.241] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0269.241] GetLastError () returned 0x0 [0269.241] GetLastError () returned 0x0 [0269.241] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.242] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.243] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.243] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0269.244] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.245] SetEndOfFile (hFile=0x248) returned 1 [0269.245] CloseHandle (hObject=0x248) returned 1 [0269.245] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.246] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.246] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.246] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.246] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.246] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.329] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0269.330] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.330] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.331] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.331] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.331] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.331] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.331] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.332] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.332] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0269.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.333] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.333] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.333] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.334] CryptDestroyKey (hKey=0x55e690) returned 1 [0269.334] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0269.334] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44661d80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0269.334] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44661d80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.334] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44661d80, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44661d80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44661d80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.335] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0269.335] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.335] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.335] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.335] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0269.336] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0269.337] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0269.337] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.337] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0269.337] CryptDestroyHash (hHash=0x55e710) returned 1 [0269.337] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0269.337] GetLastError () returned 0x0 [0269.337] GetLastError () returned 0x0 [0269.337] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.339] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0269.382] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.383] SetEndOfFile (hFile=0x24c) returned 1 [0269.383] CloseHandle (hObject=0x24c) returned 1 [0269.383] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.384] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.384] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.384] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.384] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0269.385] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.385] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.385] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.385] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.386] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.386] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0269.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.386] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.386] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.387] CryptDestroyKey (hKey=0x55e750) returned 1 [0269.387] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0269.387] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x447b9354, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0269.388] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x447b9354, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.388] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44746c6d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44746c6d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x447b9354, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.388] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e3a2a4, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e3a2a4, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0e60513, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0269.388] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e86782, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e86782, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0e86782, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0269.388] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e86782, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e86782, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0e86782, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 0 [0269.388] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0269.388] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e60513, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e60513, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0eac9f1, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0269.389] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e60513, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0e60513, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0eac9f1, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x22f, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0269.389] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0269.392] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd452a9e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd452a9e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd452a9e, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0269.392] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0269.392] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{1e05dd5d-a022-46c5-963c-b20de341170f}", cAlternateFileName="{1E05D~1")) returned 1 [0269.393] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.393] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.393] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.393] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.393] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571518) returned 1 [0269.394] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.394] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.394] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0269.394] CryptDestroyHash (hHash=0x55e910) returned 1 [0269.394] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.394] GetLastError () returned 0x0 [0269.394] GetLastError () returned 0x0 [0269.394] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.395] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.395] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.396] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.415] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.416] SetEndOfFile (hFile=0x244) returned 1 [0269.416] CloseHandle (hObject=0x244) returned 1 [0269.416] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.417] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.417] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.418] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.418] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.418] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.418] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.418] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.418] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.422] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.422] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.423] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.423] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.423] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0269.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.423] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.423] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.423] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.424] CryptDestroyKey (hKey=0x55e610) returned 1 [0269.424] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0269.424] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x448056ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0269.424] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x448056ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.424] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa10504bd, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa10504bd, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa10504bd, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x4ef, dwReserved0=0x405534, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0269.424] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448056ca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x448056ca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x448056ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.424] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa102a24e, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa102a24e, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa102a24e, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0269.424] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0269.424] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.424] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.428] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.428] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0269.428] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570e30) returned 1 [0269.428] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0269.428] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.428] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e390) returned 1 [0269.428] CryptDestroyHash (hHash=0x55e190) returned 1 [0269.428] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0269.428] GetLastError () returned 0x0 [0269.429] GetLastError () returned 0x0 [0269.429] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.429] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0269.430] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.431] SetEndOfFile (hFile=0x248) returned 1 [0269.431] CloseHandle (hObject=0x248) returned 1 [0269.431] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.432] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.432] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0269.433] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.433] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.440] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.441] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.441] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.441] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0269.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.442] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.442] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.442] CryptDestroyKey (hKey=0x55e390) returned 1 [0269.442] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0269.442] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x4482bac1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0269.443] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x4482bac1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.443] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4482bac1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4482bac1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4482bac1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.443] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0269.443] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.443] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.443] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.443] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0269.443] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5706c0) returned 1 [0269.444] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0269.444] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.444] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0269.444] CryptDestroyHash (hHash=0x55e710) returned 1 [0269.444] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0269.444] GetLastError () returned 0x0 [0269.444] GetLastError () returned 0x0 [0269.444] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.445] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.446] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.446] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0269.453] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.454] SetEndOfFile (hFile=0x24c) returned 1 [0269.455] CloseHandle (hObject=0x24c) returned 1 [0269.455] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.455] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.455] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.456] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.456] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.456] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0269.456] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.456] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.456] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.456] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.457] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.457] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.457] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0269.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.457] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.457] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.458] CryptDestroyKey (hKey=0x55e910) returned 1 [0269.458] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0269.458] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44877e37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0269.458] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44877e37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.458] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44851e0e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44851e0e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44877e37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.458] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0fddd6c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0fddd6c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1003fe2, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0269.458] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1003fe2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1003fe2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1003fe2, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0269.458] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1003fe2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1003fe2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1003fe2, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 0 [0269.458] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0269.458] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1003fe2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1003fe2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa102a24e, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0269.458] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1003fe2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1003fe2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa102a24e, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0269.459] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0269.459] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc75be0a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbc75be0a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbc75be0a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0269.459] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0269.459] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{23cb517f-5073-4e96-a202-7fe6122a2271}", cAlternateFileName="{23CB5~1")) returned 1 [0269.459] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.459] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.461] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.461] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.462] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.462] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570858) returned 1 [0269.462] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.462] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.462] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0269.462] CryptDestroyHash (hHash=0x55e790) returned 1 [0269.462] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.462] GetLastError () returned 0x0 [0269.462] GetLastError () returned 0x0 [0269.463] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.463] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.464] WriteFile (in: hFile=0x244, lpBuffer=0x23e5260*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e5260*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.466] SetEndOfFile (hFile=0x244) returned 1 [0269.466] CloseHandle (hObject=0x244) returned 1 [0269.466] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.467] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.467] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.467] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.468] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.468] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.468] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.468] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.468] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0269.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.469] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.469] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.469] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.469] CryptDestroyKey (hKey=0x55e610) returned 1 [0269.469] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0269.469] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44877e37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0269.469] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44877e37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.469] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa15d3ecf, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa15d3ecf, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa15fa13e, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x159d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0269.469] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44877e37, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44877e37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4489e0bb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.469] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1430407, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1430407, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1430407, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0269.469] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0269.470] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.470] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.470] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.470] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0269.470] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570e30) returned 1 [0269.471] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0269.471] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.471] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e390) returned 1 [0269.471] CryptDestroyHash (hHash=0x55e610) returned 1 [0269.471] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0269.471] GetLastError () returned 0x0 [0269.471] GetLastError () returned 0x0 [0269.471] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.472] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.472] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.472] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0269.474] WriteFile (in: hFile=0x248, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.475] SetEndOfFile (hFile=0x248) returned 1 [0269.475] CloseHandle (hObject=0x248) returned 1 [0269.475] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.476] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.476] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0269.476] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.477] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.477] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.477] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.477] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.477] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0269.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.478] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.478] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.478] CryptDestroyKey (hKey=0x55e390) returned 1 [0269.478] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0269.478] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x4489e0bb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0269.478] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x4489e0bb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.478] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4489e0bb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4489e0bb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4489e0bb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.478] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0269.479] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.479] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.479] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.479] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0269.479] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0269.480] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0269.480] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.480] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0269.480] CryptDestroyHash (hHash=0x55e710) returned 1 [0269.480] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0269.480] GetLastError () returned 0x0 [0269.480] GetLastError () returned 0x0 [0269.480] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.480] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0269.483] WriteFile (in: hFile=0x24c, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.484] SetEndOfFile (hFile=0x24c) returned 1 [0269.484] CloseHandle (hObject=0x24c) returned 1 [0269.484] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.485] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.485] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0269.485] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.485] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.486] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.486] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.486] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.486] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0269.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.486] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.486] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.487] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0269.487] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0269.487] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x448c42b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0269.487] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x448c42b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.487] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4489e0bb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4489e0bb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x448c42b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.487] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1397a49, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1397a49, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa13bdcbd, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0269.487] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa140a197, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa140a197, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa140a197, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0269.487] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa140a197, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa140a197, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa140a197, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 0 [0269.487] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0269.488] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa13e3f24, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa13e3f24, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa140a197, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0269.488] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa13e3f24, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa13e3f24, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa140a197, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0269.488] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0269.488] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd9177d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd9177d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd9177d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0269.488] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0269.488] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", cAlternateFileName="{3742E~1")) returned 1 [0269.488] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.488] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.488] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.488] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.488] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570e30) returned 1 [0269.489] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.489] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.489] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e910) returned 1 [0269.489] CryptDestroyHash (hHash=0x55e790) returned 1 [0269.489] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.489] GetLastError () returned 0x0 [0269.489] GetLastError () returned 0x0 [0269.489] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.490] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.490] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.492] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.493] SetEndOfFile (hFile=0x244) returned 1 [0269.493] CloseHandle (hObject=0x244) returned 1 [0269.493] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.494] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.494] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.494] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.494] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.494] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.494] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.494] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.495] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.495] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.495] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.498] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.499] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.499] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.499] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.499] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0269.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.499] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.499] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.500] CryptDestroyKey (hKey=0x55e910) returned 1 [0269.500] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0269.500] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x448c42b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0269.500] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x448c42b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.500] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2363c60, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa2363c60, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa2389ec8, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1988, dwReserved0=0x405534, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0269.500] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448c42b7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x448c42b7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x448c42b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.500] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa21c0195, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa21c0195, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa21c0195, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0269.500] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0269.500] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.501] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.501] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.501] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0269.501] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570b00) returned 1 [0269.501] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0269.502] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.502] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0269.502] CryptDestroyHash (hHash=0x55e750) returned 1 [0269.502] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0269.502] GetLastError () returned 0x0 [0269.502] GetLastError () returned 0x0 [0269.502] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.502] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0269.503] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.504] SetEndOfFile (hFile=0x248) returned 1 [0269.504] CloseHandle (hObject=0x248) returned 1 [0269.505] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.505] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.505] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.505] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.506] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.506] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0269.506] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.506] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.506] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.506] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.507] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.507] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.507] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.507] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.507] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.507] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.507] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.507] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0269.507] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.507] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.507] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.507] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.507] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.508] CryptDestroyKey (hKey=0x55e910) returned 1 [0269.508] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0269.508] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x448eaef2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0269.508] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x448eaef2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.508] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448eaef2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x448eaef2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x448eaef2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.508] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0269.508] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.508] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.508] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.508] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.508] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.508] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0269.508] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0269.509] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0269.509] CryptHashData (hHash=0x55e690, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.509] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0269.509] CryptDestroyHash (hHash=0x55e690) returned 1 [0269.509] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0269.509] GetLastError () returned 0x0 [0269.509] GetLastError () returned 0x0 [0269.509] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.510] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.510] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.511] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0269.513] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.514] SetEndOfFile (hFile=0x24c) returned 1 [0269.515] CloseHandle (hObject=0x24c) returned 1 [0269.515] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.516] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.516] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.516] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.516] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0269.516] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.516] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.517] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.517] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.517] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.517] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.517] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.517] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.517] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.517] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0269.517] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.518] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.518] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.518] CryptDestroyKey (hKey=0x55e910) returned 1 [0269.518] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0269.518] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44910720, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0269.518] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44910720, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.518] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448eaef2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x448eaef2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44910720, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.518] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa214da47, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa214da47, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa2173cb2, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xbd7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0269.518] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2199f29, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa2199f29, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa2199f29, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0269.518] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa21c0195, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa21c0195, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa21c0195, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x905, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_2.provxml", cAlternateFileName="POWER_~3.PRO")) returned 1 [0269.518] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa21c0195, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa21c0195, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa21c0195, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x905, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_2.provxml", cAlternateFileName="POWER_~3.PRO")) returned 0 [0269.519] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0269.519] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2173cb2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa2173cb2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa21c0195, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0269.519] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2173cb2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa2173cb2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa21c0195, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0269.519] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0269.519] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe4b6f3a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbe4b6f3a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbe4b6f3a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0269.519] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0269.519] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{7a30a9be-737f-47a1-a541-6e7b0761ed19}", cAlternateFileName="{7A30A~1")) returned 1 [0269.519] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.519] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.519] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.519] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.519] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570fc8) returned 1 [0269.520] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.520] CryptHashData (hHash=0x55e390, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.520] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0269.520] CryptDestroyHash (hHash=0x55e390) returned 1 [0269.520] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.520] GetLastError () returned 0x0 [0269.520] GetLastError () returned 0x0 [0269.520] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.521] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.522] WriteFile (in: hFile=0x244, lpBuffer=0x23e5260*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e5260*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.523] SetEndOfFile (hFile=0x244) returned 1 [0269.523] CloseHandle (hObject=0x244) returned 1 [0269.523] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.524] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.524] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.524] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.524] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.524] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.525] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.525] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.525] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.525] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.526] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.526] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0269.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.526] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.526] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.527] CryptDestroyKey (hKey=0x55e610) returned 1 [0269.527] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0269.527] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44910720, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0269.527] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44910720, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.527] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1c629f3, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1c629f3, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1c88c62, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1f35, dwReserved0=0x405534, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0269.527] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44910720, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44910720, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44910720, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.527] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a2656d, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1a2656d, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a2656d, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0269.527] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0269.527] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.527] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.527] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.528] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0269.528] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571518) returned 1 [0269.528] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0269.528] CryptHashData (hHash=0x55e310, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.529] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0269.529] CryptDestroyHash (hHash=0x55e310) returned 1 [0269.529] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0269.529] GetLastError () returned 0x0 [0269.529] GetLastError () returned 0x0 [0269.529] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.530] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.532] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.532] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0269.533] WriteFile (in: hFile=0x248, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.536] SetEndOfFile (hFile=0x248) returned 1 [0269.537] CloseHandle (hObject=0x248) returned 1 [0269.537] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.538] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.538] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.539] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.539] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0269.540] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.540] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.541] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.541] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.541] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.541] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.541] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.542] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.542] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.542] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.542] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.542] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.542] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0269.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.543] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.543] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.543] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.573] CryptDestroyKey (hKey=0x55e610) returned 1 [0269.573] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0269.573] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44936a64, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0269.573] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44936a64, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.573] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44936a64, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44936a64, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44936a64, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.574] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0269.574] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.574] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.574] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.574] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0269.574] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0269.625] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0269.625] CryptHashData (hHash=0x55e690, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.625] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0269.625] CryptDestroyHash (hHash=0x55e690) returned 1 [0269.625] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0269.625] GetLastError () returned 0x0 [0269.625] GetLastError () returned 0x0 [0269.625] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.626] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0269.629] WriteFile (in: hFile=0x24c, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.630] SetEndOfFile (hFile=0x24c) returned 1 [0269.630] CloseHandle (hObject=0x24c) returned 1 [0269.631] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.632] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.632] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0269.632] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.633] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.633] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.633] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.634] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.634] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0269.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.634] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.634] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.635] CryptDestroyKey (hKey=0x55e710) returned 1 [0269.635] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0269.635] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44a1ba0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0269.635] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44a1ba0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.663] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44a1ba0d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44a1ba0d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44a1ba0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.663] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa198dbb0, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa198dbb0, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa19b3e1c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xfcb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0269.663] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19da08f, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa19da08f, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa19da08f, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0269.663] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a002fa, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1a002fa, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a002fa, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_2.provxml", cAlternateFileName="POWER_~3.PRO")) returned 1 [0269.664] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a002fa, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1a002fa, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a002fa, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_2.provxml", cAlternateFileName="POWER_~3.PRO")) returned 0 [0269.664] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0269.680] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19b3e1c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa19b3e1c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a2656d, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0269.680] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19b3e1c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa19b3e1c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a2656d, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0269.680] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0269.680] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0269.680] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0269.681] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{8fb7d64e-70fc-4f9d-89ee-d486817534df}", cAlternateFileName="{8FB7D~1")) returned 1 [0269.681] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.681] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.681] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.681] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.681] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.681] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.681] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5709f0) returned 1 [0269.812] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.813] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.813] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e7d0) returned 1 [0269.813] CryptDestroyHash (hHash=0x55e190) returned 1 [0269.813] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.813] GetLastError () returned 0x0 [0269.813] GetLastError () returned 0x0 [0269.813] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.815] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.815] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.816] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.822] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.824] SetEndOfFile (hFile=0x244) returned 1 [0269.824] CloseHandle (hObject=0x244) returned 1 [0269.824] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.825] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.825] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.826] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.826] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.826] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.826] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.827] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.827] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.828] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.828] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.831] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.831] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.832] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.832] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0269.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.832] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.832] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.832] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.833] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0269.833] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0269.833] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44be548c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0269.834] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44be548c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.834] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa166c88f, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa166c88f, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1692b03, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0269.834] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44be548c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44be548c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44be548c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.834] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa166c88f, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa166c88f, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa166c88f, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0269.834] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0269.834] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.834] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.834] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.835] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.835] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0269.835] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571408) returned 1 [0269.837] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0269.837] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.837] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e390) returned 1 [0269.837] CryptDestroyHash (hHash=0x55e910) returned 1 [0269.837] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0269.837] GetLastError () returned 0x0 [0269.837] GetLastError () returned 0x0 [0269.838] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.838] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0269.871] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.872] SetEndOfFile (hFile=0x248) returned 1 [0269.872] CloseHandle (hObject=0x248) returned 1 [0269.872] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.873] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.873] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0269.874] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.877] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.877] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.877] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.877] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.877] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.878] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0269.878] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.878] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.878] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.878] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.878] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.878] CryptDestroyKey (hKey=0x55e390) returned 1 [0269.878] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0269.878] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44c57c8d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0269.879] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44c57c8d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.879] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c57c8d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44c57c8d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44c7de08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.879] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0269.879] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.879] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.879] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.879] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.879] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.879] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0269.880] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570638) returned 1 [0269.880] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0269.880] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.880] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0269.880] CryptDestroyHash (hHash=0x55e910) returned 1 [0269.880] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0269.880] GetLastError () returned 0x0 [0269.880] GetLastError () returned 0x0 [0269.881] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.881] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.882] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.882] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0269.883] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.885] SetEndOfFile (hFile=0x24c) returned 1 [0269.885] CloseHandle (hObject=0x24c) returned 1 [0269.885] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.886] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.886] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0269.887] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.888] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.888] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.888] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.889] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.889] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.889] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.889] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.890] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0269.890] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.890] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.890] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.890] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.890] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.890] CryptDestroyKey (hKey=0x55e710) returned 1 [0269.890] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0269.890] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44c7de08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0269.891] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44c7de08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.891] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44c7de08, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44c7de08, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44c7de08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.891] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa16203b1, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa16203b1, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1646620, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0269.891] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa16203b1, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa16203b1, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1646620, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 0 [0269.891] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0269.891] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1646620, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1646620, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1646620, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0269.891] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1646620, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1646620, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1646620, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0269.891] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0269.891] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0269.891] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0269.891] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{99b095d8-5959-4820-bea7-7448c8427b4e}", cAlternateFileName="{99B09~1")) returned 1 [0269.891] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.892] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.892] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.892] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.892] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5707d0) returned 1 [0269.893] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.893] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.893] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e710) returned 1 [0269.893] CryptDestroyHash (hHash=0x55e610) returned 1 [0269.893] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.893] GetLastError () returned 0x0 [0269.893] GetLastError () returned 0x0 [0269.893] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.894] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.895] WriteFile (in: hFile=0x244, lpBuffer=0x23e5260*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e5260*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.896] SetEndOfFile (hFile=0x244) returned 1 [0269.897] CloseHandle (hObject=0x244) returned 1 [0269.897] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.898] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.898] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.898] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.898] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.898] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.898] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.898] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.898] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.898] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.899] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.899] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.899] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.899] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0269.900] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.900] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.900] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.900] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.900] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.900] CryptDestroyKey (hKey=0x55e710) returned 1 [0269.900] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0269.901] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44ca412a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0269.901] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44ca412a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.901] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce2cc2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0ce2cc2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0ce2cc2, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0269.901] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ca412a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44ca412a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44ca412a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.901] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0c7056c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0c7056c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0c7056c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0269.901] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0269.901] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.901] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.902] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.902] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.902] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0269.902] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570e30) returned 1 [0269.909] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0269.909] CryptHashData (hHash=0x55e690, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.909] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e710) returned 1 [0269.909] CryptDestroyHash (hHash=0x55e690) returned 1 [0269.909] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0269.909] GetLastError () returned 0x0 [0269.909] GetLastError () returned 0x0 [0269.909] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.910] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.911] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.911] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0269.912] WriteFile (in: hFile=0x248, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.913] SetEndOfFile (hFile=0x248) returned 1 [0269.913] CloseHandle (hObject=0x248) returned 1 [0269.913] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.914] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.914] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.914] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.914] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.914] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.914] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0269.915] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.915] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.915] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.915] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.915] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.915] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.915] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.915] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.915] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.915] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.915] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.916] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.916] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.916] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.916] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0269.916] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.916] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.916] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.916] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.916] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.916] CryptDestroyKey (hKey=0x55e710) returned 1 [0269.916] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0269.916] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44cca4d2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0269.917] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44cca4d2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.917] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44cca4d2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44cca4d2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44cca4d2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.917] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0269.917] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.917] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.917] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.917] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.917] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.917] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0269.917] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0269.918] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0269.918] CryptHashData (hHash=0x55e690, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.918] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0269.918] CryptDestroyHash (hHash=0x55e690) returned 1 [0269.918] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0269.918] GetLastError () returned 0x0 [0269.918] GetLastError () returned 0x0 [0269.919] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.920] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0269.921] WriteFile (in: hFile=0x24c, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.922] SetEndOfFile (hFile=0x24c) returned 1 [0269.922] CloseHandle (hObject=0x24c) returned 1 [0269.922] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.923] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.923] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.925] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.925] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.925] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.925] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0269.926] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.926] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.926] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.926] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.926] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.926] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.927] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0269.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.927] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.927] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.927] CryptDestroyKey (hKey=0x55e710) returned 1 [0269.928] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0269.928] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44cf0700, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0269.928] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44cf0700, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.928] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44cf0700, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44cf0700, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44cf0700, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.928] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0c2408e, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0c2408e, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0c4a301, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0269.928] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0c2408e, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0c2408e, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0c4a301, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 0 [0269.928] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0269.928] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0c7056c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0c7056c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0c7056c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0269.928] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0c7056c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0c7056c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0c7056c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0269.928] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0269.928] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0269.929] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0269.929] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{9aec5bda-1e87-46b3-bb96-1a01c606555e}", cAlternateFileName="{9AEC5~1")) returned 1 [0269.929] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.929] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.929] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.929] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.929] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.929] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.929] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5712f8) returned 1 [0269.930] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.930] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.930] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e690) returned 1 [0269.930] CryptDestroyHash (hHash=0x55e610) returned 1 [0269.930] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.930] GetLastError () returned 0x0 [0269.930] GetLastError () returned 0x0 [0269.930] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.931] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.932] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.932] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.934] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.937] SetEndOfFile (hFile=0x244) returned 1 [0269.937] CloseHandle (hObject=0x244) returned 1 [0269.937] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.938] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.938] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.938] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.938] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.938] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.938] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.939] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.939] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.939] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.939] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.939] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0269.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.940] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.940] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.940] CryptDestroyKey (hKey=0x55e690) returned 1 [0269.940] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0269.940] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44cf0700, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0269.940] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44cf0700, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.940] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1c88c62, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1c88c62, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1c88c62, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x405534, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0269.940] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44cf0700, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44cf0700, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44d166a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.940] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a2656d, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1a2656d, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a2656d, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0269.941] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0269.941] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.941] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.941] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.941] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0269.941] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570858) returned 1 [0269.942] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0269.942] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.942] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e690) returned 1 [0269.942] CryptDestroyHash (hHash=0x55e210) returned 1 [0269.942] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0269.942] GetLastError () returned 0x0 [0269.942] GetLastError () returned 0x0 [0269.942] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.942] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0269.943] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.944] SetEndOfFile (hFile=0x248) returned 1 [0269.946] CloseHandle (hObject=0x248) returned 1 [0269.946] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.947] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.947] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.947] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.947] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0269.947] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.948] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.948] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.948] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.948] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.948] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.948] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.948] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0269.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.949] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.949] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.949] CryptDestroyKey (hKey=0x55e690) returned 1 [0269.949] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0269.949] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44d166a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0269.951] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44d166a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.951] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d166a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44d166a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44d166a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.951] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0269.951] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.951] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.952] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.952] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.952] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0269.952] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0269.952] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0269.952] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.952] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0269.952] CryptDestroyHash (hHash=0x55e710) returned 1 [0269.952] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0269.952] GetLastError () returned 0x0 [0269.952] GetLastError () returned 0x0 [0269.952] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.954] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.954] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.955] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0269.955] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.956] SetEndOfFile (hFile=0x24c) returned 1 [0269.957] CloseHandle (hObject=0x24c) returned 1 [0269.957] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.957] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.957] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.957] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.958] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.958] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0269.958] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.958] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.958] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.958] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.958] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.958] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.958] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.959] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.959] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.959] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0269.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.959] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.959] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.960] CryptDestroyKey (hKey=0x55e910) returned 1 [0269.960] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0269.960] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44d3ca09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0269.960] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44d3ca09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.960] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d3ca09, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44d3ca09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44d3ca09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.960] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19da08f, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa19da08f, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a002fa, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1bae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0269.960] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19da08f, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa19da08f, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a002fa, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1bae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 0 [0269.960] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0269.960] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a002fa, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1a002fa, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a002fa, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0269.960] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a002fa, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1a002fa, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa1a002fa, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0269.960] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0269.960] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdea603, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdea603, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdea603, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0269.960] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0269.961] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", cAlternateFileName="{9DF6A~1")) returned 1 [0269.961] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.961] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.961] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.961] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.961] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5707d0) returned 1 [0269.962] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.962] CryptHashData (hHash=0x55e310, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.962] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e910) returned 1 [0269.962] CryptDestroyHash (hHash=0x55e310) returned 1 [0269.962] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.962] GetLastError () returned 0x0 [0269.962] GetLastError () returned 0x0 [0269.962] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.963] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.965] WriteFile (in: hFile=0x244, lpBuffer=0x23e5260*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e5260*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.966] SetEndOfFile (hFile=0x244) returned 1 [0269.966] CloseHandle (hObject=0x244) returned 1 [0269.966] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.967] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.967] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.967] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.968] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.968] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.968] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.968] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.968] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0269.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.969] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.969] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.969] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.971] CryptDestroyKey (hKey=0x55e910) returned 1 [0269.971] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0269.971] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44d3ca09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0269.972] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44d3ca09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.972] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa140a197, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa140a197, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa140a197, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xd1c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0269.972] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d3ca09, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44d3ca09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44d62b31, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.972] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa134b56b, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa134b56b, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa134b56b, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0269.972] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0269.972] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.972] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.972] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.972] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.972] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.972] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0269.972] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570c98) returned 1 [0269.973] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0269.973] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.973] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0269.973] CryptDestroyHash (hHash=0x55e210) returned 1 [0269.973] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0269.973] GetLastError () returned 0x0 [0269.973] GetLastError () returned 0x0 [0269.973] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.974] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.974] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.975] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0269.975] WriteFile (in: hFile=0x248, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.976] SetEndOfFile (hFile=0x248) returned 1 [0269.977] CloseHandle (hObject=0x248) returned 1 [0269.977] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.977] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.978] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0269.978] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.978] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.978] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.979] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.979] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.979] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0269.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.979] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.979] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.980] CryptDestroyKey (hKey=0x55e610) returned 1 [0269.980] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0269.980] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44d62b31, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0269.980] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44d62b31, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.980] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d62b31, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44d62b31, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44d62b31, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.980] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0269.980] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.980] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.980] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.980] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0269.981] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0269.982] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0269.982] CryptHashData (hHash=0x55e910, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.982] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0269.982] CryptDestroyHash (hHash=0x55e910) returned 1 [0269.982] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0269.982] GetLastError () returned 0x0 [0269.982] GetLastError () returned 0x0 [0269.982] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.983] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0269.985] WriteFile (in: hFile=0x24c, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.986] SetEndOfFile (hFile=0x24c) returned 1 [0269.987] CloseHandle (hObject=0x24c) returned 1 [0269.987] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.987] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.987] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0269.988] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.988] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.988] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.988] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.989] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.989] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.989] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.989] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0269.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.989] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.989] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.989] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.990] CryptDestroyKey (hKey=0x55e190) returned 1 [0269.990] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0269.990] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44d88e98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0269.990] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44d88e98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.990] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d88e98, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44d88e98, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44d88e98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.990] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12d8e21, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa12d8e21, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa12ff08c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0269.990] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa13252fc, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa13252fc, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa13252fc, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0269.990] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa13252fc, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa13252fc, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa13252fc, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 0 [0269.990] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0269.990] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12ff08c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa12ff08c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa134b56b, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0269.990] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa12ff08c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa12ff08c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa134b56b, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0269.990] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0269.990] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd6b510c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd6b510c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd6b510c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0269.990] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0269.990] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", cAlternateFileName="{B0B91~1")) returned 1 [0269.991] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0269.991] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0269.991] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0269.991] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0269.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0269.991] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570c10) returned 1 [0269.991] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0269.991] CryptHashData (hHash=0x55e690, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0269.992] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0269.992] CryptDestroyHash (hHash=0x55e690) returned 1 [0269.992] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0269.992] GetLastError () returned 0x0 [0269.992] GetLastError () returned 0x0 [0269.992] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.992] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0269.993] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0269.993] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0269.994] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0269.995] SetEndOfFile (hFile=0x244) returned 1 [0269.995] CloseHandle (hObject=0x244) returned 1 [0269.996] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0269.997] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0269.997] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0269.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0269.997] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.997] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0269.998] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0269.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.998] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.998] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0269.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0269.998] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0269.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0269.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0269.998] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0269.998] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0269.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0269.999] CryptDestroyKey (hKey=0x55e610) returned 1 [0269.999] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0269.999] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44d88e98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0269.999] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44d88e98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.999] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d7b677, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0d7b677, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0da18e6, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x8a0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0269.999] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d88e98, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44d88e98, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44d88e98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0269.999] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d2f19c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0d2f19c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0d2f19c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0270.000] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0270.000] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.000] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.000] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.000] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.000] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.000] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.000] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570c98) returned 1 [0270.001] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0270.001] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.001] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e290) returned 1 [0270.001] CryptDestroyHash (hHash=0x55e750) returned 1 [0270.001] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0270.001] GetLastError () returned 0x0 [0270.001] GetLastError () returned 0x0 [0270.001] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.002] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0270.005] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.006] SetEndOfFile (hFile=0x248) returned 1 [0270.007] CloseHandle (hObject=0x248) returned 1 [0270.007] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.008] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.008] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.008] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.008] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.008] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.009] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.009] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.009] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.009] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.009] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.009] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.009] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.011] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.011] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.011] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.012] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0270.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.013] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.013] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.014] CryptDestroyKey (hKey=0x55e290) returned 1 [0270.014] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0270.014] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44daf345, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0270.014] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44daf345, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.014] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44daf345, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44daf345, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44daf345, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.015] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0270.016] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.016] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.016] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.016] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.016] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.017] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0270.052] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.052] CryptHashData (hHash=0x55e910, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.052] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0270.053] CryptDestroyHash (hHash=0x55e910) returned 1 [0270.053] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.053] GetLastError () returned 0x0 [0270.053] GetLastError () returned 0x0 [0270.053] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.055] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.056] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.057] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0270.061] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.063] SetEndOfFile (hFile=0x24c) returned 1 [0270.064] CloseHandle (hObject=0x24c) returned 1 [0270.064] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.066] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.066] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.066] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.066] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.066] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.066] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.067] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.067] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.067] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.068] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.071] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.071] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.071] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.072] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.072] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0270.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.072] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.072] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.073] CryptDestroyKey (hKey=0x55e610) returned 1 [0270.073] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0270.073] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44e22bc1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0270.074] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44e22bc1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.074] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44e22bc1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44e22bc1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44e47d19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.074] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce2cc2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0ce2cc2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0d08f31, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0270.074] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ce2cc2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0ce2cc2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0d08f31, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 0 [0270.076] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0270.076] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d08f31, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0d08f31, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0d2f19c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0270.076] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d08f31, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0d08f31, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0d2f19c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0270.077] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0270.077] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0268ef, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbd0268ef, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbd0268ef, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0270.077] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0270.077] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{c5dc3753-b6c8-4057-b396-bf13d769311c}", cAlternateFileName="{C5DC3~1")) returned 1 [0270.078] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.078] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.079] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.079] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.079] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.079] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5709f0) returned 1 [0270.081] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0270.081] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.081] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0270.081] CryptDestroyHash (hHash=0x55e710) returned 1 [0270.082] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0270.082] GetLastError () returned 0x0 [0270.082] GetLastError () returned 0x0 [0270.082] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.084] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0270.088] WriteFile (in: hFile=0x244, lpBuffer=0x23e5260*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e5260*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.129] SetEndOfFile (hFile=0x244) returned 1 [0270.130] CloseHandle (hObject=0x244) returned 1 [0270.130] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.131] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.131] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.132] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.132] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.132] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.132] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.133] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.133] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.133] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.133] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.133] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.133] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.133] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.134] CryptDestroyKey (hKey=0x55e610) returned 1 [0270.134] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0270.134] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44e6dc28, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0270.134] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44e6dc28, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.134] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebc2ab1, ftCreationTime.dwHighDateTime=0x1d112b1, ftLastAccessTime.dwLowDateTime=0xebc2ab1, ftLastAccessTime.dwHighDateTime=0x1d112b1, ftLastWriteTime.dwLowDateTime=0xebc2ab1, ftLastWriteTime.dwHighDateTime=0x1d112b1, nFileSizeHigh=0x0, nFileSizeLow=0x666, dwReserved0=0x405534, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0270.134] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44e6dc28, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44e6dc28, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44ee1dda, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.135] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9c845, ftCreationTime.dwHighDateTime=0x1d112b1, ftLastAccessTime.dwLowDateTime=0xeb9c845, ftLastAccessTime.dwHighDateTime=0x1d112b1, ftLastWriteTime.dwLowDateTime=0xeb9c845, ftLastWriteTime.dwHighDateTime=0x1d112b1, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0270.135] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0270.135] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.135] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.135] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.135] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.135] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.135] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.135] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570858) returned 1 [0270.136] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0270.136] CryptHashData (hHash=0x55e390, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.136] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e710) returned 1 [0270.136] CryptDestroyHash (hHash=0x55e390) returned 1 [0270.136] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0270.136] GetLastError () returned 0x0 [0270.136] GetLastError () returned 0x0 [0270.136] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.138] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.138] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.139] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0270.140] WriteFile (in: hFile=0x248, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.141] SetEndOfFile (hFile=0x248) returned 1 [0270.142] CloseHandle (hObject=0x248) returned 1 [0270.142] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.143] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.143] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.143] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.143] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.143] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.144] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.144] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.144] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.144] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.144] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.145] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.145] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.145] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.146] CryptDestroyKey (hKey=0x55e710) returned 1 [0270.146] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0270.146] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44f06b9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.146] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44f06b9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.146] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44f06b9e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f06b9e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f06b9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.146] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0270.146] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.146] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.147] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.147] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.147] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570a78) returned 1 [0270.147] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.148] CryptHashData (hHash=0x55e690, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.148] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0270.148] CryptDestroyHash (hHash=0x55e690) returned 1 [0270.148] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.148] GetLastError () returned 0x0 [0270.148] GetLastError () returned 0x0 [0270.148] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.148] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0270.150] WriteFile (in: hFile=0x24c, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.151] SetEndOfFile (hFile=0x24c) returned 1 [0270.152] CloseHandle (hObject=0x24c) returned 1 [0270.152] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.153] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.153] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.154] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.154] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.154] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.155] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.155] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.155] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.155] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.155] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.155] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0270.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.155] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.155] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.155] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.156] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.156] CryptDestroyKey (hKey=0x55e290) returned 1 [0270.156] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0270.156] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44f06b9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0270.156] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44f06b9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.156] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44f06b9e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f06b9e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f06b9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.156] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb50367, ftCreationTime.dwHighDateTime=0x1d112b1, ftLastAccessTime.dwLowDateTime=0xeb50367, ftLastAccessTime.dwHighDateTime=0x1d112b1, ftLastWriteTime.dwLowDateTime=0xeb765cf, ftLastWriteTime.dwHighDateTime=0x1d112b1, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0270.156] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb50367, ftCreationTime.dwHighDateTime=0x1d112b1, ftLastAccessTime.dwLowDateTime=0xeb50367, ftLastAccessTime.dwHighDateTime=0x1d112b1, ftLastWriteTime.dwLowDateTime=0xeb765cf, ftLastWriteTime.dwHighDateTime=0x1d112b1, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 0 [0270.157] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0270.157] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9c845, ftCreationTime.dwHighDateTime=0x1d112b1, ftLastAccessTime.dwLowDateTime=0xeb9c845, ftLastAccessTime.dwHighDateTime=0x1d112b1, ftLastWriteTime.dwLowDateTime=0xeb9c845, ftLastWriteTime.dwHighDateTime=0x1d112b1, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0270.157] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9c845, ftCreationTime.dwHighDateTime=0x1d112b1, ftLastAccessTime.dwLowDateTime=0xeb9c845, ftLastAccessTime.dwHighDateTime=0x1d112b1, ftLastWriteTime.dwLowDateTime=0xeb9c845, ftLastWriteTime.dwHighDateTime=0x1d112b1, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0270.157] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.157] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcd9e222, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcd9e222, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcd9e222, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0270.157] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0270.157] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{ee4aac98-c174-4941-82b1-d121e493e4fb}", cAlternateFileName="{EE4AA~1")) returned 1 [0270.157] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.157] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.157] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.157] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.158] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571408) returned 1 [0270.158] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0270.158] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.158] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e910) returned 1 [0270.158] CryptDestroyHash (hHash=0x55e790) returned 1 [0270.158] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0270.158] GetLastError () returned 0x0 [0270.159] GetLastError () returned 0x0 [0270.159] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.159] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.160] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.161] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0270.162] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.164] SetEndOfFile (hFile=0x244) returned 1 [0270.164] CloseHandle (hObject=0x244) returned 1 [0270.164] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.165] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.165] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.165] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.165] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.166] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.166] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.166] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.166] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.167] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.167] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.167] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.167] CryptDestroyKey (hKey=0x55e910) returned 1 [0270.167] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0270.167] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44f2ca2a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.168] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44f2ca2a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.168] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18f51ef, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa18f51ef, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa18f51ef, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x71d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0270.168] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44f2ca2a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f2ca2a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f2ca2a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.168] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18cef80, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa18cef80, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa18cef80, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0270.168] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0270.168] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.168] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.220] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.220] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.220] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570d20) returned 1 [0270.221] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0270.221] CryptHashData (hHash=0x55e690, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.221] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e290) returned 1 [0270.221] CryptDestroyHash (hHash=0x55e690) returned 1 [0270.221] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0270.221] GetLastError () returned 0x0 [0270.221] GetLastError () returned 0x0 [0270.221] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.222] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0270.223] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.224] SetEndOfFile (hFile=0x248) returned 1 [0270.224] CloseHandle (hObject=0x248) returned 1 [0270.225] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.225] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.227] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.227] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.227] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.227] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.227] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.228] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.228] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.228] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.228] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.228] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.228] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.228] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.228] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.228] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.228] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.229] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.229] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0270.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.229] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.229] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.229] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.229] CryptDestroyKey (hKey=0x55e290) returned 1 [0270.230] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0270.230] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44fc5798, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0270.230] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44fc5798, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.230] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44fc5798, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44fc5798, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44fc5798, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.230] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0270.230] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.230] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.230] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.230] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.230] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.231] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0270.232] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.232] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.232] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0270.232] CryptDestroyHash (hHash=0x55e310) returned 1 [0270.232] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.232] GetLastError () returned 0x0 [0270.232] GetLastError () returned 0x0 [0270.232] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.233] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.233] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.234] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0270.235] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.236] SetEndOfFile (hFile=0x24c) returned 1 [0270.236] CloseHandle (hObject=0x24c) returned 1 [0270.236] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.237] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.237] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.237] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.237] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.238] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.238] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.238] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.238] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.238] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.239] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.239] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.239] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.239] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.239] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.240] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.240] CryptDestroyKey (hKey=0x55e690) returned 1 [0270.240] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0270.240] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44feb433, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0270.240] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44feb433, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.240] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44feb433, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44feb433, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44feb433, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.240] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1882aa2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1882aa2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa18a8d11, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0270.240] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1882aa2, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa1882aa2, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa18a8d11, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 0 [0270.240] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0270.241] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18a8d11, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa18a8d11, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa18a8d11, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0270.241] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18a8d11, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa18a8d11, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa18a8d11, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0270.241] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0270.241] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbcdc44d0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcdc44d0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcdc44d0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0270.241] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.241] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{f11899f2-71ec-4621-9997-e17ae2f6eb26}", cAlternateFileName="{F1189~1")) returned 1 [0270.241] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.241] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.241] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.241] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.241] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.241] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.242] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570eb8) returned 1 [0270.242] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0270.242] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.242] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e690) returned 1 [0270.242] CryptDestroyHash (hHash=0x55e610) returned 1 [0270.242] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0270.242] GetLastError () returned 0x0 [0270.242] GetLastError () returned 0x0 [0270.243] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.243] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0270.245] WriteFile (in: hFile=0x244, lpBuffer=0x23e5260*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e5260*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.248] SetEndOfFile (hFile=0x244) returned 1 [0270.248] CloseHandle (hObject=0x244) returned 1 [0270.248] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.249] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.249] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.250] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.250] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.250] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.250] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.250] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.250] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.251] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.251] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.251] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.251] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.251] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.251] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.251] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.251] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.251] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.251] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.251] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0270.252] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.252] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.252] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.252] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.252] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.252] CryptDestroyKey (hKey=0x55e690) returned 1 [0270.252] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0270.252] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44feb433, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.253] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x44feb433, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.253] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0fddd6c, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0fddd6c, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0fddd6c, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0270.253] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44feb433, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44feb433, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x450116d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.253] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0f1f13f, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0f1f13f, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0f1f13f, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0270.253] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0270.253] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.253] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.253] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.253] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.253] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.254] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.254] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571490) returned 1 [0270.254] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0270.254] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.254] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0270.254] CryptDestroyHash (hHash=0x55e710) returned 1 [0270.255] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0270.255] GetLastError () returned 0x0 [0270.255] GetLastError () returned 0x0 [0270.255] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.256] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.256] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.257] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0270.270] WriteFile (in: hFile=0x248, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.271] SetEndOfFile (hFile=0x248) returned 1 [0270.271] CloseHandle (hObject=0x248) returned 1 [0270.271] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.272] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.272] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.273] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.273] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.273] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.273] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.273] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.273] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.273] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.273] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.274] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.274] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.274] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.274] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.274] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.274] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.274] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.274] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.274] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.274] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.274] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.275] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.275] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.275] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.275] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.275] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.275] CryptDestroyKey (hKey=0x55e910) returned 1 [0270.275] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0270.275] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x45037934, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0270.276] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x45037934, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.276] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45037934, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45037934, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45037934, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.276] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0270.276] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.276] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.276] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.276] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.276] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.276] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.277] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0270.277] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.277] CryptHashData (hHash=0x55e390, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.277] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0270.277] CryptDestroyHash (hHash=0x55e390) returned 1 [0270.277] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.278] GetLastError () returned 0x0 [0270.278] GetLastError () returned 0x0 [0270.278] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.278] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0270.283] WriteFile (in: hFile=0x24c, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.284] SetEndOfFile (hFile=0x24c) returned 1 [0270.285] CloseHandle (hObject=0x24c) returned 1 [0270.285] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.286] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.286] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.286] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.286] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.286] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.286] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.286] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.287] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.287] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.287] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.287] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.287] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.287] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.287] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.287] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.287] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.287] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.287] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.288] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.288] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.288] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.288] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.288] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.288] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.288] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.288] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.288] CryptDestroyKey (hKey=0x55e710) returned 1 [0270.289] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0270.289] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x4505dc17, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0270.289] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x4505dc17, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.289] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4505dc17, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4505dc17, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4505dc17, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.289] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0eac9f1, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0eac9f1, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0eac9f1, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0270.289] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed2c64, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0ed2c64, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0ef8ed0, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0270.289] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed2c64, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0ed2c64, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0ef8ed0, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 0 [0270.289] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0270.289] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed2c64, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0ed2c64, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0ef8ed0, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0270.289] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0ed2c64, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa0ed2c64, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa0ef8ed0, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x139, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0270.289] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0270.290] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbdbec4a8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbdbec4a8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbdbec4a8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0270.290] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.290] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 1 [0270.290] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.290] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.290] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.290] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.290] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.290] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.290] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570c98) returned 1 [0270.291] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0270.291] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.291] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e690) returned 1 [0270.291] CryptDestroyHash (hHash=0x55e610) returned 1 [0270.291] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0270.291] GetLastError () returned 0x0 [0270.291] GetLastError () returned 0x0 [0270.291] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.292] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.293] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.294] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0270.295] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.296] SetEndOfFile (hFile=0x244) returned 1 [0270.297] CloseHandle (hObject=0x244) returned 1 [0270.297] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.297] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.298] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.298] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.299] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.299] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.299] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.299] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.299] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.299] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.299] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0270.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.300] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.300] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.300] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.300] CryptDestroyKey (hKey=0x55e690) returned 1 [0270.300] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0270.300] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x45083e05, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.301] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x45083e05, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.301] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa9d106f, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xaa9d106f, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xaa9d106f, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x6eb8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0270.301] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45083e05, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45083e05, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45083e05, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.301] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9fd4d57, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9fd4d57, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9fd4d57, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0270.301] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0270.301] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.301] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.301] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.301] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.301] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.302] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.302] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570e30) returned 1 [0270.302] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0270.302] CryptHashData (hHash=0x55e390, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.302] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e750) returned 1 [0270.302] CryptDestroyHash (hHash=0x55e390) returned 1 [0270.303] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0270.303] GetLastError () returned 0x0 [0270.303] GetLastError () returned 0x0 [0270.303] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.303] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0270.304] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.306] SetEndOfFile (hFile=0x248) returned 1 [0270.306] CloseHandle (hObject=0x248) returned 1 [0270.306] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.307] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.307] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.307] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.307] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.307] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.308] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.308] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.308] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.308] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.309] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.309] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.341] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.341] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.341] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.341] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.341] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.341] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.342] CryptDestroyKey (hKey=0x55e750) returned 1 [0270.342] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0270.342] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x45083e05, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0270.342] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x45083e05, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.342] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45083e05, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45083e05, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45083e05, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.342] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0270.342] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.342] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.343] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.343] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.343] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.343] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.343] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0270.344] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.344] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.344] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0270.344] CryptDestroyHash (hHash=0x55e910) returned 1 [0270.344] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.344] GetLastError () returned 0x0 [0270.344] GetLastError () returned 0x0 [0270.344] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.345] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.346] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.346] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0270.350] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.351] SetEndOfFile (hFile=0x24c) returned 1 [0270.352] CloseHandle (hObject=0x24c) returned 1 [0270.352] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.353] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.353] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.353] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.353] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.353] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.353] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.353] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.354] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.354] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.354] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.354] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.354] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.354] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.354] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.354] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.354] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.354] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.355] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.355] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.355] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.355] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.355] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.355] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.355] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.355] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.355] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.356] CryptDestroyKey (hKey=0x55e290) returned 1 [0270.356] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0270.356] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\*.*" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x450f6501, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0270.357] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x450f6501, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.357] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x450f6501, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x450f6501, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x450f6501, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.357] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e574f3, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9e574f3, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9e7d76e, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x19aa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_0.provxml", cAlternateFileName="POWER_~1.PRO")) returned 1 [0270.357] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e7d76e, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9e7d76e, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9e7d76e, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x586, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_1.provxml", cAlternateFileName="POWER_~2.PRO")) returned 1 [0270.357] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9ec9c48, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9ec9c48, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9ec9c48, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1018, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_2.provxml", cAlternateFileName="POWER_~3.PRO")) returned 1 [0270.357] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9f16127, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9f16127, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9f16127, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1939, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_3.provxml", cAlternateFileName="POWER_~4.PRO")) returned 1 [0270.357] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9f62605, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9f62605, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9f62605, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x1939, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_4.provxml", cAlternateFileName="PO21B6~1.PRO")) returned 1 [0270.357] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9f88875, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9f88875, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9f88875, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_5.provxml", cAlternateFileName="PO5EBD~1.PRO")) returned 1 [0270.357] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9faeae8, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9faeae8, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9faeae8, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x757, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_6.provxml", cAlternateFileName="PO805B~1.PRO")) returned 1 [0270.357] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9faeae8, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9faeae8, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9faeae8, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x93f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_7.provxml", cAlternateFileName="POFE19~1.PRO")) returned 1 [0270.357] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9faeae8, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9faeae8, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9faeae8, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x93f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Power_7.provxml", cAlternateFileName="POFE19~1.PRO")) returned 0 [0270.357] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0270.357] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e7d76e, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9e7d76e, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9faeae8, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x5d3, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0270.357] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9e7d76e, ftCreationTime.dwHighDateTime=0x1d112b0, ftLastAccessTime.dwLowDateTime=0xa9e7d76e, ftLastAccessTime.dwHighDateTime=0x1d112b0, ftLastWriteTime.dwLowDateTime=0xa9faeae8, ftLastWriteTime.dwHighDateTime=0x1d112b0, nFileSizeHigh=0x0, nFileSizeLow=0x5d3, dwReserved0=0x6f72702e, dwReserved1=0x6c6d7876, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0270.357] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0270.358] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0270.358] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.358] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbde4e9af, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbde4e9af, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbde4e9af, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73617461, dwReserved1=0x65726f74, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 0 [0270.358] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0270.358] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3840877a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3840877a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x392d6631, dwReserved1=0x2d633431, cFileName="Search", cAlternateFileName="")) returned 1 [0270.358] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.358] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.358] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.358] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.359] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571270) returned 1 [0270.359] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0270.359] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.360] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e790) returned 1 [0270.360] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0270.360] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18) returned 1 [0270.360] GetLastError () returned 0x0 [0270.360] GetLastError () returned 0x0 [0270.360] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.361] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\search\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0270.362] WriteFile (in: hFile=0x240, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.363] SetEndOfFile (hFile=0x240) returned 1 [0270.363] CloseHandle (hObject=0x240) returned 1 [0270.383] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.384] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.384] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.385] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.385] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.385] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.386] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.386] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.386] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.386] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0270.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.387] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.387] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.392] CryptDestroyKey (hKey=0x55e790) returned 1 [0270.392] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0270.392] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3840877a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4511c71f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0270.393] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3840877a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4511c71f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.393] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3879c03d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0270.393] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.393] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.393] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.393] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.393] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571380) returned 1 [0270.394] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0270.394] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.394] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e690) returned 1 [0270.394] CryptDestroyHash (hHash=0x55e610) returned 1 [0270.394] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0270.394] GetLastError () returned 0x0 [0270.394] GetLastError () returned 0x0 [0270.394] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.396] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.396] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.397] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0270.398] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.399] SetEndOfFile (hFile=0x244) returned 1 [0270.399] CloseHandle (hObject=0x244) returned 1 [0270.399] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.400] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.400] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.400] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.401] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.401] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.401] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.401] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.401] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.402] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.402] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.402] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.402] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.405] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.405] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.405] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.406] CryptDestroyKey (hKey=0x55e690) returned 1 [0270.406] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0270.406] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x45168bf5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.406] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3840877a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x45168bf5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.406] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3879c03d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1 [0270.406] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.406] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.406] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.406] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.406] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.407] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.407] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5710d8) returned 1 [0270.407] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0270.407] CryptHashData (hHash=0x55e690, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.407] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e390) returned 1 [0270.407] CryptDestroyHash (hHash=0x55e690) returned 1 [0270.408] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0270.408] GetLastError () returned 0x0 [0270.408] GetLastError () returned 0x0 [0270.408] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.408] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0270.409] WriteFile (in: hFile=0x248, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.411] SetEndOfFile (hFile=0x248) returned 1 [0270.411] CloseHandle (hObject=0x248) returned 1 [0270.411] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.412] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.412] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.412] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.412] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.412] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.412] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.412] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.413] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.413] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.413] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.413] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.414] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.414] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.414] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.414] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.414] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.414] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.414] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.414] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.414] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.415] CryptDestroyKey (hKey=0x55e390) returned 1 [0270.415] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0270.415] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4518ee7a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0270.415] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4518ee7a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.415] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4518ee7a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4518ee7a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4518ee7a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.415] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1eac9437, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1eac9437, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0270.415] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.415] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.415] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.416] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.416] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5708e0) returned 1 [0270.416] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.416] CryptHashData (hHash=0x55e690, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.416] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0270.417] CryptDestroyHash (hHash=0x55e690) returned 1 [0270.417] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.417] GetLastError () returned 0x0 [0270.417] GetLastError () returned 0x0 [0270.417] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.418] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.419] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.419] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0270.421] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.422] SetEndOfFile (hFile=0x24c) returned 1 [0270.423] CloseHandle (hObject=0x24c) returned 1 [0270.423] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.423] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.423] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.424] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.424] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.424] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.424] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.424] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.424] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.425] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.425] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.425] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.425] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0270.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.426] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.426] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.426] CryptDestroyKey (hKey=0x55e910) returned 1 [0270.426] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0270.426] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1eac9437, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x451b5167, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0270.427] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1eac9437, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x451b5167, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.427] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3879c03d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Config", cAlternateFileName="")) returned 1 [0270.427] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.427] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.427] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.427] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.427] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0270.428] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0270.428] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.428] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0270.428] CryptDestroyHash (hHash=0x55e910) returned 1 [0270.428] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0270.428] GetLastError () returned 0x0 [0270.428] GetLastError () returned 0x0 [0270.429] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.429] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\config\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0270.430] WriteFile (in: hFile=0x250, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.431] SetEndOfFile (hFile=0x250) returned 1 [0270.432] CloseHandle (hObject=0x250) returned 1 [0270.432] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.432] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.433] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.433] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.433] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.434] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.484] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.484] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.484] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.484] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.484] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.484] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.484] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.484] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0270.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.485] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.485] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.485] CryptDestroyKey (hKey=0x55e290) returned 1 [0270.486] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0270.486] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\config\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x451b5167, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0270.486] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3879c03d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x451b5167, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.486] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x451b5167, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x451b5167, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x451b5167, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.486] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x451b5167, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x451b5167, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x451b5167, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0270.486] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0270.486] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1dc2f691, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1dc2f691, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1dc5bf0f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBCHK~1.CRY")) returned 1 [0270.486] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1dc5bf0f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1dc5bf0f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1de437d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBLOG~1.CRY")) returned 1 [0270.487] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1de6d553, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1de6d553, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e51e006, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="edb00001.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDB000~1.CRY")) returned 1 [0270.487] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e5442f3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1e5442f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1e675474, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="edb00002.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDB000~2.CRY")) returned 1 [0270.487] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3880e634, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3880e634, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3880e634, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0270.487] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3880e634, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3880e634, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3880e634, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0270.487] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1e69b6dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1e69b6dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1eaa1816, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBTMP~1.CRY")) returned 1 [0270.487] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="GatherLogs", cAlternateFileName="GATHER~1")) returned 1 [0270.487] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.487] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.487] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.487] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.488] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0270.488] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0270.488] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.488] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0270.488] CryptDestroyHash (hHash=0x55e710) returned 1 [0270.488] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0270.488] GetLastError () returned 0x0 [0270.489] GetLastError () returned 0x0 [0270.489] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.490] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.490] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0270.492] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.493] SetEndOfFile (hFile=0x250) returned 1 [0270.493] CloseHandle (hObject=0x250) returned 1 [0270.493] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.494] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.494] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.495] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.495] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.495] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.495] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.495] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.495] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.495] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.495] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.496] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.496] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.496] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.496] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.496] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.496] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.497] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.497] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.497] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.497] CryptDestroyKey (hKey=0x55e910) returned 1 [0270.497] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0270.498] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4524da72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0270.498] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4524da72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.498] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4524da72, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4524da72, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4524da72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.498] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SystemIndex", cAlternateFileName="SYSTEM~1")) returned 1 [0270.498] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.498] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.498] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.498] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.498] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.499] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571490) returned 1 [0270.499] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0270.499] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.499] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0270.500] CryptDestroyHash (hHash=0x55e750) returned 1 [0270.500] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0270.500] GetLastError () returned 0x0 [0270.500] GetLastError () returned 0x0 [0270.500] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.500] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\systemindex\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0270.503] WriteFile (in: hFile=0x254, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.504] SetEndOfFile (hFile=0x254) returned 1 [0270.505] CloseHandle (hObject=0x254) returned 1 [0270.505] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.506] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.507] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.507] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.507] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.508] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.508] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.508] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.508] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.508] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.508] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.508] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.508] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.509] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.509] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.509] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.509] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.509] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.510] CryptDestroyKey (hKey=0x55e210) returned 1 [0270.510] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0270.510] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\systemindex\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x45273cc5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0270.510] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x45273cc5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.511] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45273cc5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45273cc5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45273cc5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.511] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63d081f8, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SystemIndex.1.Crwl", cAlternateFileName="SYSTEM~1.CRW")) returned 1 [0270.511] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63d081f8, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SystemIndex.1.gthr", cAlternateFileName="SYSTEM~1.GTH")) returned 1 [0270.511] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63d081f8, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SystemIndex.1.gthr", cAlternateFileName="SYSTEM~1.GTH")) returned 0 [0270.511] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0270.511] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SystemIndex", cAlternateFileName="SYSTEM~1")) returned 0 [0270.511] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0270.511] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x451b5167, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x451b5167, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x451b5167, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x7865646e, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.511] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x389fe671, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7865646e, dwReserved1=0x5f4f545f, cFileName="Projects", cAlternateFileName="")) returned 1 [0270.511] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.511] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.511] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.512] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.512] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.512] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0270.513] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0270.513] CryptHashData (hHash=0x55e710, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.513] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0270.513] CryptDestroyHash (hHash=0x55e710) returned 1 [0270.513] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0270.513] GetLastError () returned 0x0 [0270.513] GetLastError () returned 0x0 [0270.513] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.514] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.515] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.516] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0270.522] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.524] SetEndOfFile (hFile=0x250) returned 1 [0270.524] CloseHandle (hObject=0x250) returned 1 [0270.524] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.525] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.525] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.526] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.526] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.526] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.527] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.527] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.527] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0270.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.527] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.527] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.528] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.529] CryptDestroyKey (hKey=0x55e210) returned 1 [0270.529] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0270.529] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x45299df5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0270.529] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x45299df5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.529] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45299df5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45299df5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45299df5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.529] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SystemIndex", cAlternateFileName="SYSTEM~1")) returned 1 [0270.529] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.529] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.530] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.530] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.530] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571050) returned 1 [0270.530] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0270.531] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.531] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e790) returned 1 [0270.531] CryptDestroyHash (hHash=0x55e290) returned 1 [0270.531] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ea58*=0x18) returned 1 [0270.531] GetLastError () returned 0x0 [0270.531] GetLastError () returned 0x0 [0270.531] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.532] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0270.533] WriteFile (in: hFile=0x254, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.534] SetEndOfFile (hFile=0x254) returned 1 [0270.534] CloseHandle (hObject=0x254) returned 1 [0270.534] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.535] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.536] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.536] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.536] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.537] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.537] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.537] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.537] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.537] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.537] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.537] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.537] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0270.538] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.538] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.538] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.538] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.538] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.538] CryptDestroyKey (hKey=0x55e790) returned 1 [0270.538] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0270.538] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x452c00e7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0270.539] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x452c00e7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.539] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x452c00e7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x452c00e7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x452c00e7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.539] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x389fe671, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PropMap", cAlternateFileName="")) returned 1 [0270.539] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.539] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.539] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.539] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.539] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5709f0) returned 1 [0270.540] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0270.540] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.540] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0270.540] CryptDestroyHash (hHash=0x55e910) returned 1 [0270.540] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0270.540] GetLastError () returned 0x0 [0270.540] GetLastError () returned 0x0 [0270.541] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.542] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.542] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.543] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0270.544] WriteFile (in: hFile=0x258, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.546] SetEndOfFile (hFile=0x258) returned 1 [0270.546] CloseHandle (hObject=0x258) returned 1 [0270.546] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.547] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.547] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.547] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.547] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.547] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.547] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.548] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.548] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.548] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.548] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.548] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.548] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.548] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.548] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.549] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.549] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.549] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.549] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.550] CryptDestroyKey (hKey=0x55e750) returned 1 [0270.550] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0270.550] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x452e6389, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0270.550] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x452e6389, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.550] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63e393f3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CiPT0000.000", cAlternateFileName="")) returned 1 [0270.550] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x38a247c6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CiPT0000.001", cAlternateFileName="")) returned 1 [0270.550] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x389fe671, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x38a247c6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CiPT0000.002", cAlternateFileName="")) returned 1 [0270.551] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x452e6389, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x452e6389, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x452e6389, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.551] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x452e6389, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x452e6389, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x452e6389, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0270.551] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0270.551] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SecStore", cAlternateFileName="")) returned 1 [0270.551] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.551] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.551] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.551] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.551] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571490) returned 1 [0270.552] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0270.552] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.552] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0270.552] CryptDestroyHash (hHash=0x55e750) returned 1 [0270.552] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0270.552] GetLastError () returned 0x0 [0270.552] GetLastError () returned 0x0 [0270.553] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.553] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0270.554] WriteFile (in: hFile=0x258, lpBuffer=0x23e5244*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e5244*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.556] SetEndOfFile (hFile=0x258) returned 1 [0270.556] CloseHandle (hObject=0x258) returned 1 [0270.556] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.557] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.557] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.558] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.558] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.558] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.558] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.558] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.558] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.558] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.558] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.559] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.559] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.563] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.564] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.564] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.564] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.570] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.570] CryptDestroyKey (hKey=0x55e790) returned 1 [0270.570] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0270.570] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x452e6389, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0270.571] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x452e6389, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.571] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63ce200a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CiST0000.000", cAlternateFileName="")) returned 1 [0270.571] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CiST0000.001", cAlternateFileName="")) returned 1 [0270.571] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CiST0000.002", cAlternateFileName="")) returned 1 [0270.571] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x452e6389, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x452e6389, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x452e6389, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.571] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x452e6389, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x452e6389, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x452e6389, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0270.571] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0270.571] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3a412286, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SecStore", cAlternateFileName="")) returned 0 [0270.571] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0270.571] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x389fe671, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a412286, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3a412286, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SystemIndex", cAlternateFileName="SYSTEM~1")) returned 0 [0270.572] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0270.572] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2220, ftCreationTime.dwLowDateTime=0x3885ad20, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3885ad20, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63dc6bf9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x810000, dwReserved0=0x7865646e, dwReserved1=0x5f4f545f, cFileName="Windows.edb", cAlternateFileName="")) returned 1 [0270.572] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2220, ftCreationTime.dwLowDateTime=0x3885ad20, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3885ad20, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63dc6bf9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x810000, dwReserved0=0x7865646e, dwReserved1=0x5f4f545f, cFileName="Windows.edb", cAlternateFileName="")) returned 0 [0270.572] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0270.572] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3879c03d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1eac9437, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1eac9437, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0270.572] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0270.572] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45168bf5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45168bf5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45168bf5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.572] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3847afbf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3847afbf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6407587b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0270.572] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.572] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.572] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.572] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.573] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570a78) returned 1 [0270.573] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0270.574] CryptHashData (hHash=0x55e390, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.574] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e2d0) returned 1 [0270.574] CryptDestroyHash (hHash=0x55e390) returned 1 [0270.574] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0270.574] GetLastError () returned 0x0 [0270.574] GetLastError () returned 0x0 [0270.574] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.575] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.576] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.576] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0270.578] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.580] SetEndOfFile (hFile=0x248) returned 1 [0270.580] CloseHandle (hObject=0x248) returned 1 [0270.580] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.581] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.581] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.582] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.582] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.582] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.582] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.583] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.583] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0270.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.583] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.583] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.584] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0270.584] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0270.584] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*.*" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\temp\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3847afbf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6407587b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x45332d19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0270.584] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3847afbf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6407587b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x45332d19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.584] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45332d19, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45332d19, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45332d19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.584] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45332d19, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45332d19, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45332d19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0270.584] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0270.585] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3847afbf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3847afbf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6407587b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0270.585] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.585] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4511c71f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4511c71f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4511c71f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.585] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4511c71f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4511c71f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4511c71f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0270.585] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0270.585] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbca7cf5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbca7cf5a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SmsRouter", cAlternateFileName="SMSROU~1")) returned 1 [0270.585] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.585] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.585] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.585] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.585] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.586] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.586] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570eb8) returned 1 [0270.586] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0270.586] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.586] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0270.587] CryptDestroyHash (hHash=0x55e210) returned 1 [0270.587] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18) returned 1 [0270.587] GetLastError () returned 0x0 [0270.587] GetLastError () returned 0x0 [0270.587] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.587] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.588] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e523c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0) returned 0 [0270.588] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.588] CloseHandle (hObject=0xffffffff) returned 1 [0270.588] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.589] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.589] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.589] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.589] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.590] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.590] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.590] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.590] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.591] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.591] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.591] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.591] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.591] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0270.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.592] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.592] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.592] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0270.592] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0270.592] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\*.*" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbca7cf5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbca7cf5a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0270.593] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbca7cf5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbca7cf5a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.593] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcb3bc1a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MessageStore", cAlternateFileName="MESSAG~1")) returned 1 [0270.593] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.593] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.593] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.593] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.594] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570da8) returned 1 [0270.594] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0270.594] CryptHashData (hHash=0x55e290, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.594] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0270.594] CryptDestroyHash (hHash=0x55e290) returned 1 [0270.594] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0270.594] GetLastError () returned 0x0 [0270.594] GetLastError () returned 0x0 [0270.595] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.596] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.596] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.597] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.597] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0) returned 0 [0270.597] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.597] CloseHandle (hObject=0xffffffff) returned 1 [0270.597] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.598] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.598] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.599] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.599] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.599] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.600] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.600] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.600] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.600] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.600] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.600] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.600] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.600] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.601] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.601] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.601] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0270.601] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0270.601] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\*.*" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcb3bc1a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0270.601] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcb3bc1a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.602] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac94d4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcac94d4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x500dbf59, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0270.602] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcaa32ae, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x500dbf59, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0270.602] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbca7cf5a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0270.602] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcaa32ae, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcaa32ae, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcaa32ae, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0270.602] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcaa32ae, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcaa32ae, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcaa32ae, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0270.602] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcb3bc1a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0270.602] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac94d4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcac94d4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5001d2cc, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SmsInterceptStore.db", cAlternateFileName="SMSINT~1.DB")) returned 1 [0270.602] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcac94d4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcac94d4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x5001d2cc, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SmsInterceptStore.db", cAlternateFileName="SMSINT~1.DB")) returned 0 [0270.602] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0270.602] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbca7cf5a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbcb3bc1a, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xbcb3bc1a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MessageStore", cAlternateFileName="MESSAG~1")) returned 0 [0270.602] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0270.602] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1fd8e336, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1fd8e336, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x726f7453, dwReserved1=0x65, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0270.602] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.602] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.602] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.603] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.603] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.603] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5712f8) returned 1 [0270.603] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0270.604] CryptHashData (hHash=0x55e5d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.604] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e610) returned 1 [0270.604] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0270.604] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0270.604] GetLastError () returned 0x0 [0270.604] GetLastError () returned 0x0 [0270.604] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.604] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0270.606] WriteFile (in: hFile=0x240, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.611] SetEndOfFile (hFile=0x240) returned 1 [0270.611] CloseHandle (hObject=0x240) returned 1 [0270.611] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.612] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.612] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.612] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.612] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.613] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.613] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.613] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.613] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.613] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.613] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.613] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.614] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.614] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.614] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.614] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.614] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.615] CryptDestroyKey (hKey=0x55e610) returned 1 [0270.615] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0270.615] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*.*" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1fd8e336, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45358b0c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0270.615] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x1fd8e336, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45358b0c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.615] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eb60388, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1eb60388, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1ed5017d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x93038, dwReserved0=0x405534, dwReserved1=0x0, cFileName="guest.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GUESTB~1.CRY")) returned 1 [0270.615] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed764ca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1ed764ca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1ee5b257, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x405534, dwReserved1=0x0, cFileName="guest.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GUESTP~1.CRY")) returned 1 [0270.616] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45358b0c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45358b0c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4537ee47, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.616] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee87511, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1ee87511, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1ee87511, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RDhJ0CNFevzX.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RDHJ0C~1.CRY")) returned 1 [0270.616] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee87511, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1ee87511, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1eea7f3a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x405534, dwReserved1=0x0, cFileName="user-192.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USER-1~1.CRY")) returned 1 [0270.616] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eea7f3a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1eea7f3a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1eea7f3a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="user-32.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USER-3~1.CRY")) returned 1 [0270.616] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eecd932, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1eecd932, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1eecd932, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1b1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="user-40.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USER-4~1.CRY")) returned 1 [0270.616] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eecd932, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1eecd932, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1eef3b04, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x405534, dwReserved1=0x0, cFileName="user-48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USER-4~2.CRY")) returned 1 [0270.616] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1eef3b04, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1eef3b04, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1fcf5823, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x93038, dwReserved0=0x405534, dwReserved1=0x0, cFileName="user.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USERBM~1.CRY")) returned 1 [0270.616] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fd72bd1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1fd72bd1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1fd72bd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x405534, dwReserved1=0x0, cFileName="user.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USERPN~1.CRY")) returned 1 [0270.616] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fd72bd1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x1fd72bd1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x1fd72bd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x405534, dwReserved1=0x0, cFileName="user.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USERPN~1.CRY")) returned 0 [0270.616] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0270.616] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72632e67, dwReserved1=0x65747079, cFileName="Vault", cAlternateFileName="")) returned 1 [0270.616] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.616] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.616] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.617] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.617] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5710d8) returned 1 [0270.617] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0270.617] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.618] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e290) returned 1 [0270.618] CryptDestroyHash (hHash=0x55e910) returned 1 [0270.618] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18) returned 1 [0270.618] GetLastError () returned 0x0 [0270.618] GetLastError () returned 0x0 [0270.618] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.619] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.619] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.620] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\vault\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0270.623] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.624] SetEndOfFile (hFile=0x240) returned 1 [0270.624] CloseHandle (hObject=0x240) returned 1 [0270.624] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.625] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.627] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.627] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.627] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.627] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.627] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.627] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.627] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.627] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.628] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.628] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.628] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.628] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.628] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.628] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.628] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.628] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.628] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.628] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0270.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.629] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.629] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.629] CryptDestroyKey (hKey=0x55e290) returned 1 [0270.629] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0270.629] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*.*" (normalized: "c:\\users\\all users\\microsoft\\vault\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x453a4e1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0270.630] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x453a4e1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.630] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC658CB4-9126-49BD-B877-31EEDAB3F204", cAlternateFileName="AC658C~1")) returned 1 [0270.630] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.630] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.630] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.630] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.630] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571050) returned 1 [0270.631] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0270.631] CryptHashData (hHash=0x55e690, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.631] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e7d0) returned 1 [0270.631] CryptDestroyHash (hHash=0x55e690) returned 1 [0270.631] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0270.631] GetLastError () returned 0x0 [0270.631] GetLastError () returned 0x0 [0270.632] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.632] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0270.633] WriteFile (in: hFile=0x244, lpBuffer=0x23e52a0*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e52a0*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.635] SetEndOfFile (hFile=0x244) returned 1 [0270.635] CloseHandle (hObject=0x244) returned 1 [0270.635] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.636] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.636] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.636] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.636] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.636] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.637] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.637] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.637] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.637] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.638] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.638] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.638] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.638] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.638] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.638] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.638] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.638] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.638] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.638] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.639] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.639] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.639] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.639] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.639] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0270.639] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0270.639] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\*.*" (normalized: "c:\\users\\all users\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x453a4e1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0270.640] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x453a4e1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.640] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x9e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="154E23D0-C644-4E6F-8CE6-5069272F999F.vsch", cAlternateFileName="154E23~1.VSC")) returned 1 [0270.640] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch", cAlternateFileName="2F1A65~1.VSC")) returned 1 [0270.640] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x405534, dwReserved1=0x0, cFileName="3CCD5499-87A8-4B10-A215-608888DD3B55.vsch", cAlternateFileName="3CCD54~1.VSC")) returned 1 [0270.640] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453a4e1e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x453a4e1e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x453a4e1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.640] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Policy.vpol", cAlternateFileName="POLICY~1.VPO")) returned 1 [0270.640] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x448c3dac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x448c3dac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x448c3dac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Policy.vpol", cAlternateFileName="POLICY~1.VPO")) returned 0 [0270.640] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0270.640] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4537ee47, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4537ee47, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x453a4e1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6c6f7076, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.640] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4537ee47, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4537ee47, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x453a4e1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6c6f7076, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0270.640] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0270.640] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="WDF", cAlternateFileName="")) returned 1 [0270.640] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.640] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.641] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.641] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.641] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.641] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.641] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570b88) returned 1 [0270.642] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0270.642] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.642] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e390) returned 1 [0270.642] CryptDestroyHash (hHash=0x55e910) returned 1 [0270.642] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0270.642] GetLastError () returned 0x0 [0270.642] GetLastError () returned 0x0 [0270.642] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.643] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.643] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.644] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\WDF\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\wdf\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0270.650] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.651] SetEndOfFile (hFile=0x240) returned 1 [0270.651] CloseHandle (hObject=0x240) returned 1 [0270.651] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.652] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.652] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.664] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.664] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.664] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.664] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.665] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.665] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.665] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.665] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.665] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.665] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.665] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.665] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.666] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.666] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.666] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.666] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.666] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.666] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.666] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0270.666] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.666] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.666] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.666] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.666] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.667] CryptDestroyKey (hKey=0x55e390) returned 1 [0270.667] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0270.667] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WDF\\*.*" (normalized: "c:\\users\\all users\\microsoft\\wdf\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x453cb221, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0270.667] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x453cb221, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.667] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453cb221, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x453cb221, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x453cb221, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0270.667] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453cb221, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x453cb221, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x453cb221, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0270.668] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0270.668] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x77d1fe08, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x77d1fe08, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Windows", cAlternateFileName="")) returned 1 [0270.668] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.668] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.668] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.670] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.670] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.670] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.670] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5709f0) returned 1 [0270.671] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0270.671] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.671] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0270.671] CryptDestroyHash (hHash=0x55e710) returned 1 [0270.671] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18) returned 1 [0270.671] GetLastError () returned 0x0 [0270.671] GetLastError () returned 0x0 [0270.671] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.672] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0270.673] WriteFile (in: hFile=0x240, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0270.674] SetEndOfFile (hFile=0x240) returned 1 [0270.674] CloseHandle (hObject=0x240) returned 1 [0270.674] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.675] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.675] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.676] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.676] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.676] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.676] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.676] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.677] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.677] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.677] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.677] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.678] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.678] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.678] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.678] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.678] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0270.678] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0270.678] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x77d1fe08, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x4541769c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0270.679] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x77d1fe08, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x4541769c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.679] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe79dd565, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe79dd565, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppRepository", cAlternateFileName="APPREP~1")) returned 1 [0270.679] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.679] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.679] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.679] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.679] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.679] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.679] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5710d8) returned 1 [0270.680] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0270.680] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.680] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0270.680] CryptDestroyHash (hHash=0x55e910) returned 1 [0270.680] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0270.680] GetLastError () returned 0x0 [0270.680] GetLastError () returned 0x0 [0270.680] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.681] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.682] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.682] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.683] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0) returned 0 [0270.683] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.683] CloseHandle (hObject=0xffffffff) returned 1 [0270.683] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.683] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.683] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.684] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.684] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.694] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.695] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.695] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.695] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.695] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.695] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.695] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.695] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.696] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.696] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.696] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.696] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.697] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.697] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.697] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0270.697] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0270.697] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe79dd565, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe79dd565, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0270.697] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe79dd565, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xe79dd565, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.698] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Families", cAlternateFileName="")) returned 1 [0270.698] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.698] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.698] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.699] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.699] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570c10) returned 1 [0270.700] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0270.700] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.700] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e390) returned 1 [0270.700] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0270.700] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0270.700] GetLastError () returned 0x0 [0270.700] GetLastError () returned 0x0 [0270.700] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.701] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Families\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\families\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.701] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e522c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0) returned 0 [0270.701] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.701] CloseHandle (hObject=0xffffffff) returned 1 [0270.701] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.702] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.702] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.702] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.702] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.702] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.702] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.703] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.703] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.703] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.703] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.703] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.703] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.703] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.704] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.704] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.704] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.704] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.704] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.704] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.704] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.704] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0270.704] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.704] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.704] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.704] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.705] CryptDestroyKey (hKey=0x55e390) returned 1 [0270.705] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0270.705] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Families\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\families\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0270.705] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.705] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0270.705] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9308e2e0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9308e2e0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x930b443b, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x3ff1, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI0C82~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932f08f7, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x932f08f7, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x932f08f7, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x11b3, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.3DBuilder_10.9.50.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI4EDB~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4286e043, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4286e043, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4286e043, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI34BC~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f65da5c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5f65da5c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5f683cba, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x35be, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy.xml", cAlternateFileName="MID91D~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93f02817, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x93f02817, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x93f02817, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0xab8, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe.xml", cAlternateFileName="MID251~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93be1652, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x93be1652, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x93be1652, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x6b98, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIB577~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94b1464b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x94b1464b, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x94b1464b, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x65eb, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI8EAA~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94e5ba03, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x94e5ba03, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x94e5ba03, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2072, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MIE223~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9583158c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9583158c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9583158c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x643a, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI61C2~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95b788a3, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x95b788a3, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x95b9ebdf, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2092, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MIA5ED~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x965c0ae9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x965c0ae9, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x965c0ae9, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x650b, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI06CF~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96954432, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x96954432, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x96954432, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2088, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MI83E9~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973c2934, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x973c2934, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x973c2934, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x6580, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIF36F~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9772fe7f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9772fe7f, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9772fe7f, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.BingWeather_4.6.169.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MIBD78~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427fb888, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x427fb888, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x427fb888, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xd78, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy.xml", cAlternateFileName="MI18A5~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98020bfe, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x98020bfe, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x98020bfe, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4306, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MID396~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982f5893, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x982f5893, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x982f5893, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x276d, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI2880~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98c7ee4f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x98c7ee4f, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x98c7ee4f, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x726b, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI9710~1.XML")) returned 1 [0270.706] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98fa00d6, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x98fa00d6, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x98fa00d6, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI426C~1.XML")) returned 1 [0270.707] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99a345b0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x99a345b0, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x99a345b0, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x406d, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIF830~1.XML")) returned 1 [0270.707] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99d09423, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x99d09423, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x99d09423, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0xf57, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Getstarted_2.3.7.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MID67D~1.XML")) returned 1 [0270.707] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60ecdc1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60ecdc1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60ef3d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy.xml", cAlternateFileName="MI4AC2~1.XML")) returned 1 [0270.707] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b01c079, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9b01c079, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9b042244, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x41a5, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI6857~1.XML")) returned 1 [0270.707] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b389753, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9b389753, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9b389753, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0xabd6, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MIAA2E~1.XML")) returned 1 [0270.707] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x821b430e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x821b430e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8220059e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4045, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe.xml", cAlternateFileName="MI1189~1.XML")) returned 1 [0270.707] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd19a7fa, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xdd19a7fa, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xdd19a7fa, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x71bb, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.MicrosoftOfficeHub_17.6306.23501.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIF58C~1.XML")) returned 1 [0270.707] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcd6e6ad, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xdcd6e6ad, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xdcdbab29, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x3c12, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIFAD6~1.XML")) returned 1 [0270.707] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9de0142d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9de0142d, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9de0142d, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x3fec, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI867D~1.XML")) returned 1 [0270.707] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e0639ba, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e0639ba, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9e0639ba, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x1f85, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI37BC~1.XML")) returned 1 [0270.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e97aa96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9e97aa96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9e97aa96, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x48a, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI7CA0~1.XML")) returned 1 [0270.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ed3453c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9ed3453c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9ed3453c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x48a, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MIF965~1.XML")) returned 1 [0270.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b65490, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91b65490, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91b8b7c9, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4ad, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MICROS~4.XML")) returned 1 [0270.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917d1d54, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x917d1d54, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x917d1d54, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4ad, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MICROS~3.XML")) returned 1 [0270.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f07b901, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9f07b901, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9f07b901, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI55DD~1.XML")) returned 1 [0270.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f3c2cd2, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9f3c2cd2, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9f3c2cd2, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MI1148~1.XML")) returned 1 [0270.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9215b2b1, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9215b2b1, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9215b2b1, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4a7, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIBB3D~1.XML")) returned 1 [0270.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e6039e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91e6039e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91e866d7, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4a7, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MIACC6~1.XML")) returned 1 [0270.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1359e0d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa1359e0d, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa1359e0d, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x8f30, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Office.OneNote_17.6131.10051.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI115E~1.XML")) returned 1 [0270.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1038cb2, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa1038cb2, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa1038cb2, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x3b9e, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI80C6~1.XML")) returned 1 [0270.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2c3c5dd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa2c3c5dd, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa2c3c5dd, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x7bb2, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI4B95~1.XML")) returned 1 [0270.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa291b5bf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa291b5bf, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa291b5bf, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2493, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI27BB~1.XML")) returned 1 [0270.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37b5e2d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa37b5e2d, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa37dbd57, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2023, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.People_10.0.2840.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI2874~1.XML")) returned 1 [0270.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa350720d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa350720d, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa350720d, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x40df, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIA62F~1.XML")) returned 1 [0270.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40f2f15, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa40f2f15, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa40f2f15, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x3cfb, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c.xml", cAlternateFileName="MIF0DA~1.XML")) returned 1 [0270.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa437b5d1, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa437b5d1, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa437b5d1, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0xdc0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c.xml", cAlternateFileName="MI111F~1.XML")) returned 1 [0270.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91418169, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91418169, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91418169, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MICROS~2.XML")) returned 1 [0270.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910f6f86, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x910f6f86, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x910f6f86, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0270.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x927c374f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x927c374f, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x927c374f, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4ea, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.VCLibs.140.00_14.0.22929.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI2A58~1.XML")) returned 1 [0270.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9247c3f8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9247c3f8, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9247c3f8, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4ea, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.VCLibs.140.00_14.0.22929.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MI4CBD~1.XML")) returned 1 [0270.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8287c26f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8287c26f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8287c26f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MIC33D~1.XML")) returned 1 [0270.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501b04e0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x501b04e0, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x501b04e0, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x28ea, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI1764~1.XML")) returned 1 [0270.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89496f81, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89496f81, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89496f81, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2097, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI99C2~1.XML")) returned 1 [0270.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ec157ae, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec157ae, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec3b857, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10bb1, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI3230~1.XML")) returned 1 [0270.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a3ca0f8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a3ca0f8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a3ca0f8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x8cb, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MIA4BD~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa59fb976, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa59fb976, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa5a219cd, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-100_8wekyb3d8bbwe.xml", cAlternateFileName="MID69C~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5726cb4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa5726cb4, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa5726cb4, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0xc4f1, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI03D6~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa53934cc, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa53934cc, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa53934cc, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4642, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIF109~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b93f304, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8b93f304, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8b93f304, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy.xml", cAlternateFileName="MIBC22~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56180cf1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x56180cf1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x56180cf1, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x36dc, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI61DE~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6a85e80, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa6a85e80, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa6a85e80, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsAlarms_10.1510.12020.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI46B7~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6764d6f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa6764d6f, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa6764d6f, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4761, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI591F~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b98171, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x53b98171, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x53b98171, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsCalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe.xml", cAlternateFileName="MI0610~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5390fa0a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5390fa0a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5390fa0a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MICE47~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53660e92, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x53660e92, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x53686fce, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4608, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MID958~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa861717c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa861717c, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa861717c, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x466a, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI9205~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa889f9a2, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xa889f9a2, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xa889f9a2, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x1ed6, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsCamera_2015.1071.40.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI41D8~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab4bb218, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xab4bb218, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xab4bb218, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0xffef, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIEC56~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab0b5244, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xab0b5244, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xab0b5244, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x3cab, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI0C75~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96bc34e1, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x96bc34e1, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x96bc34e1, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI6C44~1.XML")) returned 1 [0270.710] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac7819dc, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xac7819dc, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xac7819dc, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x4717, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI8A58~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacac8c8b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xacac8c8b, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xacac8c8b, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsMaps_4.1509.50911.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI98FE~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae60dc65, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xae60dc65, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xae60dc65, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ab3, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI38B3~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae35f1e1, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xae35f1e1, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xae38529a, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x14e9, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI0471~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf29220d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xaf29220d, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xaf29220d, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2154, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsSoundRecorder_10.1510.12110.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI5B27~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaefbd456, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xaefbd456, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xaefbd456, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x47ef, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIA050~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0984a8d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb0984a8d, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb0984a8d, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsStore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe.xml", cAlternateFileName="MI04D8~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb06aff80, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb06aff80, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb06d61f3, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x6e81, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIEDF7~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb02f6461, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb02f6461, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb02f6461, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x6f57, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIB07A~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b8c86e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb1b8c86e, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb234c19b, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x321e, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI2305~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2693619, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb2693619, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb2693619, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x556d, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.XboxApp_9.9.30030.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIFF53~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9919c8f7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9919c8f7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9919c8f7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x8de, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI0BF3~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b28b1c3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9b28b1c3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9b28b1c3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0xba8, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MI4622~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e9114b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb3e9114b, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb3e9114b, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x6a9a, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI8783~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4224808, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb4224808, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb4224808, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x46fc, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.ZuneMusic_3.6.13251.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIA97B~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb54eb188, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb54eb188, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb54eb188, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x6836, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIF26A~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb585872b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xb585872b, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xb585872b, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x2b04, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.ZuneVideo_3.6.13251.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIF1F0~1.XML")) returned 1 [0270.711] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xdedf14a6, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdedf14a6, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Packages", cAlternateFileName="")) returned 1 [0270.712] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.712] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.712] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.712] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.712] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570c98) returned 1 [0270.713] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0270.713] CryptHashData (hHash=0x55e750, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.713] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0270.713] CryptDestroyHash (hHash=0x55e750) returned 1 [0270.713] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0270.713] GetLastError () returned 0x0 [0270.713] GetLastError () returned 0x0 [0270.713] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.714] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.715] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.716] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.716] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0) returned 0 [0270.716] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.716] CloseHandle (hObject=0xffffffff) returned 1 [0270.716] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.717] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.717] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.717] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.717] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.718] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.718] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.718] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.718] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.718] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.718] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.718] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.719] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.719] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.719] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0270.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.719] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.719] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.720] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0270.720] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0270.720] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xdedf14a6, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdedf14a6, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0270.720] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xdedf14a6, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdedf14a6, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.721] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936d064c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbfbb36c0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xbfbb36c0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_N")) returned 1 [0270.721] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.721] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.721] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.721] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.722] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570eb8) returned 1 [0270.722] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.722] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.722] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0270.722] CryptDestroyHash (hHash=0x55e610) returned 1 [0270.722] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.722] GetLastError () returned 0x0 [0270.722] GetLastError () returned 0x0 [0270.723] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.723] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.3dbuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.725] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e523c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.726] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.726] CloseHandle (hObject=0xffffffff) returned 1 [0270.726] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.727] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.727] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.727] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.728] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.728] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.728] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.728] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.728] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.729] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.729] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.729] CryptDestroyKey (hKey=0x55e310) returned 1 [0270.729] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0270.729] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.3dbuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936d064c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbfbb36c0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xbfbb36c0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0270.731] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936d064c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbfbb36c0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xbfbb36c0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.731] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe2e122, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3fe2e122, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x3ffab9e9, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.731] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe2e122, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3fe2e122, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x3ffab9e9, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.731] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0270.732] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936d064c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbfbad53d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xbfbad53d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.3DBuilder_10.9.50.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI0085~1.0_X")) returned 1 [0270.732] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.732] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.732] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.733] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.733] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570968) returned 1 [0270.733] CryptCreateHash (in: hProv=0x570968, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.733] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.734] CryptDeriveKey (in: hProv=0x570968, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0270.734] CryptDestroyHash (hHash=0x55e610) returned 1 [0270.734] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.734] GetLastError () returned 0x0 [0270.734] GetLastError () returned 0x0 [0270.734] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.735] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.736] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.736] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.3dbuilder_10.9.50.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.739] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.739] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.739] CloseHandle (hObject=0xffffffff) returned 1 [0270.739] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.739] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.740] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.740] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.740] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.741] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.741] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.741] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.741] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.742] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.742] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.742] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.742] CryptDestroyKey (hKey=0x55e710) returned 1 [0270.742] CryptReleaseContext (hProv=0x570968, dwFlags=0x0) returned 1 [0270.742] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.3DBuilder_10.9.50.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.3dbuilder_10.9.50.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936d064c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbfbad53d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xbfbad53d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0270.744] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x936d064c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xbfbad53d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xbfbad53d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.744] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbcba67, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3fbcba67, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x3fd23347, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.744] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbcba67, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3fbcba67, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x3fd23347, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.744] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0270.745] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54425cf6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5444bf1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54910988, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MID6BE~1.0_N")) returned 1 [0270.745] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.745] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.745] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.745] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.745] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0270.746] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.746] CryptHashData (hHash=0x55e190, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.746] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0270.746] CryptDestroyHash (hHash=0x55e190) returned 1 [0270.747] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.747] GetLastError () returned 0x0 [0270.747] GetLastError () returned 0x0 [0270.747] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.747] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.750] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e52fc, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.750] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.750] CloseHandle (hObject=0xffffffff) returned 1 [0270.750] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.751] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.751] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.752] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.752] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.752] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.752] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.752] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.753] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.753] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.753] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.753] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.754] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0270.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.754] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.754] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.755] CryptDestroyKey (hKey=0x55e610) returned 1 [0270.755] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0270.755] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54425cf6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5444bf1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54910988, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0270.756] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54425cf6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5444bf1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54910988, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.756] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54910988, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54910988, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54910988, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x9c8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0270.756] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5444bf1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5444bf1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5444bf1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x44c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0270.756] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5444bf1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5444bf1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5444bf1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x44c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0270.756] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0270.757] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6104b1f6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6104b1f6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612f9da9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MIEBA3~1.0_N")) returned 1 [0270.757] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.757] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.757] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.758] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.758] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.758] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0270.758] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.759] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.759] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0270.759] CryptDestroyHash (hHash=0x55e190) returned 1 [0270.759] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.759] GetLastError () returned 0x0 [0270.759] GetLastError () returned 0x0 [0270.759] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.760] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.761] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.761] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.764] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.764] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.764] CloseHandle (hObject=0xffffffff) returned 1 [0270.764] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.765] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.765] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.765] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.765] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.765] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.765] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.766] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.766] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.766] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.766] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.766] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.767] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.767] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0270.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.767] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.767] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.768] CryptDestroyKey (hKey=0x55e610) returned 1 [0270.768] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0270.768] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6104b1f6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6104b1f6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612f9da9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0270.769] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6104b1f6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6104b1f6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612f9da9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.769] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x612f9da9, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612f9da9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612f9da9, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x6d0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0270.769] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6104b1f6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6104b1f6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6104b1f6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0270.769] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6104b1f6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6104b1f6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6104b1f6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0270.769] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0270.770] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x942e23d9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc0f81d63, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc0f81d63, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_N")) returned 1 [0270.770] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.771] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.771] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.771] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.771] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570f40) returned 1 [0270.772] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.772] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.772] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0270.772] CryptDestroyHash (hHash=0x55e610) returned 1 [0270.772] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.772] GetLastError () returned 0x0 [0270.772] GetLastError () returned 0x0 [0270.772] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.773] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.776] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e523c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.776] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.776] CloseHandle (hObject=0xffffffff) returned 1 [0270.776] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.779] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.779] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.779] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.779] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.779] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.780] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.780] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.780] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.780] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.781] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.781] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.781] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.781] CryptDestroyKey (hKey=0x55e210) returned 1 [0270.781] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0270.782] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x942e23d9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc0f81d63, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc0f81d63, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.783] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x942e23d9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc0f81d63, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc0f81d63, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.783] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3343f37f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3343f37f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x335bca47, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.783] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3343f37f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3343f37f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x335bca47, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.783] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.784] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x942e23d9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc0f86b75, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc0f86b75, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~2.0_N")) returned 1 [0270.784] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.784] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.784] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.784] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.784] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.785] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.785] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0270.785] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.785] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.785] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0270.785] CryptDestroyHash (hHash=0x55e290) returned 1 [0270.785] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.786] GetLastError () returned 0x0 [0270.786] GetLastError () returned 0x0 [0270.786] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.787] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.787] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.788] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.790] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.790] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.790] CloseHandle (hObject=0xffffffff) returned 1 [0270.790] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.791] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.791] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.792] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.792] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.792] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.792] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.792] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.793] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.793] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.793] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.794] CryptDestroyKey (hKey=0x55e190) returned 1 [0270.794] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0270.794] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x942e23d9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc0f86b75, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc0f86b75, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0270.795] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x942e23d9, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc0f86b75, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc0f86b75, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.795] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x336554be, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x336554be, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x337868b1, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.795] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x336554be, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x336554be, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x337868b1, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.795] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0270.796] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95097c58, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc258bead, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc258bead, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~4.0_N")) returned 1 [0270.796] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.796] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.796] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.796] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.796] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.797] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0270.797] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.797] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.798] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0270.798] CryptDestroyHash (hHash=0x55e210) returned 1 [0270.798] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.798] GetLastError () returned 0x0 [0270.798] GetLastError () returned 0x0 [0270.798] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.799] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingfinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.801] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e522c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.801] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.801] CloseHandle (hObject=0xffffffff) returned 1 [0270.801] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.803] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.803] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.803] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.804] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.804] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.804] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.804] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.804] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.805] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.805] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0270.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.805] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.805] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.805] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.806] CryptDestroyKey (hKey=0x55e190) returned 1 [0270.806] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0270.806] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingfinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95097c58, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc258bead, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc258bead, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0270.807] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95097c58, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc258bead, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc258bead, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.807] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307d75bf, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x307d75bf, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x307d75bf, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.807] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307d75bf, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x307d75bf, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x307d75bf, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.807] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0270.808] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x950bde7a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc2587086, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc2587086, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI0B51~1.0_X")) returned 1 [0270.808] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.808] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.808] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.808] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.809] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.809] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0270.810] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.810] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.810] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0270.810] CryptDestroyHash (hHash=0x55e710) returned 1 [0270.810] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.810] GetLastError () returned 0x0 [0270.810] GetLastError () returned 0x0 [0270.810] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.811] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.812] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.812] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.814] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.814] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.814] CloseHandle (hObject=0xffffffff) returned 1 [0270.815] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.815] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.815] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.817] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.817] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.817] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.817] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.818] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.818] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.818] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.818] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.818] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.819] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0270.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.819] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.819] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.819] CryptDestroyKey (hKey=0x55e750) returned 1 [0270.820] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0270.820] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x950bde7a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc2587086, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc2587086, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.821] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x950bde7a, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc2587086, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc2587086, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.821] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3078b0ac, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3078b0ac, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x307b1356, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.822] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3078b0ac, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3078b0ac, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x307b1356, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.822] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.823] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95ddaedf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc3995fb4, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc3995fb4, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIADDF~1.0_N")) returned 1 [0270.823] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.823] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.823] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.823] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.824] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0270.825] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.825] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.825] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0270.825] CryptDestroyHash (hHash=0x55e610) returned 1 [0270.825] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.825] GetLastError () returned 0x0 [0270.825] GetLastError () returned 0x0 [0270.825] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.826] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingnews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.829] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e523c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.829] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.829] CloseHandle (hObject=0xffffffff) returned 1 [0270.829] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.830] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.831] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.831] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.831] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.831] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.831] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.831] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.832] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.832] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.832] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.832] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.832] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.832] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.832] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.832] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.833] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.833] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.833] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.833] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.833] CryptDestroyKey (hKey=0x55e210) returned 1 [0270.833] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0270.833] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingnews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95ddaedf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc3995fb4, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc3995fb4, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0270.834] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95ddaedf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc3995fb4, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc3995fb4, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.835] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e7353dc, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2e7353dc, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2e7353dc, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x398, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.835] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e7353dc, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2e7353dc, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2e7353dc, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x398, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.835] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0270.836] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95ddaedf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc398d737, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc398d737, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI13A6~1.0_X")) returned 1 [0270.836] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.836] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.836] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.836] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.836] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0270.837] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.837] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.837] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0270.837] CryptDestroyHash (hHash=0x55e610) returned 1 [0270.837] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.837] GetLastError () returned 0x0 [0270.837] GetLastError () returned 0x0 [0270.837] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.838] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.839] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.839] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.842] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.842] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.842] CloseHandle (hObject=0xffffffff) returned 1 [0270.842] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.843] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.843] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.843] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.844] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.844] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.844] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.844] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.844] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.844] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.844] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.844] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.844] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.845] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.845] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.845] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.845] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.845] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.845] CryptDestroyKey (hKey=0x55e690) returned 1 [0270.845] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0270.845] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95ddaedf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc398d737, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc398d737, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0270.846] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95ddaedf, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc398d737, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc398d737, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.847] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e70f04c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2e70f04c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2e7353dc, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.847] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e70f04c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2e70f04c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2e7353dc, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.847] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0270.848] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96bb6961, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc4c731b3, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc4c731b3, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI90D7~1.0_N")) returned 1 [0270.848] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.848] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.848] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.848] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.848] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.848] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.848] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0270.849] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.849] CryptHashData (hHash=0x55e690, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.849] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0270.849] CryptDestroyHash (hHash=0x55e690) returned 1 [0270.849] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.849] GetLastError () returned 0x0 [0270.849] GetLastError () returned 0x0 [0270.849] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.850] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingsports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.852] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e522c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.852] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.853] CloseHandle (hObject=0xffffffff) returned 1 [0270.853] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.853] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.854] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.854] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.854] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.855] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.855] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.855] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.855] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.855] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.855] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.855] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.855] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.856] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0270.856] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.856] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.856] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.856] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.856] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.857] CryptDestroyKey (hKey=0x55e190) returned 1 [0270.857] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0270.857] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingsports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96bb6961, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc4c731b3, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc4c731b3, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0270.858] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96bb6961, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc4c731b3, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc4c731b3, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.858] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26969b00, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x26969b00, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x26a02595, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.858] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26969b00, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x26969b00, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x26a02595, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.858] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0270.859] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96bb6961, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc4c6e343, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc4c6e343, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI689D~1.0_X")) returned 1 [0270.859] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.859] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.860] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.860] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.860] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0270.861] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.861] CryptHashData (hHash=0x55e210, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.861] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0270.861] CryptDestroyHash (hHash=0x55e210) returned 1 [0270.861] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.861] GetLastError () returned 0x0 [0270.861] GetLastError () returned 0x0 [0270.861] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.862] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.863] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.863] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.865] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.865] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.865] CloseHandle (hObject=0xffffffff) returned 1 [0270.865] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.866] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.866] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.866] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.866] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.866] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.866] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.867] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.867] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.867] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.867] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.867] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.868] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.868] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0270.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.868] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.868] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.869] CryptDestroyKey (hKey=0x55e190) returned 1 [0270.869] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0270.869] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96bb6961, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc4c6e343, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc4c6e343, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.870] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96bb6961, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc4c6e343, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc4c6e343, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.870] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x266dbcb9, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x266dbcb9, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x268d106f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.870] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x266dbcb9, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x266dbcb9, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x268d106f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.870] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.871] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9796c1ac, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc5ef7148, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc5ef7148, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIF7D7~1.0_N")) returned 1 [0270.871] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.871] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.871] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.871] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.881] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570eb8) returned 1 [0270.882] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.882] CryptHashData (hHash=0x55e190, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.882] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0270.882] CryptDestroyHash (hHash=0x55e190) returned 1 [0270.882] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.882] GetLastError () returned 0x0 [0270.882] GetLastError () returned 0x0 [0270.882] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.882] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingweather_4.6.169.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.884] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e523c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.884] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.884] CloseHandle (hObject=0xffffffff) returned 1 [0270.884] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.885] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.886] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.886] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.886] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.886] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.887] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.887] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.887] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.887] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.887] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.888] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.888] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.888] CryptDestroyKey (hKey=0x55e210) returned 1 [0270.888] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0270.888] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingweather_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9796c1ac, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc5ef7148, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc5ef7148, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.889] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9796c1ac, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc5ef7148, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc5ef7148, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.889] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c03a060, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1c03a060, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x1c03a060, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.889] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c03a060, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1c03a060, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x1c03a060, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.889] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.890] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97992404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc5eee8f5, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc5eee8f5, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BingWeather_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI7AA9~1.0_X")) returned 1 [0270.890] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.890] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.890] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.890] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.890] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.890] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.890] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0270.891] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.891] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.891] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0270.891] CryptDestroyHash (hHash=0x55e610) returned 1 [0270.891] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.891] GetLastError () returned 0x0 [0270.891] GetLastError () returned 0x0 [0270.891] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.892] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.893] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.893] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_x86__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingweather_4.6.169.0_x86__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.895] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.895] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.895] CloseHandle (hObject=0xffffffff) returned 1 [0270.895] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.896] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.896] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.896] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.896] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.896] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.896] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.897] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.897] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.897] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.897] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.897] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.897] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.897] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.897] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.898] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.898] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.898] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.898] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.898] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.898] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.898] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.898] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.898] CryptDestroyKey (hKey=0x55e210) returned 1 [0270.899] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0270.899] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BingWeather_4.6.169.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bingweather_4.6.169.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97992404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc5eee8f5, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc5eee8f5, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0270.900] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97992404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc5eee8f5, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc5eee8f5, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.900] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bf2ef90, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1bf2ef90, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x1c013e4e, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.900] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bf2ef90, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1bf2ef90, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x1c013e4e, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.900] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0270.901] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4deabc79, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4dfdced7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f172345, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MIA351~1.0_N")) returned 1 [0270.901] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.901] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.901] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.901] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.901] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0270.902] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.902] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.902] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0270.902] CryptDestroyHash (hHash=0x55e210) returned 1 [0270.902] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.902] GetLastError () returned 0x0 [0270.902] GetLastError () returned 0x0 [0270.902] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.903] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.905] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e522c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.905] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.905] CloseHandle (hObject=0xffffffff) returned 1 [0270.905] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.906] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.906] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.906] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.907] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.907] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.907] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.907] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.908] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.908] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.908] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.908] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.908] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0270.908] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.908] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.908] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.908] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.909] CryptDestroyKey (hKey=0x55e190) returned 1 [0270.909] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0270.909] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4deabc79, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4dfdced7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f172345, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.910] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4deabc79, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4dfdced7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f172345, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.910] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f172345, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0270.910] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dfdced7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4dfdced7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4dfdced7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0270.910] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dfdced7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4dfdced7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4dfdced7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0270.910] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.911] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x986af2f4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc747ed5d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc747ed5d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICC3B~1.0_N")) returned 1 [0270.911] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.911] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.911] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.911] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.911] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5707d0) returned 1 [0270.912] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.912] CryptHashData (hHash=0x55e310, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.912] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0270.912] CryptDestroyHash (hHash=0x55e310) returned 1 [0270.912] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.912] GetLastError () returned 0x0 [0270.912] GetLastError () returned 0x0 [0270.912] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.913] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.913] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.914] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.commsphone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.916] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.916] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.916] CloseHandle (hObject=0xffffffff) returned 1 [0270.916] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.916] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.916] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.917] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.917] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.917] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.917] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.917] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.917] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.917] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.918] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.918] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.918] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.918] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.918] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.918] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0270.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.918] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.918] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.918] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.919] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.919] CryptDestroyKey (hKey=0x55e190) returned 1 [0270.919] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0270.919] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.commsphone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x986af2f4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc747ed5d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc747ed5d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.920] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x986af2f4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc747ed5d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc747ed5d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.920] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x124a88fe, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x124a88fe, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x12698848, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.920] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x124a88fe, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x124a88fe, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x12698848, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.920] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.921] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x986af2f4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc7470255, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc7470255, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIBB30~1.0_X")) returned 1 [0270.921] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.921] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.921] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.921] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.921] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.921] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.921] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0270.922] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.922] CryptHashData (hHash=0x55e710, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.922] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0270.922] CryptDestroyHash (hHash=0x55e710) returned 1 [0270.922] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.922] GetLastError () returned 0x0 [0270.922] GetLastError () returned 0x0 [0270.922] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.923] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.924] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e523c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.924] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.924] CloseHandle (hObject=0xffffffff) returned 1 [0270.924] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.925] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.925] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.925] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.926] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.926] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.926] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.926] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.926] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.926] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.927] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.927] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.927] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.927] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.927] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.928] CryptDestroyKey (hKey=0x55e390) returned 1 [0270.928] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0270.928] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x986af2f4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc7470255, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc7470255, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.929] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x986af2f4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc7470255, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc7470255, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.929] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12292aaa, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x12292aaa, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x12377625, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.929] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12292aaa, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x12292aaa, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x12377625, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.929] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.930] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x992e71ee, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc865cca7, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc865cca7, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI2247~1.0_N")) returned 1 [0270.930] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.930] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.930] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.931] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.931] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570eb8) returned 1 [0270.931] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.931] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.931] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0270.931] CryptDestroyHash (hHash=0x55e190) returned 1 [0270.931] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.932] GetLastError () returned 0x0 [0270.932] GetLastError () returned 0x0 [0270.932] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.932] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.933] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.933] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.connectivitystore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.959] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.959] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.959] CloseHandle (hObject=0xffffffff) returned 1 [0270.959] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.960] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.961] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.961] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.961] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.962] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.962] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.962] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.962] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0270.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.963] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.963] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.963] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.963] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.963] CryptDestroyKey (hKey=0x55e210) returned 1 [0270.963] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0270.963] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.connectivitystore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x992e71ee, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc865cca7, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc865cca7, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.964] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x992e71ee, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc865cca7, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc865cca7, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.965] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fb259, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x82fb259, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x83e0197, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.965] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fb259, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x82fb259, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x83e0197, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.965] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.966] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x992e71ee, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc8656a8a, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc8656a8a, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIECF5~1.0_X")) returned 1 [0270.966] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.966] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.966] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.966] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.966] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.966] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.966] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0270.967] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.967] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.967] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0270.967] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0270.967] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.967] GetLastError () returned 0x0 [0270.967] GetLastError () returned 0x0 [0270.968] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.968] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.971] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e522c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.971] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.971] CloseHandle (hObject=0xffffffff) returned 1 [0270.971] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.972] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.972] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.972] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.972] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0270.972] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.972] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.973] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.973] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.973] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.973] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0270.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.974] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.974] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.974] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.974] CryptDestroyKey (hKey=0x55e190) returned 1 [0270.974] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0270.974] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x992e71ee, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc8656a8a, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc8656a8a, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0270.975] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x992e71ee, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc8656a8a, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc8656a8a, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.975] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x813178f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x813178f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x823c65b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.975] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x813178f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x813178f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x823c65b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.976] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0270.976] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99f455a4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc98daa50, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc98daa50, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIA544~1.0_N")) returned 1 [0270.977] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.977] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.977] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.977] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0270.977] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0270.978] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.978] CryptHashData (hHash=0x55e210, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.978] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0270.978] CryptDestroyHash (hHash=0x55e210) returned 1 [0270.978] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.978] GetLastError () returned 0x0 [0270.978] GetLastError () returned 0x0 [0270.978] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.979] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0270.980] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.980] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.983] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.983] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.983] CloseHandle (hObject=0xffffffff) returned 1 [0270.983] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.984] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.985] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.985] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.985] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.985] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0270.985] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.985] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.985] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.985] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.985] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.985] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.986] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.986] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.986] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0270.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.986] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.986] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.987] CryptDestroyKey (hKey=0x55e190) returned 1 [0270.987] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0270.987] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99f455a4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc98daa50, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc98daa50, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.988] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99f455a4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc98daa50, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc98daa50, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.988] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x127a421, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x127a421, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x127a421, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.988] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x127a421, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x127a421, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x127a421, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.988] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.989] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99f455a4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc98d5c7e, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc98d5c7e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.Getstarted_2.3.7.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI49B0~1.0_X")) returned 1 [0270.989] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.989] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0270.989] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5707d0) returned 1 [0270.990] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.990] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.990] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0270.990] CryptDestroyHash (hHash=0x55e310) returned 1 [0270.990] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.990] GetLastError () returned 0x0 [0270.990] GetLastError () returned 0x0 [0270.990] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0270.991] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.getstarted_2.3.7.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0270.993] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e523c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0270.993] SetEndOfFile (hFile=0xffffffff) returned 0 [0270.993] CloseHandle (hObject=0xffffffff) returned 1 [0270.993] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0270.994] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0270.994] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0270.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0270.994] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.994] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0270.995] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0270.995] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.995] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.995] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.995] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0270.995] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0270.995] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0270.995] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0270.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0270.996] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0270.996] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.996] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0270.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0270.996] CryptDestroyKey (hKey=0x55e190) returned 1 [0270.996] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0270.996] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Getstarted_2.3.7.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.getstarted_2.3.7.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99f455a4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc98d5c7e, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc98d5c7e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0270.997] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99f455a4, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xc98d5c7e, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xc98d5c7e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.997] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1149115, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1149115, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x12540fb, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0270.997] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1149115, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1149115, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x12540fb, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0270.997] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0270.998] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6193bee3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6193bee3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6286f328, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI747C~1.0_N")) returned 1 [0270.998] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0270.998] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0270.999] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0270.999] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0270.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0270.999] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0270.999] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0270.999] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0270.999] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0270.999] CryptDestroyHash (hHash=0x55e710) returned 1 [0270.999] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0270.999] GetLastError () returned 0x0 [0271.000] GetLastError () returned 0x0 [0271.000] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.000] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.001] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.001] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.003] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.003] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.003] CloseHandle (hObject=0xffffffff) returned 1 [0271.003] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.004] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.004] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.004] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.004] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.005] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.005] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.005] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.005] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.005] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.005] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.006] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.006] CryptDestroyKey (hKey=0x55e390) returned 1 [0271.006] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0271.006] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6193bee3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6193bee3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6286f328, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.007] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6193bee3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6193bee3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6286f328, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.007] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6286f328, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6286f328, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6289529c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x8d4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.007] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6193bee3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6193bee3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6193bee3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.007] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6193bee3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6193bee3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6193bee3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.007] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.080] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcaec27cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcaec27cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI1776~1.0_N")) returned 1 [0271.080] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.080] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.080] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.080] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.081] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570eb8) returned 1 [0271.081] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.081] CryptHashData (hHash=0x55e190, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.081] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0271.081] CryptDestroyHash (hHash=0x55e190) returned 1 [0271.081] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.082] GetLastError () returned 0x0 [0271.082] GetLastError () returned 0x0 [0271.082] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.082] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.086] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e522c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.086] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.086] CloseHandle (hObject=0xffffffff) returned 1 [0271.086] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.087] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.087] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.087] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.088] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.088] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.088] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.088] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.089] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.089] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.089] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.089] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.089] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.089] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.089] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.089] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.089] CryptDestroyKey (hKey=0x55e210) returned 1 [0271.090] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0271.090] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcaec27cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcaec27cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.092] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcaec27cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcaec27cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.092] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf140f4b7, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xf140f4b7, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xf15408dc, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.092] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf140f4b7, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xf140f4b7, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xf15408dc, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x3a8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.092] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.095] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcaec27cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcaec27cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI8EA6~1.0_X")) returned 1 [0271.095] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.095] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.095] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.095] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.096] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.096] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.096] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0271.097] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.097] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.097] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0271.097] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.097] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.097] GetLastError () returned 0x0 [0271.097] GetLastError () returned 0x0 [0271.097] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.099] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.100] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.101] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.104] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.104] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.104] CloseHandle (hObject=0xffffffff) returned 1 [0271.104] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.106] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.106] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.106] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.107] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.107] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.108] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.108] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.108] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.108] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.108] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.108] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.109] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.109] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.109] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.109] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.109] CryptDestroyKey (hKey=0x55e210) returned 1 [0271.109] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0271.110] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.messaging_1.10.22012.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcaec27cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcaec27cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0271.111] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b71ceca, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcaec27cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcaec27cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.111] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf113a5c2, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xf113a5c2, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xf126bc97, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.111] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf113a5c2, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xf113a5c2, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0xf126bc97, ftLastWriteTime.dwHighDateTime=0x1d70073, nFileSizeHigh=0x0, nFileSizeLow=0x40c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.111] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0271.113] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63139a5c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8891dbc3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8891dbc3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MI8763~1.0_N")) returned 1 [0271.113] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.113] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.113] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.113] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.114] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.114] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0271.115] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.115] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.115] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.115] CryptDestroyHash (hHash=0x55e210) returned 1 [0271.115] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.115] GetLastError () returned 0x0 [0271.115] GetLastError () returned 0x0 [0271.116] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.116] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.117] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e523c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.117] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.117] CloseHandle (hObject=0xffffffff) returned 1 [0271.117] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.119] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.119] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.119] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.119] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.119] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.120] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.120] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.120] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.120] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.120] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.121] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.121] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.122] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.122] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.122] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.124] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.124] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0271.124] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63139a5c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8891dbc3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8891dbc3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.124] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63139a5c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8891dbc3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8891dbc3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.124] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8891dbc3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8891dbc3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8891dbc3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.124] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c4d0be, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87c4d0be, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x87c4d0be, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.124] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c4d0be, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87c4d0be, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x87c4d0be, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.124] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.124] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.MicrosoftOfficeHub_17.6306.23501.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI80F4~1.0_X")) returned 1 [0271.124] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.124] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.125] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.125] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.125] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5707d0) returned 1 [0271.125] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.125] CryptHashData (hHash=0x55e310, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.125] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.125] CryptDestroyHash (hHash=0x55e310) returned 1 [0271.126] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.127] GetLastError () returned 0x0 [0271.127] GetLastError () returned 0x0 [0271.127] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.129] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.129] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.130] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_17.6306.23501.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftofficehub_17.6306.23501.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.130] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.130] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.130] CloseHandle (hObject=0xffffffff) returned 1 [0271.130] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.131] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.131] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.132] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.132] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.132] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.132] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.133] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.133] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.133] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.133] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.133] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.133] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.133] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.133] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.134] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.134] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0271.134] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_17.6306.23501.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftofficehub_17.6306.23501.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.134] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.134] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0271.134] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.134] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MID688~1.0_N")) returned 1 [0271.135] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.135] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.135] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.135] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.135] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.135] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.135] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0271.136] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.136] CryptHashData (hHash=0x55e390, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.136] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.136] CryptDestroyHash (hHash=0x55e390) returned 1 [0271.136] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.136] GetLastError () returned 0x0 [0271.136] GetLastError () returned 0x0 [0271.136] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.137] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftofficehub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.137] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e52f8, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.137] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.137] CloseHandle (hObject=0xffffffff) returned 1 [0271.137] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.138] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.138] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.139] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.139] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.139] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.139] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.139] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.139] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.140] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.140] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.140] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.140] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.140] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.140] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.140] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.140] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0271.140] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftofficehub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0271.141] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.141] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c75affd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcc83d9e0, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcc83d9e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0271.141] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0271.141] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcdbe9069, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIAB2E~1.0_N")) returned 1 [0271.141] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.141] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.141] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.141] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.141] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.141] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.141] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570f40) returned 1 [0271.142] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.142] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.142] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0271.142] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.142] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.142] GetLastError () returned 0x0 [0271.142] GetLastError () returned 0x0 [0271.142] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.143] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.143] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.144] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftsolitairecollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.146] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e35f4, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.146] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.146] CloseHandle (hObject=0xffffffff) returned 1 [0271.146] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.146] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.146] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.147] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.147] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.147] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.147] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.148] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.148] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.148] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.148] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.148] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.149] CryptDestroyKey (hKey=0x55e690) returned 1 [0271.149] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0271.149] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftsolitairecollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcdbe9069, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0271.150] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcdbe9069, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.150] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6d241, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67a6d241, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67b05aac, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.150] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a6d241, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67a6d241, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67b05aac, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.150] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0271.151] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcdbe9069, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIAFF4~1.0_X")) returned 1 [0271.151] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.151] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.151] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.151] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.151] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571518) returned 1 [0271.152] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.152] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.152] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0271.152] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.152] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.152] GetLastError () returned 0x0 [0271.152] GetLastError () returned 0x0 [0271.152] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.152] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftsolitairecollection_3.3.9211.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.154] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e36d0, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.155] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.155] CloseHandle (hObject=0xffffffff) returned 1 [0271.155] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.155] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.155] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.156] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.156] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.156] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.156] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.156] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.156] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.156] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.156] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.156] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.156] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.157] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.157] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.157] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.157] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.157] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.158] CryptDestroyKey (hKey=0x55e690) returned 1 [0271.158] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0271.158] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.microsoftsolitairecollection_3.3.9211.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcdbe9069, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0271.159] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e54e85e, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xcdbe9069, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xcdbe9069, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.159] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6793bf99, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6793bf99, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x679d4966, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.159] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6793bf99, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6793bf99, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x679d4966, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.159] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0271.159] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9a0a96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI052E~1.0_X")) returned 1 [0271.160] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.160] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.160] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.160] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.160] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571490) returned 1 [0271.161] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.161] CryptHashData (hHash=0x55e210, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.161] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.161] CryptDestroyHash (hHash=0x55e210) returned 1 [0271.161] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.161] GetLastError () returned 0x0 [0271.161] GetLastError () returned 0x0 [0271.161] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.162] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.162] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.162] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.164] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3564, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.164] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.164] CloseHandle (hObject=0xffffffff) returned 1 [0271.164] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.165] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.165] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.166] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.166] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.166] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.166] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.166] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.167] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.167] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.167] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.167] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.167] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.167] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.167] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0271.167] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9a0a96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.191] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e9a0a96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.191] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2074c40, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf2074c40, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf210d6e0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.191] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2074c40, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf2074c40, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf210d6e0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.191] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.192] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ed5a790, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI3AF7~1.0_X")) returned 1 [0271.192] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.192] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.192] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.192] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.192] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571518) returned 1 [0271.193] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.193] CryptHashData (hHash=0x55e190, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.193] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0271.193] CryptDestroyHash (hHash=0x55e190) returned 1 [0271.193] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.193] GetLastError () returned 0x0 [0271.193] GetLastError () returned 0x0 [0271.193] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.194] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.196] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3574, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.196] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.196] CloseHandle (hObject=0xffffffff) returned 1 [0271.196] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.196] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.197] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.197] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.197] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.197] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.198] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.198] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.198] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.198] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.198] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.199] CryptDestroyKey (hKey=0x55e610) returned 1 [0271.199] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0271.199] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ed5a790, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0271.200] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ed5a790, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.200] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf21a60a1, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf21a60a1, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf223ea69, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.200] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf21a60a1, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf21a60a1, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf223ea69, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.200] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0271.201] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91bb1939, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5f7c8b5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5f7c8b5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~2.0_X")) returned 1 [0271.201] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.201] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.201] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.201] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.201] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0271.202] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.202] CryptHashData (hHash=0x55e390, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.202] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0271.202] CryptDestroyHash (hHash=0x55e390) returned 1 [0271.202] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.202] GetLastError () returned 0x0 [0271.202] GetLastError () returned 0x0 [0271.202] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.203] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.203] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.204] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.206] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3554, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.206] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.206] CloseHandle (hObject=0xffffffff) returned 1 [0271.206] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.206] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.206] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.207] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.207] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.207] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.207] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.207] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.207] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.207] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.207] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.207] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.207] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.208] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.208] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.208] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.208] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.208] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.208] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.208] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.208] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.208] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.208] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.208] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.208] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.208] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.208] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.209] CryptDestroyKey (hKey=0x55e290) returned 1 [0271.209] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0271.209] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91bb1939, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5f7c8b5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5f7c8b5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0271.210] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91bb1939, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5f7c8b5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5f7c8b5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.210] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.210] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f7c8b5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5f7c8b5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5f7c8b5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.210] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.210] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.210] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0271.211] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917f803f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5cf40ca, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5cf40ca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_X")) returned 1 [0271.211] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.211] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.211] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.211] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.211] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0271.212] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.212] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.212] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0271.212] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.212] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.212] GetLastError () returned 0x0 [0271.212] GetLastError () returned 0x0 [0271.212] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.212] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.214] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3564, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.214] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.214] CloseHandle (hObject=0xffffffff) returned 1 [0271.214] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.215] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.215] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.215] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.215] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.215] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.216] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.216] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.216] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.216] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.216] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.216] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.216] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.216] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.216] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.216] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.217] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.217] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.217] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.217] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.217] CryptDestroyKey (hKey=0x55e710) returned 1 [0271.217] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0271.218] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917f803f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5cf40ca, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5cf40ca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0271.218] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x917f803f, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5cf40ca, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5cf40ca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.218] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.219] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cf40ca, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5cf40ca, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5cf40ca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.219] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.219] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d8273, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56d8273, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56d8273, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ec, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.219] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0271.219] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0a1af0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIEBDA~1.0_X")) returned 1 [0271.219] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.220] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.220] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.220] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.220] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0271.220] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.220] CryptHashData (hHash=0x55e690, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.221] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0271.221] CryptDestroyHash (hHash=0x55e690) returned 1 [0271.221] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.221] GetLastError () returned 0x0 [0271.221] GetLastError () returned 0x0 [0271.221] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.222] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.222] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.222] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.224] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.224] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.224] CloseHandle (hObject=0xffffffff) returned 1 [0271.224] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.225] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.225] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.225] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.225] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.226] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.226] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.226] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.226] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.226] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.226] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.226] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.226] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.226] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.226] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.226] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.226] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.227] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.227] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.227] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.227] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.227] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.227] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.227] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.227] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.227] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0271.227] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0271.227] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0a1af0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.228] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f0a1af0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.228] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bfc6d0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1bfc6d0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf1c95155, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.228] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bfc6d0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1bfc6d0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf1c95155, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.228] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.229] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f3e8f81, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", cAlternateFileName="MIA018~1.0_X")) returned 1 [0271.229] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.229] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.229] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.229] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.230] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0271.230] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.230] CryptHashData (hHash=0x55e190, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.230] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0271.230] CryptDestroyHash (hHash=0x55e190) returned 1 [0271.230] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.230] GetLastError () returned 0x0 [0271.230] GetLastError () returned 0x0 [0271.230] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.231] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.233] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e522c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.233] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.233] CloseHandle (hObject=0xffffffff) returned 1 [0271.233] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.234] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.234] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.234] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.234] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.235] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.235] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.235] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.235] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.235] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.236] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.236] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.236] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.236] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.236] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.236] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.236] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.236] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.237] CryptDestroyKey (hKey=0x55e790) returned 1 [0271.237] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0271.237] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f3e8f81, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0271.238] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f3e8f81, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b85000, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b85000, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.238] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1dc6275, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1dc6275, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf1fdc3dd, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.238] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1dc6275, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1dc6275, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf1fdc3dd, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4b8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.238] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0271.239] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x921814bc, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5bc2fd4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5bc2fd4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~4.0_X")) returned 1 [0271.239] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.239] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.239] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.239] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.239] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0271.240] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.240] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.240] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0271.240] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.240] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.240] GetLastError () returned 0x0 [0271.240] GetLastError () returned 0x0 [0271.240] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.241] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.241] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.242] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.243] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.244] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.244] CloseHandle (hObject=0xffffffff) returned 1 [0271.244] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.244] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.244] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.245] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.245] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.245] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.245] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.246] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.246] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.246] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.246] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.246] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.246] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.246] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.246] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.246] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.246] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.246] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.246] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.247] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.247] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.247] CryptDestroyKey (hKey=0x55e690) returned 1 [0271.247] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0271.247] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x921814bc, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5bc2fd4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5bc2fd4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0271.248] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x921814bc, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5bc2fd4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5bc2fd4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.248] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b20ce, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b20ce, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b20ce, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.248] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bc2fd4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5bc2fd4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5bc2fd4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.248] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b20ce, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b20ce, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b20ce, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.248] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b20ce, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b20ce, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b20ce, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.248] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0271.249] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91eac945, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5a6bafb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a6bafb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_X")) returned 1 [0271.249] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.249] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.249] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.249] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.249] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.249] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.249] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0271.250] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.250] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.250] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0271.250] CryptDestroyHash (hHash=0x55e290) returned 1 [0271.250] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.250] GetLastError () returned 0x0 [0271.250] GetLastError () returned 0x0 [0271.250] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.251] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.253] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e523c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.253] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.253] CloseHandle (hObject=0xffffffff) returned 1 [0271.253] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.253] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.253] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.254] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.254] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.254] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.254] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.254] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.254] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.254] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.254] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.254] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.255] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.255] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.255] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.255] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.255] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.255] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.255] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.255] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.255] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.255] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.255] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.256] CryptDestroyKey (hKey=0x55e610) returned 1 [0271.256] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0271.256] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.net.native.runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91eac945, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5a6bafb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a6bafb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0271.257] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91eac945, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5a6bafb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a6bafb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.257] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x568bd51, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x568bd51, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x568bd51, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.257] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a6bafb, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a6bafb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a6bafb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.257] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5665b45, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5665b45, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5665b45, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.257] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5665b45, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5665b45, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5665b45, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.257] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0271.258] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1654d78, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd0b4bc15, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd0b4bc15, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Office.OneNote_17.6131.10051.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIFB46~1.0_X")) returned 1 [0271.258] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.258] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.258] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.258] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.259] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.259] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0271.259] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.259] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.259] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.259] CryptDestroyHash (hHash=0x55e710) returned 1 [0271.259] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.259] GetLastError () returned 0x0 [0271.259] GetLastError () returned 0x0 [0271.259] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.260] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.261] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.261] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_17.6131.10051.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.office.onenote_17.6131.10051.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.264] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.264] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.264] CloseHandle (hObject=0xffffffff) returned 1 [0271.264] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.265] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.265] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.266] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.266] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.266] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.266] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.266] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.266] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.267] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.267] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.267] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.267] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.267] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.267] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.267] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.267] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.267] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.268] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.268] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.268] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.268] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.268] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.268] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.268] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.268] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.268] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.269] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.269] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0271.269] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_17.6131.10051.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.office.onenote_17.6131.10051.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1654d78, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd0b4bc15, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd0b4bc15, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.270] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1654d78, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd0b4bc15, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd0b4bc15, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.270] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x644896db, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x644896db, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x64522156, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.270] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x644896db, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x644896db, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x64522156, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.270] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.271] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa162ebc2, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd0b4bc15, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd0b4bc15, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI1AFA~1.0_N")) returned 1 [0271.271] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.272] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.272] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.272] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.272] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.272] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.272] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0271.273] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.273] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.273] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0271.273] CryptDestroyHash (hHash=0x55e210) returned 1 [0271.273] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.273] GetLastError () returned 0x0 [0271.273] GetLastError () returned 0x0 [0271.273] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.274] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.office.onenote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.276] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e522c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.276] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.276] CloseHandle (hObject=0xffffffff) returned 1 [0271.276] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.277] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.277] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.277] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.277] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.277] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.277] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.278] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.278] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.278] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.278] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.278] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.278] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.278] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.278] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.278] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.279] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.279] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.279] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.279] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.279] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.279] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.279] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.279] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.279] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.279] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.279] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.280] CryptDestroyKey (hKey=0x55e790) returned 1 [0271.280] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0271.280] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.office.onenote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa162ebc2, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd0b4bc15, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd0b4bc15, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0271.281] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa162ebc2, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd0b4bc15, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd0b4bc15, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.281] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x645ba9fb, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x645ba9fb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x64653213, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3dc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.281] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x645ba9fb, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x645ba9fb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x64653213, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3dc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.281] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0271.282] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2e0636b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd1bafd82, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd1bafd82, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI4126~1.0_X")) returned 1 [0271.282] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.282] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.282] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.282] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.282] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.282] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.283] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5707d0) returned 1 [0271.284] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.284] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.284] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.284] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.284] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.284] GetLastError () returned 0x0 [0271.284] GetLastError () returned 0x0 [0271.284] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.285] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.286] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.286] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.office.sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.288] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.288] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.288] CloseHandle (hObject=0xffffffff) returned 1 [0271.288] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.288] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.289] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.289] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.289] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.289] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.289] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.289] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.289] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.289] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.289] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.289] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.289] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.290] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.290] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.290] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.290] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.290] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.290] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.290] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.290] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.290] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.290] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.290] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.290] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.290] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.291] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.291] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.291] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0271.291] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.office.sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2e0636b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd1bafd82, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd1bafd82, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.292] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2e0636b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd1bafd82, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd1bafd82, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.292] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60ebe640, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x60ebe640, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x60f56e71, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x420, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.292] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60ebe640, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x60ebe640, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x60f56e71, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x420, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.292] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.293] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2de01c7, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd1bafd82, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd1bafd82, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI01E4~1.0_N")) returned 1 [0271.293] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.293] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.293] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.293] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.293] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.293] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.293] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0271.294] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.294] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.294] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0271.294] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0271.294] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.294] GetLastError () returned 0x0 [0271.294] GetLastError () returned 0x0 [0271.294] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.295] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.office.sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.297] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e523c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.297] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.297] CloseHandle (hObject=0xffffffff) returned 1 [0271.297] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.298] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.298] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.299] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.299] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.299] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.299] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.300] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.300] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.300] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.300] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.300] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.300] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.300] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.300] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.300] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.300] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.301] CryptDestroyKey (hKey=0x55e750) returned 1 [0271.301] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0271.301] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.office.sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2de01c7, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd1bafd82, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd1bafd82, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0271.303] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2de01c7, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd1bafd82, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd1bafd82, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.303] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61015b70, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x61015b70, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x610d46cc, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.303] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61015b70, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x61015b70, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x610d46cc, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.303] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0271.303] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3b6f78c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd2e04030, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd2e04030, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.People_10.0.2840.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI2350~1.0_X")) returned 1 [0271.304] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.304] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.304] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.304] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.304] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0271.304] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.305] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.305] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0271.305] CryptDestroyHash (hHash=0x55e190) returned 1 [0271.305] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.305] GetLastError () returned 0x0 [0271.305] GetLastError () returned 0x0 [0271.305] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.306] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.306] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.307] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_10.0.2840.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.people_10.0.2840.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.308] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.308] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.308] CloseHandle (hObject=0xffffffff) returned 1 [0271.309] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.309] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.309] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.309] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.309] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.310] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.310] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.310] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.310] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.310] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.310] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.310] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.310] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.310] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.311] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.311] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.311] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.311] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.311] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.311] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.311] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.311] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.311] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.311] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.311] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.311] CryptDestroyKey (hKey=0x55e210) returned 1 [0271.311] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0271.311] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_10.0.2840.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.people_10.0.2840.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3b6f78c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd2e04030, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd2e04030, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0271.312] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3b6f78c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd2e04030, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd2e04030, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.312] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d3e2602, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d3e2602, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d47af40, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.312] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d3e2602, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d3e2602, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d47af40, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.313] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0271.313] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3b6f78c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd2e2a0ff, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd2e2a0ff, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI82F5~1.0_N")) returned 1 [0271.313] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.314] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.314] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.314] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.314] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0271.314] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.315] CryptHashData (hHash=0x55e390, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.315] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0271.315] CryptDestroyHash (hHash=0x55e390) returned 1 [0271.315] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.315] GetLastError () returned 0x0 [0271.315] GetLastError () returned 0x0 [0271.315] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.316] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.people_2015.1012.106.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.317] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e522c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.317] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.317] CloseHandle (hObject=0xffffffff) returned 1 [0271.317] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.318] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.318] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.318] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.318] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.318] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.318] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.319] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.319] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.319] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.319] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.319] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.319] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.319] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.319] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.319] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.319] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.319] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.320] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.320] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.320] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.320] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.320] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.320] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.320] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.320] CryptDestroyKey (hKey=0x55e750) returned 1 [0271.320] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0271.320] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.people_2015.1012.106.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3b6f78c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd2e2a0ff, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd2e2a0ff, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0271.321] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3b6f78c, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd2e2a0ff, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd2e2a0ff, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.321] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d51389a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d51389a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d5ac1b2, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.321] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d51389a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d51389a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d5ac1b2, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.321] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0271.322] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa46c2a69, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b5ef4d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b5ef4d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c", cAlternateFileName="MI8A06~1.0_N")) returned 1 [0271.322] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.322] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.322] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.322] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.322] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.322] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.323] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0271.323] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.323] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.323] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0271.323] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0271.323] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.323] GetLastError () returned 0x0 [0271.323] GetLastError () returned 0x0 [0271.323] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.325] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.326] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.327] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.skypeapp_3.2.1.0_neutral_~_kzf8qxf38zg5c\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.329] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.329] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.329] CloseHandle (hObject=0xffffffff) returned 1 [0271.329] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.330] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.330] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.330] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.331] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.331] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.331] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.331] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.331] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.331] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.332] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.332] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.332] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.332] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.333] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.333] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.333] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.333] CryptDestroyKey (hKey=0x55e610) returned 1 [0271.333] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0271.334] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.skypeapp_3.2.1.0_neutral_~_kzf8qxf38zg5c\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa46c2a69, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b5ef4d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b5ef4d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.335] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa46c2a69, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b5ef4d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b5ef4d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.335] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2454b2e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf2454b2e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf24ed57a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x390, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.335] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2454b2e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf2454b2e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf24ed57a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x390, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.335] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.336] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa46e8c39, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b5ef4d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b5ef4d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c", cAlternateFileName="MIFE1F~1.0_X")) returned 1 [0271.336] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.336] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.336] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.336] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.337] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.337] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0271.337] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.337] CryptHashData (hHash=0x55e710, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.337] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0271.338] CryptDestroyHash (hHash=0x55e710) returned 1 [0271.338] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.338] GetLastError () returned 0x0 [0271.338] GetLastError () returned 0x0 [0271.338] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.338] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.340] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e523c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.340] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.340] CloseHandle (hObject=0xffffffff) returned 1 [0271.340] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.341] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.341] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.341] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.342] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.342] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.342] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.342] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.342] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.342] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.342] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.342] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.342] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.342] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.343] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.343] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.343] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.343] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.343] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.343] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.343] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.343] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.343] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.343] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.343] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.343] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.343] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.344] CryptDestroyKey (hKey=0x55e690) returned 1 [0271.344] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0271.344] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa46e8c39, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b5ef4d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b5ef4d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.344] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa46e8c39, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd4b5ef4d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd4b5ef4d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.345] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf22fd6b9, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf22fd6b9, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf2396181, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.345] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf22fd6b9, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf22fd6b9, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf2396181, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.345] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.345] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9143e393, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9143e393, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9143e393, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~2.1_X")) returned 1 [0271.345] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.346] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.346] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.346] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.346] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.346] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.346] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0271.347] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.347] CryptHashData (hHash=0x55e690, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.347] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0271.347] CryptDestroyHash (hHash=0x55e690) returned 1 [0271.347] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.347] GetLastError () returned 0x0 [0271.347] GetLastError () returned 0x0 [0271.347] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.348] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.348] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.349] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.349] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.349] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.349] CloseHandle (hObject=0xffffffff) returned 1 [0271.349] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.350] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.350] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.350] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.350] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.350] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.350] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.350] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.350] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.351] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.351] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.351] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.351] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.351] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.351] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.351] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.351] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.351] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.351] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.351] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.351] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.352] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.352] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.352] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.352] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.352] CryptDestroyKey (hKey=0x55e710) returned 1 [0271.352] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0271.352] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9143e393, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9143e393, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9143e393, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0271.352] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9143e393, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9143e393, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9143e393, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.352] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9143e393, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9143e393, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x9143e393, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0271.352] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0271.353] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91143404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91143404, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91143404, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.1_X")) returned 1 [0271.353] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.353] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.353] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.353] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.353] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.353] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.353] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0271.354] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.354] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.354] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.354] CryptDestroyHash (hHash=0x55e310) returned 1 [0271.354] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.354] GetLastError () returned 0x0 [0271.354] GetLastError () returned 0x0 [0271.354] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.354] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.vclibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.355] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e5270, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.355] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.355] CloseHandle (hObject=0xffffffff) returned 1 [0271.355] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.355] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.355] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.356] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.356] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.356] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.356] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.357] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.357] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.357] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.357] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.357] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.358] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.358] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0271.358] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.vclibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91143404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91143404, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91143404, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0271.358] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91143404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91143404, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91143404, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.358] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91143404, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x91143404, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x91143404, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0271.358] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0271.358] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9280fbf2, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdc26d7fb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc26d7fb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft.VCLibs.140.00_14.0.22929.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIBD25~1.0_X")) returned 1 [0271.358] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.358] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.358] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.358] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.359] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0271.359] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.359] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.359] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0271.359] CryptDestroyHash (hHash=0x55e790) returned 1 [0271.359] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.359] GetLastError () returned 0x0 [0271.359] GetLastError () returned 0x0 [0271.359] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.360] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.360] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.361] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.VCLibs.140.00_14.0.22929.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.vclibs.140.00_14.0.22929.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.364] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.364] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.365] CloseHandle (hObject=0xffffffff) returned 1 [0271.365] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.365] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.365] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.365] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.365] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.366] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.366] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.366] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.366] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.366] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.366] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.366] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.366] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.366] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.366] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.367] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.367] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.367] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.367] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.367] CryptDestroyKey (hKey=0x55e290) returned 1 [0271.368] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0271.368] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.VCLibs.140.00_14.0.22929.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.vclibs.140.00_14.0.22929.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9280fbf2, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdc26d7fb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc26d7fb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.368] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9280fbf2, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdc26d7fb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc26d7fb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.368] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9ef1fa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdb9ef1fa, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdb9ef1fa, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.369] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc26d7fb, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdc26d7fb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc26d7fb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.369] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9ef1fa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdb9ef1fa, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdb9ef1fa, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.369] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9ef1fa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdb9ef1fa, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdb9ef1fa, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.369] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.369] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924a261b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbcea0c6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbcea0c6, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.VCLibs.140.00_14.0.22929.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI02C5~1.0_X")) returned 1 [0271.369] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.369] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.370] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.370] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.370] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570638) returned 1 [0271.370] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.370] CryptHashData (hHash=0x55e190, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.370] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0271.370] CryptDestroyHash (hHash=0x55e190) returned 1 [0271.370] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.371] GetLastError () returned 0x0 [0271.371] GetLastError () returned 0x0 [0271.371] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.371] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.VCLibs.140.00_14.0.22929.0_x86__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.vclibs.140.00_14.0.22929.0_x86__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.373] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e5280, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.373] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.373] CloseHandle (hObject=0xffffffff) returned 1 [0271.373] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.374] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.374] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.374] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.374] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.374] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.375] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.375] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.375] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.375] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.375] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.376] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.376] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.376] CryptDestroyKey (hKey=0x55e390) returned 1 [0271.376] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0271.376] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.VCLibs.140.00_14.0.22929.0_x86__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.vclibs.140.00_14.0.22929.0_x86__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924a261b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbcea0c6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbcea0c6, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.377] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924a261b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbcea0c6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbcea0c6, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.377] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9ef1fa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdb9ef1fa, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdb9ef1fa, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.377] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbcea0c6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbcea0c6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbcea0c6, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4a0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.377] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9c8f9d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdb9c8f9d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdb9c8f9d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.377] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9c8f9d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdb9c8f9d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdb9c8f9d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.377] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.378] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x896f96af, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x896f96af, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89dd42cb, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIACEB~1.0_N")) returned 1 [0271.378] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.378] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.378] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.378] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.379] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0271.379] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.379] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.379] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0271.379] CryptDestroyHash (hHash=0x55e710) returned 1 [0271.379] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.379] GetLastError () returned 0x0 [0271.379] GetLastError () returned 0x0 [0271.379] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.380] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.381] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.381] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.383] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.383] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.383] CloseHandle (hObject=0xffffffff) returned 1 [0271.383] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.384] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.384] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.384] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.384] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.384] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.384] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.385] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.385] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.385] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.385] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.385] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.386] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.386] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.386] CryptDestroyKey (hKey=0x55e690) returned 1 [0271.386] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0271.387] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x896f96af, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x896f96af, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89dd42cb, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0271.387] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x896f96af, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x896f96af, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89dd42cb, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.387] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89dd42cb, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89dd42cb, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89dd42cb, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.387] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x896f96af, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x896f96af, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x896f96af, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.388] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x896f96af, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x896f96af, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x896f96af, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.388] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0271.388] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x556c62fa, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x556ec56b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x55a33970, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI1A21~1.0_N")) returned 1 [0271.388] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.388] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.389] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.389] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.389] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0271.389] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.389] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.389] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0271.389] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.389] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.389] GetLastError () returned 0x0 [0271.390] GetLastError () returned 0x0 [0271.390] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.390] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.392] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e5314, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.392] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.392] CloseHandle (hObject=0xffffffff) returned 1 [0271.392] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.393] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.394] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.394] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.394] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.394] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.394] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.394] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.395] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.395] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.395] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.395] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.396] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.396] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.396] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.396] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.396] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.396] CryptDestroyKey (hKey=0x55e690) returned 1 [0271.396] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0271.396] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x556c62fa, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x556ec56b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x55a33970, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0271.397] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x556c62fa, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x556ec56b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x55a33970, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.397] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a33970, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x55a33970, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x55a33970, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1110, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.397] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x556ec56b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x556ec56b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x556ec56b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.397] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x556ec56b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x556ec56b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x556ec56b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.397] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0271.398] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a593c72, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a593c72, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8aa0c37c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIE27B~1.0_N")) returned 1 [0271.398] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.398] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.398] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.399] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.399] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.399] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0271.399] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.399] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.399] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0271.399] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.399] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.399] GetLastError () returned 0x0 [0271.400] GetLastError () returned 0x0 [0271.400] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.401] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.401] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.401] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.402] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e36e0, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.402] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.402] CloseHandle (hObject=0xffffffff) returned 1 [0271.402] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.403] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.403] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.403] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.403] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.404] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.404] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.404] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.404] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.404] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.404] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.404] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.404] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.404] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.405] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.405] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.405] CryptDestroyKey (hKey=0x55e690) returned 1 [0271.405] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0271.405] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a593c72, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a593c72, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8aa0c37c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0271.405] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a593c72, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a593c72, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8aa0c37c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.405] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aa0c37c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8aa0c37c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8aa0c37c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x9f0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.405] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a593c72, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a593c72, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a593c72, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.405] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a593c72, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a593c72, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a593c72, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.406] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0271.406] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fafc297, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5fc07471, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5fc07471, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.52_")) returned 1 [0271.406] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.406] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.406] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.406] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.406] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.406] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.406] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0271.407] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.407] CryptHashData (hHash=0x55e710, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.407] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.407] CryptDestroyHash (hHash=0x55e710) returned 1 [0271.407] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.407] GetLastError () returned 0x0 [0271.407] GetLastError () returned 0x0 [0271.407] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.407] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.408] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e36a0, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.408] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.408] CloseHandle (hObject=0xffffffff) returned 1 [0271.408] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.411] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.412] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.412] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.412] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.412] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.412] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.412] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.412] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.413] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.413] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.413] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.413] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.413] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.414] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.414] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.414] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.414] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.414] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.414] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.414] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.414] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0271.414] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fafc297, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6083f384, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6083f384, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0271.415] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fafc297, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6083f384, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6083f384, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.415] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6083f384, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6083f384, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6083f384, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x7c8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.415] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fc07471, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5fc07471, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5fc07471, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.415] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fc07471, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5fc07471, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5fc07471, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.415] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0271.415] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb7b61b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bb7b61b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x942c8d86, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI1B62~1.0_N")) returned 1 [0271.415] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.415] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.415] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.415] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.415] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0271.416] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.416] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.416] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0271.416] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0271.416] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.416] GetLastError () returned 0x0 [0271.416] GetLastError () returned 0x0 [0271.416] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.417] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.418] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.418] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.420] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3564, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.420] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.420] CloseHandle (hObject=0xffffffff) returned 1 [0271.420] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.421] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.421] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.421] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.421] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.422] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.422] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.422] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.422] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.422] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.422] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.423] CryptDestroyKey (hKey=0x55e610) returned 1 [0271.423] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0271.423] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb7b61b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bb7b61b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x942c8d86, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bb7b61b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bb7b61b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x942c8d86, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x942c8d86, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x942c8d86, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x942eedf4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bba1947, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bba1947, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bba1947, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x448, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bba1947, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bba1947, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bba1947, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x448, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.424] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.425] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d8f1f1, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI313A~1.SCA")) returned 1 [0271.425] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.425] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.425] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.425] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.426] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0271.426] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.426] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.426] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0271.426] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.426] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.426] GetLastError () returned 0x0 [0271.426] GetLastError () returned 0x0 [0271.427] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.427] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-100_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-100_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.430] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3648, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.430] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.430] CloseHandle (hObject=0xffffffff) returned 1 [0271.430] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.431] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.431] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.431] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.432] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.432] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.432] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.433] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.433] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.433] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.433] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.433] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.434] CryptDestroyKey (hKey=0x55e710) returned 1 [0271.434] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0271.434] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-100_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-100_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d8f1f1, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0271.435] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d8f1f1, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.435] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a184a20, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a184a20, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a21d419, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.435] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b20ef63, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3cc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.435] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a184a20, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a184a20, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a184a20, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.435] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a184a20, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a184a20, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a184a20, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4ac, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.435] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0271.436] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d68de8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI2703~1.0_X")) returned 1 [0271.436] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.437] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.437] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.437] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.437] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0271.437] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.437] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.438] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0271.438] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.438] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.438] GetLastError () returned 0x0 [0271.438] GetLastError () returned 0x0 [0271.438] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.439] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.439] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.439] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.441] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3564, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.442] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.442] CloseHandle (hObject=0xffffffff) returned 1 [0271.442] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.442] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.443] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.443] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.443] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.443] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.443] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.443] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.443] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.444] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.444] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.444] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.444] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.444] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.444] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.444] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.444] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.444] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.445] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.445] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.445] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.445] CryptDestroyKey (hKey=0x55e690) returned 1 [0271.445] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0271.445] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d68de8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0271.447] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d68de8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b20ef63, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.447] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a2dbfba, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a2dbfba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a3282f7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.447] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b20ef63, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b20ef63, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b23516e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1740, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.447] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a2434af, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a2434af, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a2434af, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1ce8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.447] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a2434af, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a2434af, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a2434af, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1ce8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.447] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0271.448] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d68de8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5a39ab5e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a39ab5e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIF55B~1.0_N")) returned 1 [0271.448] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.448] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.449] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.449] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.449] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0271.450] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.450] CryptHashData (hHash=0x55e190, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.450] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0271.450] CryptDestroyHash (hHash=0x55e190) returned 1 [0271.450] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.450] GetLastError () returned 0x0 [0271.450] GetLastError () returned 0x0 [0271.450] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.451] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.454] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3574, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.454] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.454] CloseHandle (hObject=0xffffffff) returned 1 [0271.454] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.455] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.455] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.455] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.455] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.455] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.455] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.456] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.456] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.456] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.456] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.456] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.456] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.457] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.457] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.457] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.457] CryptDestroyKey (hKey=0x55e390) returned 1 [0271.458] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0271.458] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d68de8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5a39ab5e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a39ab5e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0271.459] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5d68de8, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x5a39ab5e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a39ab5e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.459] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3282f7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a3282f7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a39ab5e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3dc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.459] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3282f7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a3282f7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a3282f7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3dc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.459] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a3282f7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a3282f7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a3282f7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3dc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.459] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0271.460] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97467c96, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97467c96, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x98754596, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI2456~1.0_N")) returned 1 [0271.460] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.460] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.460] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.460] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.460] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0271.461] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.461] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.461] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0271.461] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.461] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.461] GetLastError () returned 0x0 [0271.461] GetLastError () returned 0x0 [0271.461] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.462] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.462] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.463] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.465] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3554, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.465] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.465] CloseHandle (hObject=0xffffffff) returned 1 [0271.465] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.466] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.466] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.466] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.467] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.467] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.467] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.467] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.467] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.468] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.468] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.468] CryptDestroyKey (hKey=0x55e690) returned 1 [0271.468] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0271.468] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97467c96, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97467c96, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x98754596, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0271.469] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97467c96, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97467c96, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x98754596, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.469] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98754596, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x98754596, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x98754596, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x98c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.469] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97467c96, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97467c96, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97467c96, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.469] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97467c96, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97467c96, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97467c96, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.469] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0271.470] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e006e4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x59e26990, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e455d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIA642~1.0_N")) returned 1 [0271.470] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.470] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.470] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.471] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.471] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570638) returned 1 [0271.471] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.471] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.471] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.472] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.472] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.472] GetLastError () returned 0x0 [0271.472] GetLastError () returned 0x0 [0271.472] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.472] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.472] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e363c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.472] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.472] CloseHandle (hObject=0xffffffff) returned 1 [0271.473] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.473] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.473] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.473] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.474] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.474] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.474] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.474] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.474] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.474] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.474] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.474] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.474] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.474] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.475] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.475] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.475] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.475] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.475] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.476] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.476] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0271.476] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e006e4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e455d80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e455d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.476] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e006e4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e455d80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e455d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.476] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e455d80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e455d80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e455d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.476] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e26990, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x59e26990, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x59e26990, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.476] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e26990, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x59e26990, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x59e26990, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.476] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.476] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6f24701, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd5dd92fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5dd92fc, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.WindowsAlarms_10.1510.12020.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIDE24~1.0_X")) returned 1 [0271.476] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.476] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.476] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.477] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.477] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0271.477] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.477] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.477] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0271.478] CryptDestroyHash (hHash=0x55e190) returned 1 [0271.478] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.478] GetLastError () returned 0x0 [0271.478] GetLastError () returned 0x0 [0271.478] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.479] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.480] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.481] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_10.1510.12020.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsalarms_10.1510.12020.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.485] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3544, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.485] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.485] CloseHandle (hObject=0xffffffff) returned 1 [0271.485] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.486] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.487] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.488] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.488] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.489] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.489] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.490] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.490] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.490] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.490] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.491] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.491] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.491] CryptDestroyKey (hKey=0x55e790) returned 1 [0271.491] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0271.491] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_10.1510.12020.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsalarms_10.1510.12020.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6f24701, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd5dd92fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5dd92fc, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0271.492] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6f24701, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd5dd92fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5dd92fc, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.492] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37d9839, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe37d9839, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe38e4773, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.492] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe37d9839, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe37d9839, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe38e4773, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x43c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.492] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0271.493] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6efe350, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd5dd92fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5dd92fc, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIBFF2~1.0_N")) returned 1 [0271.493] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.493] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.493] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.494] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.494] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.494] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.494] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570f40) returned 1 [0271.494] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.494] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.495] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0271.495] CryptDestroyHash (hHash=0x55e750) returned 1 [0271.495] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.495] GetLastError () returned 0x0 [0271.495] GetLastError () returned 0x0 [0271.495] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.496] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsalarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.498] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e526c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.498] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.498] CloseHandle (hObject=0xffffffff) returned 1 [0271.498] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.499] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.499] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.499] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.499] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.500] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.500] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.500] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.500] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.500] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.500] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.500] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.500] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.500] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.500] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.500] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.501] CryptDestroyKey (hKey=0x55e610) returned 1 [0271.501] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0271.501] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsalarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6efe350, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd5dd92fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5dd92fc, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0271.502] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6efe350, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd5dd92fc, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5dd92fc, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.502] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3c9dfeb, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe3c9dfeb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe3d5cd3d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.502] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3c9dfeb, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe3c9dfeb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe3d5cd3d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.502] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0271.503] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e314ea, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x56b938ba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b938ba, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.WindowsCalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIBC60~1.SCA")) returned 1 [0271.503] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.503] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.503] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.503] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.503] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.503] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.503] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0271.504] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.504] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.504] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0271.504] CryptDestroyHash (hHash=0x55e190) returned 1 [0271.504] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.504] GetLastError () returned 0x0 [0271.504] GetLastError () returned 0x0 [0271.504] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.505] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.506] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.506] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.508] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3574, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.508] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.508] CloseHandle (hObject=0xffffffff) returned 1 [0271.508] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.508] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.509] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.509] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.509] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.509] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.510] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.510] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.510] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.510] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.510] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.511] CryptDestroyKey (hKey=0x55e390) returned 1 [0271.511] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0271.511] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscalculator_10.1510.9020.0_neutral_split.scale-100_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e314ea, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x56b938ba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b938ba, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0271.512] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e314ea, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x56b938ba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b938ba, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.512] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55880b0b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55880b0b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x559d80f9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.512] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b938ba, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b938ba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56c2c343, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3e4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.512] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557c1dda, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x557c1dda, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55880b0b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.512] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x557c1dda, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x557c1dda, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55880b0b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.512] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0271.513] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e0b217, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x56c52588, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56c52588, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI55E9~1.0_X")) returned 1 [0271.513] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.513] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.513] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.513] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.513] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.513] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.513] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0271.514] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.514] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.514] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0271.514] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.514] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.514] GetLastError () returned 0x0 [0271.514] GetLastError () returned 0x0 [0271.514] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.515] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.517] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e523c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.517] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.517] CloseHandle (hObject=0xffffffff) returned 1 [0271.517] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.518] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.519] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.519] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.519] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.519] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.520] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.520] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.520] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.520] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.520] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.520] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.520] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.520] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.520] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.520] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.520] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.520] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.520] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.520] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.521] CryptDestroyKey (hKey=0x55e390) returned 1 [0271.521] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0271.521] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e0b217, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x56c52588, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56c52588, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0271.522] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e0b217, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x56c52588, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56c52588, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.522] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a96ece, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55a96ece, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55bee13e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.522] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c52588, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56c52588, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56ceb0d2, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xe88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.522] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x559fe41f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x559fe41f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55a96ece, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.522] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x559fe41f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x559fe41f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55a96ece, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.522] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0271.523] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e0b217, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x55c86ac0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55c86ac0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MID846~1.0_N")) returned 1 [0271.523] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.523] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.523] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.523] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.523] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.523] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.523] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0271.524] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.524] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.524] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.524] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.524] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.524] GetLastError () returned 0x0 [0271.524] GetLastError () returned 0x0 [0271.524] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.525] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.525] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.526] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.528] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.528] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.528] CloseHandle (hObject=0xffffffff) returned 1 [0271.528] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.529] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.529] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.529] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.529] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.530] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.530] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.530] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.530] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.530] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.530] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.530] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.530] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.530] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.530] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.531] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.531] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.531] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.531] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0271.531] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e0b217, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x55c86ac0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55c86ac0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.532] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e0b217, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x55c86ac0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55c86ac0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.532] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c86ac0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55c86ac0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55d1f366, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3e0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.532] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55bee13e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55bee13e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55c86ac0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3e0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.532] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55bee13e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55bee13e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55c86ac0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3e0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.532] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.533] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c592f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd709fd1b, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd709fd1b, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI273B~1.0_N")) returned 1 [0271.533] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.533] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.533] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.533] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.533] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0271.534] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.534] CryptHashData (hHash=0x55e690, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.534] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0271.534] CryptDestroyHash (hHash=0x55e690) returned 1 [0271.534] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.534] GetLastError () returned 0x0 [0271.534] GetLastError () returned 0x0 [0271.534] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.535] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.537] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e522c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.537] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.537] CloseHandle (hObject=0xffffffff) returned 1 [0271.537] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.538] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.538] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.538] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.538] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.538] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.538] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.538] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.539] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.539] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.539] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.539] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.539] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.539] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.539] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.539] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.539] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.540] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.540] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.540] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.540] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.540] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.540] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.540] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.540] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.540] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.541] CryptDestroyKey (hKey=0x55e710) returned 1 [0271.541] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0271.541] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c592f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd709fd1b, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd709fd1b, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.542] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c592f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd709fd1b, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd709fd1b, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.542] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad6ebae, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1ad6ebae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1ad6ebae, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.542] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad6ebae, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1ad6ebae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1ad6ebae, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.542] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.542] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c592f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd709fd1b, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd709fd1b, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.WindowsCamera_2015.1071.40.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7DFD~1.0_X")) returned 1 [0271.543] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.543] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.543] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.543] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.543] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0271.544] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.544] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.544] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0271.544] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.544] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.544] GetLastError () returned 0x0 [0271.544] GetLastError () returned 0x0 [0271.544] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.545] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.545] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.546] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscamera_2015.1071.40.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.548] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.548] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.548] CloseHandle (hObject=0xffffffff) returned 1 [0271.548] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.549] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.550] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.550] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.550] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.550] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.551] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.551] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.551] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.551] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.552] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.552] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.552] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.552] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.552] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.552] CryptDestroyKey (hKey=0x55e310) returned 1 [0271.552] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0271.552] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsCamera_2015.1071.40.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscamera_2015.1071.40.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c592f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd709fd1b, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd709fd1b, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0271.554] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c592f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd709fd1b, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd709fd1b, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.554] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad6ebae, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1ad6ebae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1ad6ebae, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.554] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ad6ebae, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1ad6ebae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1ad6ebae, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.554] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0271.555] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab8c0ebb, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd83b2828, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd83b2828, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7C55~1.0_X")) returned 1 [0271.555] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.555] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.555] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.555] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.555] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0271.556] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.556] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.556] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0271.556] CryptDestroyHash (hHash=0x55e290) returned 1 [0271.556] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.556] GetLastError () returned 0x0 [0271.556] GetLastError () returned 0x0 [0271.556] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.557] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.559] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e5308, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.559] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.559] CloseHandle (hObject=0xffffffff) returned 1 [0271.559] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.560] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.560] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.560] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.560] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.560] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.560] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.560] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.560] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.561] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.561] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.561] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.561] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.561] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.561] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.562] CryptDestroyKey (hKey=0x55e610) returned 1 [0271.562] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0271.562] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscommunicationsapps_17.6308.42271.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab8c0ebb, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd83b2828, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd83b2828, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0271.563] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab8c0ebb, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd83b2828, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd83b2828, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.563] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba15469, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdba15469, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdba15469, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.563] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba15469, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdba15469, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdba15469, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.563] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0271.564] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab8c0ebb, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd83b2828, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd83b2828, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI01F4~1.0_N")) returned 1 [0271.564] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.564] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.564] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.564] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.564] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0271.565] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.565] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.565] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.565] CryptDestroyHash (hHash=0x55e710) returned 1 [0271.565] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.565] GetLastError () returned 0x0 [0271.565] GetLastError () returned 0x0 [0271.565] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.566] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.567] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.567] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.569] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3608, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.569] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.569] CloseHandle (hObject=0xffffffff) returned 1 [0271.569] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.570] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.570] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.571] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.571] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.571] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.571] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.572] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.572] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.572] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.572] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.572] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.572] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.572] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.572] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.572] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0271.572] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab8c0ebb, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd83b2828, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd83b2828, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0271.573] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab8c0ebb, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd83b2828, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd83b2828, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.573] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba3b6a3, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdba3b6a3, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdba3b6a3, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.574] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdba3b6a3, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdba3b6a3, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdba3b6a3, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x41c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.574] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0271.574] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x994715e1, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x994715e1, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9a0832bd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIA2AD~1.0_N")) returned 1 [0271.574] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.574] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.575] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.575] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.575] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570638) returned 1 [0271.575] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.575] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.575] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.575] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.576] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.576] GetLastError () returned 0x0 [0271.576] GetLastError () returned 0x0 [0271.576] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.576] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.578] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e36e4, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.578] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.578] CloseHandle (hObject=0xffffffff) returned 1 [0271.578] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.579] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.579] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.579] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.579] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.580] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.580] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.580] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.580] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.580] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.581] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.581] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.581] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.581] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.581] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.582] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.582] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0271.582] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x994715e1, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x994715e1, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9a0832bd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.583] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x994715e1, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x994715e1, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9a0832bd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.583] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a0832bd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9a0832bd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9a0832bd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.583] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9949777f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9949777f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9949777f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.583] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9949777f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9949777f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9949777f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.583] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.584] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacfffe15, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd9c48c16, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd9c48c16, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIC8BA~1.0_N")) returned 1 [0271.584] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.584] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.584] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.584] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.584] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0271.585] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.585] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.585] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0271.585] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.585] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.585] GetLastError () returned 0x0 [0271.585] GetLastError () returned 0x0 [0271.585] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.586] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.586] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.587] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsmaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.589] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3554, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.589] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.589] CloseHandle (hObject=0xffffffff) returned 1 [0271.589] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.590] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.590] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.590] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.590] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.590] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.590] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.590] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.591] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.591] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.591] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.591] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.591] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.592] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.592] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.592] CryptDestroyKey (hKey=0x55e710) returned 1 [0271.592] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0271.592] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsmaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacfffe15, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd9c48c16, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd9c48c16, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.593] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacfffe15, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd9c48c16, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd9c48c16, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.593] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13646246, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13646246, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x136dec19, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3bc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.593] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13646246, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13646246, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x136dec19, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3bc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.593] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.594] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacfffe15, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd9c48c16, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd9c48c16, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.WindowsMaps_4.1509.50911.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI2862~1.0_X")) returned 1 [0271.594] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.594] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.594] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.594] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.595] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0271.595] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.595] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.595] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0271.595] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0271.595] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.595] GetLastError () returned 0x0 [0271.595] GetLastError () returned 0x0 [0271.595] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.596] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsmaps_4.1509.50911.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.598] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3564, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.598] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.598] CloseHandle (hObject=0xffffffff) returned 1 [0271.598] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.599] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.599] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.599] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.599] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.600] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.600] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.600] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.600] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.600] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.600] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.600] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.600] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.600] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.601] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.601] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.601] CryptDestroyKey (hKey=0x55e750) returned 1 [0271.601] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0271.601] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsMaps_4.1509.50911.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsmaps_4.1509.50911.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacfffe15, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd9c48c16, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd9c48c16, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0271.602] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacfffe15, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xd9c48c16, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd9c48c16, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.602] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13514eb6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13514eb6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x135ad91f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x438, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.602] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13514eb6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13514eb6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x135ad91f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x438, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.602] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0271.603] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae7fdabd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdac60aa2, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdac60aa2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe", cAlternateFileName="MID9F7~1.0_X")) returned 1 [0271.603] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.603] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.603] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.603] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.603] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0271.604] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.604] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.604] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0271.604] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.604] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.604] GetLastError () returned 0x0 [0271.604] GetLastError () returned 0x0 [0271.604] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.605] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.605] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.606] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsphone_10.1510.9010.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.608] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.608] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.608] CloseHandle (hObject=0xffffffff) returned 1 [0271.608] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.609] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.609] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.609] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.609] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.610] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.610] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.610] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.610] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.610] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.610] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.611] CryptDestroyKey (hKey=0x55e690) returned 1 [0271.611] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0271.611] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsphone_10.1510.9010.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae7fdabd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdac60aa2, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdac60aa2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0271.612] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae7fdabd, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdac60aa2, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdac60aa2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.612] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdf6dad, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xfdf6dad, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xfe8f654, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.612] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdf6dad, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xfdf6dad, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xfe8f654, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.612] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0271.613] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae7d77ba, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdac60aa2, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdac60aa2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI99D1~1.0_N")) returned 1 [0271.613] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.613] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.613] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.613] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.613] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.614] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0271.614] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.614] CryptHashData (hHash=0x55e710, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.614] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.614] CryptDestroyHash (hHash=0x55e710) returned 1 [0271.614] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.614] GetLastError () returned 0x0 [0271.614] GetLastError () returned 0x0 [0271.615] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.615] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsphone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.618] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e522c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.618] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.618] CloseHandle (hObject=0xffffffff) returned 1 [0271.618] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.618] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.619] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.619] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.619] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.620] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.620] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.620] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.620] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.620] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.620] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.620] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.620] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.620] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.620] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.620] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.621] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.621] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0271.621] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsphone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae7d77ba, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdac60aa2, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdac60aa2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0271.622] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae7d77ba, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdac60aa2, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdac60aa2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.622] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1018a7a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1018a7a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x10307fbe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.622] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1018a7a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1018a7a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x10307fbe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.622] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0271.623] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf698066, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbb475bb, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdbb475bb, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.WindowsSoundRecorder_10.1510.12110.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIC5B1~1.0_X")) returned 1 [0271.624] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.624] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.624] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.624] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.624] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0271.625] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.625] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.625] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0271.625] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0271.625] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.625] GetLastError () returned 0x0 [0271.625] GetLastError () returned 0x0 [0271.625] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.626] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.627] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.627] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_10.1510.12110.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowssoundrecorder_10.1510.12110.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.629] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.630] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.630] CloseHandle (hObject=0xffffffff) returned 1 [0271.630] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.630] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.631] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.631] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.631] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.632] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.632] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.632] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.632] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.633] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.633] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.633] CryptDestroyKey (hKey=0x55e610) returned 1 [0271.633] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0271.633] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_10.1510.12110.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowssoundrecorder_10.1510.12110.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf698066, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbb475bb, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdbb475bb, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.634] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf698066, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbb475bb, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdbb475bb, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.634] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80004a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb80004a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xba887c3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.634] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb80004a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb80004a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xba887c3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.634] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.635] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf671e32, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbb6d62e, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdbb6d62e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI87DD~1.0_N")) returned 1 [0271.635] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.635] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.636] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.636] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.636] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0271.637] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.637] CryptHashData (hHash=0x55e710, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.637] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0271.637] CryptDestroyHash (hHash=0x55e710) returned 1 [0271.637] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.637] GetLastError () returned 0x0 [0271.637] GetLastError () returned 0x0 [0271.637] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.638] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowssoundrecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.640] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e5308, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.640] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.640] CloseHandle (hObject=0xffffffff) returned 1 [0271.640] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.640] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.640] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.641] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.641] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.641] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.641] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.641] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.641] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.642] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.642] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.642] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.642] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.642] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.642] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.643] CryptDestroyKey (hKey=0x55e690) returned 1 [0271.643] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0271.643] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowssoundrecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf671e32, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbb6d62e, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdbb6d62e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.644] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf671e32, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdbb6d62e, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdbb6d62e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.644] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb21153, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbb21153, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xbbb9ac6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.644] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb21153, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbb21153, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xbbb9ac6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.644] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.645] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.WindowsStore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI2257~1.SCA")) returned 1 [0271.645] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.645] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.645] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.645] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.646] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.646] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0271.646] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.646] CryptHashData (hHash=0x55e690, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.646] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0271.646] CryptDestroyHash (hHash=0x55e690) returned 1 [0271.646] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.646] GetLastError () returned 0x0 [0271.646] GetLastError () returned 0x0 [0271.646] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.647] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.648] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.648] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsstore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.650] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3604, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.650] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.650] CloseHandle (hObject=0xffffffff) returned 1 [0271.650] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.651] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.651] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.651] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.651] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.652] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.652] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.652] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.652] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.652] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.652] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.652] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.660] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.660] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.660] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.660] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.660] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.661] CryptDestroyKey (hKey=0x55e710) returned 1 [0271.661] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0271.661] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsstore_2015.10.13.0_neutral_split.scale-100_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0271.662] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.662] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c56f72, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c56f72, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c56f72, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.662] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x981c84e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.662] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c30c31, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c30c31, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c30c31, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.662] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c30c31, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c30c31, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c30c31, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.662] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0271.663] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI0D6C~1.0_X")) returned 1 [0271.663] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.663] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.663] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.663] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.663] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.663] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.663] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0271.664] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.664] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.664] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.664] CryptDestroyHash (hHash=0x55e310) returned 1 [0271.664] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.664] GetLastError () returned 0x0 [0271.664] GetLastError () returned 0x0 [0271.664] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.665] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.665] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3614, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.665] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.665] CloseHandle (hObject=0xffffffff) returned 1 [0271.665] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.666] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.666] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.666] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.666] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.666] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.666] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.666] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.667] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.667] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.667] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.667] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.667] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.667] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.667] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.667] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.667] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.667] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.667] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.667] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.667] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.667] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.668] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.668] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.668] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.668] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.668] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.668] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.668] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0271.668] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0271.668] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x981c84e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.669] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7cf3e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c7cf3e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c7cf3e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.669] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x981c84e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x981c84e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x988ee9b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1700, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.669] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7cf3e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c7cf3e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c7cf3e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1c90, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.669] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c7cf3e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8c7cf3e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8c7cf3e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1c90, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.669] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0271.669] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8ca31f1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8ca31f1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI4019~1.0_N")) returned 1 [0271.669] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.669] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.669] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.669] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.669] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.669] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.669] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0271.670] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.670] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.670] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0271.670] CryptDestroyHash (hHash=0x55e790) returned 1 [0271.670] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.670] GetLastError () returned 0x0 [0271.670] GetLastError () returned 0x0 [0271.670] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.671] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.671] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.672] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsstore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.673] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3554, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.673] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.674] CloseHandle (hObject=0xffffffff) returned 1 [0271.674] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.675] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.675] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.675] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.675] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.675] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.676] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.676] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.676] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.676] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.676] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.676] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.676] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.677] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.677] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.677] CryptDestroyKey (hKey=0x55e290) returned 1 [0271.677] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0271.677] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.windowsstore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8ca31f1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8ca31f1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0271.678] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0b9ac11, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8ca31f1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8ca31f1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.678] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca31f1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8ca31f1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8ca31f1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.678] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca31f1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8ca31f1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8ca31f1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.678] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca31f1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8ca31f1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8ca31f1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.678] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0271.679] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb285d174, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdcb5f1cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdcb5f1cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIEF7F~1.0_N")) returned 1 [0271.679] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.679] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.679] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.679] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.679] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.680] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0271.680] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.680] CryptHashData (hHash=0x55e190, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.680] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0271.680] CryptDestroyHash (hHash=0x55e190) returned 1 [0271.680] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.680] GetLastError () returned 0x0 [0271.680] GetLastError () returned 0x0 [0271.681] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.681] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.xboxapp_2015.930.526.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.683] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3564, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.683] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.683] CloseHandle (hObject=0xffffffff) returned 1 [0271.683] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.684] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.684] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.684] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.684] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.684] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.684] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.684] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.685] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.685] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.685] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.685] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.685] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.685] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.685] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.685] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.685] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.685] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.685] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.685] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.685] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.685] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.686] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.686] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.686] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.686] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.686] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.686] CryptDestroyKey (hKey=0x55e710) returned 1 [0271.686] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0271.686] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.xboxapp_2015.930.526.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb285d174, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdcb5f1cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdcb5f1cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0271.687] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb285d174, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdcb5f1cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdcb5f1cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.687] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57246f1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x57246f1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x57246f1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.687] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57246f1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x57246f1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x57246f1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3a4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.687] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0271.688] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb285d174, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdcb5f1cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdcb5f1cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.XboxApp_9.9.30030.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI1F43~1.0_X")) returned 1 [0271.688] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.688] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.689] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.689] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.689] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.689] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570a78) returned 1 [0271.689] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.689] CryptHashData (hHash=0x55e690, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.689] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0271.689] CryptDestroyHash (hHash=0x55e690) returned 1 [0271.690] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.690] GetLastError () returned 0x0 [0271.690] GetLastError () returned 0x0 [0271.690] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.691] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.691] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.691] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_9.9.30030.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.xboxapp_9.9.30030.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.693] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.693] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.693] CloseHandle (hObject=0xffffffff) returned 1 [0271.693] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.694] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.694] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.694] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.694] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.694] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.695] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.695] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.695] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.695] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.695] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.695] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.695] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.695] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.695] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.695] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.696] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.696] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.696] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.696] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.697] CryptDestroyKey (hKey=0x55e610) returned 1 [0271.697] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0271.697] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxApp_9.9.30030.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.xboxapp_9.9.30030.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb285d174, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdcb5f1cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdcb5f1cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0271.698] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb285d174, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdcb5f1cd, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdcb5f1cd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.698] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56fe47d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56fe47d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56fe47d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.698] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56fe47d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56fe47d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56fe47d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.698] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0271.699] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b5f8656, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9b5f8656, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c3d43ac, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI038B~1.0_N")) returned 1 [0271.699] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.699] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.699] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.699] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.699] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0271.700] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.700] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.700] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.700] CryptDestroyHash (hHash=0x55e310) returned 1 [0271.700] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.700] GetLastError () returned 0x0 [0271.700] GetLastError () returned 0x0 [0271.700] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.701] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.703] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e52fc, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.703] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.703] CloseHandle (hObject=0xffffffff) returned 1 [0271.703] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.704] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.704] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.704] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.704] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.704] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.704] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.705] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.705] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.705] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.705] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.706] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.706] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.706] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.706] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.707] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.707] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0271.707] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b5f8656, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9b5f8656, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c3d43ac, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0271.708] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b5f8656, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9b5f8656, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c3d43ac, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.708] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c3d43ac, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c3d43ac, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c3d43ac, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.708] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b61e9a4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9b61e9a4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9b61e9a4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.708] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b61e9a4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9b61e9a4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9b61e9a4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.708] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0271.709] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d00c36f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d00c36f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d7f203e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI4F32~1.0_N")) returned 1 [0271.709] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.709] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.709] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.709] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.709] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.709] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.709] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5706c0) returned 1 [0271.710] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.710] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.710] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0271.710] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.710] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.710] GetLastError () returned 0x0 [0271.710] GetLastError () returned 0x0 [0271.710] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.711] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.711] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.712] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.714] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e35f8, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.714] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.714] CloseHandle (hObject=0xffffffff) returned 1 [0271.714] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.715] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.715] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.716] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.716] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.716] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.716] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.716] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.716] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.717] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.717] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.717] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.717] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.717] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.717] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.717] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.717] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.717] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.718] CryptDestroyKey (hKey=0x55e210) returned 1 [0271.718] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0271.718] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d00c36f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d00c36f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d7f203e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0271.719] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d00c36f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d00c36f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d7f203e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.719] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d7f203e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d7f203e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d818195, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.719] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d032385, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d032385, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d032385, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.719] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d032385, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d032385, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d032385, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.719] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0271.720] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb4781bbb, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xddc35d40, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xddc35d40, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI85B7~1.0_N")) returned 1 [0271.720] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.720] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.721] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.721] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.721] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0271.722] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.722] CryptHashData (hHash=0x55e690, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.722] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0271.722] CryptDestroyHash (hHash=0x55e690) returned 1 [0271.722] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.722] GetLastError () returned 0x0 [0271.722] GetLastError () returned 0x0 [0271.722] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.722] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.zunemusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.726] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3608, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.726] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.726] CloseHandle (hObject=0xffffffff) returned 1 [0271.726] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.727] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.727] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.728] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.728] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.728] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.728] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.728] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.729] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.729] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.729] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.730] CryptDestroyKey (hKey=0x55e390) returned 1 [0271.730] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0271.730] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.zunemusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb4781bbb, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xddc35d40, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xddc35d40, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0271.731] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb4781bbb, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xddc35d40, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xddc35d40, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.731] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffdc2f52, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xffdc2f52, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xffdc2f52, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.731] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffdc2f52, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xffdc2f52, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xffdc2f52, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.731] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0271.732] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb47a7f7b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xddc35d40, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xddc35d40, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.ZuneMusic_3.6.13251.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIF2F7~1.0_X")) returned 1 [0271.732] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.732] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.732] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.732] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.733] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0271.733] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.733] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.733] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0271.733] CryptDestroyHash (hHash=0x55e190) returned 1 [0271.734] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.734] GetLastError () returned 0x0 [0271.734] GetLastError () returned 0x0 [0271.734] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.735] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.735] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.736] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_3.6.13251.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.zunemusic_3.6.13251.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.738] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3564, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.738] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.738] CloseHandle (hObject=0xffffffff) returned 1 [0271.738] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.739] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.740] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.740] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.740] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.741] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.741] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.741] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.741] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.741] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.741] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.742] CryptDestroyKey (hKey=0x55e710) returned 1 [0271.742] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0271.742] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneMusic_3.6.13251.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.zunemusic_3.6.13251.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb47a7f7b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xddc35d40, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xddc35d40, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.743] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb47a7f7b, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xddc35d40, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xddc35d40, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.743] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd9cad6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xffd9cad6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xffd9cad6, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.743] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffd9cad6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xffd9cad6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xffd9cad6, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.743] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.744] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5e4e4f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdedf14a6, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdedf14a6, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI1C14~1.0_N")) returned 1 [0271.744] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.744] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.744] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.744] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.744] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0271.745] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.745] CryptHashData (hHash=0x55e710, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.745] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0271.745] CryptDestroyHash (hHash=0x55e710) returned 1 [0271.745] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.745] GetLastError () returned 0x0 [0271.745] GetLastError () returned 0x0 [0271.745] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.745] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.zunevideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.747] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3574, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.747] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.747] CloseHandle (hObject=0xffffffff) returned 1 [0271.747] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.748] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.748] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.749] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.749] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.749] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.749] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.749] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.749] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.750] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.750] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.750] CryptDestroyKey (hKey=0x55e610) returned 1 [0271.750] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0271.750] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.zunevideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5e4e4f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdedf14a6, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdedf14a6, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0271.751] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5e4e4f0, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdedf14a6, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdedf14a6, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.751] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb3017e0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb3017e0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfb39a070, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.751] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb3017e0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb3017e0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfb39a070, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.751] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0271.752] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5e74740, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdedf14a6, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdedf14a6, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Microsoft.ZuneVideo_3.6.13251.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI82C6~1.0_X")) returned 1 [0271.752] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.752] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.752] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.752] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.752] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.753] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0271.753] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.753] CryptHashData (hHash=0x55e310, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.753] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.753] CryptDestroyHash (hHash=0x55e310) returned 1 [0271.753] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.753] GetLastError () returned 0x0 [0271.753] GetLastError () returned 0x0 [0271.753] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.754] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.755] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.755] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_3.6.13251.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.zunevideo_3.6.13251.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.757] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3554, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.757] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.757] CloseHandle (hObject=0xffffffff) returned 1 [0271.757] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.758] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.758] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.758] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.758] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.759] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.759] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.759] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.759] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.759] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.759] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.760] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.760] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0271.760] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Microsoft.ZuneVideo_3.6.13251.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\microsoft.zunevideo_3.6.13251.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5e74740, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdedf14a6, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdedf14a6, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0271.761] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5e74740, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0xdedf14a6, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xdedf14a6, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.761] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb1d04bd, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb1d04bd, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfb268ca8, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 1 [0271.761] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb1d04bd, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb1d04bd, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfb268ca8, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-18.recovery", cAlternateFileName="S-1-5-~2.REC")) returned 0 [0271.761] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0271.762] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e2d2af2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e2d2af2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9ea6c343, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65722e38, dwReserved1=0x65766f63, cFileName="Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~2.0_N")) returned 1 [0271.762] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.762] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.762] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.762] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.762] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0271.763] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.763] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.763] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0271.763] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.763] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.763] GetLastError () returned 0x0 [0271.763] GetLastError () returned 0x0 [0271.763] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.763] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.765] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3564, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.765] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.765] CloseHandle (hObject=0xffffffff) returned 1 [0271.765] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.766] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.766] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.766] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.767] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.767] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.767] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.767] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.768] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.768] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.769] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.769] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.769] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.769] CryptDestroyKey (hKey=0x55e750) returned 1 [0271.769] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0271.769] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e2d2af2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e2d2af2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9ea6c343, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0271.770] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e2d2af2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e2d2af2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9ea6c343, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.770] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ea6c343, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9ea6c343, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9ea6c343, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x754, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.770] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e2d2af2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e2d2af2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e2d2af2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.770] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e2d2af2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e2d2af2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e2d2af2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.770] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0271.771] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9557058c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc39904b1, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc39904b1, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="windows.devicesflow_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WI65B6~1.0_N")) returned 1 [0271.771] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.771] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.771] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.771] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.772] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570a78) returned 1 [0271.772] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.772] CryptHashData (hHash=0x55e750, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.772] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.772] CryptDestroyHash (hHash=0x55e750) returned 1 [0271.772] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.772] GetLastError () returned 0x0 [0271.772] GetLastError () returned 0x0 [0271.772] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.773] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.774] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.775] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\windows.devicesflow_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\windows.devicesflow_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.777] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.778] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.778] CloseHandle (hObject=0xffffffff) returned 1 [0271.778] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.779] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.779] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.779] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.779] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.780] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.780] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.780] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.781] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.781] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.781] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.781] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.782] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.782] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.782] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0271.782] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\windows.devicesflow_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\windows.devicesflow_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9557058c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc39904b1, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc39904b1, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.783] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9557058c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xc39904b1, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc39904b1, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.783] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bf370b9, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xc39904b1, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc39904b1, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x798, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.783] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1afb7df5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1afb7df5, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc0247b4c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.783] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1afb7df5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1afb7df5, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc0247b4c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.783] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.784] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5eeea3fc, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ef107aa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ef107aa, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 1 [0271.784] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.784] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.784] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.784] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.784] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.785] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.785] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0271.785] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.785] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.785] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0271.785] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.785] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.785] GetLastError () returned 0x0 [0271.785] GetLastError () returned 0x0 [0271.785] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.786] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.786] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e52f8, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.786] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.786] CloseHandle (hObject=0xffffffff) returned 1 [0271.786] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.787] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.787] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.787] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.788] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.788] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.788] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.788] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.788] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.788] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.788] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.788] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.788] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.788] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.789] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.789] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.789] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.789] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.789] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.790] CryptDestroyKey (hKey=0x55e190) returned 1 [0271.790] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0271.790] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5eeea3fc, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5f01b7c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5f01b7c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0271.790] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5eeea3fc, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5f01b7c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5f01b7c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.790] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f01b7c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5f01b7c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5f01b7c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x814, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.790] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ef107aa, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ef107aa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ef107aa, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.790] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ef107aa, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ef107aa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ef107aa, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.790] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0271.790] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f657f27, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f657f27, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f92cac5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Windows.MiracastView_6.3.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~3.0_N")) returned 1 [0271.790] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.790] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.790] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.790] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.791] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.791] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0271.791] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.791] CryptHashData (hHash=0x55e690, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.791] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0271.791] CryptDestroyHash (hHash=0x55e690) returned 1 [0271.791] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.791] GetLastError () returned 0x0 [0271.791] GetLastError () returned 0x0 [0271.791] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.793] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.793] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.794] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Windows.MiracastView_6.3.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\windows.miracastview_6.3.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.796] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.796] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.796] CloseHandle (hObject=0xffffffff) returned 1 [0271.796] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.797] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.797] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.797] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.797] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0271.797] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.797] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.798] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.798] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.798] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.798] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.798] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.799] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.799] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.799] CryptDestroyKey (hKey=0x55e610) returned 1 [0271.799] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0271.799] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Windows.MiracastView_6.3.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\windows.miracastview_6.3.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f657f27, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f657f27, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f92cac5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.800] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f657f27, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f657f27, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f92cac5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.800] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f92cac5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f92cac5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f92cac5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.801] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f6a4361, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f6a4361, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f6a4361, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x3f0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.801] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f6a4361, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f6a4361, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f6a4361, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x3f0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.801] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.802] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0374dfc, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa0374dfc, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa091e53d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~4.0_N")) returned 1 [0271.802] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.802] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.802] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.802] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0271.802] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5706c0) returned 1 [0271.803] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.803] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.803] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0271.803] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.803] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.803] GetLastError () returned 0x0 [0271.803] GetLastError () returned 0x0 [0271.803] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.804] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\windows.printdialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.806] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e523c, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.806] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.806] CloseHandle (hObject=0xffffffff) returned 1 [0271.806] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.807] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.807] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.807] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.807] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.807] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.807] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0271.807] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.807] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.808] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.808] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.808] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.808] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.808] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.809] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.809] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.809] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.809] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.809] CryptDestroyKey (hKey=0x55e690) returned 1 [0271.809] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0271.809] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\windows.printdialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0374dfc, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa0374dfc, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa091e53d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0271.810] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0374dfc, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa0374dfc, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa091e53d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.810] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa091e53d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa091e53d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa094495c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x6cc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.810] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa039b1b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa039b1b2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa039b1b2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.810] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa039b1b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa039b1b2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa039b1b2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x3e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.810] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0271.811] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaaed1dd9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaaed1dd9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabf10128, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WI684D~1.0_N")) returned 1 [0271.811] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.811] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.811] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.811] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0271.811] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0271.812] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.812] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.812] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0271.812] CryptDestroyHash (hHash=0x55e190) returned 1 [0271.812] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.812] GetLastError () returned 0x0 [0271.812] GetLastError () returned 0x0 [0271.812] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.813] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.814] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.814] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.816] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0) returned 0 [0271.816] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.816] CloseHandle (hObject=0xffffffff) returned 1 [0271.816] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.818] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.818] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.818] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.818] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.819] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.819] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.819] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.819] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.819] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.819] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.820] CryptDestroyKey (hKey=0x55e290) returned 1 [0271.820] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0271.820] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\AppRepository\\Packages\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\apprepository\\packages\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaaed1dd9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaaed1dd9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabf10128, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.821] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaaed1dd9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaaed1dd9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabf10128, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.821] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabee9cca, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabee9cca, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabf35f13, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.pckgdep", cAlternateFileName="S-1-5-~1.PCK")) returned 1 [0271.821] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaef80a4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaaef80a4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaaef80a4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 1 [0271.821] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaef80a4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaaef80a4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xaaef80a4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000.recovery", cAlternateFileName="S-1-5-~1.REC")) returned 0 [0271.821] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.822] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaaed1dd9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaaed1dd9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabf10128, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d31, dwReserved1=0x35323036, cFileName="Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WI684D~1.0_N")) returned 0 [0271.822] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0271.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9095d885, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9095d885, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xdf40d4e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="StateRepository-Deployment.srd", cAlternateFileName="STATER~3.SRD")) returned 1 [0271.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a4277d, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x90a4277d, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xcd95ec2, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="StateRepository-Deployment.srd-shm", cAlternateFileName="STBA66~1.SRD")) returned 1 [0271.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9095d885, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x9095d885, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xdf40d4e0, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="StateRepository-Deployment.srd-wal", cAlternateFileName="STATER~4.SRD")) returned 1 [0271.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90852845, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x90852845, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xe3612180, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x220000, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="StateRepository-Machine.srd", cAlternateFileName="STATER~1.SRD")) returned 1 [0271.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a689d7, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x90a689d7, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xcdbc1f0, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="StateRepository-Machine.srd-shm", cAlternateFileName="STEA79~1.SRD")) returned 1 [0271.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908789ed, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x908789ed, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xe36383b3, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="StateRepository-Machine.srd-wal", cAlternateFileName="STATER~2.SRD")) returned 1 [0271.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cb47790, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9cb47790, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9cb47790, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0xe09, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="WINDOW~2.XML")) returned 1 [0271.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f79dcc, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x19f79dcc, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x19f79dcc, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5c8, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="windows.devicesflow_6.2.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="WI5116~1.XML")) returned 1 [0271.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59ccf456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x59ccf456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x59ccf456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x51e, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="WINDOW~1.XML")) returned 1 [0271.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e04a3c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e04a3c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e04a3c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x50b, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="Windows.MiracastView_6.3.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="WINDOW~3.XML")) returned 1 [0271.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f4680b3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f4680b3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f48e207, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x610, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="WINDOW~4.XML")) returned 1 [0271.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0138a9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa0138a9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa0138a9c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x7d7, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="WI3FE6~1.XML")) returned 1 [0271.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0138a9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa0138a9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa0138a9c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x7d7, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="WI3FE6~1.XML")) returned 0 [0271.823] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0271.823] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac05299e, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xac05299e, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x3bc1d624, ftLastWriteTime.dwHighDateTime=0x1d112f3, nFileSizeHigh=0x0, nFileSizeLow=0x3c52, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="AppxProvisioning.xml", cAlternateFileName="APPXPR~1.XML")) returned 1 [0271.823] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676ae9ec, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x2149833b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2149833b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="Caches", cAlternateFileName="")) returned 1 [0271.823] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.823] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.823] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.823] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0271.823] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570b88) returned 1 [0271.824] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0271.824] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.824] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e910) returned 1 [0271.824] CryptDestroyHash (hHash=0x55e290) returned 1 [0271.824] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0271.824] GetLastError () returned 0x0 [0271.824] GetLastError () returned 0x0 [0271.824] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.825] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0271.826] WriteFile (in: hFile=0x244, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.827] SetEndOfFile (hFile=0x244) returned 1 [0271.827] CloseHandle (hObject=0x244) returned 1 [0271.827] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.828] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.828] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0271.829] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.829] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.829] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.829] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.829] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.830] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.830] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.830] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.831] CryptDestroyKey (hKey=0x55e910) returned 1 [0271.831] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0271.832] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676ae9ec, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x2149833b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45f069fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x676ae9ec, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x2149833b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45f069fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x204c3d3f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x204c3d3f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x204db59c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cversions.0.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CVERSI~1.CRY")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678c4cc7, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x678c4cc7, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x678c4cc7, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cversions.2.db", cAlternateFileName="CVERSI~1.DB")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x204db59c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x204db59c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2050191d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cversions.2.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CVERSI~2.CRY")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f069fd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45f069fd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45f069fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2052799f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2052799f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2052799f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{0FA68~1.CRY")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cdd063c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x4cdd063c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x4cdd19ea, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{28C2908A-A261-4BE8-AAA2-4843375011C5}.2.ver0x0000000000000001.db", cAlternateFileName="{28C29~1.DB")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2054dd45, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2054dd45, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2054dd45, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{28C2908A-A261-4BE8-AAA2-4843375011C5}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{28C29~1.CRY")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd356933c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd356933c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd356933c, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{376D4583-7D39-4B0C-A26B-8169803AD7C6}.2.ver0x0000000000000002.db", cAlternateFileName="{376D4~2.DB")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2054dd45, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2054dd45, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x20573e99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{376D4583-7D39-4B0C-A26B-8169803AD7C6}.2.ver0x0000000000000002.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{376D4~1.CRY")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20573e99, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x20573e99, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2059a04c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{3EC13~1.CRY")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2059a04c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2059a04c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x205c02a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{5C9E1~1.CRY")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x205f1898, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x205f1898, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x20decab7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x44268, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000009.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{6AF06~1.CRY")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd356933c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xd356933c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xd356933c, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x447d0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db", cAlternateFileName="{6AF06~4.DB")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20decab7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x20decab7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x20eab8dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x447d0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{6AF06~2.CRY")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678eae1f, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x678eae1f, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x678eae1f, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x8dfa0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db", cAlternateFileName="{DDF57~1.DB")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20ed1bcf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x20ed1bcf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21474a49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x8dfa0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{DDF57~1.CRY")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2148bfc7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2148bfc7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2149833b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{E23B5~1.CRY")) returned 1 [0271.832] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2148bfc7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2148bfc7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2149833b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{E23B5~1.CRY")) returned 0 [0271.833] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0271.833] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x452d3441, dwReserved1=0x2d394133, cFileName="Cem", cAlternateFileName="")) returned 1 [0271.833] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.833] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.833] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.833] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.833] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.833] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0271.833] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570fc8) returned 1 [0271.834] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0271.834] CryptHashData (hHash=0x55e690, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.834] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e210) returned 1 [0271.834] CryptDestroyHash (hHash=0x55e690) returned 1 [0271.834] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0271.834] GetLastError () returned 0x0 [0271.834] GetLastError () returned 0x0 [0271.834] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.835] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.836] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.836] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Cem\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\cem\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0271.836] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3514, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0) returned 0 [0271.836] SetEndOfFile (hFile=0xffffffff) returned 0 [0271.836] CloseHandle (hObject=0xffffffff) returned 1 [0271.836] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.838] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.838] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0271.838] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.839] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.839] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.839] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.839] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.839] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.839] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.839] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.839] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.839] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.840] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.840] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.840] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.840] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.840] CryptDestroyKey (hKey=0x55e210) returned 1 [0271.840] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0271.840] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Cem\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\cem\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0271.841] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.841] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0271.841] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0271.841] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2164ba09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2164ba09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="ClipSVC", cAlternateFileName="")) returned 1 [0271.841] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.841] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.841] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.841] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.841] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570b00) returned 1 [0271.842] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0271.842] CryptHashData (hHash=0x55e5d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.842] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0271.842] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0271.842] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0271.842] GetLastError () returned 0x0 [0271.842] GetLastError () returned 0x0 [0271.842] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.843] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0271.844] WriteFile (in: hFile=0x244, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.845] SetEndOfFile (hFile=0x244) returned 1 [0271.845] CloseHandle (hObject=0x244) returned 1 [0271.845] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.846] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.846] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.847] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.847] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.847] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.847] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.848] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.848] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.848] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.848] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.848] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.849] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.849] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.849] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.849] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.849] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.849] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.849] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.850] CryptDestroyKey (hKey=0x55e610) returned 1 [0271.850] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0271.850] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2164ba09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45f2cc63, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0271.850] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2164ba09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45f2cc63, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.851] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd769d3c8, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd769d3c8, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Archive", cAlternateFileName="")) returned 1 [0271.851] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.851] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.851] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.851] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0271.851] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570638) returned 1 [0271.852] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0271.852] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.852] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e310) returned 1 [0271.852] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0271.852] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18) returned 1 [0271.852] GetLastError () returned 0x0 [0271.852] GetLastError () returned 0x0 [0271.852] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.853] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.854] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.854] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Archive\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\archive\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0271.855] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.856] SetEndOfFile (hFile=0x248) returned 1 [0271.857] CloseHandle (hObject=0x248) returned 1 [0271.857] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.857] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.857] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.858] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.858] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.858] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.858] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0271.858] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.858] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.858] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.858] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.858] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.858] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.858] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.859] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.859] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.859] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.859] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.859] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.859] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.859] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.859] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.859] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.860] CryptDestroyKey (hKey=0x55e310) returned 1 [0271.860] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0271.860] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Archive\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\archive\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd769d3c8, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x45f52f4c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0271.860] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd769d3c8, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x45f52f4c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.860] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd769d3c8, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x1dd88ec8, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x1dd88ec8, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1 [0271.860] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.860] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.860] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.860] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0271.861] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5707d0) returned 1 [0271.861] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.861] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.861] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0271.861] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.861] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.861] GetLastError () returned 0x0 [0271.861] GetLastError () returned 0x0 [0271.861] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.862] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\archive\\apps\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0271.865] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.866] SetEndOfFile (hFile=0x24c) returned 1 [0271.866] CloseHandle (hObject=0x24c) returned 1 [0271.866] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.867] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.867] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.867] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.867] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0271.868] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.868] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.868] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.868] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.868] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.869] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.869] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.869] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.869] CryptDestroyKey (hKey=0x55e910) returned 1 [0271.869] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0271.870] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\archive\\apps\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd769d3c8, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x1dd88ec8, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x45f790b1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0271.870] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd769d3c8, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x1dd88ec8, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x45f790b1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.870] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3f6cc, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6f3f6cc, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6f3f6cc, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xbaa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="02305155-8ac1-1189-ff55-b7119a53887c.xml", cAlternateFileName="023051~1.XML")) returned 1 [0271.870] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd847909d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd847909d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe2377c05, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xaea, dwReserved0=0x405534, dwReserved1=0x0, cFileName="08961e67-fd90-a888-a0c1-ffdc19a3386f.xml", cAlternateFileName="08961E~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488111e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x488111e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x488111e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xbac, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0938f89a-6057-8194-1885-cd0129657e59.xml", cAlternateFileName="0938F8~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda07c955, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xda07c955, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe38c6bf6, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa46, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0a8c1492-65ca-6a01-de25-0e183559d10d.xml", cAlternateFileName="0A8C14~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd78b36fd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd78b36fd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe48dea83, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xad9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0cb4ef12-226b-0a51-6930-2dbfb63f3e7d.xml", cAlternateFileName="0CB4EF~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd12581b, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfd12581b, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfd197f35, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xba8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="13ba8772-845b-29a1-ae9e-fb2793ccf4ea.xml", cAlternateFileName="13BA87~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd99c8164, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd99c8164, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe56e08b6, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa4b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1e225998-faa0-5fd4-4db7-5e7686ee3b47.xml", cAlternateFileName="1E2259~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd92086d9, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd92086d9, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe679104a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="215f9712-9fca-a3f8-5b11-660eefc73b96.xml", cAlternateFileName="215F97~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5694346, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe5694346, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe5694346, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbac, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2657f7c0-8294-58c3-f394-15fe18ba174a.xml", cAlternateFileName="2657F7~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3e205, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3b3e205, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3b3e205, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xbae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="26c4a16e-17b6-f099-36a5-15dce3ab25ce.xml", cAlternateFileName="26C4A1~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8ec13ae, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd8ec13ae, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe769de90, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xac3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="28748306-9f02-a5d7-6ded-4459fddadc31.xml", cAlternateFileName="287483~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd769d3c8, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd769d3c8, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe849fa3b, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xace, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2a3adcd0-4ddc-f3d2-6bcb-f11f9cbc1e2c.xml", cAlternateFileName="2A3ADC~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd836e068, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd836e068, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xec11f4e1, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa45, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2cb4947b-9a24-70fc-387f-98cfa7cd7461.xml", cAlternateFileName="2CB494~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf96e6be6, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf96e6be6, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf9864309, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbaf, dwReserved0=0x405534, dwReserved1=0x0, cFileName="336104cb-5aed-87bc-3de4-450944c51591.xml", cAlternateFileName="336104~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa89d764, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfa89d764, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfa89d764, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbb2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="39df664f-5262-2b7a-364c-fb7387c64d94.xml", cAlternateFileName="39DF66~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec03a6dc, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xec03a6dc, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xec03a6dc, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbab, dwReserved0=0x405534, dwReserved1=0x0, cFileName="3d4098b6-679e-0d7e-f478-ee96ebcb42ff.xml", cAlternateFileName="3D4098~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7f1ba75, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd7f1ba75, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xed40bea9, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa47, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4ad5b311-485b-15cc-97e9-9adb84427d7b.xml", cAlternateFileName="4AD5B3~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7cdf85e, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd7cdf85e, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xee3b1718, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5390be10-79b5-dc50-bb32-91842c76e607.xml", cAlternateFileName="5390BE~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef24bbde, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xef24bbde, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xef24bbde, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbac, dwReserved0=0x405534, dwReserved1=0x0, cFileName="54a30ac2-1ccf-60a8-6672-380af6008f3d.xml", cAlternateFileName="54A30A~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7aa3498, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd7aa3498, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xef271f8f, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="59e31519-5400-7696-2a00-b5fca5ba8904.xml", cAlternateFileName="59E315~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd87016ef, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd87016ef, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xa05f4723, ftLastWriteTime.dwHighDateTime=0x1d75217, nFileSizeHigh=0x0, nFileSizeLow=0xa46, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5b0a39aa-16e0-a938-f694-656664c7be15.xml", cAlternateFileName="5B0A39~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe48b88b5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe48b88b5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe48b88b5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5f3c8956-0358-1f87-eb47-697e265d6aa9.xml", cAlternateFileName="5F3C89~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f6807f4, ftCreationTime.dwHighDateTime=0x1d75217, ftLastAccessTime.dwLowDateTime=0x9f6807f4, ftLastAccessTime.dwHighDateTime=0x1d75217, ftLastWriteTime.dwLowDateTime=0xa05ce57d, ftLastWriteTime.dwHighDateTime=0x1d75217, nFileSizeHigh=0x0, nFileSizeLow=0xbaa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="600364a7-e11c-efda-2c12-eac40e75f19a.xml", cAlternateFileName="600364~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b7f58e, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf3b7f58e, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf3b7f58e, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="61b5bd89-4cb0-db77-6622-cb63b5a58080.xml", cAlternateFileName="61B5BD~1.XML")) returned 1 [0271.871] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf07c0fab, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf07c0fab, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf07c0fab, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbaa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="666f6a0d-4805-a98c-a8ca-0e10bee9110d.xml", cAlternateFileName="666F6A~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9385d1b, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd9385d1b, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf3cd69cc, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa52, dwReserved0=0x405534, dwReserved1=0x0, cFileName="67447b0c-05cf-6740-5f7b-391ab440c42d.xml", cAlternateFileName="67447B~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd984a9a6, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd984a9a6, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf5f1c6ed, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa7e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="71c8f37a-a7b9-aff0-6de0-9b276c089ad6.xml", cAlternateFileName="71C8F3~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8584088, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd8584088, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8610365, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xacf, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7309084a-bb6f-20c3-ea54-aa108ceab1ae.xml", cAlternateFileName="730908~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e5bb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x85e5bb2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8631f37, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xbac, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7646fa0f-b52c-71a8-3aed-950dd1668c09.xml", cAlternateFileName="7646FA~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb4fbb1c, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfb4fbb1c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfb4fbb1c, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbbd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7bbd8142-b10d-d230-1531-689c7f7ee77b.xml", cAlternateFileName="7BBD81~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8b79f8a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd8b79f8a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf99e1ac4, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xadf, dwReserved0=0x405534, dwReserved1=0x0, cFileName="8ce3d3dd-a4c7-6c38-5fde-1f9f5df98807.xml", cAlternateFileName="8CE3D3~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8858e15, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd8858e15, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfa89d764, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xaed, dwReserved0=0x405534, dwReserved1=0x0, cFileName="8e383e90-b2f9-7bf2-1d5b-4e47dcb2014e.xml", cAlternateFileName="8E383E~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd89d6472, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd89d6472, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfb521d5c, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xb11, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9d3ad23c-c6b8-7fb5-e4ab-f5d0a66dcfbc.xml", cAlternateFileName="9D3AD2~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe7a5aaa, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfe7a5aaa, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfe88a7a7, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbad, dwReserved0=0x405534, dwReserved1=0x0, cFileName="a2ddb8ff-965c-50c4-b641-7a276574f02d.xml", cAlternateFileName="A2DDB8~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd88ec8, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x1dd88ec8, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x1dd88ec8, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0xbaf, dwReserved0=0x405534, dwReserved1=0x0, cFileName="a3d566c4-2f7d-1e92-fe89-b9b792ff9a68.xml", cAlternateFileName="A3D566~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5deb3e4, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf5deb3e4, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf5deb3e4, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbba, dwReserved0=0x405534, dwReserved1=0x0, cFileName="a7e08b8b-ad4b-af00-ebcc-1aa29a833ce9.xml", cAlternateFileName="A7E08B~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee38b4f1, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xee38b4f1, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xee38b4f1, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xba8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="aa4e72b1-ad78-3f2c-e8ff-4733b8cdd4ac.xml", cAlternateFileName="AA4E72~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9c2a67b, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd9c2a67b, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfc133bf7, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xaf5, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ac116a72-b6b1-d558-23f6-10796e634d41.xml", cAlternateFileName="AC116A~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9e66920, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd9e66920, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfd20a4d2, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xa3b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="b34b197c-c0ed-bf12-c9bb-44e883c66a9d.xml", cAlternateFileName="B34B19~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe765169a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe765169a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe765169a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xba7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="b86da26a-5ea0-b0b3-a958-dbd73e1b34c3.xml", cAlternateFileName="B86DA2~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf85777ea, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf85777ea, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf85777ea, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbab, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ba2654d8-ef2f-4ec9-0f9b-fab2b324fd98.xml", cAlternateFileName="BA2654~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ad316d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd9ad316d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xff1edc8e, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xad9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="babc0ea4-dabb-04f7-1017-a11af9b29344.xml", cAlternateFileName="BABC0E~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd903ea6b, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd903ea6b, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x10ec6dd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xa41, dwReserved0=0x405534, dwReserved1=0x0, cFileName="bbfbe8ad-1a35-a7f3-33bc-40912bf89dfb.xml", cAlternateFileName="BBFBE8~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd954fa9c, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd954fa9c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x2bbec34, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xa60, dwReserved0=0x405534, dwReserved1=0x0, cFileName="bcda97bb-bfd0-2a72-3c90-c8518f3d09ee.xml", cAlternateFileName="BCDA97~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc133bf7, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xfc133bf7, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xfc133bf7, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbb5, dwReserved0=0x405534, dwReserved1=0x0, cFileName="bdcba974-7e66-f9d7-2600-1b864478cfcf.xml", cAlternateFileName="BDCBA9~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x285167d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x285167d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x28ea187, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xbb2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="c94a6c18-d496-da1c-8a02-fc6976e0145e.xml", cAlternateFileName="C94A6C~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57da5d7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x57da5d7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x584cc95, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xbac, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ce2b93c3-33d8-d88b-3c8a-9835916d800f.xml", cAlternateFileName="CE2B93~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe679104a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe679104a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe679104a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbad, dwReserved0=0x405534, dwReserved1=0x0, cFileName="d0102409-be7d-cccd-2977-b1525deaa1f1.xml", cAlternateFileName="D01024~1.XML")) returned 1 [0271.872] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5922b77b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5922b77b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x690c075, ftLastWriteTime.dwHighDateTime=0x1d7b056, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="d5b6d6fc-46c4-0efe-2970-ff3d0687c8ec.xml", cAlternateFileName="D5B6D6~1.XML")) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3e5c27, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xed3e5c27, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xed3e5c27, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbab, dwReserved0=0x405534, dwReserved1=0x0, cFileName="dc5bc54e-ee99-04c5-63a5-669bf0666354.xml", cAlternateFileName="DC5BC5~1.XML")) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7014f3e7, ftCreationTime.dwHighDateTime=0x1d7b059, ftLastAccessTime.dwLowDateTime=0x7014f3e7, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x7015073f, ftLastWriteTime.dwHighDateTime=0x1d7b059, nFileSizeHigh=0x0, nFileSizeLow=0xbaf, dwReserved0=0x405534, dwReserved1=0x0, cFileName="dd89cceb-d405-0dcd-251d-4881a2a0c461.xml", cAlternateFileName="DD89CC~1.XML")) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd96cd24e, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd96cd24e, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3b643d6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xad8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="e2a686b1-b02a-b3e7-90cb-3fa0d708ce04.xml", cAlternateFileName="E2A686~1.XML")) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe387a96f, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe387a96f, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe387a96f, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbaa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="e335baf1-18ab-73fe-e089-3fa0a6e71a35.xml", cAlternateFileName="E335BA~1.XML")) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8d43bbc, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd8d43bbc, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x48cd751, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xad4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="e603fcd0-9cde-3f41-875c-5cc396d927ce.xml", cAlternateFileName="E603FC~1.XML")) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9ce9146, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd9ce9146, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x5a62e11, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xad7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="e64ffef1-e246-b632-595b-56076a3fa776.xml", cAlternateFileName="E64FFE~1.XML")) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10c634f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x10c634f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x10c634f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ecbc2601-0a67-4963-e594-43c65d6ec9a5.xml", cAlternateFileName="ECBC26~1.XML")) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9fe40be, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd9fe40be, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x70244d7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xa46, dwReserved0=0x405534, dwReserved1=0x0, cFileName="eee47229-947d-2ac7-e8a3-49bafee251d1.xml", cAlternateFileName="EEE472~1.XML")) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe224692f, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe224692f, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe224692f, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xbb2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="f008957b-e94f-9f17-be2e-851d4264d7ba.xml", cAlternateFileName="F00895~1.XML")) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84533ea, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe84533ea, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe84533ea, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="f0e645a9-3fa2-f8bf-e437-5c63b531b2ba.xml", cAlternateFileName="F0E645~1.XML")) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd81ca5e1, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd81ca5e1, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x8821f5f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="fc93b452-8a84-dede-3b7a-0fc9413c4592.xml", cAlternateFileName="FC93B4~1.XML")) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f790b1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45f790b1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45f790b1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f790b1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45f790b1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45f790b1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0271.873] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f52f4c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45f52f4c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45f52f4c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f52f4c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45f52f4c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45f52f4c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0271.873] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0271.873] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="GenuineTicket", cAlternateFileName="GENUIN~1")) returned 1 [0271.874] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.874] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.874] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.874] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.874] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570a78) returned 1 [0271.875] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0271.875] CryptHashData (hHash=0x55e910, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.875] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e790) returned 1 [0271.875] CryptDestroyHash (hHash=0x55e910) returned 1 [0271.875] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0271.875] GetLastError () returned 0x0 [0271.875] GetLastError () returned 0x0 [0271.875] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.876] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.876] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.877] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\GenuineTicket\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\genuineticket\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0271.878] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.879] SetEndOfFile (hFile=0x248) returned 1 [0271.879] CloseHandle (hObject=0x248) returned 1 [0271.879] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.880] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.880] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.880] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.880] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.880] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.880] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.880] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.881] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.881] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.881] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.881] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.881] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.882] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.882] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.882] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.882] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.882] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.882] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.882] CryptDestroyKey (hKey=0x55e790) returned 1 [0271.882] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0271.882] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\GenuineTicket\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\genuineticket\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x45f9f326, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0271.882] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x45f9f326, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.883] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f790b1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45f790b1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45f9f326, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.883] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f790b1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45f790b1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45f9f326, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0271.883] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0271.883] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f2cc63, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45f2cc63, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45f2cc63, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.883] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Import", cAlternateFileName="")) returned 1 [0271.883] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.883] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.883] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.883] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.883] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.883] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0271.883] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571408) returned 1 [0271.884] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0271.884] CryptHashData (hHash=0x55e910, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.884] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0271.884] CryptDestroyHash (hHash=0x55e910) returned 1 [0271.884] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18) returned 1 [0271.884] GetLastError () returned 0x0 [0271.884] GetLastError () returned 0x0 [0271.884] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.885] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Import\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\import\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0271.885] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.886] SetEndOfFile (hFile=0x248) returned 1 [0271.886] CloseHandle (hObject=0x248) returned 1 [0271.887] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.887] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.887] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.888] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0271.888] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.888] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.888] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.888] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.888] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.888] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.888] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.889] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.889] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.889] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.889] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.889] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.890] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0271.890] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0271.890] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Import\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\import\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x45f9f326, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0271.890] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x45f9f326, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.890] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f9f326, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45f9f326, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45f9f326, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.890] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45f9f326, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45f9f326, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45f9f326, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0271.890] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0271.890] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd6d6028c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd6d6028c, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Install", cAlternateFileName="")) returned 1 [0271.890] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.890] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.891] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.891] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0271.891] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571050) returned 1 [0271.891] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0271.891] CryptHashData (hHash=0x55e7d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.891] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0271.891] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0271.891] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f190*=0x18) returned 1 [0271.892] GetLastError () returned 0x0 [0271.892] GetLastError () returned 0x0 [0271.892] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.892] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.895] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.896] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Install\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\install\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0271.897] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.898] SetEndOfFile (hFile=0x248) returned 1 [0271.898] CloseHandle (hObject=0x248) returned 1 [0271.898] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.899] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.899] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.900] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0271.900] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.900] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.900] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.900] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.900] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.900] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.900] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.900] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.900] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.901] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.901] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.901] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.901] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.901] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.901] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.901] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.901] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0271.902] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0271.902] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Install\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\install\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd6d6028c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x45fc561d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0271.902] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd6d6028c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x45fc561d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.902] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9d016c5, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xda07c955, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xda07c955, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1 [0271.902] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.902] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.902] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.902] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.902] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.902] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.902] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5708e0) returned 1 [0271.903] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.903] CryptHashData (hHash=0x55e750, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.903] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0271.903] CryptDestroyHash (hHash=0x55e750) returned 1 [0271.903] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.903] GetLastError () returned 0x0 [0271.903] GetLastError () returned 0x0 [0271.903] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.904] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Install\\Apps\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\install\\apps\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0271.905] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.906] SetEndOfFile (hFile=0x24c) returned 1 [0271.906] CloseHandle (hObject=0x24c) returned 1 [0271.906] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.907] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.907] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.907] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.907] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.908] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.908] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.908] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.908] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.908] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.908] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.909] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.909] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.909] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.909] CryptDestroyKey (hKey=0x55e310) returned 1 [0271.909] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0271.909] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Install\\Apps\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\install\\apps\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9d016c5, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xda07c955, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x45fc561d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0271.909] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9d016c5, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xda07c955, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x45fc561d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.910] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45fc561d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45fc561d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45fc561d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.910] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45fc561d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45fc561d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45fc561d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0271.910] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0271.910] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45fc561d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45fc561d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45fc561d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.910] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6d6028c, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd6d6028c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd6d6028c, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Migration", cAlternateFileName="MIGRAT~1")) returned 1 [0271.910] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.910] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.910] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.910] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.910] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.910] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0271.910] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0271.911] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.911] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.911] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0271.911] CryptDestroyHash (hHash=0x55e910) returned 1 [0271.911] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.911] GetLastError () returned 0x0 [0271.911] GetLastError () returned 0x0 [0271.911] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.912] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.912] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.913] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Install\\Migration\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\install\\migration\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0271.914] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.915] SetEndOfFile (hFile=0x24c) returned 1 [0271.915] CloseHandle (hObject=0x24c) returned 1 [0271.915] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.916] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.916] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.916] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.916] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.916] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.916] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0271.917] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.917] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.917] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.917] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.917] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.918] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.918] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.918] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.918] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.918] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.918] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.918] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.919] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0271.919] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0271.919] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\ClipSVC\\Install\\Migration\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\clipsvc\\install\\migration\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6d6028c, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd6d6028c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x45feb885, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0271.919] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6d6028c, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd6d6028c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x45feb885, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.919] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45feb885, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45feb885, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45feb885, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.919] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45feb885, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45feb885, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45feb885, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0271.919] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0271.919] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6d6028c, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd6d6028c, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xd6d6028c, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Migration", cAlternateFileName="MIGRAT~1")) returned 0 [0271.920] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0271.920] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x215573b5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x215573b5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2164ba09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x73332, dwReserved0=0x544e6e6f, dwReserved1=0x5f4f545f, cFileName="tokens.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TOKENS~1.CRY")) returned 1 [0271.920] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x215573b5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x215573b5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2164ba09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x73332, dwReserved0=0x544e6e6f, dwReserved1=0x5f4f545f, cFileName="tokens.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TOKENS~1.CRY")) returned 0 [0271.920] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0271.920] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x21869c37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21869c37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e746164, dwReserved1=0x70797263, cFileName="DeviceMetadataCache", cAlternateFileName="DEVICE~2")) returned 1 [0271.920] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.920] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.920] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.920] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0271.920] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570c98) returned 1 [0271.921] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0271.921] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.921] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e310) returned 1 [0271.921] CryptDestroyHash (hHash=0x55e910) returned 1 [0271.921] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0271.921] GetLastError () returned 0x0 [0271.921] GetLastError () returned 0x0 [0271.922] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.922] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0271.923] WriteFile (in: hFile=0x244, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.925] SetEndOfFile (hFile=0x244) returned 1 [0271.925] CloseHandle (hObject=0x244) returned 1 [0271.925] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.926] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.926] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.926] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0271.927] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.927] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.927] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.928] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.928] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.928] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.928] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.928] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.928] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.928] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.929] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.929] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.929] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.929] CryptDestroyKey (hKey=0x55e310) returned 1 [0271.929] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0271.929] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x21869c37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45feb885, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0271.929] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x21869c37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x45feb885, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.929] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2164ba09, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2164ba09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21869c37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaeb48, dwReserved0=0x405534, dwReserved1=0x0, cFileName="dmrc.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DMRCID~1.CRY")) returned 1 [0271.929] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x625e35f4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="dmrccache", cAlternateFileName="DMRCCA~1")) returned 1 [0271.930] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.930] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.930] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.930] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.930] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570da8) returned 1 [0271.931] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0271.931] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.931] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e690) returned 1 [0271.931] CryptDestroyHash (hHash=0x55e290) returned 1 [0271.931] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0271.931] GetLastError () returned 0x0 [0271.931] GetLastError () returned 0x0 [0271.931] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.932] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.932] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.933] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrccache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0271.936] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.937] SetEndOfFile (hFile=0x248) returned 1 [0271.938] CloseHandle (hObject=0x248) returned 1 [0271.938] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.938] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.938] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.939] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.939] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.939] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.940] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.940] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.940] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.940] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.941] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.941] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.941] CryptDestroyKey (hKey=0x55e690) returned 1 [0271.941] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0271.941] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrccache\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x46011aa1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0271.942] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x46011aa1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.942] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x625e35f4, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0271.942] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.942] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.942] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.942] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0271.942] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0271.943] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0271.943] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.943] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0271.943] CryptDestroyHash (hHash=0x55e610) returned 1 [0271.943] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0271.943] GetLastError () returned 0x0 [0271.943] GetLastError () returned 0x0 [0271.943] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.944] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\downloads\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrccache\\downloads\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0271.945] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.946] SetEndOfFile (hFile=0x24c) returned 1 [0271.946] CloseHandle (hObject=0x24c) returned 1 [0271.946] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.947] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.947] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.947] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.947] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0271.948] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.948] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.948] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.948] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.948] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.948] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.949] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0271.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.949] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.949] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.950] CryptDestroyKey (hKey=0x55e910) returned 1 [0271.950] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0271.950] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\downloads\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatacache\\dmrccache\\downloads\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x46037c82, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0271.950] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x625e35f4, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x625e35f4, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x46037c82, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.950] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46037c82, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46037c82, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46037c82, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.950] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46037c82, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46037c82, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46037c82, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0271.950] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0271.950] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46011aa1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46011aa1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46011aa1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.950] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46011aa1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46011aa1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46011aa1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0271.950] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0271.950] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45feb885, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45feb885, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46011aa1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.950] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45feb885, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x45feb885, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46011aa1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0271.950] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0271.950] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1 [0271.951] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.951] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.951] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.951] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0271.951] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571408) returned 1 [0271.952] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0271.952] CryptHashData (hHash=0x55e5d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.952] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0271.952] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0271.952] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0271.952] GetLastError () returned 0x0 [0271.952] GetLastError () returned 0x0 [0271.952] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.953] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.953] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.954] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0271.954] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.957] SetEndOfFile (hFile=0x244) returned 1 [0271.957] CloseHandle (hObject=0x244) returned 1 [0271.957] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.958] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.958] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.958] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.959] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0271.959] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.959] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.959] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.960] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.960] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.960] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.960] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.960] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.961] CryptDestroyKey (hKey=0x55e610) returned 1 [0271.961] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0271.961] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46037c82, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0271.961] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46037c82, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.961] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36269c4, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x36269c4, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0271.961] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.961] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.962] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.962] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0271.962] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571408) returned 1 [0271.962] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0271.962] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.962] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0271.962] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0271.963] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0271.963] GetLastError () returned 0x0 [0271.963] GetLastError () returned 0x0 [0271.963] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.963] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0271.965] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.967] SetEndOfFile (hFile=0x248) returned 1 [0271.967] CloseHandle (hObject=0x248) returned 1 [0271.967] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.969] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.969] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.969] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.969] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0271.970] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.970] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.970] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.970] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.970] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.970] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.971] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.971] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.971] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.973] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.973] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0271.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.974] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.974] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.974] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.975] CryptDestroyKey (hKey=0x55e910) returned 1 [0271.975] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0271.975] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36269c4, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4605df79, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0271.975] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x36269c4, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4605df79, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.976] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5029494e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5029494e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5029494e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x405534, dwReserved1=0x0, cFileName="34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms", cAlternateFileName="")) returned 1 [0271.976] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2136a4c1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2136a4c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2136a4c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1af79, dwReserved0=0x405534, dwReserved1=0x0, cFileName="63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms", cAlternateFileName="")) returned 1 [0271.976] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4605df79, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4605df79, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4605df79, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.976] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4605df79, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4605df79, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4605df79, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0271.976] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0271.976] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46037c82, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46037c82, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4605df79, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.976] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46037c82, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46037c82, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4605df79, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0271.976] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0271.976] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="DRM", cAlternateFileName="")) returned 1 [0271.976] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.976] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.977] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.977] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0271.977] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571270) returned 1 [0271.978] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0271.978] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.978] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0271.978] CryptDestroyHash (hHash=0x55e910) returned 1 [0271.978] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0271.978] GetLastError () returned 0x0 [0271.978] GetLastError () returned 0x0 [0271.978] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.980] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0271.980] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.981] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0271.983] WriteFile (in: hFile=0x244, lpBuffer=0x23e3524*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3524*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.984] SetEndOfFile (hFile=0x244) returned 1 [0271.984] CloseHandle (hObject=0x244) returned 1 [0271.985] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.985] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.985] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.986] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0271.986] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.987] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.987] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.988] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.988] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.988] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0271.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.988] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.988] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.989] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.989] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0271.989] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0271.989] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46084280, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0271.990] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46084280, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.990] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0271.990] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0271.990] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0271.990] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0271.990] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0271.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0271.990] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570c10) returned 1 [0271.991] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0271.991] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0271.991] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0271.991] CryptDestroyHash (hHash=0x55e910) returned 1 [0271.991] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f190*=0x18) returned 1 [0271.991] GetLastError () returned 0x0 [0271.991] GetLastError () returned 0x0 [0271.991] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0271.992] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\cache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0271.993] WriteFile (in: hFile=0x248, lpBuffer=0x23e524c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e524c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0271.994] SetEndOfFile (hFile=0x248) returned 1 [0271.995] CloseHandle (hObject=0x248) returned 1 [0271.995] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0271.996] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.996] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0271.996] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0271.996] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0271.996] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.997] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0271.997] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0271.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.997] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.997] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0271.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0271.998] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0271.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0271.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0271.998] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0271.998] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0271.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0271.999] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0271.999] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0271.999] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DRM\\Cache\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\drm\\cache\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x460aa3c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0271.999] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x460aa3c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.999] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460aa3c6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x460aa3c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x460aa3c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.999] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460aa3c6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x460aa3c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x460aa3c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0271.999] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0271.999] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46084280, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46084280, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46084280, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0271.999] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46084280, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46084280, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46084280, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.000] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0272.003] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0272.003] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.003] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.003] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.003] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0272.003] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570eb8) returned 1 [0272.004] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.004] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.004] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0272.004] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0272.004] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.004] GetLastError () returned 0x0 [0272.004] GetLastError () returned 0x0 [0272.004] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.005] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.006] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.006] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\gameexplorer\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.007] WriteFile (in: hFile=0x244, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.009] SetEndOfFile (hFile=0x244) returned 1 [0272.009] CloseHandle (hObject=0x244) returned 1 [0272.009] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.010] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.010] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.010] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.010] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.010] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.010] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0272.011] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.011] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.011] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.011] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.011] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.012] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.012] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0272.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.012] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.012] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.013] CryptDestroyKey (hKey=0x55e610) returned 1 [0272.013] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0272.013] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\GameExplorer\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\gameexplorer\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x460d05ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0272.013] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x460d05ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.013] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d05ea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x460d05ea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x460d05ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.013] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d05ea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x460d05ea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x460d05ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.013] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0272.014] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4541769c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4541769c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4541769c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.014] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x89384062, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LfSvc", cAlternateFileName="")) returned 1 [0272.014] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.014] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.014] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.014] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0272.014] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570638) returned 1 [0272.015] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.015] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.015] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e710) returned 1 [0272.015] CryptDestroyHash (hHash=0x55e210) returned 1 [0272.015] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.015] GetLastError () returned 0x0 [0272.015] GetLastError () returned 0x0 [0272.015] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.016] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.017] WriteFile (in: hFile=0x244, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.027] SetEndOfFile (hFile=0x244) returned 1 [0272.028] CloseHandle (hObject=0x244) returned 1 [0272.032] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.033] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.033] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0272.034] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.034] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.034] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.035] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.035] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.035] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.035] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.035] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.035] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.035] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.035] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.035] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0272.035] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.036] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.036] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.036] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.036] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.036] CryptDestroyKey (hKey=0x55e710) returned 1 [0272.036] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0272.036] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x460d05ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0272.037] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x460d05ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.037] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x89384062, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0272.037] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.037] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.037] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.037] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.037] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.037] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0272.037] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571490) returned 1 [0272.038] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.038] CryptHashData (hHash=0x55e710, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.038] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0272.038] CryptDestroyHash (hHash=0x55e710) returned 1 [0272.038] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.038] GetLastError () returned 0x0 [0272.038] GetLastError () returned 0x0 [0272.038] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.039] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.040] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.041] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Cache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\cache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.043] WriteFile (in: hFile=0x248, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.045] SetEndOfFile (hFile=0x248) returned 1 [0272.045] CloseHandle (hObject=0x248) returned 1 [0272.045] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.046] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.046] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0272.046] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.047] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.047] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.047] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.047] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.047] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0272.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.048] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.048] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.048] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0272.048] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0272.048] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Cache\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\cache\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x4611ca23, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0272.049] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x4611ca23, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.049] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4611ca23, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4611ca23, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4611ca23, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.049] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4611ca23, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4611ca23, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4611ca23, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.049] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0272.050] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x219114b7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x219114b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Geofence", cAlternateFileName="")) returned 1 [0272.050] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.050] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.050] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.050] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.050] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.050] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0272.050] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570c10) returned 1 [0272.051] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.051] CryptHashData (hHash=0x55e710, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.051] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0272.051] CryptDestroyHash (hHash=0x55e710) returned 1 [0272.051] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.051] GetLastError () returned 0x0 [0272.051] GetLastError () returned 0x0 [0272.051] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.052] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Geofence\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\geofence\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.053] WriteFile (in: hFile=0x248, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.054] SetEndOfFile (hFile=0x248) returned 1 [0272.054] CloseHandle (hObject=0x248) returned 1 [0272.054] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.055] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.055] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.055] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.056] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.056] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.056] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0272.056] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.056] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.056] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.056] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.056] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.057] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.057] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.057] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.057] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0272.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.058] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.058] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.058] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0272.058] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0272.058] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\LfSvc\\Geofence\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\lfsvc\\geofence\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x219114b7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46142dc1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0272.059] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x219114b7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46142dc1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.059] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89384062, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x89384062, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0xdb5ea022, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x668, dwReserved0=0x405534, dwReserved1=0x0, cFileName="GeofenceApplicationID.dat", cAlternateFileName="GEOFEN~1.DAT")) returned 1 [0272.059] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x219114b7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x219114b7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x219114b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="GeofenceApplicationID.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GEOFEN~1.CRY")) returned 1 [0272.059] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46142dc1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46142dc1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46142dc1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.059] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46142dc1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46142dc1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46142dc1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.059] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0272.059] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d05ea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x460d05ea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x460f6a0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.059] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x460d05ea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x460d05ea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x460f6a0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.059] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0272.059] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Parental Controls", cAlternateFileName="PARENT~1")) returned 1 [0272.059] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.059] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.060] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.060] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0272.060] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570f40) returned 1 [0272.061] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.061] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.061] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e210) returned 1 [0272.061] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0272.061] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.061] GetLastError () returned 0x0 [0272.061] GetLastError () returned 0x0 [0272.061] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.062] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.062] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.063] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\parental controls\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.064] WriteFile (in: hFile=0x244, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.071] SetEndOfFile (hFile=0x244) returned 1 [0272.071] CloseHandle (hObject=0x244) returned 1 [0272.072] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.072] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.073] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0272.073] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.073] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.074] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.074] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.074] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.074] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.074] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.074] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.074] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.074] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.074] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.074] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.074] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0272.075] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.075] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.075] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.075] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.075] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.075] CryptDestroyKey (hKey=0x55e210) returned 1 [0272.075] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0272.075] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\parental controls\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46142dc1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0272.076] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46142dc1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.076] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46142dc1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46142dc1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46168fdf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.076] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings", cAlternateFileName="")) returned 1 [0272.076] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.076] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.076] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.076] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0272.077] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5707d0) returned 1 [0272.077] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.077] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.077] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e190) returned 1 [0272.077] CryptDestroyHash (hHash=0x55e290) returned 1 [0272.077] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.077] GetLastError () returned 0x0 [0272.078] GetLastError () returned 0x0 [0272.078] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.078] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls\\settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\parental controls\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.079] WriteFile (in: hFile=0x248, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.081] SetEndOfFile (hFile=0x248) returned 1 [0272.081] CloseHandle (hObject=0x248) returned 1 [0272.081] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.082] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.082] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.082] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.082] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.082] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.082] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0272.082] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.083] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.083] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.083] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.083] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.083] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.084] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.084] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0272.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.084] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.084] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.084] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.085] CryptDestroyKey (hKey=0x55e190) returned 1 [0272.085] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0272.085] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Parental Controls\\settings\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\parental controls\\settings\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46168fdf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0272.085] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46168fdf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.085] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46168fdf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46168fdf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4618f1ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.085] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46168fdf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46168fdf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4618f1ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.085] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0272.085] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd2c3a2, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd2c3a2, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings", cAlternateFileName="")) returned 0 [0272.085] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0272.085] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x21946850, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21946850, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1 [0272.086] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.086] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.086] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.086] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0272.086] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570b00) returned 1 [0272.087] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.087] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.087] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e910) returned 1 [0272.087] CryptDestroyHash (hHash=0x55e190) returned 1 [0272.087] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.087] GetLastError () returned 0x0 [0272.087] GetLastError () returned 0x0 [0272.087] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.088] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.088] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.089] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.090] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.094] SetEndOfFile (hFile=0x244) returned 1 [0272.094] CloseHandle (hObject=0x244) returned 1 [0272.094] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.096] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.096] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.096] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.096] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.096] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.096] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0272.097] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.097] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.097] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.097] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.097] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.097] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.097] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.097] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.097] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.098] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.098] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0272.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.098] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.098] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.099] CryptDestroyKey (hKey=0x55e910) returned 1 [0272.099] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0272.099] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x21946850, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4618f1ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0272.099] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x21946850, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4618f1ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.099] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6378b10e, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6378b10e, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x636a2ee1, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x4c42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="energy-report-2021-02-17.xml", cAlternateFileName="ENERGY~2.XML")) returned 1 [0272.099] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70df061a, ftCreationTime.dwHighDateTime=0x1d7b05a, ftLastAccessTime.dwLowDateTime=0x70df061a, ftLastAccessTime.dwHighDateTime=0x1d7b05a, ftLastWriteTime.dwLowDateTime=0x70d6c89f, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x3cdb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="energy-report-2021-09-23.xml", cAlternateFileName="ENERGY~3.XML")) returned 1 [0272.099] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6369e20c, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x6369e20c, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x70d6c89f, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x3cdb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="energy-report-latest.xml", cAlternateFileName="ENERGY~1.XML")) returned 1 [0272.099] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2192088e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2192088e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21946850, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x373f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="energy-report.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ENERGY~1.CRY")) returned 1 [0272.099] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4618f1ff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4618f1ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4618f1ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.100] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4618f1ff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4618f1ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4618f1ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.100] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0272.100] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0272.100] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.100] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.100] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.100] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.100] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.100] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0272.100] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5712f8) returned 1 [0272.101] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.101] CryptHashData (hHash=0x55e5d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.101] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e710) returned 1 [0272.101] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0272.101] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.101] GetLastError () returned 0x0 [0272.101] GetLastError () returned 0x0 [0272.102] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.102] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.103] WriteFile (in: hFile=0x244, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.105] SetEndOfFile (hFile=0x244) returned 1 [0272.105] CloseHandle (hObject=0x244) returned 1 [0272.105] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.106] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.106] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0272.107] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.107] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.107] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.107] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.108] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.108] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.108] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.108] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0272.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.108] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.108] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.108] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.109] CryptDestroyKey (hKey=0x55e710) returned 1 [0272.109] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0272.109] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x461b553e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0272.109] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x461b553e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.109] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x461b553e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x461b553e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x461b553e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.109] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x461b553e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x461b553e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x461b553e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.109] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0272.110] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d02c647, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x3d02c647, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x3d02c647, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SleepStudy", cAlternateFileName="SLEEPS~1")) returned 1 [0272.110] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.110] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.110] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.110] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.110] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.110] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0272.110] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570d20) returned 1 [0272.111] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.111] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.111] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e910) returned 1 [0272.111] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0272.111] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.111] GetLastError () returned 0x0 [0272.111] GetLastError () returned 0x0 [0272.116] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.117] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.117] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.118] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\SleepStudy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\sleepstudy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.119] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.120] SetEndOfFile (hFile=0x244) returned 1 [0272.120] CloseHandle (hObject=0x244) returned 1 [0272.120] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.121] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.121] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.121] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.121] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0272.122] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.122] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.122] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.122] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.123] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.123] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0272.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.123] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.123] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.124] CryptDestroyKey (hKey=0x55e910) returned 1 [0272.124] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0272.124] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\SleepStudy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sleepstudy\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d02c647, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x3d02c647, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x461db656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0272.124] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d02c647, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x3d02c647, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x461db656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.124] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x461db656, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x461db656, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x461db656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.124] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x461db656, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x461db656, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x461db656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.124] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0272.124] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Sqm", cAlternateFileName="")) returned 1 [0272.125] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.125] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.125] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.125] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0272.125] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571160) returned 1 [0272.126] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.126] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.126] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e710) returned 1 [0272.126] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0272.126] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.126] GetLastError () returned 0x0 [0272.126] GetLastError () returned 0x0 [0272.126] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.127] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.128] WriteFile (in: hFile=0x244, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.129] SetEndOfFile (hFile=0x244) returned 1 [0272.130] CloseHandle (hObject=0x244) returned 1 [0272.130] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.130] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.130] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.131] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0272.131] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.131] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.132] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.132] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.132] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.132] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.133] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0272.133] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.133] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.133] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.133] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.133] CryptDestroyKey (hKey=0x55e710) returned 1 [0272.133] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0272.133] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x461db656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0272.134] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x461db656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.134] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x461db656, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x461db656, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46201955, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.134] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1 [0272.134] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.134] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.134] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.134] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0272.134] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570b88) returned 1 [0272.135] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.135] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.135] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e750) returned 1 [0272.135] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0272.135] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.135] GetLastError () returned 0x0 [0272.135] GetLastError () returned 0x0 [0272.135] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.136] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.137] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.137] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\manifest\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.139] WriteFile (in: hFile=0x248, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.140] SetEndOfFile (hFile=0x248) returned 1 [0272.140] CloseHandle (hObject=0x248) returned 1 [0272.140] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.141] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.141] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.141] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.142] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0272.142] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.142] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.143] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.144] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.145] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.145] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0272.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.145] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.145] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.146] CryptDestroyKey (hKey=0x55e750) returned 1 [0272.146] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0272.146] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Manifest\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\manifest\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x46201955, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0272.146] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x46201955, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.146] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46201955, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46201955, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46201955, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.146] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46201955, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46201955, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46201955, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.146] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0272.146] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Sessions", cAlternateFileName="")) returned 1 [0272.147] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.147] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.147] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.147] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0272.147] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570d20) returned 1 [0272.148] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.148] CryptHashData (hHash=0x55e310, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.148] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0272.148] CryptDestroyHash (hHash=0x55e310) returned 1 [0272.148] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.148] GetLastError () returned 0x0 [0272.148] GetLastError () returned 0x0 [0272.148] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.149] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\sessions\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.150] WriteFile (in: hFile=0x248, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.151] SetEndOfFile (hFile=0x248) returned 1 [0272.151] CloseHandle (hObject=0x248) returned 1 [0272.151] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.152] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.153] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0272.153] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.153] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.154] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.154] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.154] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.154] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0272.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.155] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.155] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.155] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.155] CryptDestroyKey (hKey=0x55e910) returned 1 [0272.155] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0272.155] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Sessions\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\sessions\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x46227bd0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0272.156] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x46227bd0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.156] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46227bd0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46227bd0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46227bd0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.156] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46227bd0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46227bd0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46227bd0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.156] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0272.156] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Upload", cAlternateFileName="")) returned 1 [0272.156] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.156] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.156] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.156] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.156] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.156] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0272.156] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571408) returned 1 [0272.157] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.157] CryptHashData (hHash=0x55e910, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.157] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e390) returned 1 [0272.157] CryptDestroyHash (hHash=0x55e910) returned 1 [0272.157] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.157] GetLastError () returned 0x0 [0272.157] GetLastError () returned 0x0 [0272.157] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.169] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.169] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.170] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\upload\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.171] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.172] SetEndOfFile (hFile=0x248) returned 1 [0272.172] CloseHandle (hObject=0x248) returned 1 [0272.172] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.173] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.197] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0272.198] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.198] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.198] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.199] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.199] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.199] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.199] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.199] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0272.199] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.199] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.199] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.200] CryptDestroyKey (hKey=0x55e390) returned 1 [0272.200] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0272.200] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Sqm\\Upload\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\sqm\\upload\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x4624e0af, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0272.200] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x4624e0af, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.201] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4624e0af, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4624e0af, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4624e0af, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.201] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4624e0af, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4624e0af, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4624e0af, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.201] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0272.201] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b82c014, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8b82c014, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8b82c014, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Upload", cAlternateFileName="")) returned 0 [0272.201] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0272.201] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2196cbc6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2196cbc6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0272.201] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.201] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.201] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.201] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0272.202] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570b00) returned 1 [0272.202] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.202] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.202] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e390) returned 1 [0272.202] CryptDestroyHash (hHash=0x55e310) returned 1 [0272.202] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.202] GetLastError () returned 0x0 [0272.202] GetLastError () returned 0x0 [0272.203] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.203] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.206] WriteFile (in: hFile=0x244, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.207] SetEndOfFile (hFile=0x244) returned 1 [0272.207] CloseHandle (hObject=0x244) returned 1 [0272.208] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.208] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.209] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.209] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.209] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.209] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.209] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0272.209] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.209] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.209] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.210] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.210] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.210] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.210] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0272.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.211] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.211] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.211] CryptDestroyKey (hKey=0x55e390) returned 1 [0272.211] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0272.211] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2196cbc6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x462c037c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0272.212] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2196cbc6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x462c037c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.212] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21946850, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21946850, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2196cbc6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0272.212] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4629a355, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4629a355, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x462c037c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.212] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x228c5e27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x228c5e27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0272.212] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.212] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.212] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.212] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.212] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.212] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0272.213] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570b00) returned 1 [0272.213] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.213] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.213] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e690) returned 1 [0272.213] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0272.213] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.213] GetLastError () returned 0x0 [0272.213] GetLastError () returned 0x0 [0272.214] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.214] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.215] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.215] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.218] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.219] SetEndOfFile (hFile=0x248) returned 1 [0272.219] CloseHandle (hObject=0x248) returned 1 [0272.219] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.220] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.220] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.221] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.221] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.221] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0272.221] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.221] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.222] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.222] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.222] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.222] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.222] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.222] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.222] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.222] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.222] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.222] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.222] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.222] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.223] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0272.223] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.223] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.223] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.223] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.223] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.223] CryptDestroyKey (hKey=0x55e690) returned 1 [0272.223] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0272.223] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x228c5e27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x462c037c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0272.224] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x228c5e27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x462c037c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.224] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2196cbc6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2196cbc6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21a5198e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Access 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACCESS~1.CRY")) returned 1 [0272.224] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x21cda124, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21cda124, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0272.224] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.224] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.224] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.224] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.224] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.224] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0272.225] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570638) returned 1 [0272.225] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0272.225] CryptHashData (hHash=0x55e5d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.225] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0272.225] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0272.225] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0272.225] GetLastError () returned 0x0 [0272.226] GetLastError () returned 0x0 [0272.226] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.226] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0272.227] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.228] SetEndOfFile (hFile=0x24c) returned 1 [0272.229] CloseHandle (hObject=0x24c) returned 1 [0272.229] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.229] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.229] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.230] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.230] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.230] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.230] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0272.230] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.230] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.230] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.230] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.231] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.231] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.231] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.231] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.231] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.231] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.231] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.231] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0272.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.232] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.232] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.232] CryptDestroyKey (hKey=0x55e310) returned 1 [0272.232] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0272.232] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessibility\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x21cda124, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x462e66c2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0272.233] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x21cda124, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x462e66c2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.233] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21c6793d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21c6793d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21cb3e56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0272.233] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x462e66c2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x462e66c2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x462e66c2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.233] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21cda124, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21cda124, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21cda124, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Speech Recognition.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SPEECH~1.CRY")) returned 1 [0272.233] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21cda124, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21cda124, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21cda124, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Speech Recognition.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SPEECH~1.CRY")) returned 0 [0272.233] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0272.233] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x21e579a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21e579a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f636552, dwReserved1=0x74696e67, cFileName="Accessories", cAlternateFileName="ACCESS~2")) returned 1 [0272.233] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.233] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.233] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.234] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.234] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0272.234] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5707d0) returned 1 [0272.235] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0272.235] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.235] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0272.235] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0272.235] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0272.235] GetLastError () returned 0x0 [0272.235] GetLastError () returned 0x0 [0272.235] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.236] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.236] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.241] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0272.279] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.281] SetEndOfFile (hFile=0x24c) returned 1 [0272.570] CloseHandle (hObject=0x24c) returned 1 [0272.570] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.572] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.572] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.572] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.572] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0272.573] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.573] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.573] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.573] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.573] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.574] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0272.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.574] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.574] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.575] CryptDestroyKey (hKey=0x55e910) returned 1 [0272.575] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0272.575] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x21e579a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4630c97f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0272.576] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x21e579a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4630c97f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.576] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21d00392, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21d00392, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21d00392, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0272.576] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4630c97f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4630c97f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4637f0ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.576] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21d27e57, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21d27e57, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21d27e57, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Math Input Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MATHIN~1.CRY")) returned 1 [0272.576] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21d27e57, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21d27e57, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21d4c7f0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Paint.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PAINTL~1.CRY")) returned 1 [0272.576] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21d4c7f0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21d4c7f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21d4c7f0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Remote Desktop Connection.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="REMOTE~1.CRY")) returned 1 [0272.576] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21d72af3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21d72af3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21d72af3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x46e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Snipping Tool.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SNIPPI~1.CRY")) returned 1 [0272.576] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21d98e6f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21d98e6f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21d98e6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x448, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Steps Recorder.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STEPSR~1.CRY")) returned 1 [0272.576] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21dbeed8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21dbeed8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21dbeed8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Sticky Notes.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STICKY~1.CRY")) returned 1 [0272.576] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x21de50ec, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21de50ec, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0272.576] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.576] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.577] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.577] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0272.577] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0272.578] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0272.578] CryptHashData (hHash=0x55e690, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.578] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e790) returned 1 [0272.578] CryptDestroyHash (hHash=0x55e690) returned 1 [0272.578] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0272.578] GetLastError () returned 0x0 [0272.578] GetLastError () returned 0x0 [0272.578] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.579] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0272.608] WriteFile (in: hFile=0x250, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.609] SetEndOfFile (hFile=0x250) returned 1 [0272.615] CloseHandle (hObject=0x250) returned 1 [0272.615] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.617] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.617] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0272.617] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.618] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.618] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.618] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.618] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.619] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0272.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.619] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.619] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.620] CryptDestroyKey (hKey=0x55e790) returned 1 [0272.620] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0272.620] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x21de50ec, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4662d9c0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0272.620] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x21de50ec, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4662d9c0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.620] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21dbeed8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21dbeed8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21dbeed8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Character Map.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CHARAC~1.CRY")) returned 1 [0272.620] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21de50ec, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21de50ec, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21de50ec, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0272.620] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4662d9c0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4662d9c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x466a015f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.620] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4662d9c0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4662d9c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x466a015f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.620] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0272.624] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6ec61aae, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x21e0b396, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21e0b396, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0272.624] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.624] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.624] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.624] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0272.624] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571380) returned 1 [0272.625] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0272.625] CryptHashData (hHash=0x55e690, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.625] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e710) returned 1 [0272.625] CryptDestroyHash (hHash=0x55e690) returned 1 [0272.625] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0272.625] GetLastError () returned 0x0 [0272.626] GetLastError () returned 0x0 [0272.626] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.627] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.628] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.628] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0272.630] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.631] SetEndOfFile (hFile=0x250) returned 1 [0272.632] CloseHandle (hObject=0x250) returned 1 [0272.632] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.633] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.633] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0272.633] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.634] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.634] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.634] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.634] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.635] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.635] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0272.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.635] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.635] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.635] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.636] CryptDestroyKey (hKey=0x55e710) returned 1 [0272.636] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0272.636] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6ec61aae, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x21e0b396, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x466c64da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0272.636] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6ec61aae, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x21e0b396, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x466c64da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.636] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21de50ec, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21de50ec, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21de50ec, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xba, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0272.636] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466c64da, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x466c64da, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x466c64da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.636] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21de50ec, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21de50ec, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21e0b396, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows Journal.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~1.CRY")) returned 1 [0272.636] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21de50ec, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21de50ec, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21e0b396, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows Journal.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~1.CRY")) returned 0 [0272.636] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0272.636] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21e0b396, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21e0b396, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21e0b396, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x448, dwReserved0=0x756f4a20, dwReserved1=0x6c616e72, cFileName="Windows Fax and Scan.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~1.CRY")) returned 1 [0272.637] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21e315bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21e315bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21e315bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x756f4a20, dwReserved1=0x6c616e72, cFileName="Windows Media Player.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~2.CRY")) returned 1 [0272.637] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21e315bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21e315bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21e315bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x756f4a20, dwReserved1=0x6c616e72, cFileName="Wordpad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WORDPA~1.CRY")) returned 1 [0272.637] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21e579a3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21e579a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21e579a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x756f4a20, dwReserved1=0x6c616e72, cFileName="XPS Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="XPSVIE~1.CRY")) returned 1 [0272.637] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21e579a3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21e579a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21e579a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x756f4a20, dwReserved1=0x6c616e72, cFileName="XPS Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="XPSVIE~1.CRY")) returned 0 [0272.637] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0272.637] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x223b4da5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x223b4da5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e726577, dwReserved1=0x2e6b6e6c, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0272.637] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.637] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.637] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.637] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0272.638] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0272.638] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0272.638] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.638] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0272.638] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0272.638] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0272.638] GetLastError () returned 0x0 [0272.639] GetLastError () returned 0x0 [0272.639] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.639] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0272.640] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.642] SetEndOfFile (hFile=0x24c) returned 1 [0272.642] CloseHandle (hObject=0x24c) returned 1 [0272.642] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.647] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.647] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0272.648] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.648] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.648] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.649] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.649] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.649] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0272.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.649] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.649] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.650] CryptDestroyKey (hKey=0x55e690) returned 1 [0272.650] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0272.650] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x223b4da5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x466c64da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x223b4da5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x466c64da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21e579a3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21e579a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21e7db92, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Component Services.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="COMPON~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21e7db92, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21e7db92, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21e7db92, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Computer Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="COMPUT~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21e7db92, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21e7db92, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21ea3d5f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa26, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ef0261, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21ef0261, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21ef0261, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x405534, dwReserved1=0x0, cFileName="dfrgui.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DFRGUI~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ef0261, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21ef0261, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21f17ed2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Disk Cleanup.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DISKCL~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21f17ed2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21f17ed2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21f17ed2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Event Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EVENTV~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466c64da, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x466c64da, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x466c64da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21f17ed2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x21f17ed2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x21f3c6e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iSCSI Initiator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ISCSII~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220477fc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x220477fc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x220477fc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Memory Diagnostics Tool.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MEMORY~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x220477fc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x220477fc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2206d9ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ODBC Data Sources (32-bit).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ODBCDA~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2206d9ac, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2206d9ac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2206d9ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ODBC Data Sources (64-bit).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ODBCDA~2.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2206d9ac, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2206d9ac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2206d9ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Performance Monitor.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PERFOR~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22093cbd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22093cbd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22093cbd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Print Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PRINTM~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22093cbd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22093cbd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2219ed21, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Resource Monitor.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RESOUR~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x221c9bb0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x221c9bb0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x221c9bb0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Security Configuration Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SECURI~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x221c9bb0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x221c9bb0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x221eb0cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x405534, dwReserved1=0x0, cFileName="services.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SERVIC~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x221eb0cd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x221eb0cd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x221eb0cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="System Configuration.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SYSTEM~1.CRY")) returned 1 [0272.651] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x222990f7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x222990f7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x222a9d09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="System Information.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SYSTEM~2.CRY")) returned 1 [0272.652] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x222a9d09, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x222a9d09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x222cfe9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x46c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Task Scheduler.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TASKSC~1.CRY")) returned 1 [0272.652] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x222f6322, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x222f6322, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x223b4da5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~1.CRY")) returned 1 [0272.652] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x222f6322, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x222f6322, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x223b4da5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~1.CRY")) returned 0 [0272.652] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0272.669] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x223b4da5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x223b4da5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x223b4da5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x72694620, dwReserved1=0x6c617765, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0272.669] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x23bf23db, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x23bf23db, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x23bf23db, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x72694620, dwReserved1=0x6c617765, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0272.669] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2244dac7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2244dac7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2244dac7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x72694620, dwReserved1=0x6c617765, cFileName="Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~2.CRY")) returned 1 [0272.669] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x503ebe79, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x503ebe79, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x503ebe79, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x895, dwReserved0=0x72694620, dwReserved1=0x6c617765, cFileName="Devices Flow.lnk", cAlternateFileName="")) returned 1 [0272.669] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2244dac7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2244dac7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2244dac7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x895, dwReserved0=0x72694620, dwReserved1=0x6c617765, cFileName="Devices Flow.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DEVICE~1.CRY")) returned 1 [0272.669] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2244dac7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2244dac7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x224738fe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa64, dwReserved0=0x72694620, dwReserved1=0x6c617765, cFileName="Excel 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EXCEL2~1.CRY")) returned 1 [0272.669] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x462c037c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x462c037c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x462c037c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x72694620, dwReserved1=0x6c617765, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.669] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x503ebe79, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x503ebe79, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x503ebe79, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x92d, dwReserved0=0x72694620, dwReserved1=0x6c617765, cFileName="Immersive Control Panel.lnk", cAlternateFileName="")) returned 1 [0272.669] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x224bff58, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x224bff58, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x224bff58, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x92d, dwReserved0=0x72694620, dwReserved1=0x6c617765, cFileName="Immersive Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMMERS~1.CRY")) returned 1 [0272.669] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad820150, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x22532481, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22532481, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72694620, dwReserved1=0x6c617765, cFileName="Java", cAlternateFileName="")) returned 1 [0272.669] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.669] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.669] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.669] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.670] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.670] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0272.670] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5708e0) returned 1 [0272.671] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0272.671] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.671] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0272.671] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0272.671] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0272.671] GetLastError () returned 0x0 [0272.671] GetLastError () returned 0x0 [0272.671] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.672] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.672] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.673] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0272.677] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.678] SetEndOfFile (hFile=0x24c) returned 1 [0272.685] CloseHandle (hObject=0x24c) returned 1 [0272.685] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.686] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.686] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.686] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.686] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.686] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.686] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0272.687] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.687] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.687] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.687] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.687] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.688] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.688] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0272.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.688] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.688] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.689] CryptDestroyKey (hKey=0x55e390) returned 1 [0272.689] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0272.689] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad820150, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x22532481, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4671ab35, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0272.689] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad820150, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x22532481, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4671ab35, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.689] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x224bff58, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x224bff58, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x224e60a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x830, dwReserved0=0x405534, dwReserved1=0x0, cFileName="About Java.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ABOUTJ~1.CRY")) returned 1 [0272.689] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x224e60a8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x224e60a8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x224e60a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x842, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Check For Updates.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CHECKF~1.CRY")) returned 1 [0272.689] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2250c2a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2250c2a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22532481, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x818, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Configure Java.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONFIG~1.CRY")) returned 1 [0272.690] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8debab, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad8debab, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad8debab, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Get Help.url", cAlternateFileName="GETHEL~1.URL")) returned 1 [0272.690] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4671ab35, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4671ab35, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46738ba1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.690] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad892634, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad8b88b0, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Visit Java.com.url", cAlternateFileName="VISITJ~1.URL")) returned 1 [0272.690] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad892634, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad8b88b0, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Visit Java.com.url", cAlternateFileName="VISITJ~1.URL")) returned 0 [0272.690] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0272.692] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x22532481, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22532481, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e617661, dwReserved1=0x2e6d6f63, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0272.692] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.692] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.692] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.692] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0272.693] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570eb8) returned 1 [0272.693] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0272.693] CryptHashData (hHash=0x55e910, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.693] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0272.693] CryptDestroyHash (hHash=0x55e910) returned 1 [0272.693] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0272.693] GetLastError () returned 0x0 [0272.694] GetLastError () returned 0x0 [0272.694] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.694] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0272.697] WriteFile (in: hFile=0x24c, lpBuffer=0x23e5244*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e5244*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.699] SetEndOfFile (hFile=0x24c) returned 1 [0272.699] CloseHandle (hObject=0x24c) returned 1 [0272.699] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.700] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.700] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.700] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.700] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.700] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.700] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0272.701] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.701] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.701] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.701] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.701] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.701] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.701] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.701] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.702] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.702] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.702] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.702] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.702] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.702] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0272.702] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.702] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.702] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.702] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.702] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.703] CryptDestroyKey (hKey=0x55e310) returned 1 [0272.703] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0272.703] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x22532481, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4675ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0272.703] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x22532481, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4675ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.703] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22532481, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22532481, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22532481, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0272.703] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4675ee3e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4675ee3e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4675ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.703] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4675ee3e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4675ee3e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4675ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.703] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0272.704] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd4900e28, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x2266473d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2266473d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft Office 2016 Tools", cAlternateFileName="MICROS~1")) returned 1 [0272.704] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.704] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.704] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.704] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.704] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.704] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0272.704] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0272.705] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0272.705] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.705] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0272.705] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0272.705] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0272.705] GetLastError () returned 0x0 [0272.707] GetLastError () returned 0x0 [0272.707] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.708] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.709] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.709] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0272.711] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.712] SetEndOfFile (hFile=0x24c) returned 1 [0272.713] CloseHandle (hObject=0x24c) returned 1 [0272.713] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.714] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.714] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.714] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.714] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0272.715] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.715] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.715] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.715] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.715] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.716] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.716] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0272.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.716] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.716] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.716] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.717] CryptDestroyKey (hKey=0x55e910) returned 1 [0272.717] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0272.717] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office 2016 Tools\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office 2016 tools\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd4900e28, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x2266473d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467851a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0272.717] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd4900e28, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x2266473d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467851a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.717] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22558820, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22558820, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22558820, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa83, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Database Compare 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DATABA~1.CRY")) returned 1 [0272.717] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22558820, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22558820, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22558820, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0272.717] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x467851a7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x467851a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467851a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.717] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2257ea49, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2257ea49, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2257ea49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa67, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Office 2016 Language Preferences.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="OFFICE~1.CRY")) returned 1 [0272.717] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2257ea49, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2257ea49, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x225cc77b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa6d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Office 2016 Upload Center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="OFFICE~2.CRY")) returned 1 [0272.717] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x225f11b9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x225f11b9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22617303, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa83, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Skype for Business Recording Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SKYPEF~1.CRY")) returned 1 [0272.717] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22617303, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22617303, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2263d538, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa83, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Spreadsheet Compare 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SPREAD~1.CRY")) returned 1 [0272.717] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2263d538, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2263d538, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2266473d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaff, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Telemetry Dashboard for Office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TELEME~1.CRY")) returned 1 [0272.717] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2266473d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2266473d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2266473d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Telemetry Log for Office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TELEME~2.CRY")) returned 1 [0272.717] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2266473d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2266473d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2266473d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xb05, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Telemetry Log for Office 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TELEME~2.CRY")) returned 0 [0272.718] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0272.718] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x1a440bee, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1a440bee, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1a440bee, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x4c207972, dwReserved1=0x6620676f, cFileName="MiracastView.lnk", cAlternateFileName="")) returned 1 [0272.718] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2266473d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2266473d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22689a22, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x4c207972, dwReserved1=0x6620676f, cFileName="MiracastView.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MIRACA~1.CRY")) returned 1 [0272.718] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22689a22, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22689a22, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x226afcb8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa72, dwReserved0=0x4c207972, dwReserved1=0x6620676f, cFileName="OneDrive for Business.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ONEDRI~1.CRY")) returned 1 [0272.718] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x226afcb8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x226afcb8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x226afcb8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa64, dwReserved0=0x4c207972, dwReserved1=0x6620676f, cFileName="OneNote 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ONENOT~1.CRY")) returned 1 [0272.718] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x226afcb8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x226afcb8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x226d5f25, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x4c207972, dwReserved1=0x6620676f, cFileName="Outlook 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="OUTLOO~1.CRY")) returned 1 [0272.718] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x226d5f25, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x226d5f25, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x226d5f25, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa5e, dwReserved0=0x4c207972, dwReserved1=0x6620676f, cFileName="PowerPoint 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="POWERP~1.CRY")) returned 1 [0272.718] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x502baba5, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x502baba5, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x502baba5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x897, dwReserved0=0x4c207972, dwReserved1=0x6620676f, cFileName="PrintDialog.lnk", cAlternateFileName="")) returned 1 [0272.718] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x226fc113, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x226fc113, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x226fc113, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x897, dwReserved0=0x4c207972, dwReserved1=0x6620676f, cFileName="PrintDialog.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PRINTD~1.CRY")) returned 1 [0272.718] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227223b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x227223b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x227223b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa50, dwReserved0=0x4c207972, dwReserved1=0x6620676f, cFileName="Publisher 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PUBLIS~1.CRY")) returned 1 [0272.718] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x2007da5a, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x2007da5a, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x2007da5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x4c207972, dwReserved1=0x6620676f, cFileName="Search.lnk", cAlternateFileName="")) returned 1 [0272.718] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227223b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x227223b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22748492, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x4c207972, dwReserved1=0x6620676f, cFileName="Search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SEARCH~1.CRY")) returned 1 [0272.718] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22748492, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22748492, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22748492, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x4c207972, dwReserved1=0x6620676f, cFileName="Skype for Business 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SKYPEF~1.CRY")) returned 1 [0272.718] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x22854c97, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22854c97, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4c207972, dwReserved1=0x6620676f, cFileName="StartUp", cAlternateFileName="")) returned 1 [0272.718] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.718] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.719] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.719] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0272.719] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0272.720] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0272.720] CryptHashData (hHash=0x55e5d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.720] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0272.720] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0272.720] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0272.720] GetLastError () returned 0x0 [0272.720] GetLastError () returned 0x0 [0272.720] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.721] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0272.722] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.723] SetEndOfFile (hFile=0x24c) returned 1 [0272.724] CloseHandle (hObject=0x24c) returned 1 [0272.724] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.725] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.725] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0272.725] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.726] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.726] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.726] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.726] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.726] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.726] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.726] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.726] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.726] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.726] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.727] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0272.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.727] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.727] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.728] CryptDestroyKey (hKey=0x55e390) returned 1 [0272.728] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0272.728] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\StartUp\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x22854c97, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467ab454, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0272.728] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x22854c97, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467ab454, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.728] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2282d4b7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2282d4b7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22854c97, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0272.729] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x467ab454, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x467ab454, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467ab454, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.729] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x467ab454, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x467ab454, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467ab454, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.729] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0272.729] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2289fa7d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2289fa7d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0272.729] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.729] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.729] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.729] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0272.729] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0272.730] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0272.730] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.730] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0272.730] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0272.730] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18) returned 1 [0272.730] GetLastError () returned 0x0 [0272.730] GetLastError () returned 0x0 [0272.730] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.731] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.732] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.732] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0272.733] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.734] SetEndOfFile (hFile=0x24c) returned 1 [0272.735] CloseHandle (hObject=0x24c) returned 1 [0272.735] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.736] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.736] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0272.736] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.737] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.737] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.737] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.738] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.738] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0272.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.738] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.738] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.739] CryptDestroyKey (hKey=0x55e210) returned 1 [0272.739] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0272.739] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\system tools\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2289fa7d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467ab454, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0272.739] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2289fa7d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467ab454, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.739] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22854c97, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22854c97, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2287984f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Default Programs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DEFAUL~1.CRY")) returned 1 [0272.739] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2287984f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2287984f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2287984f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x25c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0272.739] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x467ab454, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x467ab454, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467ab454, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.739] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2287984f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2287984f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2289fa7d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Task Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TASKMA~1.CRY")) returned 1 [0272.739] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2289fa7d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2289fa7d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2289fa7d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x422, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows Defender.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~1.CRY")) returned 1 [0272.739] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2289fa7d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2289fa7d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2289fa7d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x422, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows Defender.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~1.CRY")) returned 0 [0272.739] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0272.740] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x66654420, dwReserved1=0x65646e65, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1 [0272.740] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.740] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.740] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.740] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0272.740] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0272.741] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0272.741] CryptHashData (hHash=0x55e310, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.741] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0272.741] CryptDestroyHash (hHash=0x55e310) returned 1 [0272.741] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0272.741] GetLastError () returned 0x0 [0272.741] GetLastError () returned 0x0 [0272.741] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.742] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\tablet pc\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0272.742] WriteFile (in: hFile=0x24c, lpBuffer=0x23e5244*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e5244*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.744] SetEndOfFile (hFile=0x24c) returned 1 [0272.744] CloseHandle (hObject=0x24c) returned 1 [0272.744] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.745] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.745] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0272.745] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.745] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.746] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.746] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.746] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.746] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.746] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.746] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.746] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.746] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.746] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.746] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0272.746] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.746] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.747] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.747] CryptDestroyKey (hKey=0x55e790) returned 1 [0272.747] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0272.747] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Tablet PC\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\tablet pc\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x467d15d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0272.747] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x467d15d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.747] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x467d15d7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x467d15d7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467d15d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.747] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x467d15d7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x467d15d7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467d15d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.747] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0272.748] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x228c5e27, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x228c5e27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x228c5e27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Word 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WORD20~1.CRY")) returned 1 [0272.748] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x228c5e27, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x228c5e27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x228c5e27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Word 2016.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WORD20~1.CRY")) returned 0 [0272.748] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0272.748] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x228c5e27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x228c5e27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 0 [0272.748] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0272.748] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x22f7a78e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22f7a78e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="Start Menu Places", cAlternateFileName="STARTM~2")) returned 1 [0272.748] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.748] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.748] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.748] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0272.748] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570b00) returned 1 [0272.749] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.749] CryptHashData (hHash=0x55e390, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.749] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0272.749] CryptDestroyHash (hHash=0x55e390) returned 1 [0272.749] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.749] GetLastError () returned 0x0 [0272.749] GetLastError () returned 0x0 [0272.749] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.750] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.751] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.751] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.759] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.760] SetEndOfFile (hFile=0x244) returned 1 [0272.771] CloseHandle (hObject=0x244) returned 1 [0272.771] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.772] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.772] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0272.773] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.773] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.773] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.773] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.773] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.773] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.774] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.774] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0272.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.774] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.774] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.774] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.774] CryptDestroyKey (hKey=0x55e610) returned 1 [0272.774] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0272.775] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu Places\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu places\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x22f7a78e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467f763b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0272.775] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x22f7a78e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467f763b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.775] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x228c5e27, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x228c5e27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x228ebf6d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x405534, dwReserved1=0x0, cFileName="01 - File Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="01-FIL~1.CRY")) returned 1 [0272.775] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x228ebf6d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x228ebf6d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x228ebf6d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x405534, dwReserved1=0x0, cFileName="03 - Documents.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="03-DOC~1.CRY")) returned 1 [0272.775] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22912189, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22912189, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22912189, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x405534, dwReserved1=0x0, cFileName="04 - Downloads.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="04-DOW~1.CRY")) returned 1 [0272.775] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x229d0ed0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x229d0ed0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x229f7085, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x405534, dwReserved1=0x0, cFileName="05 - Music.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="05-MUS~1.CRY")) returned 1 [0272.775] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a43597, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22a43597, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22a43597, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x405534, dwReserved1=0x0, cFileName="06 - Pictures.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="06-PIC~1.CRY")) returned 1 [0272.775] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22d8aa42, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22d8aa42, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22d8aa42, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="07 - Videos.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="07-VID~1.CRY")) returned 1 [0272.775] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22db0c5a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22db0c5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22dd6e16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x405534, dwReserved1=0x0, cFileName="08 - Homegroup.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="08-HOM~1.CRY")) returned 1 [0272.775] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22e4954a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22e4954a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22ee1e33, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x405534, dwReserved1=0x0, cFileName="09 - Network.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="09-NET~1.CRY")) returned 1 [0272.775] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22f08131, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22f08131, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22f2e365, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x405534, dwReserved1=0x0, cFileName="10 - UserProfile.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="10-USE~1.CRY")) returned 1 [0272.775] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22f7a78e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22f7a78e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x22f7a78e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0272.775] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x467f763b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x467f763b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467f763b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.775] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x467f763b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x467f763b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x467f763b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.775] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0272.775] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0272.776] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.776] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.776] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.776] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.776] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.776] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0272.776] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570b00) returned 1 [0272.777] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.777] CryptHashData (hHash=0x55e310, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.777] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0272.777] CryptDestroyHash (hHash=0x55e310) returned 1 [0272.777] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.777] GetLastError () returned 0x0 [0272.777] GetLastError () returned 0x0 [0272.777] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.778] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\templates\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.779] WriteFile (in: hFile=0x244, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.780] SetEndOfFile (hFile=0x244) returned 1 [0272.780] CloseHandle (hObject=0x244) returned 1 [0272.780] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.781] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.781] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0272.782] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.782] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.782] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.782] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.782] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.783] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.783] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0272.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.783] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.783] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.783] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.784] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0272.784] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0272.784] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Templates\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\templates\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4681d94f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0272.784] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4681d94f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.784] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4681d94f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4681d94f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4681d94f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.784] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4681d94f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4681d94f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4681d94f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.784] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0272.784] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="WER", cAlternateFileName="")) returned 1 [0272.785] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.785] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.785] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.785] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.785] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.785] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0272.785] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571050) returned 1 [0272.786] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.786] CryptHashData (hHash=0x55e690, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.786] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e7d0) returned 1 [0272.786] CryptDestroyHash (hHash=0x55e690) returned 1 [0272.786] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.786] GetLastError () returned 0x0 [0272.786] GetLastError () returned 0x0 [0272.786] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.787] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.787] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.788] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.790] WriteFile (in: hFile=0x244, lpBuffer=0x23e3524*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3524*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.791] SetEndOfFile (hFile=0x244) returned 1 [0272.791] CloseHandle (hObject=0x244) returned 1 [0272.791] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.792] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.793] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0272.793] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.794] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.794] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.794] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.794] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.794] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.794] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.794] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.794] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.794] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.795] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.795] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0272.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.795] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.795] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.795] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.796] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0272.796] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0272.796] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46843cef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0272.796] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46843cef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.796] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46843cef, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46843cef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46843cef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.796] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1 [0272.797] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.797] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.797] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.797] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0272.797] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5709f0) returned 1 [0272.798] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.798] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.798] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0272.798] CryptDestroyHash (hHash=0x55e290) returned 1 [0272.798] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.798] GetLastError () returned 0x0 [0272.798] GetLastError () returned 0x0 [0272.799] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.800] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\reportarchive\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.801] WriteFile (in: hFile=0x248, lpBuffer=0x23e524c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e524c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.802] SetEndOfFile (hFile=0x248) returned 1 [0272.802] CloseHandle (hObject=0x248) returned 1 [0272.802] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.803] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.804] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.804] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0272.804] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.804] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.804] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.804] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.805] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.805] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.805] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.805] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.805] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.805] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.805] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0272.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.805] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.806] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.806] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.806] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.806] CryptDestroyKey (hKey=0x55e910) returned 1 [0272.806] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0272.806] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportArchive\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\reportarchive\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46869f48, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0272.806] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46869f48, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.807] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46869f48, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46869f48, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46869f48, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.807] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46869f48, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46869f48, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46869f48, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.807] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0272.807] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 1 [0272.807] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.807] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.807] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.807] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.807] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.807] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0272.807] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5709f0) returned 1 [0272.808] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.808] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.808] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0272.808] CryptDestroyHash (hHash=0x55e710) returned 1 [0272.808] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.808] GetLastError () returned 0x0 [0272.808] GetLastError () returned 0x0 [0272.808] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.809] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.810] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.810] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\reportqueue\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.813] WriteFile (in: hFile=0x248, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.814] SetEndOfFile (hFile=0x248) returned 1 [0272.815] CloseHandle (hObject=0x248) returned 1 [0272.825] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.827] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.827] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0272.827] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.828] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.828] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.828] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.828] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.828] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0272.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.829] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.829] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.829] CryptDestroyKey (hKey=0x55e610) returned 1 [0272.829] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0272.829] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\ReportQueue\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\reportqueue\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46869f48, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0272.830] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x810, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46869f48, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.830] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x46869f48, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46869f48, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46869f48, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.830] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x46869f48, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46869f48, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46869f48, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.830] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0272.830] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0272.830] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.830] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.831] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.831] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0272.831] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571490) returned 1 [0272.832] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.832] CryptHashData (hHash=0x55e690, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.832] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0272.832] CryptDestroyHash (hHash=0x55e690) returned 1 [0272.832] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.832] GetLastError () returned 0x0 [0272.832] GetLastError () returned 0x0 [0272.832] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.833] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.834] WriteFile (in: hFile=0x248, lpBuffer=0x23e527c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e527c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.835] SetEndOfFile (hFile=0x248) returned 1 [0272.835] CloseHandle (hObject=0x248) returned 1 [0272.835] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.836] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.837] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0272.837] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.837] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.838] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.838] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.838] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.838] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0272.839] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.839] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.839] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.839] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.839] CryptDestroyKey (hKey=0x55e610) returned 1 [0272.839] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0272.839] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\WER\\Temp\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\wer\\temp\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x468b6451, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0272.840] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x468b6451, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.840] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468b6451, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x468b6451, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x468b6451, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.840] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468b6451, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x468b6451, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x468b6451, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.840] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0272.840] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0272.840] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0272.840] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc9e8f94, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xcc9e8f94, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65756575, dwReserved1=0x5f4f6576, cFileName="wfp", cAlternateFileName="")) returned 1 [0272.840] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.840] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.841] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.841] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0272.841] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570c10) returned 1 [0272.842] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.842] CryptHashData (hHash=0x55e690, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.842] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0272.842] CryptDestroyHash (hHash=0x55e690) returned 1 [0272.842] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.842] GetLastError () returned 0x0 [0272.842] GetLastError () returned 0x0 [0272.842] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.843] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.844] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.844] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\wfp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows\\wfp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.845] WriteFile (in: hFile=0x244, lpBuffer=0x23e3524*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3524*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.847] SetEndOfFile (hFile=0x244) returned 1 [0272.847] CloseHandle (hObject=0x244) returned 1 [0272.847] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.848] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.848] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.848] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.848] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0272.849] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.849] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.849] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.849] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.849] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.849] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.850] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.850] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.850] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.850] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.850] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.850] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.850] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.850] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0272.850] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.850] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.851] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.851] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.851] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0272.851] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0272.851] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\wfp\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows\\wfp\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc9e8f94, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x468b6451, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0272.852] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc9e8f94, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x468b6451, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.852] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468b6451, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x468b6451, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x468dc5e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.852] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xcc9e8f94, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xcc9e8f94, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe606b3e, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="wfpdiag.etl", cAlternateFileName="")) returned 1 [0272.852] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xcc9e8f94, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xcc9e8f94, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xe606b3e, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="wfpdiag.etl", cAlternateFileName="")) returned 0 [0272.852] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0272.852] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xcc9e8f94, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xcc9e8f94, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65756575, dwReserved1=0x5f4f6576, cFileName="wfp", cAlternateFileName="")) returned 0 [0272.852] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0272.852] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35c3f417, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6520aed4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20757365, dwReserved1=0x63616c50, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0272.852] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.852] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.853] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.853] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0272.853] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5706c0) returned 1 [0272.854] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0272.854] CryptHashData (hHash=0x55e290, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.854] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e210) returned 1 [0272.854] CryptDestroyHash (hHash=0x55e290) returned 1 [0272.854] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f660*=0x18) returned 1 [0272.854] GetLastError () returned 0x0 [0272.854] GetLastError () returned 0x0 [0272.854] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.855] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0272.856] WriteFile (in: hFile=0x240, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.857] SetEndOfFile (hFile=0x240) returned 1 [0272.857] CloseHandle (hObject=0x240) returned 1 [0272.857] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.858] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.858] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.858] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.858] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.858] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0272.859] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.859] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.859] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.859] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.859] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.859] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.860] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.860] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.860] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.860] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.860] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.860] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0272.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.860] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.860] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.860] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.861] CryptDestroyKey (hKey=0x55e210) returned 1 [0272.861] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0272.861] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35c3f417, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x468dc5e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0272.861] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x35c3f417, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x468dc5e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.861] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Clean Store", cAlternateFileName="CLEANS~1")) returned 1 [0272.861] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.861] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.862] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.862] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0272.862] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570d20) returned 1 [0272.863] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.863] CryptHashData (hHash=0x55e290, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.863] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e910) returned 1 [0272.863] CryptDestroyHash (hHash=0x55e290) returned 1 [0272.863] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.863] GetLastError () returned 0x0 [0272.863] GetLastError () returned 0x0 [0272.863] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.864] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.864] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.865] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Clean Store\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\clean store\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.878] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.880] SetEndOfFile (hFile=0x244) returned 1 [0272.880] CloseHandle (hObject=0x244) returned 1 [0272.880] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.881] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.881] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0272.882] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.882] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.882] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.882] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.882] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.882] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.882] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.882] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.882] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.882] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.882] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.883] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.883] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.883] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.883] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0272.883] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.883] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.883] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.883] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.883] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.884] CryptDestroyKey (hKey=0x55e910) returned 1 [0272.884] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0272.884] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Clean Store\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\clean store\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x469289d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0272.884] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x469289d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.884] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x469289d5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x469289d5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x469289d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.884] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x469289d5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x469289d5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x469289d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.884] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0272.884] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Definition Updates", cAlternateFileName="DEFINI~1")) returned 1 [0272.884] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.884] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.885] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.885] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.885] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.885] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0272.885] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570858) returned 1 [0272.885] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.886] CryptHashData (hHash=0x55e710, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.886] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e390) returned 1 [0272.886] CryptDestroyHash (hHash=0x55e710) returned 1 [0272.886] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.886] GetLastError () returned 0x0 [0272.886] GetLastError () returned 0x0 [0272.886] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.887] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.889] WriteFile (in: hFile=0x244, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.890] SetEndOfFile (hFile=0x244) returned 1 [0272.890] CloseHandle (hObject=0x244) returned 1 [0272.890] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.891] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.892] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0272.892] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.893] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.894] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.894] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.894] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.894] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.894] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.894] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.894] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.894] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.895] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.895] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0272.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.895] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.895] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.895] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.896] CryptDestroyKey (hKey=0x55e390) returned 1 [0272.896] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0272.896] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x469289d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0272.896] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x469289d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.896] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1 [0272.896] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.896] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.897] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.897] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0272.897] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570f40) returned 1 [0272.898] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.898] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.898] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e690) returned 1 [0272.898] CryptDestroyHash (hHash=0x55e610) returned 1 [0272.898] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.898] GetLastError () returned 0x0 [0272.898] GetLastError () returned 0x0 [0272.898] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.899] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.899] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.900] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\backup\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.901] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.902] SetEndOfFile (hFile=0x248) returned 1 [0272.902] CloseHandle (hObject=0x248) returned 1 [0272.902] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.903] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.903] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.903] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.903] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.903] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.903] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0272.903] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.903] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.904] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.904] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.904] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.904] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.904] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.904] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.904] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.904] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.904] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.904] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.904] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.904] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.904] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0272.904] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.905] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.905] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.905] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.905] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.905] CryptDestroyKey (hKey=0x55e690) returned 1 [0272.905] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0272.905] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Backup\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\backup\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4694ed3f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0272.905] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4694ed3f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.905] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4694ed3f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4694ed3f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4694ed3f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.906] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4694ed3f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4694ed3f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4694ed3f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.906] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0272.906] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x232ead9e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x232ead9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Default", cAlternateFileName="")) returned 1 [0272.906] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.906] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.906] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.906] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.906] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.906] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0272.906] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571270) returned 1 [0272.907] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.907] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.907] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e210) returned 1 [0272.907] CryptDestroyHash (hHash=0x55e910) returned 1 [0272.907] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.907] GetLastError () returned 0x0 [0272.907] GetLastError () returned 0x0 [0272.907] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.908] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.909] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.910] SetEndOfFile (hFile=0x248) returned 1 [0272.910] CloseHandle (hObject=0x248) returned 1 [0272.910] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.911] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.911] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0272.912] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.912] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.912] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.912] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.913] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.913] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.913] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.913] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0272.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.913] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.913] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.913] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.913] CryptDestroyKey (hKey=0x55e210) returned 1 [0272.914] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0272.914] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Default\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\default\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x232ead9e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4694ed3f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0272.914] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x232ead9e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4694ed3f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.914] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x122870, dwReserved0=0x405534, dwReserved1=0x0, cFileName="GapaEngine.dll", cAlternateFileName="")) returned 1 [0272.914] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22fece61, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x22fece61, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x23275656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x122870, dwReserved0=0x405534, dwReserved1=0x0, cFileName="GapaEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GAPAEN~1.CRY")) returned 1 [0272.914] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4694ed3f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4694ed3f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46975381, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.914] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3226d0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe3226d0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe36eb85, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2060ab0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MpAsBase.vdm", cAlternateFileName="")) returned 1 [0272.914] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3226d0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe3226d0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe3226d0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x283f18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MpAsDlta.vdm", cAlternateFileName="")) returned 1 [0272.914] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe36eb85, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe36eb85, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe42d742, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4b6f4a0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MpAvBase.vdm", cAlternateFileName="")) returned 1 [0272.914] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3226d0, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe3226d0, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe3226d0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x63f110, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MpAvDlta.vdm", cAlternateFileName="")) returned 1 [0272.914] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe3226d0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa8cc80, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MpEngine.dll", cAlternateFileName="")) returned 1 [0272.914] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232ead9e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x232ead9e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x23f1532c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa8cc80, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MpEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MPENGI~1.CRY")) returned 1 [0272.914] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd1d10, dwReserved0=0x405534, dwReserved1=0x0, cFileName="NisBase.vdm", cAlternateFileName="")) returned 1 [0272.914] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd3aa0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="NisFull.vdm", cAlternateFileName="")) returned 1 [0272.914] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2fc46e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0xe2fc46e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0xe2fc46e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd3aa0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="NisFull.vdm", cAlternateFileName="")) returned 0 [0272.914] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0272.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x469289d5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x469289d5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x469289d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6d64762e, dwReserved1=0x72632e6c, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.915] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d64762e, dwReserved1=0x72632e6c, cFileName="NisBackup", cAlternateFileName="NISBAC~1")) returned 1 [0272.915] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.915] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.915] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.915] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.915] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.915] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0272.915] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570c98) returned 1 [0272.916] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.916] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.916] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e750) returned 1 [0272.916] CryptDestroyHash (hHash=0x55e910) returned 1 [0272.916] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.916] GetLastError () returned 0x0 [0272.916] GetLastError () returned 0x0 [0272.916] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.917] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.917] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.918] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\NisBackup\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\nisbackup\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.920] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.921] SetEndOfFile (hFile=0x248) returned 1 [0272.921] CloseHandle (hObject=0x248) returned 1 [0272.921] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.922] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.922] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.922] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.922] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.922] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.922] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0272.923] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.923] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.923] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.923] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.923] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.923] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.923] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.923] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.924] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.924] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.924] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.924] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0272.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.924] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.924] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.924] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.925] CryptDestroyKey (hKey=0x55e750) returned 1 [0272.925] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0272.925] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\NisBackup\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\nisbackup\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46975381, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0272.925] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46975381, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.925] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46975381, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46975381, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46975381, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.925] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46975381, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46975381, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46975381, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.925] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0272.925] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Updates", cAlternateFileName="")) returned 1 [0272.925] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.926] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.926] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.926] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.926] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.926] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0272.926] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570e30) returned 1 [0272.927] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.927] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.927] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e310) returned 1 [0272.927] CryptDestroyHash (hHash=0x55e610) returned 1 [0272.927] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.927] GetLastError () returned 0x0 [0272.927] GetLastError () returned 0x0 [0272.927] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.927] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\updates\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.932] WriteFile (in: hFile=0x248, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.933] SetEndOfFile (hFile=0x248) returned 1 [0272.933] CloseHandle (hObject=0x248) returned 1 [0272.933] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.934] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.934] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.934] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.934] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.934] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.934] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0272.935] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.935] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.935] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.935] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.935] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.935] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.935] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.935] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.935] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.935] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.935] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.936] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.936] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.936] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.936] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0272.936] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.936] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.936] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.936] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.936] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.937] CryptDestroyKey (hKey=0x55e310) returned 1 [0272.937] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0272.937] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\Updates\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\updates\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4699b058, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0272.937] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4699b058, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.937] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4699b058, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4699b058, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4699b058, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.937] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4699b058, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4699b058, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4699b058, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.937] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0272.937] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Updates", cAlternateFileName="")) returned 0 [0272.937] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0272.937] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e7075, dwReserved1=0x5f4f545f, cFileName="Features", cAlternateFileName="")) returned 1 [0272.938] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.938] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.938] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.938] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0272.938] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571050) returned 1 [0272.939] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.939] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.939] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e190) returned 1 [0272.939] CryptDestroyHash (hHash=0x55e910) returned 1 [0272.939] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.939] GetLastError () returned 0x0 [0272.939] GetLastError () returned 0x0 [0272.939] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.941] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.941] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.942] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Features\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\features\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.942] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.943] SetEndOfFile (hFile=0x244) returned 1 [0272.944] CloseHandle (hObject=0x244) returned 1 [0272.944] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.944] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.944] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.945] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.945] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.945] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.945] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0272.945] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.945] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.945] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.945] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.945] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.945] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.945] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.946] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.946] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.946] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.946] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.946] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.946] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.946] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.946] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0272.946] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.946] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.946] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.946] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.946] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.947] CryptDestroyKey (hKey=0x55e190) returned 1 [0272.947] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0272.947] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Features\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\features\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x469c1ba7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0272.947] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x469c1ba7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.947] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x469c1ba7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x469c1ba7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x469c1ba7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.947] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x469c1ba7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x469c1ba7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x469c1ba7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.947] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0272.947] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468dc5e4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x468dc5e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x468dc5e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.947] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCopy", cAlternateFileName="LOCALC~1")) returned 1 [0272.947] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.947] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.948] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.948] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.948] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.948] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0272.948] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571408) returned 1 [0272.948] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.948] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.948] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e390) returned 1 [0272.949] CryptDestroyHash (hHash=0x55e910) returned 1 [0272.949] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.949] GetLastError () returned 0x0 [0272.949] GetLastError () returned 0x0 [0272.949] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.949] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\localcopy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.950] WriteFile (in: hFile=0x244, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.951] SetEndOfFile (hFile=0x244) returned 1 [0272.951] CloseHandle (hObject=0x244) returned 1 [0272.951] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.952] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.952] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.952] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.952] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.953] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0272.953] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.954] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.954] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.955] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.955] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.955] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0272.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.960] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.960] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.960] CryptDestroyKey (hKey=0x55e390) returned 1 [0272.960] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0272.961] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\LocalCopy\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\localcopy\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x469c1ba7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0272.961] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x469c1ba7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.961] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x469c1ba7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x469c1ba7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x469c1ba7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.961] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x469c1ba7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x469c1ba7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x469c1ba7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.961] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0272.961] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Network Inspection System", cAlternateFileName="NETWOR~1")) returned 1 [0272.962] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.962] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.962] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.962] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0272.962] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570b00) returned 1 [0272.963] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.963] CryptHashData (hHash=0x55e2d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.963] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e390) returned 1 [0272.963] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0272.963] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.963] GetLastError () returned 0x0 [0272.963] GetLastError () returned 0x0 [0272.963] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.964] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.965] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.965] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\network inspection system\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.967] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.968] SetEndOfFile (hFile=0x244) returned 1 [0272.968] CloseHandle (hObject=0x244) returned 1 [0272.968] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.969] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.969] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.969] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.969] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0272.970] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.970] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.970] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.970] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.970] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.970] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.970] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.970] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.970] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.970] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.970] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.971] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.971] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.971] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.971] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0272.971] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.972] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.972] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.972] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.973] CryptDestroyKey (hKey=0x55e390) returned 1 [0272.973] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0272.973] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\network inspection system\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x469e767b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0272.973] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd525f5, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x469e767b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.973] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x469e767b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x469e767b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x469e767b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.973] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf926e663, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf926e663, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1 [0272.973] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.973] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.973] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.973] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0272.974] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571518) returned 1 [0272.974] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0272.974] CryptHashData (hHash=0x55e310, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.974] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e210) returned 1 [0272.974] CryptDestroyHash (hHash=0x55e310) returned 1 [0272.974] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f190*=0x18) returned 1 [0272.974] GetLastError () returned 0x0 [0272.975] GetLastError () returned 0x0 [0272.975] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.975] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System\\Support\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\network inspection system\\support\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0272.976] WriteFile (in: hFile=0x248, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.978] SetEndOfFile (hFile=0x248) returned 1 [0272.978] CloseHandle (hObject=0x248) returned 1 [0272.978] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.979] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.979] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0272.980] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.980] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.980] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.980] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.980] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.980] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.981] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.981] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.981] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.981] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.981] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.981] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0272.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.981] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.981] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.981] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.982] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.982] CryptDestroyKey (hKey=0x55e210) returned 1 [0272.982] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0272.982] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Network Inspection System\\Support\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\network inspection system\\support\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf926e663, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46a0d810, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0272.983] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf926e663, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46a0d810, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.983] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a0d810, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46a0d810, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46a0d810, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.983] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf926e663, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf926e663, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3ae0e073, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x64b7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="NisLog.txt", cAlternateFileName="")) returned 1 [0272.983] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf926e663, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf926e663, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x3ae0e073, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x64b7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="NisLog.txt", cAlternateFileName="")) returned 0 [0272.983] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0272.983] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf926e663, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf926e663, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 0 [0272.983] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0272.983] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Quarantine", cAlternateFileName="QUARAN~1")) returned 1 [0272.983] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.983] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.983] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.983] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0272.984] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571490) returned 1 [0272.984] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.984] CryptHashData (hHash=0x55e2d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.984] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0272.984] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0272.984] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.984] GetLastError () returned 0x0 [0272.984] GetLastError () returned 0x0 [0272.984] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.985] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0272.986] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.987] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\quarantine\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.987] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.988] SetEndOfFile (hFile=0x244) returned 1 [0272.989] CloseHandle (hObject=0x244) returned 1 [0272.989] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.989] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.989] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.990] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.990] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0272.990] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.990] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.990] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.990] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.991] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.991] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.991] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0272.991] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0272.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0272.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.991] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0272.992] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.992] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.992] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0272.992] CryptDestroyKey (hKey=0x55e610) returned 1 [0272.992] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0272.992] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Quarantine\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\quarantine\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46a33992, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0272.992] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x46a33992, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.992] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a33992, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46a33992, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46a33992, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0272.992] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a33992, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46a33992, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46a33992, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0272.992] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0272.993] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x24febda4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x24febda4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Scans", cAlternateFileName="")) returned 1 [0272.993] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0272.993] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0272.993] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0272.993] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0272.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0272.993] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570b00) returned 1 [0272.994] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0272.994] CryptHashData (hHash=0x55e390, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0272.994] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e910) returned 1 [0272.994] CryptDestroyHash (hHash=0x55e390) returned 1 [0272.994] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0272.994] GetLastError () returned 0x0 [0272.994] GetLastError () returned 0x0 [0272.994] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0272.995] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0272.995] WriteFile (in: hFile=0x244, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0272.997] SetEndOfFile (hFile=0x244) returned 1 [0272.997] CloseHandle (hObject=0x244) returned 1 [0272.997] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0272.998] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0272.998] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0272.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0272.998] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.999] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.999] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.999] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0272.999] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0272.999] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.999] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0272.999] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.999] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0272.999] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0272.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.000] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.000] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.000] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0273.000] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.000] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.000] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.000] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.000] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.000] CryptDestroyKey (hKey=0x55e910) returned 1 [0273.000] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0273.001] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x24febda4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46a33992, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0273.001] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x24febda4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46a33992, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.002] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CleanFileTelemetry", cAlternateFileName="CLEANF~1")) returned 1 [0273.002] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.002] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.002] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.002] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.004] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571160) returned 1 [0273.004] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0273.004] CryptHashData (hHash=0x55e690, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.004] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e390) returned 1 [0273.005] CryptDestroyHash (hHash=0x55e690) returned 1 [0273.005] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0273.005] GetLastError () returned 0x0 [0273.005] GetLastError () returned 0x0 [0273.005] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.006] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0273.006] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.007] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanFileTelemetry\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanfiletelemetry\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0273.008] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.010] SetEndOfFile (hFile=0x248) returned 1 [0273.010] CloseHandle (hObject=0x248) returned 1 [0273.010] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.011] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.011] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.011] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.011] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.011] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.011] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.012] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.012] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.012] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.012] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0273.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.013] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.013] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.013] CryptDestroyKey (hKey=0x55e390) returned 1 [0273.013] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0273.013] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanFileTelemetry\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanfiletelemetry\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46a59cb3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0273.014] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46a59cb3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.014] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a59cb3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46a59cb3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46a59cb3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.014] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a59cb3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46a59cb3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46a59cb3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.014] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0273.014] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="CleanStore", cAlternateFileName="CLEANS~1")) returned 1 [0273.014] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.014] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.014] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.014] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.015] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571408) returned 1 [0273.015] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0273.015] CryptHashData (hHash=0x55e190, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.015] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0273.015] CryptDestroyHash (hHash=0x55e190) returned 1 [0273.015] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f190*=0x18) returned 1 [0273.015] GetLastError () returned 0x0 [0273.016] GetLastError () returned 0x0 [0273.016] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.016] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0273.019] WriteFile (in: hFile=0x248, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.020] SetEndOfFile (hFile=0x248) returned 1 [0273.020] CloseHandle (hObject=0x248) returned 1 [0273.020] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.021] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.021] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.021] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.021] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.022] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.022] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.022] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.022] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.022] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.022] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.022] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.022] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.023] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.023] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.023] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0273.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.023] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.024] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.024] CryptDestroyKey (hKey=0x55e610) returned 1 [0273.024] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0273.024] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46a802ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0273.024] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46a802ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.024] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Entries", cAlternateFileName="")) returned 1 [0273.025] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.025] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.025] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.025] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.025] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0273.026] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.026] CryptHashData (hHash=0x55e690, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.026] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0273.026] CryptDestroyHash (hHash=0x55e690) returned 1 [0273.026] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.026] GetLastError () returned 0x0 [0273.026] GetLastError () returned 0x0 [0273.026] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.027] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0273.027] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.028] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Entries\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\entries\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.029] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.030] SetEndOfFile (hFile=0x24c) returned 1 [0273.030] CloseHandle (hObject=0x24c) returned 1 [0273.030] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.031] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.031] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.031] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.031] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.032] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.032] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.032] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.032] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0273.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.032] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.032] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.033] CryptDestroyKey (hKey=0x55e610) returned 1 [0273.033] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0273.033] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Entries\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\entries\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46a802ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0273.033] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46a802ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.033] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a802ea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46a802ea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46a802ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.033] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a802ea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46a802ea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46a802ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.033] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0273.033] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a59cb3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46a59cb3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46a802ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.034] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ResourceData", cAlternateFileName="RESOUR~1")) returned 1 [0273.034] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.034] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.034] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.034] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.034] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0273.035] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.035] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.035] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0273.035] CryptDestroyHash (hHash=0x55e190) returned 1 [0273.035] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.035] GetLastError () returned 0x0 [0273.035] GetLastError () returned 0x0 [0273.035] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.036] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\ResourceData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\resourcedata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.036] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.037] SetEndOfFile (hFile=0x24c) returned 1 [0273.037] CloseHandle (hObject=0x24c) returned 1 [0273.037] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.039] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.039] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.039] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.040] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.040] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.040] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.040] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.040] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0273.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.041] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.041] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.041] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.041] CryptDestroyKey (hKey=0x55e310) returned 1 [0273.041] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0273.041] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\ResourceData\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\resourcedata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46aa62dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0273.041] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46aa62dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.041] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46aa62dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46aa62dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46aa62dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.041] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46aa62dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46aa62dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46aa62dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.042] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0273.042] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Resources", cAlternateFileName="RESOUR~2")) returned 1 [0273.042] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.042] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.042] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.042] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.042] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5706c0) returned 1 [0273.043] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.043] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.043] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0273.043] CryptDestroyHash (hHash=0x55e710) returned 1 [0273.043] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.043] GetLastError () returned 0x0 [0273.043] GetLastError () returned 0x0 [0273.043] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.044] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0273.044] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.045] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Resources\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\resources\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.047] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.048] SetEndOfFile (hFile=0x24c) returned 1 [0273.049] CloseHandle (hObject=0x24c) returned 1 [0273.049] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.050] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.050] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.050] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.050] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.050] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.050] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.050] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.051] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.051] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.051] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.051] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.051] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.051] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.051] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.051] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.051] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.051] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.051] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.051] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.051] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0273.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.052] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.052] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.052] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.052] CryptDestroyKey (hKey=0x55e610) returned 1 [0273.052] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0273.052] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\CleanStore\\Resources\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\cleanstore\\resources\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46aa62dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0273.052] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46aa62dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.053] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46aa62dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46aa62dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46aa62dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.053] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46aa62dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46aa62dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46aa62dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.053] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0273.053] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Resources", cAlternateFileName="RESOUR~2")) returned 0 [0273.053] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0273.053] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74617365, dwReserved1=0x5f4f5461, cFileName="History", cAlternateFileName="")) returned 1 [0273.053] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.053] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.053] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.053] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.053] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.053] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.053] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571380) returned 1 [0273.054] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0273.054] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.054] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e190) returned 1 [0273.054] CryptDestroyHash (hHash=0x55e610) returned 1 [0273.054] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0273.054] GetLastError () returned 0x0 [0273.054] GetLastError () returned 0x0 [0273.054] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.055] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0273.055] WriteFile (in: hFile=0x248, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.056] SetEndOfFile (hFile=0x248) returned 1 [0273.057] CloseHandle (hObject=0x248) returned 1 [0273.057] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.057] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.058] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.058] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.058] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.058] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.059] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.059] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.059] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0273.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.059] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.059] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.060] CryptDestroyKey (hKey=0x55e190) returned 1 [0273.060] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0273.060] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46acd037, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0273.060] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xd06b4edd, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46acd037, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.060] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x23f87a05, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x23f87a05, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CacheManager", cAlternateFileName="CACHEM~1")) returned 1 [0273.060] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.060] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.060] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.060] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.060] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0273.061] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.061] CryptHashData (hHash=0x55e690, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.061] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0273.061] CryptDestroyHash (hHash=0x55e690) returned 1 [0273.061] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.061] GetLastError () returned 0x0 [0273.061] GetLastError () returned 0x0 [0273.061] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.062] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0273.062] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.063] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.065] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.066] SetEndOfFile (hFile=0x24c) returned 1 [0273.066] CloseHandle (hObject=0x24c) returned 1 [0273.067] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.067] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.067] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.067] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.068] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.068] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.068] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.068] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.068] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.068] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.068] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.069] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0273.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.069] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.069] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.069] CryptDestroyKey (hKey=0x55e710) returned 1 [0273.069] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0273.069] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x23f87a05, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46acd037, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0273.070] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x23f87a05, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46acd037, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.070] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46acd037, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46acd037, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46af3312, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.070] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f87a05, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x23f87a05, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x23f87a05, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MpScanCache-0.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MPSCAN~1.CRY")) returned 1 [0273.070] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23f87a05, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x23f87a05, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x23f87a05, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MpScanCache-0.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MPSCAN~1.CRY")) returned 0 [0273.070] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0273.070] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46acd037, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46acd037, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46acd037, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x65686361, dwReserved1=0x622e302d, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.070] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65686361, dwReserved1=0x622e302d, cFileName="Mput", cAlternateFileName="")) returned 1 [0273.070] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.070] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.070] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.070] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.070] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.070] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.070] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0273.071] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.071] CryptHashData (hHash=0x55e690, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.071] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0273.071] CryptDestroyHash (hHash=0x55e690) returned 1 [0273.071] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.071] GetLastError () returned 0x0 [0273.071] GetLastError () returned 0x0 [0273.071] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.072] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.072] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.073] SetEndOfFile (hFile=0x24c) returned 1 [0273.075] CloseHandle (hObject=0x24c) returned 1 [0273.075] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.075] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.075] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.075] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.076] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.076] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.076] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.076] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.076] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.076] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.076] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.076] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.077] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.077] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.077] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.077] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.077] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0273.077] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.077] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.077] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.077] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.078] CryptDestroyKey (hKey=0x55e290) returned 1 [0273.078] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0273.078] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46af3312, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0273.078] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46af3312, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.078] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46af3312, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46af3312, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46af3312, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.078] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MputHistory", cAlternateFileName="MPUTHI~1")) returned 1 [0273.078] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.078] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.078] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.078] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.078] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0273.079] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0273.079] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.079] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0273.079] CryptDestroyHash (hHash=0x55e210) returned 1 [0273.079] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0273.079] GetLastError () returned 0x0 [0273.079] GetLastError () returned 0x0 [0273.079] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.080] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0273.082] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.083] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0273.085] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.087] SetEndOfFile (hFile=0x250) returned 1 [0273.087] CloseHandle (hObject=0x250) returned 1 [0273.087] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.088] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.088] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.089] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.089] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.089] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.089] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.089] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.089] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.089] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.090] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.090] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.090] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.090] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.090] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.090] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.090] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.090] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0273.090] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.090] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.090] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.090] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.091] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.091] CryptDestroyKey (hKey=0x55e290) returned 1 [0273.091] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0273.091] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46b18ca4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0273.091] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46b18ca4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.091] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="00", cAlternateFileName="")) returned 1 [0273.091] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.092] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.092] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.092] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.092] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.092] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.092] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x5709f0) returned 1 [0273.093] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.093] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.093] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e750) returned 1 [0273.093] CryptDestroyHash (hHash=0x55e710) returned 1 [0273.093] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.093] GetLastError () returned 0x0 [0273.093] GetLastError () returned 0x0 [0273.093] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.094] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\00\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\00\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.095] WriteFile (in: hFile=0x254, lpBuffer=0x23e524c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e524c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.096] SetEndOfFile (hFile=0x254) returned 1 [0273.096] CloseHandle (hObject=0x254) returned 1 [0273.097] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.097] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.097] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.097] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.098] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.098] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.098] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.098] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.099] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.099] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.099] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.099] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.099] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.099] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.099] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.099] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0273.099] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.099] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.099] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.099] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.099] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.100] CryptDestroyKey (hKey=0x55e750) returned 1 [0273.100] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0273.100] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\00\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\00\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46b18ca4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0273.100] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46b18ca4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.100] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="192", cAlternateFileName="")) returned 1 [0273.100] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b18ca4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46b18ca4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46b3eab3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.100] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b18ca4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46b18ca4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46b3eab3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.100] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0273.100] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="01", cAlternateFileName="")) returned 1 [0273.100] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.100] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.100] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.100] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.100] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.101] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.101] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570b00) returned 1 [0273.101] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.101] CryptHashData (hHash=0x55e390, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.101] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e710) returned 1 [0273.101] CryptDestroyHash (hHash=0x55e390) returned 1 [0273.101] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.101] GetLastError () returned 0x0 [0273.101] GetLastError () returned 0x0 [0273.102] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.102] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0273.103] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.103] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\01\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\01\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.104] WriteFile (in: hFile=0x254, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.105] SetEndOfFile (hFile=0x254) returned 1 [0273.105] CloseHandle (hObject=0x254) returned 1 [0273.105] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.106] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.106] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.106] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.107] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.107] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.107] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.107] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.107] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0273.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.108] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.108] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.108] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.108] CryptDestroyKey (hKey=0x55e710) returned 1 [0273.108] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0273.108] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\01\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\01\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46b3eab3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0273.108] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46b3eab3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.108] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="198", cAlternateFileName="")) returned 1 [0273.108] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="263", cAlternateFileName="")) returned 1 [0273.109] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="271", cAlternateFileName="")) returned 1 [0273.109] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b3eab3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46b3eab3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46b3eab3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.109] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b3eab3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46b3eab3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46b3eab3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.109] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0273.109] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="02", cAlternateFileName="")) returned 1 [0273.109] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.109] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.109] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.109] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.109] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.109] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.109] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570c98) returned 1 [0273.110] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.110] CryptHashData (hHash=0x55e710, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.110] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0273.110] CryptDestroyHash (hHash=0x55e710) returned 1 [0273.110] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.110] GetLastError () returned 0x0 [0273.110] GetLastError () returned 0x0 [0273.110] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.111] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\02\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\02\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.112] WriteFile (in: hFile=0x254, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.113] SetEndOfFile (hFile=0x254) returned 1 [0273.113] CloseHandle (hObject=0x254) returned 1 [0273.113] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.114] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.114] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.114] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.114] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.114] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.114] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.114] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.115] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.115] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.115] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.115] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.115] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0273.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.116] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.116] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.116] CryptDestroyKey (hKey=0x55e210) returned 1 [0273.116] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0273.116] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\02\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\02\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46b3eab3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0273.116] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46b3eab3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.116] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="100015", cAlternateFileName="")) returned 1 [0273.116] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="109004", cAlternateFileName="")) returned 1 [0273.117] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="303", cAlternateFileName="")) returned 1 [0273.117] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b3eab3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46b3eab3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46b65307, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.117] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b3eab3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46b3eab3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46b65307, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.117] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0273.117] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="03", cAlternateFileName="")) returned 1 [0273.117] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.117] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.117] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.117] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.117] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570d20) returned 1 [0273.118] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.118] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.118] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0273.118] CryptDestroyHash (hHash=0x55e710) returned 1 [0273.118] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.118] GetLastError () returned 0x0 [0273.118] GetLastError () returned 0x0 [0273.118] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.119] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0273.120] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.120] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\03\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\03\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.123] WriteFile (in: hFile=0x254, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.124] SetEndOfFile (hFile=0x254) returned 1 [0273.124] CloseHandle (hObject=0x254) returned 1 [0273.124] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.125] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.125] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.125] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.125] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.126] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.126] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.126] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.126] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.126] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.126] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.126] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.126] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.127] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.127] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.127] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.127] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.127] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.127] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0273.127] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.127] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.127] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.128] CryptDestroyKey (hKey=0x55e210) returned 1 [0273.128] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0273.128] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\03\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\03\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46b65307, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0273.128] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46b65307, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.128] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="324", cAlternateFileName="")) returned 1 [0273.128] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b65307, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46b65307, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46b65307, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.128] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b65307, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46b65307, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46b65307, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.128] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0273.129] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="04", cAlternateFileName="")) returned 1 [0273.129] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.129] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.129] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.129] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.129] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571270) returned 1 [0273.130] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.130] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.130] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e290) returned 1 [0273.130] CryptDestroyHash (hHash=0x55e210) returned 1 [0273.130] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.130] GetLastError () returned 0x0 [0273.130] GetLastError () returned 0x0 [0273.130] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.130] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\04\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\04\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.131] WriteFile (in: hFile=0x254, lpBuffer=0x23e529c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e529c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.132] SetEndOfFile (hFile=0x254) returned 1 [0273.132] CloseHandle (hObject=0x254) returned 1 [0273.132] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.133] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.133] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.133] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.134] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.134] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.134] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.134] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.134] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.134] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.134] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.134] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.135] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.135] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.135] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.135] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.135] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.135] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0273.135] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.135] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.135] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.135] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.135] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.136] CryptDestroyKey (hKey=0x55e290) returned 1 [0273.136] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0273.136] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\04\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\04\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46b8af19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0273.136] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46b8af19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.136] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="109005", cAlternateFileName="")) returned 1 [0273.136] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="259", cAlternateFileName="")) returned 1 [0273.136] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="261", cAlternateFileName="")) returned 1 [0273.136] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b8af19, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46b8af19, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46b8af19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.136] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b8af19, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46b8af19, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46b8af19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.136] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0273.136] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="05", cAlternateFileName="")) returned 1 [0273.136] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.136] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.137] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.137] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.137] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x5712f8) returned 1 [0273.137] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.137] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.137] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e750) returned 1 [0273.137] CryptDestroyHash (hHash=0x55e710) returned 1 [0273.137] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.137] GetLastError () returned 0x0 [0273.138] GetLastError () returned 0x0 [0273.138] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.138] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0273.139] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.139] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\05\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\05\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.140] WriteFile (in: hFile=0x254, lpBuffer=0x23e35a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e35a4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.141] SetEndOfFile (hFile=0x254) returned 1 [0273.141] CloseHandle (hObject=0x254) returned 1 [0273.141] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.142] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.142] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.143] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.143] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.143] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.143] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.144] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.144] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.144] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.144] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.144] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.144] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.144] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0273.144] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.144] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.145] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.145] CryptDestroyKey (hKey=0x55e750) returned 1 [0273.145] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0273.145] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\05\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\05\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46b8af19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0273.145] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46b8af19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.145] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="191", cAlternateFileName="")) returned 1 [0273.145] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="199", cAlternateFileName="")) returned 1 [0273.145] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="317", cAlternateFileName="")) returned 1 [0273.145] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b8af19, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46b8af19, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46b8af19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.145] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b8af19, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46b8af19, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46b8af19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.146] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0273.146] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="07", cAlternateFileName="")) returned 1 [0273.146] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.146] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.146] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.146] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.146] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.146] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.146] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571518) returned 1 [0273.147] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.147] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.147] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0273.147] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0273.147] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.147] GetLastError () returned 0x0 [0273.147] GetLastError () returned 0x0 [0273.147] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.148] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\07\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\07\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.148] WriteFile (in: hFile=0x254, lpBuffer=0x23e35e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e35e4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.149] SetEndOfFile (hFile=0x254) returned 1 [0273.149] CloseHandle (hObject=0x254) returned 1 [0273.150] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.150] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.150] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.151] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.151] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.151] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.151] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.151] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.151] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.151] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.151] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.152] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.152] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.152] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0273.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.152] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.152] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.153] CryptDestroyKey (hKey=0x55e210) returned 1 [0273.153] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0273.153] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\07\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\07\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46bb11c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0273.153] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46bb11c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.153] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="273", cAlternateFileName="")) returned 1 [0273.153] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46bb11c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46bb11c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46bb11c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.153] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46bb11c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46bb11c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46bb11c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.153] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0273.153] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="09", cAlternateFileName="")) returned 1 [0273.153] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.153] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.154] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.154] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.154] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x5708e0) returned 1 [0273.154] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.154] CryptHashData (hHash=0x55e390, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.154] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0273.154] CryptDestroyHash (hHash=0x55e390) returned 1 [0273.154] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.154] GetLastError () returned 0x0 [0273.154] GetLastError () returned 0x0 [0273.155] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.155] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\09\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\09\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.158] WriteFile (in: hFile=0x254, lpBuffer=0x23e529c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e529c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.159] SetEndOfFile (hFile=0x254) returned 1 [0273.159] CloseHandle (hObject=0x254) returned 1 [0273.160] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.160] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.160] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.161] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.161] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.161] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.161] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.161] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.161] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.161] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.161] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.161] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.161] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.161] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.162] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.162] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.162] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.162] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.162] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.162] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.162] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.162] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0273.162] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.162] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.162] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.162] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.162] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.163] CryptDestroyKey (hKey=0x55e210) returned 1 [0273.163] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0273.163] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\09\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\09\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46bb11c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0273.163] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46bb11c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.163] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="287", cAlternateFileName="")) returned 1 [0273.163] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46bb11c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46bb11c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46bd741b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.163] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46bb11c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46bb11c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46bd741b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.163] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0273.163] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="10", cAlternateFileName="")) returned 1 [0273.163] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.163] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.163] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.164] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.164] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.164] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571160) returned 1 [0273.164] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.164] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.164] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e310) returned 1 [0273.164] CryptDestroyHash (hHash=0x55e710) returned 1 [0273.164] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.164] GetLastError () returned 0x0 [0273.164] GetLastError () returned 0x0 [0273.164] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.166] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0273.166] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.166] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\10\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\10\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.167] WriteFile (in: hFile=0x254, lpBuffer=0x23e35a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e35a4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.168] SetEndOfFile (hFile=0x254) returned 1 [0273.168] CloseHandle (hObject=0x254) returned 1 [0273.168] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.169] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.169] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.169] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.169] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.169] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.169] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.170] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.170] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.170] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.170] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.170] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.170] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.170] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.170] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.170] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.170] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.171] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.171] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.171] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0273.171] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.171] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.171] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.171] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.171] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.171] CryptDestroyKey (hKey=0x55e310) returned 1 [0273.171] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0273.171] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\10\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\10\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46bd741b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0273.172] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46bd741b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.172] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="197", cAlternateFileName="")) returned 1 [0273.172] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="267", cAlternateFileName="")) returned 1 [0273.172] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="286", cAlternateFileName="")) returned 1 [0273.172] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46bd741b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46bd741b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46bd741b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.172] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46bd741b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46bd741b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46bd741b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.172] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0273.172] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="11", cAlternateFileName="")) returned 1 [0273.172] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.172] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.172] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.172] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.172] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x5708e0) returned 1 [0273.173] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.173] CryptHashData (hHash=0x55e710, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.173] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e310) returned 1 [0273.173] CryptDestroyHash (hHash=0x55e710) returned 1 [0273.173] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.173] GetLastError () returned 0x0 [0273.173] GetLastError () returned 0x0 [0273.173] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.174] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\11\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\11\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.194] WriteFile (in: hFile=0x254, lpBuffer=0x23e35e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e35e4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.195] SetEndOfFile (hFile=0x254) returned 1 [0273.195] CloseHandle (hObject=0x254) returned 1 [0273.195] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.196] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.196] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.196] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.196] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.196] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.196] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.197] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.197] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.197] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.197] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.197] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.198] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0273.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.198] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.198] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.198] CryptDestroyKey (hKey=0x55e310) returned 1 [0273.198] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0273.198] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\11\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\11\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46bd741b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0273.199] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46bd741b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.199] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="200", cAlternateFileName="")) returned 1 [0273.199] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46bd741b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46bd741b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46c2397f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.199] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46bd741b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46bd741b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46c2397f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.199] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0273.199] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="12", cAlternateFileName="")) returned 1 [0273.199] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.199] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.199] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.199] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.199] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.199] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.199] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571160) returned 1 [0273.200] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.200] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.200] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0273.200] CryptDestroyHash (hHash=0x55e710) returned 1 [0273.200] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.200] GetLastError () returned 0x0 [0273.200] GetLastError () returned 0x0 [0273.200] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.201] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0273.202] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.202] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\12\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\12\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.203] WriteFile (in: hFile=0x254, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.204] SetEndOfFile (hFile=0x254) returned 1 [0273.204] CloseHandle (hObject=0x254) returned 1 [0273.205] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.378] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.378] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.379] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.379] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.379] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.379] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.379] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.379] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.379] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.380] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.380] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.380] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.380] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.380] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0273.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.380] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.380] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.380] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.381] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.381] CryptDestroyKey (hKey=0x55e210) returned 1 [0273.381] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0273.381] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\12\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\12\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46c2397f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0273.381] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46c2397f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.382] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="194", cAlternateFileName="")) returned 1 [0273.382] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46c2397f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46c2397f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46c2397f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.382] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46c2397f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46c2397f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46c2397f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.382] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0273.382] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="13", cAlternateFileName="")) returned 1 [0273.382] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.382] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.382] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.382] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.382] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.383] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570fc8) returned 1 [0273.383] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.383] CryptHashData (hHash=0x55e210, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.383] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e750) returned 1 [0273.384] CryptDestroyHash (hHash=0x55e210) returned 1 [0273.384] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.384] GetLastError () returned 0x0 [0273.384] GetLastError () returned 0x0 [0273.384] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.384] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\13\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\13\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.393] WriteFile (in: hFile=0x254, lpBuffer=0x23e529c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e529c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.402] SetEndOfFile (hFile=0x254) returned 1 [0273.402] CloseHandle (hObject=0x254) returned 1 [0273.402] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.403] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.404] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.404] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.404] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.404] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.404] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.404] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.405] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.405] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.405] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.405] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.405] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.405] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.405] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.405] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0273.406] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.406] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.406] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.406] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.406] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.406] CryptDestroyKey (hKey=0x55e750) returned 1 [0273.406] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0273.406] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\13\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\13\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46ded641, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0273.407] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46ded641, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.407] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="278", cAlternateFileName="")) returned 1 [0273.407] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ded641, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46ded641, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46e1378d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.407] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ded641, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46ded641, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46e1378d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.407] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0273.407] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="14", cAlternateFileName="")) returned 1 [0273.407] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.407] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.408] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.408] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.408] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.408] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.408] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570da8) returned 1 [0273.409] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.409] CryptHashData (hHash=0x55e290, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.409] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e710) returned 1 [0273.409] CryptDestroyHash (hHash=0x55e290) returned 1 [0273.409] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.409] GetLastError () returned 0x0 [0273.409] GetLastError () returned 0x0 [0273.409] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.410] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0273.411] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.411] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\14\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\14\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.412] WriteFile (in: hFile=0x254, lpBuffer=0x23e3534*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3534*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.414] SetEndOfFile (hFile=0x254) returned 1 [0273.414] CloseHandle (hObject=0x254) returned 1 [0273.414] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.415] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.415] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.416] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.416] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.416] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.417] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.417] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.417] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0273.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.417] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.418] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.418] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.418] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.418] CryptDestroyKey (hKey=0x55e710) returned 1 [0273.418] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0273.418] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\14\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\14\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46e399cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0273.419] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46e399cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.419] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9664", cAlternateFileName="")) returned 1 [0273.419] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46e399cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46e399cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46e399cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.419] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46e399cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46e399cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46e399cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.419] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0273.419] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="15", cAlternateFileName="")) returned 1 [0273.419] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.419] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.419] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.419] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.420] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570748) returned 1 [0273.420] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.420] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.420] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e310) returned 1 [0273.420] CryptDestroyHash (hHash=0x55e710) returned 1 [0273.421] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.421] GetLastError () returned 0x0 [0273.421] GetLastError () returned 0x0 [0273.421] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.421] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\15\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\15\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.422] WriteFile (in: hFile=0x254, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.424] SetEndOfFile (hFile=0x254) returned 1 [0273.439] CloseHandle (hObject=0x254) returned 1 [0273.439] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.441] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.441] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.442] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.442] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.442] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.442] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.443] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.443] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.443] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.443] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0273.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.443] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.443] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.443] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.444] CryptDestroyKey (hKey=0x55e310) returned 1 [0273.444] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0273.444] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\15\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\15\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46e399cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0273.444] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46e399cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.444] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="196", cAlternateFileName="")) returned 1 [0273.444] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="262", cAlternateFileName="")) returned 1 [0273.445] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="288", cAlternateFileName="")) returned 1 [0273.445] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46e399cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46e399cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46e5fca8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.445] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46e399cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46e399cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46e5fca8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.445] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0273.445] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="17", cAlternateFileName="")) returned 1 [0273.445] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.445] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.445] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.445] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.446] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570e30) returned 1 [0273.446] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.446] CryptHashData (hHash=0x55e390, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.446] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e710) returned 1 [0273.446] CryptDestroyHash (hHash=0x55e390) returned 1 [0273.446] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.446] GetLastError () returned 0x0 [0273.447] GetLastError () returned 0x0 [0273.447] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.448] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0273.448] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.449] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\17\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\17\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.450] WriteFile (in: hFile=0x254, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.451] SetEndOfFile (hFile=0x254) returned 1 [0273.451] CloseHandle (hObject=0x254) returned 1 [0273.451] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.452] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.452] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.452] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.452] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.453] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.453] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.453] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.453] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.453] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.453] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.453] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.454] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.454] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.454] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.454] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.454] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.454] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.454] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.454] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0273.454] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.454] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.454] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.454] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.455] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.455] CryptDestroyKey (hKey=0x55e710) returned 1 [0273.455] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0273.455] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\17\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\17\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46e86b5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0273.461] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46e86b5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.461] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="109001", cAlternateFileName="")) returned 1 [0273.461] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="193", cAlternateFileName="")) returned 1 [0273.461] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="300", cAlternateFileName="")) returned 1 [0273.461] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46e86b5a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46e86b5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46e86b5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.461] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46e86b5a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46e86b5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46e86b5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.461] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0273.461] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="18", cAlternateFileName="")) returned 1 [0273.461] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.462] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.462] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.462] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.462] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.462] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.462] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570b00) returned 1 [0273.463] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.463] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.463] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e750) returned 1 [0273.463] CryptDestroyHash (hHash=0x55e710) returned 1 [0273.463] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.463] GetLastError () returned 0x0 [0273.463] GetLastError () returned 0x0 [0273.463] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.464] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\18\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\18\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.467] WriteFile (in: hFile=0x254, lpBuffer=0x23e35c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e35c4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.468] SetEndOfFile (hFile=0x254) returned 1 [0273.468] CloseHandle (hObject=0x254) returned 1 [0273.469] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.469] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.470] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.470] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.471] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.471] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.471] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.472] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.472] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.472] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.472] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.472] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.472] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.472] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0273.472] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.472] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.472] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.472] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.472] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.473] CryptDestroyKey (hKey=0x55e750) returned 1 [0273.473] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0273.473] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\18\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\18\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46eac0ed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0273.473] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46eac0ed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.473] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="107001", cAlternateFileName="")) returned 1 [0273.473] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="107002", cAlternateFileName="")) returned 1 [0273.473] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="109002", cAlternateFileName="")) returned 1 [0273.473] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="195", cAlternateFileName="")) returned 1 [0273.474] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46eac0ed, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46eac0ed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46eac0ed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.474] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46eac0ed, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46eac0ed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46eac0ed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.474] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0273.474] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="19", cAlternateFileName="")) returned 1 [0273.474] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.474] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.474] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.474] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.474] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.474] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.474] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570eb8) returned 1 [0273.475] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.475] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.475] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0273.475] CryptDestroyHash (hHash=0x55e710) returned 1 [0273.475] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.475] GetLastError () returned 0x0 [0273.475] GetLastError () returned 0x0 [0273.476] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.476] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\19\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\19\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.477] WriteFile (in: hFile=0x254, lpBuffer=0x23e529c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e529c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.478] SetEndOfFile (hFile=0x254) returned 1 [0273.478] CloseHandle (hObject=0x254) returned 1 [0273.479] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.479] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.480] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.480] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.480] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.480] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.480] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.480] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.480] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.480] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.481] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.481] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.481] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.481] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.481] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.481] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.481] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.481] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.481] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.481] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.481] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.482] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0273.482] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.482] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.482] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.482] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.482] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.482] CryptDestroyKey (hKey=0x55e210) returned 1 [0273.482] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0273.483] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\19\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\19\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46ed232a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0273.483] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46ed232a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.483] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="15038", cAlternateFileName="")) returned 1 [0273.483] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="266", cAlternateFileName="")) returned 1 [0273.483] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="272", cAlternateFileName="")) returned 1 [0273.483] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="328", cAlternateFileName="")) returned 1 [0273.483] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ed232a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46ed232a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46ed232a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.483] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ed232a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46ed232a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46ed232a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.483] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0273.483] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="20", cAlternateFileName="")) returned 1 [0273.483] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.483] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.484] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.484] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.484] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570858) returned 1 [0273.485] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.485] CryptHashData (hHash=0x55e710, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.485] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0273.485] CryptDestroyHash (hHash=0x55e710) returned 1 [0273.485] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.485] GetLastError () returned 0x0 [0273.485] GetLastError () returned 0x0 [0273.485] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.486] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\20\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\20\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.486] WriteFile (in: hFile=0x254, lpBuffer=0x23e35d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e35d4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.490] SetEndOfFile (hFile=0x254) returned 1 [0273.490] CloseHandle (hObject=0x254) returned 1 [0273.490] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.491] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.491] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.492] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.492] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.492] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.492] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.492] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.492] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.493] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.493] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.493] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.493] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.493] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.493] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.493] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.493] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.494] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.494] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.494] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.494] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0273.494] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.494] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.494] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.494] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.494] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.495] CryptDestroyKey (hKey=0x55e210) returned 1 [0273.495] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0273.495] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\20\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\20\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46ed232a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0273.495] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46ed232a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.495] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="189", cAlternateFileName="")) returned 1 [0273.495] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ed232a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46ed232a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46ef85ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.495] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ed232a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46ed232a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46ef85ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.496] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0273.496] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x2a531b1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="21", cAlternateFileName="")) returned 1 [0273.496] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.496] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.496] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.496] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.496] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.496] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.496] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570eb8) returned 1 [0273.497] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.497] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.497] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e710) returned 1 [0273.497] CryptDestroyHash (hHash=0x55e290) returned 1 [0273.497] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.498] GetLastError () returned 0x0 [0273.498] GetLastError () returned 0x0 [0273.498] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.498] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\21\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\21\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.500] WriteFile (in: hFile=0x254, lpBuffer=0x23e3614*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3614*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.502] SetEndOfFile (hFile=0x254) returned 1 [0273.502] CloseHandle (hObject=0x254) returned 1 [0273.502] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.506] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.506] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.506] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.506] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.507] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.507] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.507] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.507] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.507] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.507] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.508] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.508] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.508] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.508] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.508] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.508] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.508] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.508] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.508] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0273.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.509] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.509] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.509] CryptDestroyKey (hKey=0x55e710) returned 1 [0273.509] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0273.509] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\21\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\21\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46ef85ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0273.510] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46ef85ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.510] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="100017", cAlternateFileName="")) returned 1 [0273.510] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="260", cAlternateFileName="")) returned 1 [0273.510] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ef85ea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46ef85ea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46ef85ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.510] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ef85ea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46ef85ea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46ef85ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.510] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0273.510] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="22", cAlternateFileName="")) returned 1 [0273.510] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.510] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.511] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.511] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.511] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570da8) returned 1 [0273.512] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0273.512] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.512] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e710) returned 1 [0273.512] CryptDestroyHash (hHash=0x55e310) returned 1 [0273.512] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0273.512] GetLastError () returned 0x0 [0273.512] GetLastError () returned 0x0 [0273.512] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.513] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\22\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\22\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0273.518] WriteFile (in: hFile=0x254, lpBuffer=0x23e3624*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3624*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.519] SetEndOfFile (hFile=0x254) returned 1 [0273.520] CloseHandle (hObject=0x254) returned 1 [0273.520] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.521] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.521] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.521] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.521] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.521] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.521] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.522] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.522] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.522] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.522] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.522] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.522] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.522] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.523] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.523] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.523] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.523] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.523] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.523] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.523] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.523] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0273.523] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.523] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.524] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.524] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.524] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.524] CryptDestroyKey (hKey=0x55e710) returned 1 [0273.524] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0273.524] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Mput\\MputHistory\\22\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\mput\\mputhistory\\22\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46f20562, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0273.525] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x46f20562, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.525] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="100018", cAlternateFileName="")) returned 1 [0273.525] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="109003", cAlternateFileName="")) returned 1 [0273.525] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="109006", cAlternateFileName="")) returned 1 [0273.525] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x652573eb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x652573eb, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x8433ac93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x405534, dwReserved1=0x0, cFileName="323", cAlternateFileName="")) returned 1 [0273.525] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f20562, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46f20562, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46f44a76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.525] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f20562, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46f20562, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46f44a76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.525] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0273.525] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b18ca4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46b18ca4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46b18ca4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.525] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b18ca4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46b18ca4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46b18ca4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.525] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0273.525] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a531b1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a531b1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x652573eb, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MputHistory", cAlternateFileName="MPUTHI~1")) returned 0 [0273.525] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0273.526] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="RemCheck", cAlternateFileName="")) returned 1 [0273.526] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.526] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.526] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.526] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.526] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570eb8) returned 1 [0273.527] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.527] CryptHashData (hHash=0x55e690, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.527] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0273.527] CryptDestroyHash (hHash=0x55e690) returned 1 [0273.527] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.527] GetLastError () returned 0x0 [0273.527] GetLastError () returned 0x0 [0273.528] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.528] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\RemCheck\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\remcheck\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.529] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3664*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3664*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.531] SetEndOfFile (hFile=0x24c) returned 1 [0273.531] CloseHandle (hObject=0x24c) returned 1 [0273.531] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.532] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.532] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.532] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.532] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.532] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.532] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.533] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.533] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.534] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.534] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.535] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.535] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0273.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.535] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.535] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.536] CryptDestroyKey (hKey=0x55e710) returned 1 [0273.536] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0273.536] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\RemCheck\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\remcheck\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46f44a76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0273.536] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46f44a76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.536] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f44a76, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46f44a76, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46f44a76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.536] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f44a76, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46f44a76, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46f44a76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.537] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0273.537] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Results", cAlternateFileName="")) returned 1 [0273.537] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.537] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.537] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.537] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.537] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571518) returned 1 [0273.538] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.538] CryptHashData (hHash=0x55e750, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.538] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0273.538] CryptDestroyHash (hHash=0x55e750) returned 1 [0273.538] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.538] GetLastError () returned 0x0 [0273.538] GetLastError () returned 0x0 [0273.539] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.539] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.540] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3674*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3674*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.542] SetEndOfFile (hFile=0x24c) returned 1 [0273.542] CloseHandle (hObject=0x24c) returned 1 [0273.542] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.543] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.543] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.543] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.543] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.544] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.544] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.544] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.544] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.544] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.544] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.545] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.545] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.545] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.545] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.546] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0273.546] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.546] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.546] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.546] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.546] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.546] CryptDestroyKey (hKey=0x55e190) returned 1 [0273.546] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0273.547] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Results\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\results\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46f6ae7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0273.547] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46f6ae7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.547] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f6ae7b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46f6ae7b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46f6ae7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.547] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46f6ae7b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46f6ae7b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46f6ae7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.547] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0273.547] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x2406c950, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2406c950, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Service", cAlternateFileName="")) returned 1 [0273.547] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.547] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.548] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.548] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.548] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.548] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.548] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0273.549] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.549] CryptHashData (hHash=0x55e790, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.549] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0273.549] CryptDestroyHash (hHash=0x55e790) returned 1 [0273.549] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.549] GetLastError () returned 0x0 [0273.549] GetLastError () returned 0x0 [0273.573] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.574] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.575] WriteFile (in: hFile=0x24c, lpBuffer=0x23e36b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e36b4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.576] SetEndOfFile (hFile=0x24c) returned 1 [0273.576] CloseHandle (hObject=0x24c) returned 1 [0273.576] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.577] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.577] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.578] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.578] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.578] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.578] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.578] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.579] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.579] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0273.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.579] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.579] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.579] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.579] CryptDestroyKey (hKey=0x55e690) returned 1 [0273.579] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0273.579] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x2406c950, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46fb721d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0273.580] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06b4edd, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x2406c950, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46fb721d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.580] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46fb721d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46fb721d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46fb721d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.580] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2406c950, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2406c950, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2406c950, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x48, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Unknown.Log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UNKNOW~1.CRY")) returned 1 [0273.580] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2406c950, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2406c950, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2406c950, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x48, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Unknown.Log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UNKNOW~1.CRY")) returned 0 [0273.580] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0273.583] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676f4c2e, dwReserved1=0x7972632e, cFileName="Store", cAlternateFileName="")) returned 1 [0273.583] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.583] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.583] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.583] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.584] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0273.584] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.584] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.584] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0273.584] CryptDestroyHash (hHash=0x55e290) returned 1 [0273.584] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.584] GetLastError () returned 0x0 [0273.584] GetLastError () returned 0x0 [0273.585] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.585] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.590] WriteFile (in: hFile=0x24c, lpBuffer=0x23e36c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e36c4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.591] SetEndOfFile (hFile=0x24c) returned 1 [0273.591] CloseHandle (hObject=0x24c) returned 1 [0273.591] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.593] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.593] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.593] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.594] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.594] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.594] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.594] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.595] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0273.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.595] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.595] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.595] CryptDestroyKey (hKey=0x55e190) returned 1 [0273.595] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0273.595] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Store\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\store\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46fdd43b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0273.596] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x46fdd43b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.596] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46fdd43b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46fdd43b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46fdd43b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.596] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46fdd43b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46fdd43b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46fdd43b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.596] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0273.603] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676f4c2e, dwReserved1=0x7972632e, cFileName="Store", cAlternateFileName="")) returned 0 [0273.603] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0273.604] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a33992, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x46a33992, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x46a33992, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e416b, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.604] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf913d3e5, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e416b, dwReserved1=0x5f4f545f, cFileName="MetaStore", cAlternateFileName="METAST~1")) returned 1 [0273.604] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.604] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.604] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.604] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.604] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5712f8) returned 1 [0273.605] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0273.605] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.605] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e690) returned 1 [0273.605] CryptDestroyHash (hHash=0x55e610) returned 1 [0273.605] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0273.605] GetLastError () returned 0x0 [0273.605] GetLastError () returned 0x0 [0273.605] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.606] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0273.608] WriteFile (in: hFile=0x248, lpBuffer=0x23e3704*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3704*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.609] SetEndOfFile (hFile=0x248) returned 1 [0273.609] CloseHandle (hObject=0x248) returned 1 [0273.609] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.610] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.610] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.611] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.611] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.611] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.611] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.611] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.612] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.612] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0273.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.612] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.612] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.612] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.612] CryptDestroyKey (hKey=0x55e690) returned 1 [0273.612] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0273.613] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x470036b2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0273.613] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf913d3e5, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x470036b2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.613] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x24092ae5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x24092ae5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1 [0273.613] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.613] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.613] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.613] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.613] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.613] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.613] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571490) returned 1 [0273.614] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.614] CryptHashData (hHash=0x55e690, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.614] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0273.614] CryptDestroyHash (hHash=0x55e690) returned 1 [0273.614] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.614] GetLastError () returned 0x0 [0273.614] GetLastError () returned 0x0 [0273.614] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.615] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\1\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\1\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.615] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3714*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3714*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.616] SetEndOfFile (hFile=0x24c) returned 1 [0273.617] CloseHandle (hObject=0x24c) returned 1 [0273.617] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.618] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.618] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.618] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.618] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.619] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.619] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.619] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.619] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0273.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.619] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.619] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.620] CryptDestroyKey (hKey=0x55e710) returned 1 [0273.620] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0273.620] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\1\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\1\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x24092ae5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4702985a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0273.620] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x24092ae5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4702985a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.620] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2406c950, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2406c950, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x24092ae5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="000000~1.CRY")) returned 1 [0273.620] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4702985a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4702985a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4702985a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.620] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4702985a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4702985a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4702985a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.620] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0273.620] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x240b91c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x240b91c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="2", cAlternateFileName="")) returned 1 [0273.621] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.621] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.621] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.621] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.621] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571518) returned 1 [0273.622] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.622] CryptHashData (hHash=0x55e390, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.622] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0273.622] CryptDestroyHash (hHash=0x55e390) returned 1 [0273.622] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.622] GetLastError () returned 0x0 [0273.622] GetLastError () returned 0x0 [0273.622] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.623] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\2\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\2\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.624] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3754*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3754*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.625] SetEndOfFile (hFile=0x24c) returned 1 [0273.625] CloseHandle (hObject=0x24c) returned 1 [0273.625] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.626] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.627] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.627] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.627] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.627] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.627] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.628] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.628] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.628] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.628] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.629] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.629] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.629] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.629] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0273.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.629] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.630] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.630] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0273.630] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0273.630] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\2\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\2\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x240b91c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4702985a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0273.630] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x240b91c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4702985a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.630] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24092ae5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x24092ae5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x240b91c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="000000~1.CRY")) returned 1 [0273.630] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4702985a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4702985a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4702985a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.630] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4702985a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4702985a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4702985a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.631] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0273.631] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x240b91c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x240b91c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="3", cAlternateFileName="")) returned 1 [0273.631] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.631] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.631] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.631] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.631] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0273.632] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.632] CryptHashData (hHash=0x55e690, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.632] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0273.632] CryptDestroyHash (hHash=0x55e690) returned 1 [0273.632] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.632] GetLastError () returned 0x0 [0273.632] GetLastError () returned 0x0 [0273.632] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.632] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\3\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\3\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.634] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3764*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3764*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.635] SetEndOfFile (hFile=0x24c) returned 1 [0273.635] CloseHandle (hObject=0x24c) returned 1 [0273.635] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.636] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.636] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.636] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.636] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.636] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.636] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.636] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.636] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.637] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.637] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.637] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.637] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.637] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.637] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.637] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.637] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0273.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.637] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.637] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.637] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.638] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.638] CryptDestroyKey (hKey=0x55e710) returned 1 [0273.638] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0273.638] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\3\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\3\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x240b91c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4704fb8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0273.638] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x240b91c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4704fb8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.638] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x240b91c6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x240b91c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x240b91c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="000000~1.CRY")) returned 1 [0273.638] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4704fb8f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4704fb8f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4704fb8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.638] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4704fb8f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4704fb8f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4704fb8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.638] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0273.638] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x241052e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x241052e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="4", cAlternateFileName="")) returned 1 [0273.638] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.639] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.639] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.639] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.639] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.639] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.639] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571490) returned 1 [0273.639] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.639] CryptHashData (hHash=0x55e190, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.639] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0273.640] CryptDestroyHash (hHash=0x55e190) returned 1 [0273.640] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.640] GetLastError () returned 0x0 [0273.640] GetLastError () returned 0x0 [0273.640] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.640] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\4\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\4\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.641] WriteFile (in: hFile=0x24c, lpBuffer=0x23e37a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e37a4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.642] SetEndOfFile (hFile=0x24c) returned 1 [0273.642] CloseHandle (hObject=0x24c) returned 1 [0273.642] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.643] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.643] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.644] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.644] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.644] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.644] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.644] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.644] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.644] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.644] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.644] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.644] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.645] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.645] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0273.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.645] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.645] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.645] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.645] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0273.645] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0273.645] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\MetaStore\\4\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\metastore\\4\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x241052e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4704fb8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0273.646] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf913d3e5, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x241052e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4704fb8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.646] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x241052e9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x241052e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x241052e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0000000000000000.idx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="000000~1.CRY")) returned 1 [0273.646] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4704fb8f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4704fb8f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4704fb8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.646] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4704fb8f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4704fb8f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4704fb8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.646] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0273.646] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470036b2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x470036b2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x470036b2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.646] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x470036b2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x470036b2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x470036b2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.646] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0273.646] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf90caa0a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x18ea5e4, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.5B", cAlternateFileName="MPCACH~1.5B")) returned 1 [0273.646] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf89c9d40, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf89c9d40, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8ceae5e, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x6a1ab6c, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.67", cAlternateFileName="MPCACH~1.67")) returned 1 [0273.647] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xf8d374fb, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8d374fb, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8d83941, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x3b14000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.79", cAlternateFileName="MPCACH~1.79")) returned 1 [0273.647] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xf8da9a4e, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8da9a4e, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8da9a4e, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x529000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.7C", cAlternateFileName="MPCACH~1.7C")) returned 1 [0273.647] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8e8ea4a, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8e8ea4a, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf8e8ea4a, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x3cff18, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.7E", cAlternateFileName="MPCACH~1.7E")) returned 1 [0273.647] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8fe5e00, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf8fe5e00, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf900c0a9, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0xcfdc43, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.80", cAlternateFileName="MPCACH~1.80")) returned 1 [0273.647] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x1d7f38, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.83", cAlternateFileName="MPCACH~1.83")) returned 1 [0273.647] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf900c0a9, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf900c0a9, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf900c0a9, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x1a3a61, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.87", cAlternateFileName="MPCACH~1.87")) returned 1 [0273.647] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf90582ee, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf90582ee, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x358f2f, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.A0", cAlternateFileName="MPCACH~1.A0")) returned 1 [0273.647] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x5fff9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.CB", cAlternateFileName="MPCACH~1.CB")) returned 1 [0273.647] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf907e70d, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf907e70d, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf907e70d, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x441a1, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.CC", cAlternateFileName="MPCACH~1.CC")) returned 1 [0273.647] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x241052e9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x241052e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x24f795ed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa2b1a6, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mpcache-9899DBE4D8BB3D253EB4F285757BEBAF1581B50F.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MPCACH~1.CRY")) returned 1 [0273.647] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24fc5d3c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x24fc5d3c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x24febda4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x70, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="MpDiag.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MPDIAG~1.CRY")) returned 1 [0273.647] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RtSigs", cAlternateFileName="")) returned 1 [0273.647] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.647] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.647] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.647] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.647] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571408) returned 1 [0273.648] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0273.648] CryptHashData (hHash=0x55e190, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.648] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0273.648] CryptDestroyHash (hHash=0x55e190) returned 1 [0273.648] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0273.648] GetLastError () returned 0x0 [0273.648] GetLastError () returned 0x0 [0273.648] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.649] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\RtSigs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\rtsigs\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0273.649] WriteFile (in: hFile=0x248, lpBuffer=0x23e37b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e37b4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.650] SetEndOfFile (hFile=0x248) returned 1 [0273.651] CloseHandle (hObject=0x248) returned 1 [0273.651] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.652] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.652] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.652] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.652] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.652] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.652] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.675] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.675] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.675] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.676] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.676] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.676] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.676] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.676] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.676] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.676] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0273.676] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.676] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.677] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.677] CryptDestroyKey (hKey=0x55e610) returned 1 [0273.677] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0273.677] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\RtSigs\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\rtsigs\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x47075e81, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0273.678] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x47075e81, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.678] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0273.678] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.678] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.678] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.678] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.678] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.678] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.678] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570f40) returned 1 [0273.679] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.679] CryptHashData (hHash=0x55e690, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.679] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0273.679] CryptDestroyHash (hHash=0x55e690) returned 1 [0273.679] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.679] GetLastError () returned 0x0 [0273.679] GetLastError () returned 0x0 [0273.679] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.789] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\RtSigs\\Data\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\rtsigs\\data\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.791] WriteFile (in: hFile=0x24c, lpBuffer=0x23e37f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e37f4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.792] SetEndOfFile (hFile=0x24c) returned 1 [0273.792] CloseHandle (hObject=0x24c) returned 1 [0273.792] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.793] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.793] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.794] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.794] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.794] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.794] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.794] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.794] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.794] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.794] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.794] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.794] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.794] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.795] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.795] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0273.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.795] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.795] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.795] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.795] CryptDestroyKey (hKey=0x55e790) returned 1 [0273.796] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0273.796] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\RtSigs\\Data\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\rtsigs\\data\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x471cd114, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0273.796] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x471cd114, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.796] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x471cd114, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x471cd114, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x471cd114, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.796] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x471cd114, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x471cd114, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x471cd114, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.796] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0273.796] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47075e81, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47075e81, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47075e81, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.796] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47075e81, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47075e81, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47075e81, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.796] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0273.796] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf141f151, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf141f151, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf141f151, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RtSigs", cAlternateFileName="")) returned 0 [0273.796] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0273.797] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x250aaa2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x250aaa2f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6e6962, dwReserved1=0x70797263, cFileName="Support", cAlternateFileName="")) returned 1 [0273.797] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.797] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.797] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.797] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.797] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5709f0) returned 1 [0273.798] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0273.798] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.798] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0273.798] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0273.798] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0273.798] GetLastError () returned 0x0 [0273.798] GetLastError () returned 0x0 [0273.798] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.799] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0273.801] WriteFile (in: hFile=0x244, lpBuffer=0x23e3804*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3804*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.802] SetEndOfFile (hFile=0x244) returned 1 [0273.802] CloseHandle (hObject=0x244) returned 1 [0273.802] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.803] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.804] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.804] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.804] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.804] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.804] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.805] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.805] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.805] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.805] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.805] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.805] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.805] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.805] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0273.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.806] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.806] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.806] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.806] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.806] CryptDestroyKey (hKey=0x55e610) returned 1 [0273.806] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0273.806] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x250aaa2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x471f3675, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0273.807] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x250aaa2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x471f3675, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.807] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x471f3675, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x471f3675, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x471f3675, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.807] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25011fe2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x25011fe2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x25011fe2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MPDetection-02112021-121950.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MPDETE~1.CRY")) returned 1 [0273.807] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2503835d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2503835d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2503835d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MPLog-02112021-121950.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MPLOG-~1.CRY")) returned 1 [0273.807] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2503835d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2503835d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2505e3ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MpWppTracing-02112021-121950-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MPWPPT~1.CRY")) returned 1 [0273.807] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25084744, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x25084744, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x25084744, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MpWppTracing-02112021-122238-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MPWPPT~2.CRY")) returned 1 [0273.807] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aaa2f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x250aaa2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x250aaa2f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MpWppTracing-02112021-124618-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MPWPPT~3.CRY")) returned 1 [0273.807] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aaa2f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x250aaa2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x250aaa2f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MpWppTracing-02112021-124618-00000003-ffffffff.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MPWPPT~3.CRY")) returned 0 [0273.807] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0273.807] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x250aaa2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x250aaa2f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6e6962, dwReserved1=0x70797263, cFileName="Support", cAlternateFileName="")) returned 0 [0273.807] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0273.807] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x250d0ad9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x250d0ad9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73656e69, dwReserved1=0x74636570, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1 [0273.808] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.808] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.808] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.808] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.808] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570e30) returned 1 [0273.809] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0273.809] CryptHashData (hHash=0x55e710, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.809] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0273.809] CryptDestroyHash (hHash=0x55e710) returned 1 [0273.809] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f660*=0x18) returned 1 [0273.809] GetLastError () returned 0x0 [0273.809] GetLastError () returned 0x0 [0273.809] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.810] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Live\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows live\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0273.813] WriteFile (in: hFile=0x240, lpBuffer=0x23e3844*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3844*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.814] SetEndOfFile (hFile=0x240) returned 1 [0273.814] CloseHandle (hObject=0x240) returned 1 [0273.815] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.816] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.816] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.816] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.816] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.816] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.816] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.817] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.817] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.817] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.817] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.817] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.817] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.817] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.817] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.817] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.817] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.818] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0273.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.818] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.818] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.819] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0273.819] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0273.819] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Live\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows live\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x250d0ad9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x471f3675, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0273.819] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x250d0ad9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x471f3675, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.819] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x471f3675, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x471f3675, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x471f3675, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.819] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aaa2f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x250aaa2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x250d0ad9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1231, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WLive48x48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WLIVE4~1.CRY")) returned 1 [0273.819] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250aaa2f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x250aaa2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x250d0ad9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1231, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WLive48x48.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WLIVE4~1.CRY")) returned 0 [0273.819] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0273.819] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e383478, dwReserved1=0x2e676e70, cFileName="Windows NT", cAlternateFileName="WINDOW~3")) returned 1 [0273.820] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.820] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.820] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.820] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.820] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570968) returned 1 [0273.821] CryptCreateHash (in: hProv=0x570968, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0273.821] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.821] CryptDeriveKey (in: hProv=0x570968, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e2d0) returned 1 [0273.821] CryptDestroyHash (hHash=0x55e750) returned 1 [0273.821] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18) returned 1 [0273.821] GetLastError () returned 0x0 [0273.821] GetLastError () returned 0x0 [0273.821] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.822] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0273.823] WriteFile (in: hFile=0x240, lpBuffer=0x23e3854*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3854*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.824] SetEndOfFile (hFile=0x240) returned 1 [0273.824] CloseHandle (hObject=0x240) returned 1 [0273.824] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.825] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.825] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.825] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.826] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.826] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.826] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.826] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.826] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.826] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.826] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.826] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.827] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.827] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.827] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.827] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0273.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.828] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.828] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.828] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0273.828] CryptReleaseContext (hProv=0x570968, dwFlags=0x0) returned 1 [0273.828] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x47219783, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0273.828] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x47219783, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.829] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47219783, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47219783, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47219783, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.829] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1 [0273.829] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.829] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.829] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.829] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.829] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5710d8) returned 1 [0273.830] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0273.830] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.830] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e210) returned 1 [0273.830] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0273.830] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0273.830] GetLastError () returned 0x0 [0273.830] GetLastError () returned 0x0 [0273.843] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.843] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0273.846] WriteFile (in: hFile=0x244, lpBuffer=0x23e3894*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3894*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.848] SetEndOfFile (hFile=0x244) returned 1 [0273.849] CloseHandle (hObject=0x244) returned 1 [0273.849] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.850] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.850] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.853] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.853] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.854] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.854] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.854] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.854] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.855] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.855] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.856] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.857] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0273.857] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.857] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.857] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.857] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.857] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.857] CryptDestroyKey (hKey=0x55e210) returned 1 [0273.857] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0273.857] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x47262b8c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0273.858] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x47262b8c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.858] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivityLog", cAlternateFileName="ACTIVI~1")) returned 1 [0273.858] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.858] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.864] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.865] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.865] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.866] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570b88) returned 1 [0273.866] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0273.866] CryptHashData (hHash=0x55e2d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.866] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0273.867] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0273.867] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0273.867] GetLastError () returned 0x0 [0273.867] GetLastError () returned 0x0 [0273.867] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.868] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0273.869] WriteFile (in: hFile=0x248, lpBuffer=0x23e38a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e38a4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.871] SetEndOfFile (hFile=0x248) returned 1 [0273.871] CloseHandle (hObject=0x248) returned 1 [0273.871] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.872] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.872] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.873] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.873] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.873] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.874] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.874] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.874] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0273.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.875] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.875] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.875] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.875] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.875] CryptDestroyKey (hKey=0x55e910) returned 1 [0273.875] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0273.875] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\activitylog\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x47292dc2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0273.876] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x47292dc2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.876] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47292dc2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47292dc2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47292dc2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.876] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47292dc2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47292dc2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47292dc2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.876] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0273.876] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1 [0273.876] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.876] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.876] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.876] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.877] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570748) returned 1 [0273.877] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0273.877] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.878] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e2d0) returned 1 [0273.878] CryptDestroyHash (hHash=0x55e790) returned 1 [0273.878] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0273.878] GetLastError () returned 0x0 [0273.878] GetLastError () returned 0x0 [0273.878] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.879] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0273.879] WriteFile (in: hFile=0x248, lpBuffer=0x23e38e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e38e4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.881] SetEndOfFile (hFile=0x248) returned 1 [0273.881] CloseHandle (hObject=0x248) returned 1 [0273.882] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.883] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.883] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.883] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.883] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.883] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.883] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.884] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.884] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.884] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.884] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.884] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.884] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.887] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.887] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.887] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0273.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.887] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.887] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.888] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.888] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.888] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0273.888] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0273.888] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x47292dc2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0273.888] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x47292dc2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.888] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0273.889] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.889] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.889] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.889] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.889] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571490) returned 1 [0273.890] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0273.890] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.890] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0273.890] CryptDestroyHash (hHash=0x55e910) returned 1 [0273.890] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0273.890] GetLastError () returned 0x0 [0273.890] GetLastError () returned 0x0 [0273.890] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.891] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0273.951] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38f4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.952] SetEndOfFile (hFile=0x24c) returned 1 [0273.952] CloseHandle (hObject=0x24c) returned 1 [0273.952] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.953] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.957] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.957] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.958] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.958] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.958] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.958] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.961] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.961] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.961] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.961] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0273.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.962] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.962] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.962] CryptDestroyKey (hKey=0x55e610) returned 1 [0273.962] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0273.962] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x47351c98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0273.963] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x47351c98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.963] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa476ffa8, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xa476ffa8, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xa476ffa8, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x28aa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="confident.cov", cAlternateFileName="")) returned 1 [0273.963] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4796233, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xa4796233, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xa4796233, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a09, dwReserved0=0x405534, dwReserved1=0x0, cFileName="fyi.cov", cAlternateFileName="")) returned 1 [0273.963] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa476ffa8, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xa476ffa8, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xa476ffa8, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="generic.cov", cAlternateFileName="")) returned 1 [0273.963] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472b8fcc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x472b8fcc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47351c98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.963] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4796233, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xa4796233, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xa4796233, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x405534, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 1 [0273.963] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4796233, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xa4796233, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xa4796233, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x405534, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 0 [0273.963] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0273.963] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47292dc2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47292dc2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x472b8fcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x54766f63, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.963] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47292dc2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47292dc2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x472b8fcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x54766f63, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.963] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0273.964] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47262b8c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47262b8c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4726c87b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.964] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Inbox", cAlternateFileName="")) returned 1 [0273.964] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.964] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.964] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.964] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0273.964] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5712f8) returned 1 [0273.965] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0273.965] CryptHashData (hHash=0x55e310, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.965] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0273.965] CryptDestroyHash (hHash=0x55e310) returned 1 [0273.965] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0273.968] GetLastError () returned 0x0 [0273.968] GetLastError () returned 0x0 [0273.968] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.969] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0273.970] WriteFile (in: hFile=0x248, lpBuffer=0x23e3934*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3934*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.971] SetEndOfFile (hFile=0x248) returned 1 [0273.971] CloseHandle (hObject=0x248) returned 1 [0273.971] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.972] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.973] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0273.973] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.973] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.974] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.974] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.975] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.975] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.975] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0273.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.975] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.975] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.976] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.976] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.976] CryptDestroyKey (hKey=0x55e910) returned 1 [0273.976] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0273.976] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Inbox\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\inbox\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x47377bc9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0273.976] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x47377bc9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.977] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47377bc9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47377bc9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47377bc9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.977] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47377bc9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47377bc9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47377bc9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.977] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0273.977] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Queue", cAlternateFileName="")) returned 1 [0273.977] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.977] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.977] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.977] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0273.977] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571160) returned 1 [0273.978] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0273.978] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.978] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e710) returned 1 [0273.978] CryptDestroyHash (hHash=0x55e910) returned 1 [0273.978] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0273.978] GetLastError () returned 0x0 [0273.978] GetLastError () returned 0x0 [0273.979] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.979] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0273.981] WriteFile (in: hFile=0x248, lpBuffer=0x23e3944*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3944*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.982] SetEndOfFile (hFile=0x248) returned 1 [0273.983] CloseHandle (hObject=0x248) returned 1 [0273.983] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.984] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.984] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0273.984] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.985] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.985] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.985] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.985] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.985] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.985] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.985] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.985] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.985] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.985] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.986] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0273.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.986] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.986] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0273.987] CryptDestroyKey (hKey=0x55e710) returned 1 [0273.987] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0273.987] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Queue\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\queue\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4739de00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0273.987] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4739de00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.987] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4739de00, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4739de00, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4739de00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0273.987] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4739de00, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4739de00, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4739de00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0273.987] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0273.990] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1 [0273.990] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0273.990] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0273.990] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0273.990] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0273.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0273.991] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570858) returned 1 [0273.991] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0273.991] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0273.991] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e710) returned 1 [0273.991] CryptDestroyHash (hHash=0x55e790) returned 1 [0273.991] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f190*=0x18) returned 1 [0273.991] GetLastError () returned 0x0 [0273.992] GetLastError () returned 0x0 [0273.992] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0273.992] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0273.993] WriteFile (in: hFile=0x248, lpBuffer=0x23e3984*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3984*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0273.994] SetEndOfFile (hFile=0x248) returned 1 [0273.995] CloseHandle (hObject=0x248) returned 1 [0273.995] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0273.996] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.996] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0273.996] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0273.996] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0273.996] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.997] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0273.997] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0273.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.997] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.997] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0273.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0273.998] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0273.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0273.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0273.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0273.998] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0273.998] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.004] CryptDestroyKey (hKey=0x55e710) returned 1 [0274.004] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0274.004] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\SentItems\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\sentitems\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x473c4014, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0274.004] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x473c4014, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.004] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x473c4014, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x473c4014, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x473c4014, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.004] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x473c4014, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x473c4014, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x473c4014, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0274.005] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0274.005] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1 [0274.005] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.005] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.019] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.019] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.020] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.020] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0274.020] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571270) returned 1 [0274.021] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0274.021] CryptHashData (hHash=0x55e390, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.031] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0274.031] CryptDestroyHash (hHash=0x55e390) returned 1 [0274.031] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0274.032] GetLastError () returned 0x0 [0274.032] GetLastError () returned 0x0 [0274.032] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.035] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0274.037] WriteFile (in: hFile=0x248, lpBuffer=0x23e3994*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3994*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.039] SetEndOfFile (hFile=0x248) returned 1 [0274.039] CloseHandle (hObject=0x248) returned 1 [0274.039] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.040] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.040] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0274.041] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.041] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.041] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.041] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.041] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.042] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.042] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.042] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0274.043] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.043] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.043] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.043] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.043] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.045] CryptDestroyKey (hKey=0x55e610) returned 1 [0274.045] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0274.046] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x474105a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0274.046] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x474105a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.046] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0274.046] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.046] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.046] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.046] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0274.047] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0274.047] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0274.047] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.047] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e690) returned 1 [0274.047] CryptDestroyHash (hHash=0x55e610) returned 1 [0274.048] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0274.048] GetLastError () returned 0x0 [0274.048] GetLastError () returned 0x0 [0274.048] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.048] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0274.049] WriteFile (in: hFile=0x24c, lpBuffer=0x23e39d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e39d4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.051] SetEndOfFile (hFile=0x24c) returned 1 [0274.051] CloseHandle (hObject=0x24c) returned 1 [0274.051] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.052] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.052] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.052] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.052] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.053] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0274.053] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.053] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.053] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.053] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.053] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.053] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.054] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.054] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.054] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.054] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.054] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.054] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.054] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0274.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.058] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.058] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.058] CryptDestroyKey (hKey=0x55e690) returned 1 [0274.058] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0274.059] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x4743763a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0274.059] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0x4743763a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.059] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4743763a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4743763a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4743763a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.059] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa476ffa8, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xa476ffa8, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xa476ffa8, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 1 [0274.059] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa476ffa8, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xa476ffa8, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xa476ffa8, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 0 [0274.059] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0274.059] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x474105a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x474105a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4743763a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x2e786146, dwReserved1=0x5f666974, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.059] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x474105a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x474105a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4743763a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x2e786146, dwReserved1=0x5f666974, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0274.059] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0274.059] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd313219, ftLastAccessTime.dwHighDateTime=0x1d112f1, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 0 [0274.059] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0274.060] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x250f6e44, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x250f6e44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f626e49, dwReserved1=0x5f4f5478, cFileName="MSScan", cAlternateFileName="")) returned 1 [0274.060] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.060] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.060] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.060] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0274.060] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570e30) returned 1 [0274.061] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.061] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.061] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e2d0) returned 1 [0274.061] CryptDestroyHash (hHash=0x55e310) returned 1 [0274.061] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.061] GetLastError () returned 0x0 [0274.061] GetLastError () returned 0x0 [0274.061] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.062] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0274.066] WriteFile (in: hFile=0x244, lpBuffer=0x23e39e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e39e4*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.067] SetEndOfFile (hFile=0x244) returned 1 [0274.067] CloseHandle (hObject=0x244) returned 1 [0274.067] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.069] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.069] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0274.072] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.072] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.072] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.072] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.073] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.073] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0274.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.073] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.073] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.074] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0274.074] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0274.074] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\*.*" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x250f6e44, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4745c921, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0274.074] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x250f6e44, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4745c921, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.075] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4745c921, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4745c921, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4745c921, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.075] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62dcb75e, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x62dcb75e, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x62dcb75e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1 [0274.075] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250f6e44, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x250f6e44, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x251b5d6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WelcomeScan.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WELCOM~1.CRY")) returned 1 [0274.075] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x250f6e44, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x250f6e44, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x251b5d6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WelcomeScan.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WELCOM~1.CRY")) returned 0 [0274.075] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0274.075] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x250f6e44, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x250f6e44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f626e49, dwReserved1=0x5f4f5478, cFileName="MSScan", cAlternateFileName="")) returned 0 [0274.075] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0274.075] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="WinMSIPC", cAlternateFileName="")) returned 1 [0274.075] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.075] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.075] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.076] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.076] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0274.076] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5712f8) returned 1 [0274.076] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.077] CryptHashData (hHash=0x55e5d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.077] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e610) returned 1 [0274.077] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0274.077] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.077] GetLastError () returned 0x0 [0274.077] GetLastError () returned 0x0 [0274.077] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.078] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\winmsipc\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.078] WriteFile (in: hFile=0x240, lpBuffer=0x23e3a24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3a24*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.080] SetEndOfFile (hFile=0x240) returned 1 [0274.080] CloseHandle (hObject=0x240) returned 1 [0274.080] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.081] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.081] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.081] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.081] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0274.082] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.082] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.082] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.082] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.082] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.082] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.082] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.083] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.083] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.083] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.083] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0274.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.124] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.124] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.124] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.124] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.124] CryptDestroyKey (hKey=0x55e610) returned 1 [0274.124] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0274.124] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\*.*" (normalized: "c:\\users\\all users\\microsoft\\winmsipc\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x47483aed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0274.125] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x47483aed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.125] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47483aed, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47483aed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47483aed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.125] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0274.125] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.125] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.125] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.125] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0274.125] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571518) returned 1 [0274.126] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.126] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.126] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e910) returned 1 [0274.126] CryptDestroyHash (hHash=0x55e750) returned 1 [0274.126] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.126] GetLastError () returned 0x0 [0274.126] GetLastError () returned 0x0 [0274.127] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.127] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\Server\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\winmsipc\\server\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0274.129] WriteFile (in: hFile=0x244, lpBuffer=0x23e3a34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3a34*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.130] SetEndOfFile (hFile=0x244) returned 1 [0274.135] CloseHandle (hObject=0x244) returned 1 [0274.136] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.137] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.137] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0274.138] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.139] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.139] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.139] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.139] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.140] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.140] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.140] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.140] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.140] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.140] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.140] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.140] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.141] CryptDestroyKey (hKey=0x55e910) returned 1 [0274.141] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0274.141] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\Server\\*.*" (normalized: "c:\\users\\all users\\microsoft\\winmsipc\\server\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x474f533f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0274.141] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x474f533f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.141] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x474f533f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x474f533f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4751b5d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.141] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x474f533f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x474f533f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4751b5d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0274.141] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0274.141] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0274.142] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0274.142] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0274.142] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.142] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.142] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.142] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0274.143] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571408) returned 1 [0274.144] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.144] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.144] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0274.144] CryptDestroyHash (hHash=0x55e790) returned 1 [0274.144] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.144] GetLastError () returned 0x0 [0274.144] GetLastError () returned 0x0 [0274.144] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.145] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.146] WriteFile (in: hFile=0x240, lpBuffer=0x23e3a74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3a74*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.149] SetEndOfFile (hFile=0x240) returned 1 [0274.149] CloseHandle (hObject=0x240) returned 1 [0274.149] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.150] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.150] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.150] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.150] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.150] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.150] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0274.151] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.151] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.151] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.151] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.151] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.153] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.153] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.154] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.154] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.154] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.154] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0274.154] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0274.154] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*.*" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4751b5d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0274.155] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4751b5d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.155] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DMProfiles", cAlternateFileName="DMPROF~1")) returned 1 [0274.155] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.155] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.155] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.155] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0274.155] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570b88) returned 1 [0274.156] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.156] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.156] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e190) returned 1 [0274.156] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0274.156] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.156] GetLastError () returned 0x0 [0274.156] GetLastError () returned 0x0 [0274.156] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.157] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\DMProfiles\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\dmprofiles\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0274.157] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3a84, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0) returned 0 [0274.157] SetEndOfFile (hFile=0xffffffff) returned 0 [0274.157] CloseHandle (hObject=0xffffffff) returned 1 [0274.157] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.158] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.158] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.158] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.158] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.159] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0274.159] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.159] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.159] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.159] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.159] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.159] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.160] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.160] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.160] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.160] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.160] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.160] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.160] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0274.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.161] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.161] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.161] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.161] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.161] CryptDestroyKey (hKey=0x55e190) returned 1 [0274.161] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0274.162] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\DMProfiles\\*.*" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\dmprofiles\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0274.162] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.162] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0274.162] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0274.162] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4751b5d8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4751b5d8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4754193e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.162] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Profiles", cAlternateFileName="")) returned 1 [0274.162] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.162] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.166] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.166] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0274.166] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571408) returned 1 [0274.167] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.167] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.167] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e190) returned 1 [0274.167] CryptDestroyHash (hHash=0x55e290) returned 1 [0274.167] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.167] GetLastError () returned 0x0 [0274.167] GetLastError () returned 0x0 [0274.167] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.168] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0274.168] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3ac4, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0) returned 0 [0274.168] SetEndOfFile (hFile=0xffffffff) returned 0 [0274.168] CloseHandle (hObject=0xffffffff) returned 1 [0274.168] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.169] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.169] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.170] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.170] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0274.170] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.171] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.171] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.171] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.171] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.171] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.171] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.171] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.171] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.171] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.171] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.172] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0274.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.172] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.172] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.173] CryptDestroyKey (hKey=0x55e190) returned 1 [0274.173] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0274.173] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*.*" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0274.173] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.173] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0274.173] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0274.173] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd78854, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Profiles", cAlternateFileName="")) returned 0 [0274.173] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0274.173] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="XboxLive", cAlternateFileName="")) returned 1 [0274.174] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.174] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.176] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.176] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.176] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0274.177] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570858) returned 1 [0274.202] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.202] CryptHashData (hHash=0x55e390, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.202] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e690) returned 1 [0274.202] CryptDestroyHash (hHash=0x55e390) returned 1 [0274.202] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.202] GetLastError () returned 0x0 [0274.202] GetLastError () returned 0x0 [0274.202] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.203] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\xboxlive\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.207] WriteFile (in: hFile=0x240, lpBuffer=0x23e3ad4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3ad4*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.216] SetEndOfFile (hFile=0x240) returned 1 [0274.220] CloseHandle (hObject=0x240) returned 1 [0274.222] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.223] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.223] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.223] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.223] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.223] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.223] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0274.224] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.224] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.224] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.224] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.225] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.225] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.225] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.225] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.225] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.225] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.225] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0274.225] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.226] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.226] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.226] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.226] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.226] CryptDestroyKey (hKey=0x55e690) returned 1 [0274.226] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0274.226] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\*.*" (normalized: "c:\\users\\all users\\microsoft\\xboxlive\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x475b40ae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0274.227] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x475b40ae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.227] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x475b40ae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x475b40ae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x475da125, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.227] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="NSALCache", cAlternateFileName="NSALCA~1")) returned 1 [0274.227] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.227] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.227] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.229] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.229] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.230] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0274.230] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571270) returned 1 [0274.230] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.230] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.230] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0274.230] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0274.231] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.231] GetLastError () returned 0x0 [0274.231] GetLastError () returned 0x0 [0274.231] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.231] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\NSALCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft\\xboxlive\\nsalcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0274.232] WriteFile (in: hFile=0x244, lpBuffer=0x23e3b14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3b14*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.234] SetEndOfFile (hFile=0x244) returned 1 [0274.234] CloseHandle (hObject=0x244) returned 1 [0274.234] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.235] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.235] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.235] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.235] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0274.235] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.236] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.236] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.236] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.236] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.236] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.237] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.237] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.237] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0274.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.237] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.237] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.237] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.238] CryptDestroyKey (hKey=0x55e610) returned 1 [0274.238] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0274.238] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\NSALCache\\*.*" (normalized: "c:\\users\\all users\\microsoft\\xboxlive\\nsalcache\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x47600344, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0274.238] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x47600344, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.238] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47600344, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47600344, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47600344, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.238] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47600344, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47600344, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47600344, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0274.241] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0274.241] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="NSALCache", cAlternateFileName="NSALCA~1")) returned 0 [0274.241] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0274.241] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ebc8954, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4ebc8954, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ebc8954, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="XboxLive", cAlternateFileName="")) returned 0 [0274.241] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0274.242] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x506a2e14, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xfd4aa69b, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xfd4aa69b, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x76544e65, dwReserved1=0x65646e65, cFileName="Microsoft Help", cAlternateFileName="MICROS~3")) returned 1 [0274.242] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.242] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.242] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.242] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.242] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.242] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0274.242] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x5709f0) returned 1 [0274.243] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0274.243] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.243] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e710) returned 1 [0274.243] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0274.243] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0274.243] GetLastError () returned 0x0 [0274.243] GetLastError () returned 0x0 [0274.243] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.244] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft Help\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft help\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0274.246] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3b54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3b54*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.247] SetEndOfFile (hFile=0x23c) returned 1 [0274.247] CloseHandle (hObject=0x23c) returned 1 [0274.248] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.249] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.249] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.249] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.249] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.249] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0274.260] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.261] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.261] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.261] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.261] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.261] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.261] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.261] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.262] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.262] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.262] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.262] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.262] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.262] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.262] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0274.262] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.263] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.263] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.263] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.263] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.263] CryptDestroyKey (hKey=0x55e710) returned 1 [0274.263] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0274.263] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft Help\\*.*" (normalized: "c:\\users\\all users\\microsoft help\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x506a2e14, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xfd4aa69b, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x476265cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0274.264] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x506a2e14, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0xfd4aa69b, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x476265cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.264] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x476265cd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x476265cd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x476265cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.264] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x53a17a4e, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x53a17a4e, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x53abb353, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x1a2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.DATABASECOMPARE.16.1033.hxn", cAlternateFileName="MSDATA~1.HXN")) returned 1 [0274.264] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x54cb123d, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x54cb123d, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x54d3ec39, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.EXCEL.16.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1 [0274.264] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x5c587e17, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x5c587e17, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5cee92c4, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.GRAPH.16.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1 [0274.264] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x572bb221, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x572bb221, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5732d888, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.GROOVE.16.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1 [0274.264] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x58fe9daa, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x58fe9daa, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5943467f, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.LYNC.16.1033.hxn", cAlternateFileName="MSLYNC~1.HXN")) returned 1 [0274.264] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x58ff391c, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x58ff391c, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x594409e2, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.LYNC_BASIC.16.1033.hxn", cAlternateFileName="MSLYNC~3.HXN")) returned 1 [0274.264] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x58feea63, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x58feea63, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5943a85a, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.LYNC_ONLINE.16.1033.hxn", cAlternateFileName="MSLYNC~2.HXN")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x50b37f08, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b37f08, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50bcbaa5, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.MSACCESS.16.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x5c595587, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x5c595587, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5cef69b7, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.MSOUC.16.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x63cb40e0, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x63cb40e0, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x63d40755, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.MSPUB.16.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x523b1e39, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x523b1e39, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x52451c7e, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.ONENOTE.16.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x60f38a13, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x60f38a13, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x6137f8c6, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.OUTLOOK.16.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x627ceff1, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x627ceff1, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x628617bd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.POWERPNT.16.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x5c58e036, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x5c58e036, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5cef0812, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.SETLANG.16.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x58ff9ac9, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x58ff9ac9, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x594457dd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.SKYPEFB.16.1033.hxn", cAlternateFileName="MSSKYP~1.HXN")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x59004aaf, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x59004aaf, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x59452ec7, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.SKYPEFB_BASIC.16.1033.hxn", cAlternateFileName="MSSKYP~3.HXN")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x58ffe82d, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x58ffe82d, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x5944cd17, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINE.16.1033.hxn", cAlternateFileName="MSSKYP~2.HXN")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x590098bc, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x590098bc, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x594aad1a, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.SKYPEFB_ONLINEG.16.1033.hxn", cAlternateFileName="MSSKYP~4.HXN")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x53a1eec1, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x53a1eec1, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x53ac149f, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x1b4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.SPREADSHEETCOMPARE.16.1033.hxn", cAlternateFileName="MSSPRE~1.HXN")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x6501dec7, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x6501dec7, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x650b07ef, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MS.WINWORD.16.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x50b35838, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b35838, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x650b07ef, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x1876, dwReserved0=0x405534, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x50b35838, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b35838, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x650b07ef, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x1876, dwReserved0=0x405534, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0 [0274.265] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0274.265] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b95643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87b95643, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6c7868, dwReserved1=0x312e3631, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0274.265] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.265] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.266] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.266] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.266] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.266] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0274.266] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571160) returned 1 [0274.266] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0274.266] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.267] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e5d0) returned 1 [0274.267] CryptDestroyHash (hHash=0x55e910) returned 1 [0274.267] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0274.267] GetLastError () returned 0x0 [0274.267] GetLastError () returned 0x0 [0274.267] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.267] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft onedrive\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0274.268] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3b94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3b94*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.269] SetEndOfFile (hFile=0x23c) returned 1 [0274.269] CloseHandle (hObject=0x23c) returned 1 [0274.269] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.270] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.270] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.273] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.273] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.273] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.273] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0274.273] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.273] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.274] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.274] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.274] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.274] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.274] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.274] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.274] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.274] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.274] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.274] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.274] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.274] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.274] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0274.275] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.275] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.275] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.275] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.275] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.275] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0274.275] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0274.275] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\*.*" (normalized: "c:\\users\\all users\\microsoft onedrive\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b95643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4764c832, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0274.275] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b95643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4764c832, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.276] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4764c832, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4764c832, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4764c832, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.276] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x252280dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x252280dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0274.276] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.276] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.276] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.276] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.276] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.276] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0274.276] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571160) returned 1 [0274.277] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.277] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.277] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0274.277] CryptDestroyHash (hHash=0x55e910) returned 1 [0274.277] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.277] GetLastError () returned 0x0 [0274.277] GetLastError () returned 0x0 [0274.277] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.277] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.279] WriteFile (in: hFile=0x240, lpBuffer=0x23e3ba4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3ba4*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.280] SetEndOfFile (hFile=0x240) returned 1 [0274.280] CloseHandle (hObject=0x240) returned 1 [0274.280] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.281] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.281] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.281] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.281] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.281] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.281] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0274.281] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.281] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.281] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.281] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.282] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.282] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.282] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.282] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.282] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.282] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.282] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.284] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.284] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.284] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.284] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.284] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.284] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.284] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.284] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.285] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.285] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0274.285] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0274.285] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\*.*" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x252280dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47672969, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0274.285] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x252280dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47672969, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.285] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47672969, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47672969, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47672969, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.285] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252280dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x252280dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x252280dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0x405534, dwReserved1=0x0, cFileName="refcount.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="REFCOU~1.CRY")) returned 1 [0274.285] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252280dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x252280dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x252280dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x19, dwReserved0=0x405534, dwReserved1=0x0, cFileName="refcount.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="REFCOU~1.CRY")) returned 0 [0274.285] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0274.285] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b95643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x252280dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x252280dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0 [0274.285] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0274.285] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Oracle", cAlternateFileName="")) returned 1 [0274.286] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.286] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.286] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.286] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.286] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.286] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0274.286] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570748) returned 1 [0274.287] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0274.287] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.287] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e910) returned 1 [0274.287] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0274.287] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0274.287] GetLastError () returned 0x0 [0274.287] GetLastError () returned 0x0 [0274.287] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.288] CreateFileA (lpFileName="C:\\Users\\All Users\\Oracle\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\oracle\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0274.289] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3be4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3be4*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.290] SetEndOfFile (hFile=0x23c) returned 1 [0274.290] CloseHandle (hObject=0x23c) returned 1 [0274.290] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.291] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.291] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.291] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.291] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.291] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.291] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0274.292] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.292] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.292] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.292] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.292] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.292] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.292] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.292] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.292] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.293] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.293] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.293] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.293] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.293] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.293] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.293] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.293] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.293] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.293] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.293] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.294] CryptDestroyKey (hKey=0x55e910) returned 1 [0274.294] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0274.294] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Oracle\\*.*" (normalized: "c:\\users\\all users\\oracle\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x47698c9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0274.294] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x47698c9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.294] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47698c9f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47698c9f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47698c9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.294] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0274.295] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.295] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.295] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.295] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.295] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.295] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0274.295] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571490) returned 1 [0274.296] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.296] CryptHashData (hHash=0x55e190, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.296] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0274.296] CryptDestroyHash (hHash=0x55e190) returned 1 [0274.296] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.296] GetLastError () returned 0x0 [0274.296] GetLastError () returned 0x0 [0274.296] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.297] CreateFileA (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\oracle\\java\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.298] WriteFile (in: hFile=0x240, lpBuffer=0x23e3bf4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3bf4*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.299] SetEndOfFile (hFile=0x240) returned 1 [0274.300] CloseHandle (hObject=0x240) returned 1 [0274.300] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.301] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.301] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.301] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.301] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.301] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.301] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0274.302] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.302] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.332] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.332] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.332] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.332] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.333] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.333] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0274.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.333] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.336] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.336] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.336] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0274.336] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0274.336] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\*.*" (normalized: "c:\\users\\all users\\oracle\\java\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x47698c9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0274.337] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x47698c9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.337] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47698c9f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47698c9f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47698c9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.337] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xab77de3d, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0274.337] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.337] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.337] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.337] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.337] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.337] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0274.337] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570c10) returned 1 [0274.338] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.338] CryptHashData (hHash=0x55e710, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.338] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0274.338] CryptDestroyHash (hHash=0x55e710) returned 1 [0274.338] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.338] GetLastError () returned 0x0 [0274.338] GetLastError () returned 0x0 [0274.338] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.339] CreateFileA (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\oracle\\java\\installcache_x64\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0274.340] WriteFile (in: hFile=0x244, lpBuffer=0x23e3c34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3c34*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.341] SetEndOfFile (hFile=0x244) returned 1 [0274.341] CloseHandle (hObject=0x244) returned 1 [0274.342] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.343] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.343] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.345] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.345] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.345] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.345] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0274.345] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.346] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.346] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.346] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.346] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.346] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.347] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.347] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.347] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.347] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.347] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.348] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0274.348] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0274.348] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\*.*" (normalized: "c:\\users\\all users\\oracle\\java\\installcache_x64\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4770b488, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0274.348] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4770b488, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.348] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa52d96b3, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa52d96b3, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa52d96b3, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x405534, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 1 [0274.348] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4770b488, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4770b488, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4770b488, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.348] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4770b488, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4770b488, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4770b488, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0274.348] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0274.348] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xab77de3d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xab77de3d, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 0 [0274.349] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0274.349] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa4af3a5b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xa4af3a5b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa4af3a5b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0274.349] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0274.349] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6be8870b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6be8870b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0274.349] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.349] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0274.350] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570a78) returned 1 [0274.350] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0274.350] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.350] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e210) returned 1 [0274.350] CryptDestroyHash (hHash=0x55e710) returned 1 [0274.350] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0274.350] GetLastError () returned 0x0 [0274.351] GetLastError () returned 0x0 [0274.351] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.352] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0274.353] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.355] SetEndOfFile (hFile=0x23c) returned 1 [0274.355] CloseHandle (hObject=0x23c) returned 1 [0274.355] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.356] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.356] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0274.356] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.357] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.357] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.359] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.359] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.359] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.359] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.360] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.360] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.360] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.360] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.360] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0274.360] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.360] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.360] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.360] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.360] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.361] CryptDestroyKey (hKey=0x55e210) returned 1 [0274.361] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0274.361] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*.*" (normalized: "c:\\users\\all users\\package cache\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6be8870b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47731611, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0274.361] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6be8870b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47731611, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.361] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47731611, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47731611, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47731611, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.361] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508", cAlternateFileName="{0FA68~1.285")) returned 1 [0274.361] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.361] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.362] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.362] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.362] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.362] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0274.362] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571270) returned 1 [0274.362] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.363] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.363] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e650) returned 1 [0274.363] CryptDestroyHash (hHash=0x55e610) returned 1 [0274.363] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.363] GetLastError () returned 0x0 [0274.363] GetLastError () returned 0x0 [0274.363] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.364] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.365] WriteFile (in: hFile=0x240, lpBuffer=0x23e3cb4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3cb4*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.367] SetEndOfFile (hFile=0x240) returned 1 [0274.367] CloseHandle (hObject=0x240) returned 1 [0274.367] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.368] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.368] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0274.368] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.369] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.369] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.369] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.369] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.369] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.370] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.370] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.370] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.371] CryptDestroyKey (hKey=0x55e650) returned 1 [0274.371] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0274.371] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\*.*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47731611, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0274.371] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47731611, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.371] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47731611, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47731611, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47757baa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.371] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0274.372] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.372] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.372] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.372] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0274.372] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570e30) returned 1 [0274.373] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.373] CryptHashData (hHash=0x55e610, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.373] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e650) returned 1 [0274.373] CryptDestroyHash (hHash=0x55e610) returned 1 [0274.373] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.373] GetLastError () returned 0x0 [0274.373] GetLastError () returned 0x0 [0274.373] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.374] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0274.375] WriteFile (in: hFile=0x244, lpBuffer=0x23e3cc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3cc4*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.376] SetEndOfFile (hFile=0x244) returned 1 [0274.376] CloseHandle (hObject=0x244) returned 1 [0274.376] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.377] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.377] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0274.378] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.378] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.379] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.379] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.379] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.379] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.379] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.379] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.379] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.379] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0274.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.380] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.380] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.380] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.384] CryptDestroyKey (hKey=0x55e650) returned 1 [0274.384] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0274.384] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47757baa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0274.385] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47757baa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.385] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47757baa, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47757baa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47757baa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.385] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x257d537e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x257d537e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0274.385] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.385] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.385] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.385] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0274.386] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571160) returned 1 [0274.386] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0274.386] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.386] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0274.386] CryptDestroyHash (hHash=0x55e190) returned 1 [0274.386] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0274.387] GetLastError () returned 0x0 [0274.388] GetLastError () returned 0x0 [0274.388] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.388] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0274.389] WriteFile (in: hFile=0x248, lpBuffer=0x23e3d14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3d14*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.391] SetEndOfFile (hFile=0x248) returned 1 [0274.406] CloseHandle (hObject=0x248) returned 1 [0274.406] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.407] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.407] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.407] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.407] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.407] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.407] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0274.408] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.408] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.408] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.408] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.408] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.408] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.408] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.409] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.409] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.409] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.409] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.409] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0274.409] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.409] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.409] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.410] CryptDestroyKey (hKey=0x55e610) returned 1 [0274.410] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0274.410] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{0FA68574-690B-4B00-89AA-B28946231449}v14.25.28508\\packages\\vcRuntimeAdditional_x86\\*.*" (normalized: "c:\\users\\all users\\package cache\\{0fa68574-690b-4b00-89aa-b28946231449}v14.25.28508\\packages\\vcruntimeadditional_x86\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x257d537e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4777daee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0274.410] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x257d537e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4777daee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.410] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x252744cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x252744cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2576312f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4f83ae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CAB1CA~1.CRY")) returned 1 [0274.411] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4777daee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4777daee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4777daee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.411] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2578562c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2578562c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x257d537e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 1 [0274.411] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2578562c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2578562c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x257d537e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 0 [0274.411] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0274.411] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x257d537e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x257d537e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0274.411] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0274.411] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6505595c, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6505595c, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6505595c, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0274.411] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0274.411] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496a9699, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fd5cd, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fd5cd, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0274.412] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.412] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.412] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.412] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.412] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.412] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0274.412] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5708e0) returned 1 [0274.413] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.413] CryptHashData (hHash=0x55e290, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.413] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e610) returned 1 [0274.413] CryptDestroyHash (hHash=0x55e290) returned 1 [0274.413] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.413] GetLastError () returned 0x0 [0274.413] GetLastError () returned 0x0 [0274.414] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.414] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.416] WriteFile (in: hFile=0x240, lpBuffer=0x23e3d24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3d24*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.417] SetEndOfFile (hFile=0x240) returned 1 [0274.417] CloseHandle (hObject=0x240) returned 1 [0274.418] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.418] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.418] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.419] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.419] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0274.419] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.419] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.420] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.420] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.420] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.420] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.420] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.420] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.420] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.420] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.420] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.420] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0274.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.421] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.421] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.421] CryptDestroyKey (hKey=0x55e610) returned 1 [0274.421] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0274.422] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*.*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496a9699, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fd5cd, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x477ca345, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0274.422] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496a9699, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fd5cd, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x477ca345, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.422] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x477ca345, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x477ca345, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x477ca345, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.422] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fe967, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0274.422] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.422] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.422] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.422] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0274.423] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570a78) returned 1 [0274.423] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.423] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.423] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e210) returned 1 [0274.423] CryptDestroyHash (hHash=0x55e710) returned 1 [0274.424] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.424] GetLastError () returned 0x0 [0274.424] GetLastError () returned 0x0 [0274.424] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.424] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0274.426] WriteFile (in: hFile=0x244, lpBuffer=0x23e3d74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3d74*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.432] SetEndOfFile (hFile=0x244) returned 1 [0274.432] CloseHandle (hObject=0x244) returned 1 [0274.432] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.433] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.434] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.434] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0274.434] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.434] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.434] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.434] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.435] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.435] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.435] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.436] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.436] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.436] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.436] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.437] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.437] CryptDestroyKey (hKey=0x55e210) returned 1 [0274.437] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0274.437] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x477ca345, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0274.437] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x477ca345, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.438] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x477ca345, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x477ca345, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x477f0211, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.438] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x25a34146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x25a34146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0274.438] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.438] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.438] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.438] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0274.438] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571050) returned 1 [0274.439] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0274.439] CryptHashData (hHash=0x55e710, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.439] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e390) returned 1 [0274.439] CryptDestroyHash (hHash=0x55e710) returned 1 [0274.439] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0274.439] GetLastError () returned 0x0 [0274.439] GetLastError () returned 0x0 [0274.439] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.440] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0274.441] WriteFile (in: hFile=0x248, lpBuffer=0x23e3db4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3db4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.443] SetEndOfFile (hFile=0x248) returned 1 [0274.444] CloseHandle (hObject=0x248) returned 1 [0274.444] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.445] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.445] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.445] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.445] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0274.445] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.446] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.446] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.446] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.446] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.446] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.447] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.447] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.447] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.448] CryptDestroyKey (hKey=0x55e390) returned 1 [0274.448] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0274.448] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*.*" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x25a34146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x477f0211, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0274.448] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x25a34146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x477f0211, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.448] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x257d537e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x257d537e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x259c194b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CAB1CA~1.CRY")) returned 1 [0274.448] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x477f0211, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x477f0211, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47816548, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.448] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x259e7b6a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x259e7b6a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x25a34146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 1 [0274.448] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x259e7b6a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x259e7b6a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x25a34146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 0 [0274.448] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0274.449] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fe967, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x25a34146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x25a34146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0274.449] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0274.449] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496fd5cd, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x496fe967, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x496fe967, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0274.449] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0274.449] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508", cAlternateFileName="{2BC3B~1.285")) returned 1 [0274.449] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.449] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.449] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.449] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0274.450] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570b88) returned 1 [0274.450] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.450] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.450] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e610) returned 1 [0274.450] CryptDestroyHash (hHash=0x55e910) returned 1 [0274.450] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.450] GetLastError () returned 0x0 [0274.451] GetLastError () returned 0x0 [0274.451] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.451] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.452] WriteFile (in: hFile=0x240, lpBuffer=0x23e3dc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3dc4*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.454] SetEndOfFile (hFile=0x240) returned 1 [0274.454] CloseHandle (hObject=0x240) returned 1 [0274.454] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.455] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.455] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.455] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.455] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.455] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.455] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0274.456] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.456] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.456] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.456] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.456] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.457] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.457] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0274.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.457] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.458] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.459] CryptDestroyKey (hKey=0x55e610) returned 1 [0274.459] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0274.459] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\*.*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47816548, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0274.459] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47816548, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.459] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47816548, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47816548, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47816548, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.459] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0274.459] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.459] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.460] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.460] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0274.460] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571518) returned 1 [0274.461] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.461] CryptHashData (hHash=0x55e610, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.461] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e7d0) returned 1 [0274.461] CryptDestroyHash (hHash=0x55e610) returned 1 [0274.461] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.461] GetLastError () returned 0x0 [0274.461] GetLastError () returned 0x0 [0274.461] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.462] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0274.463] WriteFile (in: hFile=0x244, lpBuffer=0x23e3e04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3e04*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.465] SetEndOfFile (hFile=0x244) returned 1 [0274.465] CloseHandle (hObject=0x244) returned 1 [0274.465] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.466] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.466] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0274.467] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.467] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.467] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.468] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.468] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.468] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0274.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.468] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.469] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.469] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.469] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0274.469] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0274.469] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4783c651, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0274.469] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4783c651, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.470] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4783c651, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4783c651, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4783c651, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.470] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x25f913e3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x25f913e3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0274.470] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.470] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.470] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.470] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0274.470] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5706c0) returned 1 [0274.471] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0274.471] CryptHashData (hHash=0x55e290, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.471] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e210) returned 1 [0274.471] CryptDestroyHash (hHash=0x55e290) returned 1 [0274.471] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0274.471] GetLastError () returned 0x0 [0274.471] GetLastError () returned 0x0 [0274.471] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.472] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0274.473] WriteFile (in: hFile=0x248, lpBuffer=0x23e3e14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e14*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.500] SetEndOfFile (hFile=0x248) returned 1 [0274.501] CloseHandle (hObject=0x248) returned 1 [0274.501] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.502] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.502] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0274.502] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.503] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.503] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.503] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.503] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.503] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.503] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.503] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.503] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.503] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.503] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.503] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.504] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.504] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.504] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0274.504] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.504] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.504] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.504] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.504] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.505] CryptDestroyKey (hKey=0x55e210) returned 1 [0274.505] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0274.505] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}v14.25.28508\\packages\\vcRuntimeMinimum_x86\\*.*" (normalized: "c:\\users\\all users\\package cache\\{2bc3bd4d-faba-4394-93c7-9ac82a263fe2}v14.25.28508\\packages\\vcruntimeminimum_x86\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x25f913e3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4783c651, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0274.508] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x25f913e3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4783c651, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.508] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a5a25c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x25a5a25c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x25ef8a0e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x14de75, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CAB1CA~1.CRY")) returned 1 [0274.508] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4783c651, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4783c651, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47888c33, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.508] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f23953, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x25f23953, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x25f46527, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 1 [0274.508] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f23953, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x25f23953, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x25f46527, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 0 [0274.508] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0274.508] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x25f913e3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x25f913e3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0274.508] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0274.508] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6502f6da, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x6502f6da, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6502f6da, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0274.508] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0274.509] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x387f5bb4, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0274.509] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.509] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.509] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.509] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0274.509] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570eb8) returned 1 [0274.510] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.510] CryptHashData (hHash=0x55e610, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.510] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e310) returned 1 [0274.510] CryptDestroyHash (hHash=0x55e610) returned 1 [0274.510] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.510] GetLastError () returned 0x0 [0274.510] GetLastError () returned 0x0 [0274.510] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.511] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.514] WriteFile (in: hFile=0x240, lpBuffer=0x23e3e54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3e54*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.516] SetEndOfFile (hFile=0x240) returned 1 [0274.516] CloseHandle (hObject=0x240) returned 1 [0274.516] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.517] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.517] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.517] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.517] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0274.518] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.518] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.518] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.518] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.519] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.519] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0274.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.519] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.519] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.520] CryptDestroyKey (hKey=0x55e310) returned 1 [0274.520] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0274.520] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*.*" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x478aef3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0274.520] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x478aef3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.520] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478aef3b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x478aef3b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x478aef3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.520] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x9d5870d9, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x405534, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0274.520] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x34a1fdf0, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0274.520] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387f5bb4, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x387f5bb4, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x34a1fdf0, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0274.520] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0274.521] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fce5b7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38785f74, dwReserved1=0x78652e36, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0274.522] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.522] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.522] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.522] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.522] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.522] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0274.522] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570c98) returned 1 [0274.523] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.523] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.523] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e190) returned 1 [0274.523] CryptDestroyHash (hHash=0x55e210) returned 1 [0274.523] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.523] GetLastError () returned 0x0 [0274.523] GetLastError () returned 0x0 [0274.524] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.524] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.525] WriteFile (in: hFile=0x240, lpBuffer=0x23e3e64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3e64*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.526] SetEndOfFile (hFile=0x240) returned 1 [0274.527] CloseHandle (hObject=0x240) returned 1 [0274.527] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.528] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.528] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.528] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.528] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0274.528] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.529] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.529] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.529] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.529] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.530] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.530] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0274.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.530] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.530] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.530] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.531] CryptDestroyKey (hKey=0x55e190) returned 1 [0274.531] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0274.531] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*.*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fce5b7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x478d531c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0274.531] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fce5b7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x478d531c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.531] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478d531c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x478d531c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x478d531c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.531] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0274.531] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.531] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.531] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.532] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.532] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.532] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0274.532] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570da8) returned 1 [0274.532] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.533] CryptHashData (hHash=0x55e710, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.533] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e750) returned 1 [0274.533] CryptDestroyHash (hHash=0x55e710) returned 1 [0274.533] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.533] GetLastError () returned 0x0 [0274.533] GetLastError () returned 0x0 [0274.533] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.534] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0274.535] WriteFile (in: hFile=0x244, lpBuffer=0x23e3ea4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3ea4*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.539] SetEndOfFile (hFile=0x244) returned 1 [0274.540] CloseHandle (hObject=0x244) returned 1 [0274.540] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.541] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.541] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.541] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.541] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.542] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0274.542] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.542] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.542] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.542] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.543] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.543] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.543] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.543] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.543] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.543] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.543] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.543] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0274.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.544] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.544] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.544] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.544] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.544] CryptDestroyKey (hKey=0x55e750) returned 1 [0274.544] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0274.544] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x478d531c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0274.545] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x478d531c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.545] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478d531c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x478d531c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x478fb332, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.545] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x264eadc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x264eadc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0274.545] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.545] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.545] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.545] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0274.545] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570968) returned 1 [0274.546] CryptCreateHash (in: hProv=0x570968, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0274.546] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.546] CryptDeriveKey (in: hProv=0x570968, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0274.546] CryptDestroyHash (hHash=0x55e610) returned 1 [0274.546] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18) returned 1 [0274.546] GetLastError () returned 0x0 [0274.546] GetLastError () returned 0x0 [0274.547] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.547] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0274.548] WriteFile (in: hFile=0x248, lpBuffer=0x23e3eb4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3eb4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.550] SetEndOfFile (hFile=0x248) returned 1 [0274.550] CloseHandle (hObject=0x248) returned 1 [0274.550] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.551] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.551] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0274.552] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.552] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.553] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.553] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.553] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.553] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.553] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.553] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.553] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.553] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.553] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.553] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.554] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.554] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.554] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.554] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.554] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.555] CryptDestroyKey (hKey=0x55e650) returned 1 [0274.555] CryptReleaseContext (hProv=0x570968, dwFlags=0x0) returned 1 [0274.555] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*.*" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x264eadc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x478fb332, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0274.555] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x264eadc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x478fb332, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.555] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f913e3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x25f913e3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2647876f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CAB1CA~1.CRY")) returned 1 [0274.555] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478fb332, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x478fb332, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x478fb332, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.555] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2649e983, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2649e983, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x264eadc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 1 [0274.555] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2649e983, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2649e983, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x264eadc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 0 [0274.555] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0274.555] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x264eadc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x264eadc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0274.555] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0274.556] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44fdd028, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44fdd028, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44fdd028, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0274.556] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0274.556] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c893534, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0274.556] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.556] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.556] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.556] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.556] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.556] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0274.556] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570f40) returned 1 [0274.557] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.557] CryptHashData (hHash=0x55e610, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.557] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e210) returned 1 [0274.557] CryptDestroyHash (hHash=0x55e610) returned 1 [0274.557] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.557] GetLastError () returned 0x0 [0274.557] GetLastError () returned 0x0 [0274.558] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.558] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.561] WriteFile (in: hFile=0x240, lpBuffer=0x23e3ef4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3ef4*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.563] SetEndOfFile (hFile=0x240) returned 1 [0274.563] CloseHandle (hObject=0x240) returned 1 [0274.563] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.564] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.564] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.564] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.564] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0274.565] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.565] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.565] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.565] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.565] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.565] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.566] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.566] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.566] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.566] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.566] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.567] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.567] CryptDestroyKey (hKey=0x55e210) returned 1 [0274.567] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0274.567] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*.*" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x479215f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0274.568] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x479215f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.568] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479215f1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x479215f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x479215f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.568] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c893534, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c893534, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xa7a1fb75, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0274.568] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c86d4cb, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4ae0cc20, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0274.568] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c86d4cb, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c86d4cb, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4ae0cc20, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0274.568] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0274.569] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x64df9047, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x36785f74, dwReserved1=0x78652e34, cFileName="{65e650ff-30be-469d-b63a-418d71ea1765}", cAlternateFileName="{65E65~1")) returned 1 [0274.569] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.569] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.569] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.569] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.569] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.569] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0274.569] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5707d0) returned 1 [0274.570] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.570] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.570] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e190) returned 1 [0274.570] CryptDestroyHash (hHash=0x55e210) returned 1 [0274.570] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.570] GetLastError () returned 0x0 [0274.570] GetLastError () returned 0x0 [0274.570] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.571] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.574] WriteFile (in: hFile=0x240, lpBuffer=0x23e3f04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3f04*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.575] SetEndOfFile (hFile=0x240) returned 1 [0274.575] CloseHandle (hObject=0x240) returned 1 [0274.575] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.576] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.576] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0274.577] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.577] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.577] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.578] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.578] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.578] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0274.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.578] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.578] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.579] CryptDestroyKey (hKey=0x55e190) returned 1 [0274.579] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0274.579] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*.*" (normalized: "c:\\users\\all users\\package cache\\{65e650ff-30be-469d-b63a-418d71ea1765}\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x479479ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0274.579] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x479479ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.579] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479479ea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x479479ea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x479479ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.579] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xaba9e611, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x405534, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0274.579] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x625ed0ab, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x9e2e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0274.580] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64df9047, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x64df9047, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x625ed0ab, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x9e2e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0274.580] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0274.580] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69df918b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x782e7473, dwReserved1=0x652e3638, cFileName="{6913e92a-b64e-41c9-a5e6-cef39207fe89}", cAlternateFileName="{6913E~1")) returned 1 [0274.580] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.580] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.580] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.580] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0274.580] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571050) returned 1 [0274.581] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.581] CryptHashData (hHash=0x55e390, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.581] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e290) returned 1 [0274.581] CryptDestroyHash (hHash=0x55e390) returned 1 [0274.581] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.581] GetLastError () returned 0x0 [0274.581] GetLastError () returned 0x0 [0274.582] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.582] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.617] WriteFile (in: hFile=0x240, lpBuffer=0x23e3f44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3f44*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.618] SetEndOfFile (hFile=0x240) returned 1 [0274.618] CloseHandle (hObject=0x240) returned 1 [0274.619] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.619] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.620] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.620] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.620] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0274.620] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.620] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.621] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.621] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.621] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.621] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.621] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0274.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.622] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.622] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.622] CryptDestroyKey (hKey=0x55e290) returned 1 [0274.622] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0274.623] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*.*" (normalized: "c:\\users\\all users\\package cache\\{6913e92a-b64e-41c9-a5e6-cef39207fe89}\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x479b9e5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0274.623] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x479b9e5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.623] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47993db1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47993db1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x479b9e5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.623] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xad482581, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x405534, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0274.623] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x672872b5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x9e218, dwReserved0=0x405534, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0274.623] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69df918b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69df918b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x672872b5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x9e218, dwReserved0=0x405534, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0274.623] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0274.623] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec09f7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x782e7473, dwReserved1=0x652e3436, cFileName="{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508", cAlternateFileName="{7D0B7~1.285")) returned 1 [0274.623] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.624] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.624] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.624] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0274.624] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570f40) returned 1 [0274.625] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.625] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.625] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e790) returned 1 [0274.625] CryptDestroyHash (hHash=0x55e650) returned 1 [0274.625] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.625] GetLastError () returned 0x0 [0274.625] GetLastError () returned 0x0 [0274.625] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.626] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.627] WriteFile (in: hFile=0x240, lpBuffer=0x23e3f54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3f54*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.628] SetEndOfFile (hFile=0x240) returned 1 [0274.628] CloseHandle (hObject=0x240) returned 1 [0274.628] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.629] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.629] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0274.630] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.634] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.634] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.634] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.634] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.635] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.635] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.635] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0274.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.635] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.635] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.635] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.636] CryptDestroyKey (hKey=0x55e790) returned 1 [0274.636] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0274.636] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\*.*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec09f7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x479b9e5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0274.636] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec09f7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x479b9e5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.636] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479b9e5a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x479b9e5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x479b9e5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.636] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0274.636] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.636] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.637] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.637] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0274.637] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570d20) returned 1 [0274.638] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.638] CryptHashData (hHash=0x55e610, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.638] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e910) returned 1 [0274.638] CryptDestroyHash (hHash=0x55e610) returned 1 [0274.638] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.638] GetLastError () returned 0x0 [0274.638] GetLastError () returned 0x0 [0274.638] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.639] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0274.640] WriteFile (in: hFile=0x244, lpBuffer=0x23e3f94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3f94*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.641] SetEndOfFile (hFile=0x244) returned 1 [0274.641] CloseHandle (hObject=0x244) returned 1 [0274.641] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.642] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.642] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0274.643] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.643] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.643] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.644] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.644] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.644] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.644] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.644] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.644] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0274.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.644] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.644] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.644] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.645] CryptDestroyKey (hKey=0x55e910) returned 1 [0274.645] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0274.645] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x479e0193, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0274.645] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x479e0193, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.645] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479e0193, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x479e0193, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x479e0193, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.645] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x26c38256, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x26c38256, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0274.645] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.646] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.646] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.646] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.646] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0274.647] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570c98) returned 1 [0274.647] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0274.647] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.647] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e710) returned 1 [0274.647] CryptDestroyHash (hHash=0x55e910) returned 1 [0274.648] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f190*=0x18) returned 1 [0274.648] GetLastError () returned 0x0 [0274.648] GetLastError () returned 0x0 [0274.648] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.648] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0274.649] WriteFile (in: hFile=0x248, lpBuffer=0x23e3fa4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3fa4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.651] SetEndOfFile (hFile=0x248) returned 1 [0274.651] CloseHandle (hObject=0x248) returned 1 [0274.651] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.652] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.652] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.696] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.697] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0274.697] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.698] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.698] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.698] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.698] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.699] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0274.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.699] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.699] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.699] CryptDestroyKey (hKey=0x55e710) returned 1 [0274.699] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0274.699] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{7D0B74C2-C3F8-4AF1-940F-CD79AB4B2DCE}v14.25.28508\\packages\\vcRuntimeAdditional_amd64\\*.*" (normalized: "c:\\users\\all users\\package cache\\{7d0b74c2-c3f8-4af1-940f-cd79ab4b2dce}v14.25.28508\\packages\\vcruntimeadditional_amd64\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x26c38256, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47a064aa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0274.700] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x26c38256, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47a064aa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.700] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x264eadc4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x264eadc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x26bc7cf4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x55f0fd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CAB1CA~1.CRY")) returned 1 [0274.700] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a064aa, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47a064aa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47a064aa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.700] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26bebdcb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x26bebdcb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x26c38256, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 1 [0274.700] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26bebdcb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x26bebdcb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x26c38256, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2d000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 0 [0274.700] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0274.700] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x26c38256, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x26c38256, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0274.700] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0274.700] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ec4518, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69ec4518, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69ec4518, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0274.700] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0274.700] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c938406, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0274.700] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.700] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.701] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0274.701] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570f40) returned 1 [0274.701] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.701] CryptHashData (hHash=0x55e750, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.701] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e610) returned 1 [0274.702] CryptDestroyHash (hHash=0x55e750) returned 1 [0274.702] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.702] GetLastError () returned 0x0 [0274.702] GetLastError () returned 0x0 [0274.702] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.702] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.704] WriteFile (in: hFile=0x240, lpBuffer=0x23e3fe4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3fe4*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.705] SetEndOfFile (hFile=0x240) returned 1 [0274.705] CloseHandle (hObject=0x240) returned 1 [0274.705] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.706] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.706] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0274.707] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.707] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.707] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.707] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.707] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.708] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.708] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.708] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0274.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.708] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.709] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.709] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.709] CryptDestroyKey (hKey=0x55e610) returned 1 [0274.709] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0274.709] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*.*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c938406, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47a78ac1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0274.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c938406, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47a78ac1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a78ac1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47a78ac1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47a78ac1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.709] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0274.710] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.710] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.710] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.710] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.710] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.710] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0274.710] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570748) returned 1 [0274.711] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.711] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.711] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e190) returned 1 [0274.711] CryptDestroyHash (hHash=0x55e610) returned 1 [0274.711] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.711] GetLastError () returned 0x0 [0274.711] GetLastError () returned 0x0 [0274.711] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.712] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0274.713] WriteFile (in: hFile=0x244, lpBuffer=0x23e3ff4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3ff4*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.714] SetEndOfFile (hFile=0x244) returned 1 [0274.714] CloseHandle (hObject=0x244) returned 1 [0274.714] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.715] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.716] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.716] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0274.716] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.716] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.716] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.716] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.717] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.717] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.717] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.717] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.717] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.717] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.717] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.717] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.718] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.718] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.718] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.718] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.718] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.718] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.718] CryptDestroyKey (hKey=0x55e190) returned 1 [0274.719] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0274.719] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47a9ecc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0274.719] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47a9ecc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.719] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a9ecc4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47a9ecc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47a9ecc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.719] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x2741fb50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2741fb50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0274.719] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.719] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.720] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.720] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0274.720] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570b00) returned 1 [0274.721] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0274.721] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.721] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0274.721] CryptDestroyHash (hHash=0x55e610) returned 1 [0274.721] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f190*=0x18) returned 1 [0274.721] GetLastError () returned 0x0 [0274.721] GetLastError () returned 0x0 [0274.722] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.722] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0274.723] WriteFile (in: hFile=0x248, lpBuffer=0x23e4004*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e4004*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.728] SetEndOfFile (hFile=0x248) returned 1 [0274.728] CloseHandle (hObject=0x248) returned 1 [0274.729] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.729] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.730] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0274.730] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.730] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.730] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.731] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.731] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.731] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.731] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.731] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.731] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.731] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.731] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.731] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.731] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.731] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.731] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.731] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.732] CryptDestroyKey (hKey=0x55e650) returned 1 [0274.732] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0274.732] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*.*" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x2741fb50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47a9ecc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0274.732] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x2741fb50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47a9ecc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.732] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26c5e5a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x26c5e5a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x273ad6c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CAB1CA~1.CRY")) returned 1 [0274.732] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a9ecc4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47a9ecc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47ac521d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.732] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273e3dea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x273e3dea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2741fb50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 1 [0274.732] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x273e3dea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x273e3dea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2741fb50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 0 [0274.732] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0274.732] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x2741fb50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2741fb50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0274.732] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0274.732] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c9496c7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c9496c7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c9496c7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0274.732] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0274.733] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8dfa73, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0274.733] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.733] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.733] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.733] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0274.733] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570e30) returned 1 [0274.734] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.734] CryptHashData (hHash=0x55e650, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.734] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e7d0) returned 1 [0274.734] CryptDestroyHash (hHash=0x55e650) returned 1 [0274.734] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.734] GetLastError () returned 0x0 [0274.734] GetLastError () returned 0x0 [0274.734] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.734] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.735] WriteFile (in: hFile=0x240, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.736] SetEndOfFile (hFile=0x240) returned 1 [0274.736] CloseHandle (hObject=0x240) returned 1 [0274.736] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.737] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.738] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0274.738] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.738] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.739] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.739] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.739] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.769] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.769] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0274.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.797] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.797] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.797] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.820] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0274.820] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0274.820] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*.*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8dfa73, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47ac521d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0274.821] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8dfa73, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47ac521d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.821] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ac521d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47ac521d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47ac521d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.821] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0274.821] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.821] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.821] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.821] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0274.821] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570c98) returned 1 [0274.833] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.837] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.837] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e650) returned 1 [0274.838] CryptDestroyHash (hHash=0x55e610) returned 1 [0274.838] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.838] GetLastError () returned 0x0 [0274.839] GetLastError () returned 0x0 [0274.840] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.843] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0274.862] WriteFile (in: hFile=0x244, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.864] SetEndOfFile (hFile=0x244) returned 1 [0274.864] CloseHandle (hObject=0x244) returned 1 [0274.864] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.867] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.867] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.867] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.867] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0274.868] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.868] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.868] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.869] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.869] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.869] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.870] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.870] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.870] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.870] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.870] CryptDestroyKey (hKey=0x55e650) returned 1 [0274.870] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0274.870] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47bd1172, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0274.871] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47bd1172, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.871] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47bd1172, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47bd1172, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47c02cc8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.871] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x27620971, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27620971, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0274.871] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.871] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.871] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.871] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0274.872] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571408) returned 1 [0274.872] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0274.872] CryptHashData (hHash=0x55e190, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.873] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0274.873] CryptDestroyHash (hHash=0x55e190) returned 1 [0274.873] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f190*=0x18) returned 1 [0274.873] GetLastError () returned 0x0 [0274.873] GetLastError () returned 0x0 [0274.873] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.874] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0274.875] WriteFile (in: hFile=0x248, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.877] SetEndOfFile (hFile=0x248) returned 1 [0274.877] CloseHandle (hObject=0x248) returned 1 [0274.877] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.878] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.878] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.878] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.878] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.878] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.879] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0274.879] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.879] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.879] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.879] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.880] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.880] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.880] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.880] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.881] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.881] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0274.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.882] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.882] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.882] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.882] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.882] CryptDestroyKey (hKey=0x55e910) returned 1 [0274.882] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0274.883] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*.*" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x27620971, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47c1d44a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0274.883] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x27620971, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47c1d44a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.883] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2741fb50, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2741fb50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27561d1f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CAB1CA~1.CRY")) returned 1 [0274.883] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c1d44a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47c1d44a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47c1d44a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.883] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x275d439f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x275d439f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x275fa5ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 1 [0274.883] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x275d439f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x275d439f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x275fa5ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 0 [0274.883] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0274.884] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x27620971, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27620971, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0274.884] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0274.884] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c905d7a, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4c905d7a, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4c905d7a, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0274.884] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0274.884] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c0dea, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0274.884] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.884] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.884] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.884] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0274.884] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571408) returned 1 [0274.885] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.885] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.885] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e610) returned 1 [0274.885] CryptDestroyHash (hHash=0x55e910) returned 1 [0274.885] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.885] GetLastError () returned 0x0 [0274.885] GetLastError () returned 0x0 [0274.885] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.886] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.886] WriteFile (in: hFile=0x240, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.887] SetEndOfFile (hFile=0x240) returned 1 [0274.888] CloseHandle (hObject=0x240) returned 1 [0274.888] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.889] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.889] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0274.889] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.890] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.890] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.890] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.890] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.890] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.890] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.890] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.890] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.890] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.890] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.891] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.891] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.891] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.892] CryptDestroyKey (hKey=0x55e610) returned 1 [0274.892] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0274.892] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*.*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c0dea, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47c42846, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0274.892] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c0dea, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47c42846, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.892] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c42846, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47c42846, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47c42846, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.892] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0274.892] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.892] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.893] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.893] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0274.893] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5712f8) returned 1 [0274.894] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.894] CryptHashData (hHash=0x55e610, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.894] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e710) returned 1 [0274.894] CryptDestroyHash (hHash=0x55e610) returned 1 [0274.894] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.894] GetLastError () returned 0x0 [0274.894] GetLastError () returned 0x0 [0274.894] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.895] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0274.920] WriteFile (in: hFile=0x244, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.921] SetEndOfFile (hFile=0x244) returned 1 [0274.921] CloseHandle (hObject=0x244) returned 1 [0274.921] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.922] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.922] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.922] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.922] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.922] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0274.923] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.923] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.923] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.923] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.923] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.923] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.923] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.923] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.924] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.924] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.924] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.924] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0274.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.924] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.924] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.924] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.924] CryptDestroyKey (hKey=0x55e710) returned 1 [0274.924] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0274.925] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47c8ec2a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0274.925] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47c8ec2a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.925] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c42846, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47c42846, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47c8ec2a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.925] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x27e52ab1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27e52ab1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0274.925] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.925] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.925] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.925] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.925] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.925] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0274.925] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571270) returned 1 [0274.926] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0274.926] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.926] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e290) returned 1 [0274.926] CryptDestroyHash (hHash=0x55e190) returned 1 [0274.926] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0274.926] GetLastError () returned 0x0 [0274.926] GetLastError () returned 0x0 [0274.926] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.927] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0274.928] WriteFile (in: hFile=0x248, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.929] SetEndOfFile (hFile=0x248) returned 1 [0274.930] CloseHandle (hObject=0x248) returned 1 [0274.930] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.930] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.931] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0274.931] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.931] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.932] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.932] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.932] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.932] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0274.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.932] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.932] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.933] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.933] CryptDestroyKey (hKey=0x55e290) returned 1 [0274.933] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0274.933] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*.*" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x27e52ab1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47cb4e56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0274.933] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x27e52ab1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47cb4e56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.933] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27620971, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x27620971, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27d93e67, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CAB1CA~1.CRY")) returned 1 [0274.933] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47cb4e56, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47cb4e56, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47cb4e56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.933] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27de79bd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x27de79bd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27e2c7c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 1 [0274.933] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27de79bd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x27de79bd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27e2c7c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 0 [0274.933] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0274.933] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x27e52ab1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27e52ab1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0274.934] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0274.934] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388c34a7, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x388c34a7, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x388c34a7, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0274.934] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0274.934] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388682fc, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x3888e6f3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0274.934] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.934] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.934] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.934] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.934] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.934] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0274.934] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5712f8) returned 1 [0274.935] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.935] CryptHashData (hHash=0x55e910, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.935] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e610) returned 1 [0274.935] CryptDestroyHash (hHash=0x55e910) returned 1 [0274.935] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.935] GetLastError () returned 0x0 [0274.935] GetLastError () returned 0x0 [0274.935] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.936] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.936] WriteFile (in: hFile=0x240, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.938] SetEndOfFile (hFile=0x240) returned 1 [0274.938] CloseHandle (hObject=0x240) returned 1 [0274.938] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.939] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.939] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0274.939] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.940] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.940] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.940] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.940] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.940] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0274.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.941] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.941] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.941] CryptDestroyKey (hKey=0x55e610) returned 1 [0274.941] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0274.941] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*.*" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388682fc, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47cb4e56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0274.941] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x388682fc, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47cb4e56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.941] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47cb4e56, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47cb4e56, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47cb4e56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.941] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x3888e6f3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0274.942] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.942] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.942] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.942] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0274.942] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570b88) returned 1 [0274.945] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.945] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.945] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e650) returned 1 [0274.945] CryptDestroyHash (hHash=0x55e910) returned 1 [0274.945] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.945] GetLastError () returned 0x0 [0274.945] GetLastError () returned 0x0 [0274.945] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.946] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0274.947] WriteFile (in: hFile=0x244, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.948] SetEndOfFile (hFile=0x244) returned 1 [0274.948] CloseHandle (hObject=0x244) returned 1 [0274.948] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.949] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.951] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.951] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0274.951] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.951] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.952] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.952] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.952] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.952] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.952] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.952] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.952] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.952] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.952] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.952] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.952] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.952] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.952] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0274.953] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.953] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.953] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.953] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.953] CryptDestroyKey (hKey=0x55e650) returned 1 [0274.953] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0274.953] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47cdb149, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0274.953] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47cdb149, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.953] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47cdb149, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47cdb149, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47cdb149, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.954] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28042b6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28042b6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0274.954] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.954] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.954] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.954] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0274.954] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571050) returned 1 [0274.955] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0274.955] CryptHashData (hHash=0x55e390, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.955] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e290) returned 1 [0274.955] CryptDestroyHash (hHash=0x55e390) returned 1 [0274.955] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0274.955] GetLastError () returned 0x0 [0274.955] GetLastError () returned 0x0 [0274.955] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.956] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0274.956] WriteFile (in: hFile=0x248, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.958] SetEndOfFile (hFile=0x248) returned 1 [0274.958] CloseHandle (hObject=0x248) returned 1 [0274.958] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.963] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.963] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.963] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.963] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.963] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.963] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0274.964] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.964] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.964] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.964] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.964] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.964] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.965] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.965] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.965] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.965] CryptDestroyKey (hKey=0x55e290) returned 1 [0274.965] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0274.965] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*.*" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28042b6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47cdb149, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0274.966] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28042b6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47cdb149, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.966] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e52ab1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x27e52ab1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x27fd8424, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CAB1CA~1.CRY")) returned 1 [0274.966] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47cdb149, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47cdb149, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47cdb149, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.966] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ff6495, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x27ff6495, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2801c6bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 1 [0274.966] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27ff6495, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x27ff6495, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2801c6bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 0 [0274.966] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0274.966] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28042b6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28042b6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0274.966] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0274.966] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3888e6f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x3888e6f3, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x3888e6f3, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0274.966] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0274.966] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f2d0b1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f2d0b1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f2d0b1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0274.966] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.966] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.966] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.966] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.966] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0274.967] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571408) returned 1 [0274.967] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.967] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.967] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e610) returned 1 [0274.967] CryptDestroyHash (hHash=0x55e910) returned 1 [0274.967] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.967] GetLastError () returned 0x0 [0274.967] GetLastError () returned 0x0 [0274.968] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.968] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.971] WriteFile (in: hFile=0x240, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.972] SetEndOfFile (hFile=0x240) returned 1 [0274.972] CloseHandle (hObject=0x240) returned 1 [0274.972] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.973] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.974] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.974] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0274.974] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.974] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.975] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.975] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.975] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.975] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.975] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.976] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0274.976] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.976] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.976] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.976] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.976] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.976] CryptDestroyKey (hKey=0x55e610) returned 1 [0274.976] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0274.976] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*.*" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f2d0b1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f2d0b1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47d03548, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0274.977] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f2d0b1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f2d0b1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47d03548, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.977] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d03548, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47d03548, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47d03548, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.977] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44f2d0b1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f2d0b1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xa0211772, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x405534, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0274.977] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44f2d0b1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f2d0b1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x39d18a7e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0274.977] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44f2d0b1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f2d0b1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x39d18a7e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0274.977] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0274.977] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f79386, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f9f6d5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x36785f74, dwReserved1=0x78652e34, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0274.977] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.977] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.977] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.977] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0274.977] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570d20) returned 1 [0274.978] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0274.978] CryptHashData (hHash=0x55e610, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.978] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e910) returned 1 [0274.978] CryptDestroyHash (hHash=0x55e610) returned 1 [0274.978] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f660*=0x18) returned 1 [0274.978] GetLastError () returned 0x0 [0274.978] GetLastError () returned 0x0 [0274.979] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.979] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0274.980] WriteFile (in: hFile=0x240, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.981] SetEndOfFile (hFile=0x240) returned 1 [0274.981] CloseHandle (hObject=0x240) returned 1 [0274.981] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.982] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.982] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.982] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.982] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.982] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.982] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0274.984] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.984] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.985] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.985] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.985] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.985] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.985] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.985] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.985] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.985] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.985] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0274.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.986] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.986] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.986] CryptDestroyKey (hKey=0x55e910) returned 1 [0274.986] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0274.987] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*.*" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f79386, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47d2742b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0274.987] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f79386, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47d2742b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.987] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d2742b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47d2742b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47d2742b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.987] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f9f6d5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0274.987] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.987] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.987] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.987] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0274.987] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570c98) returned 1 [0274.988] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0274.988] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.988] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e710) returned 1 [0274.988] CryptDestroyHash (hHash=0x55e910) returned 1 [0274.988] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0274.988] GetLastError () returned 0x0 [0274.988] GetLastError () returned 0x0 [0274.988] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.989] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0274.990] WriteFile (in: hFile=0x244, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0274.991] SetEndOfFile (hFile=0x244) returned 1 [0274.992] CloseHandle (hObject=0x244) returned 1 [0274.992] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0274.993] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.993] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0274.993] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0274.993] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0274.993] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.994] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0274.994] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0274.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.994] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.994] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0274.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0274.994] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0274.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0274.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0274.995] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0274.995] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.995] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0274.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0274.995] CryptDestroyKey (hKey=0x55e710) returned 1 [0274.995] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0274.995] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47d2742b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0274.996] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47d2742b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0274.996] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d2742b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47d2742b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47d4e4eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0274.996] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28507451, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28507451, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0274.996] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0274.996] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0274.996] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0274.996] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0274.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0274.996] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570f40) returned 1 [0274.997] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0274.997] CryptHashData (hHash=0x55e750, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0274.997] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0274.997] CryptDestroyHash (hHash=0x55e750) returned 1 [0274.997] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0274.997] GetLastError () returned 0x0 [0274.997] GetLastError () returned 0x0 [0274.997] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0274.998] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0274.998] WriteFile (in: hFile=0x248, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.000] SetEndOfFile (hFile=0x248) returned 1 [0275.000] CloseHandle (hObject=0x248) returned 1 [0275.000] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.001] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.001] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.001] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.001] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0275.002] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.002] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.002] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.002] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.002] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.002] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.003] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.003] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.003] CryptDestroyKey (hKey=0x55e650) returned 1 [0275.003] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0275.003] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*.*" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28507451, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47d4e4eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0275.004] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28507451, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47d4e4eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.004] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28042b6b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28042b6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x284bada2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CAB1CA~1.CRY")) returned 1 [0275.004] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d4e4eb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47d4e4eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47d4e4eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.004] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284bada2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x284bada2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28507451, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 1 [0275.004] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284bada2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x284bada2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28507451, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 0 [0275.004] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0275.004] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28507451, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28507451, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0275.004] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0275.004] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44f9f6d5, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x44f9f6d5, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x44f9f6d5, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0275.004] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0275.004] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4965d4d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4965d4d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x4965d4d1, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0275.004] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.004] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.004] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.005] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0275.005] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570748) returned 1 [0275.031] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0275.031] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.031] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e910) returned 1 [0275.031] CryptDestroyHash (hHash=0x55e610) returned 1 [0275.031] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f660*=0x18) returned 1 [0275.032] GetLastError () returned 0x0 [0275.032] GetLastError () returned 0x0 [0275.032] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.032] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0275.036] WriteFile (in: hFile=0x240, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.037] SetEndOfFile (hFile=0x240) returned 1 [0275.037] CloseHandle (hObject=0x240) returned 1 [0275.037] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.038] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.038] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.038] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0275.039] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.039] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.039] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.039] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.040] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.040] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.040] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.040] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.041] CryptDestroyKey (hKey=0x55e910) returned 1 [0275.041] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0275.041] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*.*" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4965d4d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4965d4d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47d99c5f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0275.041] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4965d4d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4965d4d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47d99c5f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.041] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d99c5f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47d99c5f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47dbfe54, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.041] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4965d4d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4965d4d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0xa4f13e84, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0275.041] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4965d4d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4965d4d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x462e9abd, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0275.041] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4965d4d1, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x4965d4d1, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x462e9abd, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0275.041] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0275.041] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ea95f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69eaf8db, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38785f74, dwReserved1=0x78652e36, cFileName="{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508", cAlternateFileName="{EEA66~1.285")) returned 1 [0275.041] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.041] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.042] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.042] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0275.042] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570e30) returned 1 [0275.042] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0275.043] CryptHashData (hHash=0x55e710, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.043] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e910) returned 1 [0275.043] CryptDestroyHash (hHash=0x55e710) returned 1 [0275.043] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18) returned 1 [0275.043] GetLastError () returned 0x0 [0275.043] GetLastError () returned 0x0 [0275.043] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.043] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0275.044] WriteFile (in: hFile=0x240, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.045] SetEndOfFile (hFile=0x240) returned 1 [0275.045] CloseHandle (hObject=0x240) returned 1 [0275.045] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.046] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.046] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0275.047] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.047] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.047] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.047] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.047] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.048] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.048] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.048] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.048] CryptDestroyKey (hKey=0x55e910) returned 1 [0275.048] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0275.049] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\*.*" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ea95f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47dbfe54, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0275.049] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69ea95f3, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47dbfe54, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.049] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47dbfe54, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47dbfe54, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47dbfe54, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.049] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69eaf8db, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0275.049] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.049] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.049] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.049] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.049] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.049] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0275.049] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570fc8) returned 1 [0275.050] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0275.050] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.050] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e790) returned 1 [0275.050] CryptDestroyHash (hHash=0x55e210) returned 1 [0275.050] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0275.050] GetLastError () returned 0x0 [0275.050] GetLastError () returned 0x0 [0275.050] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.051] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0275.052] WriteFile (in: hFile=0x244, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.055] SetEndOfFile (hFile=0x244) returned 1 [0275.056] CloseHandle (hObject=0x244) returned 1 [0275.056] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.057] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.057] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0275.057] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.057] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.058] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.058] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.058] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.058] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.058] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.059] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.059] CryptDestroyKey (hKey=0x55e790) returned 1 [0275.059] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0275.059] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47dbfe54, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0275.059] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47dbfe54, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.059] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47dbfe54, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47dbfe54, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47de8b86, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.059] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28828b3c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28828b3c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0275.060] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.060] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.060] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.060] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0275.060] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571160) returned 1 [0275.061] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0275.061] CryptHashData (hHash=0x55e690, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.061] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e710) returned 1 [0275.061] CryptDestroyHash (hHash=0x55e690) returned 1 [0275.061] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f190*=0x18) returned 1 [0275.061] GetLastError () returned 0x0 [0275.061] GetLastError () returned 0x0 [0275.061] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.061] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0275.062] WriteFile (in: hFile=0x248, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.063] SetEndOfFile (hFile=0x248) returned 1 [0275.063] CloseHandle (hObject=0x248) returned 1 [0275.063] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.064] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.064] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.064] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.065] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.065] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.065] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0275.065] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.065] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.065] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.065] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.065] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.065] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.065] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.066] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.066] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.066] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.066] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.066] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.066] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.066] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.066] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.066] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.066] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.066] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.066] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.066] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.067] CryptDestroyKey (hKey=0x55e710) returned 1 [0275.067] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0275.067] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{EEA66967-97E2-4561-A999-5C22E3CDE428}v14.25.28508\\packages\\vcRuntimeMinimum_amd64\\*.*" (normalized: "c:\\users\\all users\\package cache\\{eea66967-97e2-4561-a999-5c22e3cde428}v14.25.28508\\packages\\vcruntimeminimum_amd64\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28828b3c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47de8b86, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0275.067] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28828b3c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47de8b86, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.067] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28507451, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28507451, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2871d52d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1704ac, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CAB1CA~1.CRY")) returned 1 [0275.067] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47de8b86, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47de8b86, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47de8b86, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.067] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x287b5ec1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x287b5ec1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x288022e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 1 [0275.067] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x287b5ec1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x287b5ec1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x288022e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2f000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 0 [0275.067] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0275.067] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28828b3c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28828b3c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0275.067] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0275.067] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69eaf8db, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x69eaf8db, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x69eaf8db, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0275.067] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0275.072] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0275.072] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.072] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.073] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.073] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0275.073] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570e30) returned 1 [0275.073] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0275.073] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.074] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e310) returned 1 [0275.074] CryptDestroyHash (hHash=0x55e610) returned 1 [0275.074] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18) returned 1 [0275.074] GetLastError () returned 0x0 [0275.074] GetLastError () returned 0x0 [0275.074] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.074] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0275.076] WriteFile (in: hFile=0x240, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.077] SetEndOfFile (hFile=0x240) returned 1 [0275.077] CloseHandle (hObject=0x240) returned 1 [0275.077] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.078] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.078] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.078] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.078] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0275.078] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.079] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.079] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.079] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.079] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.079] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.079] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.079] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.080] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.080] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.080] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.080] CryptDestroyKey (hKey=0x55e310) returned 1 [0275.080] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0275.080] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*.*" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47e0c3b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0275.080] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47e0c3b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.081] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e0c3b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47e0c3b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47e0c3b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.081] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0275.081] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.081] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.081] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.081] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0275.081] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570b88) returned 1 [0275.082] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0275.082] CryptHashData (hHash=0x55e290, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.082] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e710) returned 1 [0275.082] CryptDestroyHash (hHash=0x55e290) returned 1 [0275.082] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0275.082] GetLastError () returned 0x0 [0275.082] GetLastError () returned 0x0 [0275.082] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.082] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0275.085] WriteFile (in: hFile=0x244, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.086] SetEndOfFile (hFile=0x244) returned 1 [0275.086] CloseHandle (hObject=0x244) returned 1 [0275.086] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.087] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.087] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0275.089] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.089] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.090] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.090] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.090] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.090] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.090] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.090] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.090] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.090] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.090] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.090] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.090] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.090] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.091] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0275.091] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.091] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.091] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.091] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.091] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.091] CryptDestroyKey (hKey=0x55e710) returned 1 [0275.091] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0275.092] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*.*" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47e0c3b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0275.092] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x47e0c3b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.092] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e0c3b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47e0c3b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47e32642, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.092] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28ced015, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28ced015, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0275.092] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.092] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.092] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.092] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.092] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.093] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0275.093] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570b88) returned 1 [0275.093] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0275.093] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.093] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e690) returned 1 [0275.094] CryptDestroyHash (hHash=0x55e610) returned 1 [0275.094] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0275.094] GetLastError () returned 0x0 [0275.094] GetLastError () returned 0x0 [0275.094] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.094] CreateFileA (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0275.096] WriteFile (in: hFile=0x248, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.100] SetEndOfFile (hFile=0x248) returned 1 [0275.101] CloseHandle (hObject=0x248) returned 1 [0275.101] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.102] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.102] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.102] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.102] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.102] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.102] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0275.102] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.103] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.103] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.103] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.103] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.103] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.104] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0275.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.104] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.104] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.105] CryptDestroyKey (hKey=0x55e690) returned 1 [0275.105] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0275.105] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*.*" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28ced015, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47e32642, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0275.105] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28ced015, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47e32642, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.105] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2884eb33, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2884eb33, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28c7a7e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cab1.cab.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CAB1CA~1.CRY")) returned 1 [0275.105] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e32642, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47e32642, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47e588c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.105] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ca0b24, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28ca0b24, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28ced015, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 1 [0275.105] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ca0b24, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28ca0b24, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28ced015, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VC_RUN~1.CRY")) returned 0 [0275.105] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0275.105] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x28ced015, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28ced015, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0275.105] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0275.106] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0275.106] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0275.106] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49704b0b, ftCreationTime.dwHighDateTime=0x1d705cc, ftLastAccessTime.dwLowDateTime=0x49704b0b, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x49704b0b, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0275.106] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0275.106] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc2dd99f, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xbc2dd99f, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x412d3232, dwReserved1=0x2d374532, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0275.106] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.106] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.107] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.107] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0275.107] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570638) returned 1 [0275.107] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0275.107] CryptHashData (hHash=0x55e5d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.107] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e910) returned 1 [0275.108] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0275.108] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0275.108] GetLastError () returned 0x0 [0275.108] GetLastError () returned 0x0 [0275.108] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.108] CreateFileA (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0275.110] WriteFile (in: hFile=0x23c, lpBuffer=0x23e38a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e38a4*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.111] SetEndOfFile (hFile=0x23c) returned 1 [0275.112] CloseHandle (hObject=0x23c) returned 1 [0275.112] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.113] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.113] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.113] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.113] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0275.114] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.114] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.114] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.114] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.114] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.114] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.114] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.137] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.138] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.138] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.138] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.138] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.139] CryptDestroyKey (hKey=0x55e910) returned 1 [0275.139] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0275.139] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\*.*" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc2dd99f, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x47e588c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0275.140] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc2dd99f, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x47e588c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.140] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e588c9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47e588c9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47e588c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.140] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda99800, ftCreationTime.dwHighDateTime=0x1d0cb68, ftLastAccessTime.dwLowDateTime=0xbc2dd99f, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xda99800, ftLastWriteTime.dwHighDateTime=0x1d0cb68, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x405534, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Microsoft Office Professional Plus 2016.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 1 [0275.140] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ac00f7d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3ac00f7d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3ac00f7d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="")) returned 1 [0275.140] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ac00f7d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x3ac00f7d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x3ac00f7d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="")) returned 0 [0275.140] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0275.140] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc06c451e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xc06c451e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2d313939, dwReserved1=0x632e3630, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0275.140] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.140] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.140] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.141] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.141] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.141] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0275.141] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x5707d0) returned 1 [0275.141] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0275.142] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.142] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e910) returned 1 [0275.142] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0275.142] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0275.142] GetLastError () returned 0x0 [0275.142] GetLastError () returned 0x0 [0275.142] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.143] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.144] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.144] CreateFileA (lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\softwaredistribution\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0275.149] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3894*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3894*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.150] SetEndOfFile (hFile=0x23c) returned 1 [0275.151] CloseHandle (hObject=0x23c) returned 1 [0275.151] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.152] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.152] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0275.152] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.153] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.153] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.153] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.153] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.153] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.154] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.154] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.154] CryptDestroyKey (hKey=0x55e910) returned 1 [0275.154] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0275.154] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\*.*" (normalized: "c:\\users\\all users\\softwaredistribution\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc06c451e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x47ecad59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0275.155] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc06c451e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x47ecad59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.155] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ea4d51, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47ea4d51, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47ecad59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.155] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06c451e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xc06c451e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xc06c451e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PostRebootEventCache.V2", cAlternateFileName="POSTRE~1.V2")) returned 1 [0275.155] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.155] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.155] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.155] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0275.155] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570b88) returned 1 [0275.156] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0275.156] CryptHashData (hHash=0x55e7d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.156] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e750) returned 1 [0275.156] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0275.156] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f660*=0x18) returned 1 [0275.156] GetLastError () returned 0x0 [0275.156] GetLastError () returned 0x0 [0275.156] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.157] CreateFileA (lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\PostRebootEventCache.V2\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\softwaredistribution\\postrebooteventcache.v2\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0275.158] WriteFile (in: hFile=0x240, lpBuffer=0x23e38b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e38b4*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.159] SetEndOfFile (hFile=0x240) returned 1 [0275.159] CloseHandle (hObject=0x240) returned 1 [0275.159] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.159] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.160] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.160] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.160] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0275.160] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.160] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.160] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.160] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.160] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.161] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.161] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.161] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.161] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.161] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.161] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.161] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.161] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.161] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0275.161] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.165] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.165] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.165] CryptDestroyKey (hKey=0x55e750) returned 1 [0275.165] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0275.165] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\PostRebootEventCache.V2\\*.*" (normalized: "c:\\users\\all users\\softwaredistribution\\postrebooteventcache.v2\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06c451e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xc06c451e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x47ecad59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0275.166] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06c451e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xc06c451e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x47ecad59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.166] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ecad59, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47ecad59, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47ecad59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.166] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ecad59, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47ecad59, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x47ecad59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.166] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0275.169] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc06c451e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xc06c451e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xc06c451e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PostRebootEventCache.V2", cAlternateFileName="POSTRE~1.V2")) returned 0 [0275.169] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0275.169] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x746e6576, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0275.170] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.170] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.170] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.170] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0275.170] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x5706c0) returned 1 [0275.171] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0275.171] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.171] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e910) returned 1 [0275.171] CryptDestroyHash (hHash=0x55e710) returned 1 [0275.171] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0275.171] GetLastError () returned 0x0 [0275.171] GetLastError () returned 0x0 [0275.171] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.172] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.173] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.173] CreateFileA (lpFileName="C:\\Users\\All Users\\Start Menu\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\start menu\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0275.174] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.175] SetEndOfFile (hFile=0x23c) returned 1 [0275.175] CloseHandle (hObject=0x23c) returned 1 [0275.175] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.176] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.176] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.176] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.177] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.177] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0275.177] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.177] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.178] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.178] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.178] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.178] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.178] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.178] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.178] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.178] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.178] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.178] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.179] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.179] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.179] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.179] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.179] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.179] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.179] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.179] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.179] CryptDestroyKey (hKey=0x55e910) returned 1 [0275.180] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0275.180] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*.*" (normalized: "c:\\users\\all users\\start menu\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0275.180] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1b, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0275.180] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.180] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.180] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.180] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.180] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.180] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0275.181] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570c98) returned 1 [0275.181] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0275.181] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.181] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e290) returned 1 [0275.181] CryptDestroyHash (hHash=0x55e790) returned 1 [0275.181] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0275.181] GetLastError () returned 0x0 [0275.181] GetLastError () returned 0x0 [0275.182] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.182] CreateFileA (lpFileName="C:\\Users\\All Users\\Templates\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\templates\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0275.183] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.184] SetEndOfFile (hFile=0x23c) returned 1 [0275.184] CloseHandle (hObject=0x23c) returned 1 [0275.184] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.185] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.185] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.185] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.185] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.185] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.185] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0275.185] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.185] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.186] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.186] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.186] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.186] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.186] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.186] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.186] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.186] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.187] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.187] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.187] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.187] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.187] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.187] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.187] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.187] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.188] CryptDestroyKey (hKey=0x55e290) returned 1 [0275.188] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0275.188] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Templates\\*.*" (normalized: "c:\\users\\all users\\templates\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0275.188] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf99491c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf99491c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1 [0275.188] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.188] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.188] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.188] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.188] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.188] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0275.189] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x5709f0) returned 1 [0275.189] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0275.189] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.189] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e5d0) returned 1 [0275.189] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0275.189] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0275.189] GetLastError () returned 0x0 [0275.189] GetLastError () returned 0x0 [0275.189] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.190] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.191] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.191] CreateFileA (lpFileName="C:\\Users\\All Users\\USOPrivate\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\usoprivate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0275.192] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.355] SetEndOfFile (hFile=0x23c) returned 1 [0275.356] CloseHandle (hObject=0x23c) returned 1 [0275.356] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.361] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.361] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.361] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.361] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0275.362] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.362] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.362] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.362] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.362] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.362] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.362] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.362] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.362] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.363] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.363] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.363] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.363] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.363] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.363] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.363] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.364] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0275.364] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0275.364] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\*.*" (normalized: "c:\\users\\all users\\usoprivate\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf99491c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x47f17457, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0275.365] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xf99491c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x47f17457, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.365] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f17457, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x47f17457, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x480badf8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.365] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xdee19836, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdee19836, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1 [0275.365] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.365] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.366] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.366] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.366] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.366] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0275.366] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570748) returned 1 [0275.367] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0275.367] CryptHashData (hHash=0x55e710, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.367] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e690) returned 1 [0275.367] CryptDestroyHash (hHash=0x55e710) returned 1 [0275.367] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f660*=0x18) returned 1 [0275.367] GetLastError () returned 0x0 [0275.367] GetLastError () returned 0x0 [0275.367] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.368] CreateFileA (lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\usoprivate\\updatestore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0275.369] WriteFile (in: hFile=0x240, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.371] SetEndOfFile (hFile=0x240) returned 1 [0275.371] CloseHandle (hObject=0x240) returned 1 [0275.371] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.372] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.372] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.372] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.372] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0275.373] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.373] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.373] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.373] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.373] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.373] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.373] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.374] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.374] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.376] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.376] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.376] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.377] CryptDestroyKey (hKey=0x55e690) returned 1 [0275.377] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0275.377] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\*.*" (normalized: "c:\\users\\all users\\usoprivate\\updatestore\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xdee19836, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x480e100d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0275.377] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xdee19836, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x480e100d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.377] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480e100d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x480e100d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x480e100d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.377] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xde59b25a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdeda7085, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x405534, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 1 [0275.377] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xde59b25a, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdeda7085, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x405534, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 0 [0275.378] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0275.378] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99491c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xdee19836, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdee19836, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 0 [0275.378] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0275.378] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf97592c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65726f74, dwReserved1=0x5f4f545f, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1 [0275.378] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.378] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.378] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.378] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0275.379] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570858) returned 1 [0275.379] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0275.379] CryptHashData (hHash=0x55e690, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.379] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e710) returned 1 [0275.379] CryptDestroyHash (hHash=0x55e690) returned 1 [0275.379] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0275.379] GetLastError () returned 0x0 [0275.379] GetLastError () returned 0x0 [0275.380] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.389] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.390] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.391] CreateFileA (lpFileName="C:\\Users\\All Users\\USOShared\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\usoshared\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0275.392] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.394] SetEndOfFile (hFile=0x23c) returned 1 [0275.394] CloseHandle (hObject=0x23c) returned 1 [0275.394] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.395] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.395] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0275.396] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.402] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.402] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.403] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.403] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.403] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0275.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.403] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.403] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.404] CryptDestroyKey (hKey=0x55e710) returned 1 [0275.404] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0275.404] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\USOShared\\*.*" (normalized: "c:\\users\\all users\\usoshared\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x481087d3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0275.404] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x481087d3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.405] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x481087d3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x481087d3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x481087d3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.405] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x79047f5b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x79047f5b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0275.405] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.405] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.405] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.405] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0275.405] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5706c0) returned 1 [0275.406] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0275.406] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.406] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e910) returned 1 [0275.406] CryptDestroyHash (hHash=0x55e710) returned 1 [0275.406] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f660*=0x18) returned 1 [0275.406] GetLastError () returned 0x0 [0275.406] GetLastError () returned 0x0 [0275.406] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.407] CreateFileA (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\all users\\usoshared\\logs\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0275.409] WriteFile (in: hFile=0x240, lpBuffer=0x23e35a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e35a4*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.410] SetEndOfFile (hFile=0x240) returned 1 [0275.410] CloseHandle (hObject=0x240) returned 1 [0275.410] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.413] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.414] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.414] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.414] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0275.414] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.414] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.414] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.414] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.414] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.414] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.414] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.415] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.415] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.415] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.415] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.415] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.416] CryptDestroyKey (hKey=0x55e910) returned 1 [0275.416] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0275.416] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\*.*" (normalized: "c:\\users\\all users\\usoshared\\logs\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x79047f5b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4812d497, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0275.416] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x79047f5b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4812d497, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.416] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4812d497, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4812d497, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4812d497, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.416] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x79047f5b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x1d9f0f9b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.001.etl", cAlternateFileName="UP2DAF~1.ETL")) returned 1 [0275.416] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x8c08b661, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb412100a, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.002.etl", cAlternateFileName="UP3884~1.ETL")) returned 1 [0275.416] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xb4f89421, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0xeca50022, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.003.etl", cAlternateFileName="UP8247~1.ETL")) returned 1 [0275.416] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x60797ea1, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x8857baf6, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.004.etl", cAlternateFileName="UPD2FC~1.ETL")) returned 1 [0275.416] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x615d8964, ftLastAccessTime.dwHighDateTime=0x1d8596d, ftLastWriteTime.dwLowDateTime=0x88859575, ftLastWriteTime.dwHighDateTime=0x1d8596d, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.005.etl", cAlternateFileName="UPB784~1.ETL")) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x3a5fe900, ftLastAccessTime.dwHighDateTime=0x1d7b059, ftLastWriteTime.dwLowDateTime=0x6178db96, ftLastWriteTime.dwHighDateTime=0x1d7b059, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.006.etl", cAlternateFileName="UP7D55~1.ETL")) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf801cbae, ftLastAccessTime.dwHighDateTime=0x1d75217, ftLastWriteTime.dwLowDateTime=0x1f56df07, ftLastWriteTime.dwHighDateTime=0x1d75218, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.007.etl", cAlternateFileName="UP52FC~1.ETL")) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf98df460, ftLastAccessTime.dwHighDateTime=0x1d705ef, ftLastWriteTime.dwLowDateTime=0x22721e58, ftLastWriteTime.dwHighDateTime=0x1d705f0, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.008.etl", cAlternateFileName="UPA721~1.ETL")) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x6fb852ed, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xa05d916a, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.009.etl", cAlternateFileName="UPFC55~1.ETL")) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x46a3d34f, ftLastAccessTime.dwHighDateTime=0x1d705cc, ftLastWriteTime.dwLowDateTime=0x6df6574e, ftLastWriteTime.dwHighDateTime=0x1d705cc, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.010.etl", cAlternateFileName="UPB13B~1.ETL")) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x95f9994e, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x95f9994e, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.011.etl", cAlternateFileName="UP076F~1.ETL")) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x9ee92c6a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0xc6371102, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.012.etl", cAlternateFileName="UPEBF6~1.ETL")) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xe7e7af85, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe7e7af85, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.013.etl", cAlternateFileName="UPDATE~4.ETL")) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x4e8a793e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e8a793e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.014.etl", cAlternateFileName="UPDATE~2.ETL")) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0x1d9a4c7e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.015.etl", cAlternateFileName="UPDATE~1.ETL")) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b0d97d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xa689893c, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xac9249a5, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateUx.001.etl", cAlternateFileName="UP654C~1.ETL")) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b0d97d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe7b0d97d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xa690be1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UPDATE~3.ETL")) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7b0d97d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe7b0d97d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xa690be1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UPDATE~3.ETL")) returned 0 [0275.417] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0x79047f5b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x79047f5b, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 0 [0275.417] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0275.417] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf97592c3, ftCreationTime.dwHighDateTime=0x1d70067, ftLastAccessTime.dwLowDateTime=0xf97592c3, ftLastAccessTime.dwHighDateTime=0x1d70067, ftLastWriteTime.dwLowDateTime=0xf97592c3, ftLastWriteTime.dwHighDateTime=0x1d70067, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65726f74, dwReserved1=0x5f4f545f, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 0 [0275.417] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0275.418] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x294562e3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x294562e3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73656465, dwReserved1=0x62697274, cFileName="Default", cAlternateFileName="")) returned 1 [0275.418] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.418] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.418] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.418] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.418] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.418] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0275.418] CryptAcquireContextA (in: phProv=0x19fb24, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19fb24*=0x571408) returned 1 [0275.419] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19fadc | out: phHash=0x19fadc) returned 1 [0275.419] CryptHashData (hHash=0x55e910, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.419] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19fb20 | out: phKey=0x19fb20*=0x55e390) returned 1 [0275.419] CryptDestroyHash (hHash=0x55e910) returned 1 [0275.419] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19fb30*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19fb30*=0x18) returned 1 [0275.419] GetLastError () returned 0x0 [0275.419] GetLastError () returned 0x0 [0275.419] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.420] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.421] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.422] CreateFileA (lpFileName="C:\\Users\\Default\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0275.422] WriteFile (in: hFile=0x238, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f858, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f858*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.424] SetEndOfFile (hFile=0x238) returned 1 [0275.424] CloseHandle (hObject=0x238) returned 1 [0275.424] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.425] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.425] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0275.426] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.426] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.426] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.426] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.427] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.428] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.428] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.429] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.429] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.429] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.429] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.429] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.429] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.429] CryptDestroyKey (hKey=0x55e390) returned 1 [0275.429] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0275.430] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\*.*" (normalized: "c:\\users\\default\\*.*"), lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x294562e3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4815383a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0275.430] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x294562e3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4815383a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.430] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0275.430] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.430] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.430] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.430] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.430] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.430] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0275.431] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570b00) returned 1 [0275.431] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0275.431] CryptHashData (hHash=0x55e2d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.431] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e390) returned 1 [0275.431] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0275.431] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0275.432] GetLastError () returned 0x0 [0275.432] GetLastError () returned 0x0 [0275.432] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.432] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0275.434] WriteFile (in: hFile=0x23c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.435] SetEndOfFile (hFile=0x23c) returned 1 [0275.435] CloseHandle (hObject=0x23c) returned 1 [0275.435] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.436] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.436] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.437] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.437] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0275.437] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.437] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.437] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.437] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.438] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.438] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.438] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.438] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.438] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.438] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.438] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.438] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.439] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.439] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.439] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.439] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.439] CryptDestroyKey (hKey=0x55e390) returned 1 [0275.439] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0275.439] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\*.*" (normalized: "c:\\users\\default\\appdata\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x481799fe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0275.440] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x481799fe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.440] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x481799fe, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x481799fe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x481799fe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.440] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0275.440] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.440] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.440] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.440] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0275.440] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570b00) returned 1 [0275.441] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0275.441] CryptHashData (hHash=0x55e590, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.441] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e590, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0275.441] CryptDestroyHash (hHash=0x55e590) returned 1 [0275.441] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0275.441] GetLastError () returned 0x0 [0275.441] GetLastError () returned 0x0 [0275.441] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.442] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.445] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.446] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0275.447] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.448] SetEndOfFile (hFile=0x240) returned 1 [0275.449] CloseHandle (hObject=0x240) returned 1 [0275.449] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.450] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.450] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.450] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.450] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0275.450] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.451] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.451] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.451] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.451] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.452] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.452] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0275.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.452] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.452] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.452] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.452] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0275.453] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0275.453] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x4819fdd5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0275.453] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x4819fdd5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.453] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0275.453] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.453] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.453] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.453] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.453] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.453] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0275.454] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571490) returned 1 [0275.454] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0275.454] CryptHashData (hHash=0x55e2d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.454] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0275.454] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0275.454] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0275.454] GetLastError () returned 0x0 [0275.455] GetLastError () returned 0x0 [0275.455] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.455] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\application data\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0275.456] WriteFile (in: hFile=0x244, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.456] SetEndOfFile (hFile=0x244) returned 1 [0275.456] CloseHandle (hObject=0x244) returned 1 [0275.456] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.457] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.458] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0275.458] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.459] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.459] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.459] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.459] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.459] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.459] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.459] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.459] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.459] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.459] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.459] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.460] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.460] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.460] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.460] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.460] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.460] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0275.460] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0275.461] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\application data\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f424, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f404, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0275.461] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1b, cFileName="History", cAlternateFileName="")) returned 1 [0275.461] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.461] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.461] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.461] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0275.461] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5709f0) returned 1 [0275.462] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0275.462] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.462] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0275.462] CryptDestroyHash (hHash=0x55e210) returned 1 [0275.462] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0275.462] GetLastError () returned 0x0 [0275.462] GetLastError () returned 0x0 [0275.462] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.463] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.464] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.465] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\history\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0275.466] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.467] SetEndOfFile (hFile=0x244) returned 1 [0275.467] CloseHandle (hObject=0x244) returned 1 [0275.467] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.469] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.470] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0275.471] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.471] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.471] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.471] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.471] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.472] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.472] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.472] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.472] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0275.472] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.472] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.472] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.472] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.472] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.473] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0275.473] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0275.473] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\history\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f424, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f404, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0275.473] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4819fdd5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4819fdd5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4819fdd5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.473] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0275.473] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.473] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.473] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.473] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.473] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.473] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0275.474] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570b88) returned 1 [0275.475] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0275.475] CryptHashData (hHash=0x55e290, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.475] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e190) returned 1 [0275.475] CryptDestroyHash (hHash=0x55e290) returned 1 [0275.475] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0275.475] GetLastError () returned 0x0 [0275.475] GetLastError () returned 0x0 [0275.475] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.476] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0275.478] WriteFile (in: hFile=0x244, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.480] SetEndOfFile (hFile=0x244) returned 1 [0275.480] CloseHandle (hObject=0x244) returned 1 [0275.480] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.481] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.481] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.481] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.481] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.481] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.481] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0275.482] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.482] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.482] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.482] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.482] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.482] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.482] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.482] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.482] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.483] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.483] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.483] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.483] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.483] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.483] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.483] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.483] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.483] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.483] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.483] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.484] CryptDestroyKey (hKey=0x55e190) returned 1 [0275.484] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0275.484] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x481ec2af, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0275.484] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x481ec2af, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.484] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x481ec2af, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x481ec2af, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x481ec2af, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.484] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0275.485] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.485] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.485] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.485] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0275.485] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570fc8) returned 1 [0275.486] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0275.486] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.486] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e210) returned 1 [0275.486] CryptDestroyHash (hHash=0x55e650) returned 1 [0275.486] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18) returned 1 [0275.486] GetLastError () returned 0x0 [0275.486] GetLastError () returned 0x0 [0275.486] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.487] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.488] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.489] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0275.497] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.499] SetEndOfFile (hFile=0x248) returned 1 [0275.499] CloseHandle (hObject=0x248) returned 1 [0275.500] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.501] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.501] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0275.502] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.502] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.502] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.502] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.503] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.503] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.503] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.503] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.503] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.503] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.503] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.503] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.503] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.503] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.503] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.504] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.504] CryptDestroyKey (hKey=0x55e210) returned 1 [0275.504] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0275.504] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x48212344, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0275.504] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x48212344, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.504] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x481ec2af, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x481ec2af, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48212344, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.505] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0275.505] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.505] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.505] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.505] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.505] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.506] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0275.506] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571518) returned 1 [0275.507] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.507] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.507] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0275.507] CryptDestroyHash (hHash=0x55e310) returned 1 [0275.507] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.507] GetLastError () returned 0x0 [0275.507] GetLastError () returned 0x0 [0275.507] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.508] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.509] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.510] SetEndOfFile (hFile=0x24c) returned 1 [0275.510] CloseHandle (hObject=0x24c) returned 1 [0275.511] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.511] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.511] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.512] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.512] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.512] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0275.514] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.514] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.514] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.514] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.514] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.515] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.515] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.515] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.515] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.515] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.515] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.516] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.516] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.516] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.516] CryptDestroyKey (hKey=0x55e210) returned 1 [0275.516] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0275.516] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x48238834, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0275.516] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x48238834, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.517] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48238834, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48238834, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48238834, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.517] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48238834, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48238834, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48238834, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.517] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0275.517] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0x6ec87d0d, ftLastAccessTime.dwHighDateTime=0x1d112f2, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 0 [0275.517] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0275.517] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61746144, dwReserved1=0x726f7453, cFileName="Windows", cAlternateFileName="")) returned 1 [0275.517] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.517] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.517] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.517] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.517] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0275.518] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570638) returned 1 [0275.519] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0275.519] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.519] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e310) returned 1 [0275.519] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0275.519] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f190*=0x18) returned 1 [0275.519] GetLastError () returned 0x0 [0275.519] GetLastError () returned 0x0 [0275.519] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.520] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.521] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.522] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0275.522] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.524] SetEndOfFile (hFile=0x248) returned 1 [0275.524] CloseHandle (hObject=0x248) returned 1 [0275.524] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.525] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.525] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0275.525] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.526] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.526] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.526] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.526] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.526] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0275.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.527] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.527] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.527] CryptDestroyKey (hKey=0x55e310) returned 1 [0275.527] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0275.527] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x4825e830, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0275.528] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x4825e830, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.528] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0275.528] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.528] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.528] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.528] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0275.528] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0275.529] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.529] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.529] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0275.529] CryptDestroyHash (hHash=0x55e650) returned 1 [0275.529] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.529] GetLastError () returned 0x0 [0275.529] GetLastError () returned 0x0 [0275.529] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.530] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\gameexplorer\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.530] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.531] SetEndOfFile (hFile=0x24c) returned 1 [0275.532] CloseHandle (hObject=0x24c) returned 1 [0275.532] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.533] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.533] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0275.533] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.533] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.534] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.534] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.534] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.534] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.534] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.534] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.535] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0275.535] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0275.535] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\gameexplorer\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4825e830, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0275.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4825e830, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4825e830, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4825e830, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4825e830, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4825e830, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4825e830, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4825e830, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.535] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0275.535] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="History", cAlternateFileName="")) returned 1 [0275.535] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.536] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.536] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.536] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0275.536] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0275.557] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.557] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.557] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0275.557] CryptDestroyHash (hHash=0x55e710) returned 1 [0275.558] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.558] GetLastError () returned 0x0 [0275.558] GetLastError () returned 0x0 [0275.558] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.559] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.559] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.560] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.560] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.560] SetEndOfFile (hFile=0x24c) returned 1 [0275.560] CloseHandle (hObject=0x24c) returned 1 [0275.560] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.561] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.565] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0275.566] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.566] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.566] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.567] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.567] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.567] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.567] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.567] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.567] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.567] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.567] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.567] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.568] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0275.568] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0275.568] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x481c5f39, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0275.568] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x481c5f39, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.568] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x481c5f39, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x481c5f39, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x482aac5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.568] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x481c5f39, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x481c5f39, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x482aac5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.568] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0275.568] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4825e830, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4825e830, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4825e830, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.569] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0275.569] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.569] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.569] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.569] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.569] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.569] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0275.569] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0275.570] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.570] CryptHashData (hHash=0x55e5d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.570] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0275.570] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0275.570] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.570] GetLastError () returned 0x0 [0275.570] GetLastError () returned 0x0 [0275.570] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.571] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.572] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.573] SetEndOfFile (hFile=0x24c) returned 1 [0275.573] CloseHandle (hObject=0x24c) returned 1 [0275.573] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.574] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.575] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.575] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0275.575] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.575] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.575] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.575] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.576] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.576] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.576] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.576] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.577] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.577] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.577] CryptDestroyKey (hKey=0x55e650) returned 1 [0275.577] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0275.577] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCache\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\inetcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x482d0d99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0275.578] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x482d0d99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.578] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482d0d99, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x482d0d99, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x482d0d99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.578] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482d0d99, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x482d0d99, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x482d0d99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.578] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0275.578] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0275.578] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.578] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.578] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.578] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0275.579] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0275.580] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.580] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.580] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0275.580] CryptDestroyHash (hHash=0x55e710) returned 1 [0275.580] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.580] GetLastError () returned 0x0 [0275.580] GetLastError () returned 0x0 [0275.580] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.581] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.582] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.587] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.589] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.590] SetEndOfFile (hFile=0x24c) returned 1 [0275.591] CloseHandle (hObject=0x24c) returned 1 [0275.591] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.592] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.592] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0275.592] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.593] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.593] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.593] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.593] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.594] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0275.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.594] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.594] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.595] CryptDestroyKey (hKey=0x55e650) returned 1 [0275.595] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0275.595] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\inetcookies\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x482f73b2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0275.595] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x482f73b2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.595] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482f73b2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x482f73b2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x482f73b2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.595] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482f73b2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x482f73b2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x482f73b2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.595] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0275.596] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3757c8c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x3757c8c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Shell", cAlternateFileName="")) returned 1 [0275.596] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.596] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.596] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.596] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.596] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.596] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0275.596] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0275.597] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.597] CryptHashData (hHash=0x55e5d0, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.597] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0275.597] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0275.597] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.597] GetLastError () returned 0x0 [0275.597] GetLastError () returned 0x0 [0275.598] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.598] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Shell\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\shell\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.601] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.603] SetEndOfFile (hFile=0x24c) returned 1 [0275.603] CloseHandle (hObject=0x24c) returned 1 [0275.603] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.603] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.604] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0275.604] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.604] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.604] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.605] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.605] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.605] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.605] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.605] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.605] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.605] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.605] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.605] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.605] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.606] CryptDestroyKey (hKey=0x55e210) returned 1 [0275.606] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0275.606] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Shell\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\shell\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3757c8c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x482f73b2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0275.606] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3757c8c, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x482f73b2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.606] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3757c8c, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973af366, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18778, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DefaultLayouts.xml", cAlternateFileName="DEFAUL~1.XML")) returned 1 [0275.606] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482f73b2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x482f73b2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4831e079, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.606] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x482f73b2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x482f73b2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4831e079, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.606] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0275.606] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0275.606] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.606] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.607] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.607] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.607] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.607] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0275.607] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0275.607] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.607] CryptHashData (hHash=0x55e390, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.608] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0275.608] CryptDestroyHash (hHash=0x55e390) returned 1 [0275.608] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.608] GetLastError () returned 0x0 [0275.608] GetLastError () returned 0x0 [0275.608] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.609] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.610] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.611] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.612] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.612] SetEndOfFile (hFile=0x24c) returned 1 [0275.613] CloseHandle (hObject=0x24c) returned 1 [0275.613] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.614] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.614] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0275.615] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.615] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.616] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.616] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.616] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.616] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.617] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.617] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.617] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0275.617] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0275.617] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19ef54, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19ef34, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90áU")) returned 0xffffffff [0275.617] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="WinX", cAlternateFileName="")) returned 1 [0275.618] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.618] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.618] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.618] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0275.618] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0275.619] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.619] CryptHashData (hHash=0x55e390, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.619] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0275.619] CryptDestroyHash (hHash=0x55e390) returned 1 [0275.619] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.619] GetLastError () returned 0x0 [0275.619] GetLastError () returned 0x0 [0275.619] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.619] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.620] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.621] SetEndOfFile (hFile=0x24c) returned 1 [0275.621] CloseHandle (hObject=0x24c) returned 1 [0275.621] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.623] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.623] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0275.623] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.623] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.624] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.624] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.624] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.624] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.624] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.624] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.625] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0275.625] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0275.625] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x48343721, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0275.625] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x48343721, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.625] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28d858a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28d858a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Group1", cAlternateFileName="")) returned 1 [0275.625] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.625] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.626] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.626] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.626] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0275.626] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570748) returned 1 [0275.626] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0275.626] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.626] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e690) returned 1 [0275.626] CryptDestroyHash (hHash=0x55e650) returned 1 [0275.626] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0275.626] GetLastError () returned 0x0 [0275.626] GetLastError () returned 0x0 [0275.627] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.627] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.628] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.628] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0275.629] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.630] SetEndOfFile (hFile=0x250) returned 1 [0275.630] CloseHandle (hObject=0x250) returned 1 [0275.631] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.632] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.632] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0275.632] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.632] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.633] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.633] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.633] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.633] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0275.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.633] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.633] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.634] CryptDestroyKey (hKey=0x55e690) returned 1 [0275.634] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0275.634] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group1\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28d858a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48343721, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0275.634] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28d858a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48343721, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.634] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d5f6c1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28d5f6c1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28d858a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1 - Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="1-DESK~1.CRY")) returned 1 [0275.634] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d858a7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28d858a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28d858a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0275.634] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48343721, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48343721, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48343721, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.634] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48343721, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48343721, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48343721, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.634] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0275.634] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28e1e286, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28e1e286, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Group2", cAlternateFileName="")) returned 1 [0275.635] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.635] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.635] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.635] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0275.635] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570748) returned 1 [0275.636] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0275.636] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.636] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e310) returned 1 [0275.636] CryptDestroyHash (hHash=0x55e650) returned 1 [0275.636] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0275.636] GetLastError () returned 0x0 [0275.636] GetLastError () returned 0x0 [0275.636] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.636] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0275.666] WriteFile (in: hFile=0x250, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.668] SetEndOfFile (hFile=0x250) returned 1 [0275.668] CloseHandle (hObject=0x250) returned 1 [0275.668] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.669] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.669] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.669] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.669] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.669] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.670] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0275.670] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.670] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.670] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.670] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.670] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.670] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.671] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.671] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.671] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.671] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.671] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.671] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.671] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.671] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.671] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.671] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.672] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.672] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.672] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.673] CryptDestroyKey (hKey=0x55e310) returned 1 [0275.673] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0275.673] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group2\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28e1e286, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x483b6042, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0275.673] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28e1e286, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x483b6042, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.673] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dabc15, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28dabc15, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28dabc15, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1 - Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="1-RUNL~1.CRY")) returned 1 [0275.673] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28de3c94, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28de3c94, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28de3c94, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2 - Search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="2-SEAR~1.CRY")) returned 1 [0275.673] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28df8179, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28df8179, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28df8179, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x405534, dwReserved1=0x0, cFileName="3 - Windows Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="3-WIND~1.CRY")) returned 1 [0275.673] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28df8179, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28df8179, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28df8179, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4 - Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="4-CONT~1.CRY")) returned 1 [0275.673] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e1e286, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28e1e286, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28e1e286, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5 - Task Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="5-TASK~1.CRY")) returned 1 [0275.673] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e1e286, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28e1e286, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28e1e286, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0275.673] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x483b6042, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x483b6042, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x483b6042, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.673] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x483b6042, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x483b6042, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x483b6042, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.673] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0275.674] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28f757f6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28f757f6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Group3", cAlternateFileName="")) returned 1 [0275.674] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.674] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.674] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.674] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.674] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0275.675] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0275.675] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0275.675] CryptHashData (hHash=0x55e210, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.675] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0275.675] CryptDestroyHash (hHash=0x55e210) returned 1 [0275.675] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0275.675] GetLastError () returned 0x0 [0275.676] GetLastError () returned 0x0 [0275.676] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.677] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.677] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.678] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0275.678] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.679] SetEndOfFile (hFile=0x250) returned 1 [0275.680] CloseHandle (hObject=0x250) returned 1 [0275.680] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.680] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.681] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.681] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.681] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0275.681] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.682] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.682] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.682] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.682] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.683] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.683] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.683] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.683] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.683] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.683] CryptDestroyKey (hKey=0x55e290) returned 1 [0275.683] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0275.684] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\winx\\group3\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28f757f6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x483dbefb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0275.684] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28f757f6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x483dbefb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.684] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e445e0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28e445e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28e6bb37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="01 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="01-COM~1.CRY")) returned 1 [0275.684] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e6bb37, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28e6bb37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28e6bb37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x405534, dwReserved1=0x0, cFileName="01a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="01A-WI~1.CRY")) returned 1 [0275.684] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e6bb37, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28e6bb37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28e6bb37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x405534, dwReserved1=0x0, cFileName="02 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="02-COM~1.CRY")) returned 1 [0275.684] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28e909b2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28e909b2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28e909b2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x405534, dwReserved1=0x0, cFileName="02a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="02A-WI~1.CRY")) returned 1 [0275.684] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28eb6c1f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28eb6c1f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28eb6c1f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="03 - Computer Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="03-COM~1.CRY")) returned 1 [0275.684] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28eb6c1f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28eb6c1f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28eb6c1f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="04 - Disk Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="04-DIS~1.CRY")) returned 1 [0275.684] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28edce46, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28edce46, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28edce46, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x405534, dwReserved1=0x0, cFileName="04-1 - Network Connections.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="04-1-N~1.CRY")) returned 1 [0275.684] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28edce46, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28edce46, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28edce46, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x405534, dwReserved1=0x0, cFileName="05 - Device Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="05-DEV~1.CRY")) returned 1 [0275.684] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f03053, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28f03053, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28f03053, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x405534, dwReserved1=0x0, cFileName="06 - System.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="06-SYS~1.CRY")) returned 1 [0275.684] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f03053, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28f03053, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28f03053, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="07 - Event Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="07-EVE~1.CRY")) returned 1 [0275.684] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f29416, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28f29416, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28f29416, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x405534, dwReserved1=0x0, cFileName="08 - Power Options.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="08-POW~1.CRY")) returned 1 [0275.684] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f29416, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28f29416, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28f50978, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="09 - Mobility Center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="09-MOB~1.CRY")) returned 1 [0275.685] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f50978, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28f50978, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28f50978, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="10 - Programs and Features.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="10-PRO~1.CRY")) returned 1 [0275.685] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f50978, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28f50978, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28f50978, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0275.685] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x483dbefb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x483dbefb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x483dbefb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.685] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x483dbefb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x483dbefb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x483dbefb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.685] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0275.685] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48343721, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48343721, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48343721, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.685] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48343721, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48343721, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48343721, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.685] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0275.685] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="WinX", cAlternateFileName="")) returned 0 [0275.685] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0275.685] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28f757f6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28f757f6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207972, dwReserved1=0x7265746e, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0275.685] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.685] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.686] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.686] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.686] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.686] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0275.686] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571490) returned 1 [0275.687] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0275.687] CryptHashData (hHash=0x55e650, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.687] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e190) returned 1 [0275.687] CryptDestroyHash (hHash=0x55e650) returned 1 [0275.687] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f190*=0x18) returned 1 [0275.687] GetLastError () returned 0x0 [0275.687] GetLastError () returned 0x0 [0275.687] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.688] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0275.690] WriteFile (in: hFile=0x248, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.691] SetEndOfFile (hFile=0x248) returned 1 [0275.691] CloseHandle (hObject=0x248) returned 1 [0275.691] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.692] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.692] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.692] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.692] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0275.696] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.696] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.697] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.697] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.697] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.697] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.697] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.697] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.698] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.698] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.698] CryptDestroyKey (hKey=0x55e190) returned 1 [0275.698] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0275.698] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28f757f6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x483dbefb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0275.699] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28f757f6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x483dbefb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.699] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0275.699] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.699] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.699] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.699] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0275.699] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0275.700] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.700] CryptHashData (hHash=0x55e190, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.700] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0275.700] CryptDestroyHash (hHash=0x55e190) returned 1 [0275.700] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.700] GetLastError () returned 0x0 [0275.700] GetLastError () returned 0x0 [0275.700] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.701] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.702] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.702] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.703] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.704] SetEndOfFile (hFile=0x24c) returned 1 [0275.704] CloseHandle (hObject=0x24c) returned 1 [0275.704] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.705] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.705] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0275.705] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.706] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.706] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.706] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.706] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.706] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0275.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.707] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.707] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.707] CryptDestroyKey (hKey=0x55e650) returned 1 [0275.707] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0275.707] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x48402191, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0275.708] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x48402191, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.708] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48402191, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48402191, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48402191, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.708] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48402191, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48402191, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48402191, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.708] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0275.708] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x483dbefb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x483dbefb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x483dbefb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.708] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f757f6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28f757f6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28f757f6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0275.708] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f757f6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28f757f6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28f757f6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 0 [0275.708] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0275.708] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28f757f6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28f757f6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207972, dwReserved1=0x7265746e, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0275.708] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0275.708] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64695320, dwReserved1=0x72616265, cFileName="Temp", cAlternateFileName="")) returned 1 [0275.714] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.714] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.714] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.714] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0275.715] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5709f0) returned 1 [0275.715] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0275.715] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.715] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e710) returned 1 [0275.715] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0275.715] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0275.715] GetLastError () returned 0x0 [0275.715] GetLastError () returned 0x0 [0275.715] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.716] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0275.717] WriteFile (in: hFile=0x244, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.718] SetEndOfFile (hFile=0x244) returned 1 [0275.718] CloseHandle (hObject=0x244) returned 1 [0275.719] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.719] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.720] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0275.720] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.720] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.720] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.721] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.721] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.721] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.721] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.721] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.721] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.721] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.721] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.721] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.721] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.722] CryptDestroyKey (hKey=0x55e710) returned 1 [0275.722] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0275.722] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\temp\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x484283fb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0275.722] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x484283fb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.722] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x484283fb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x484283fb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x484283fb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.722] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x484283fb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x484283fb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x484283fb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.722] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0275.722] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0275.722] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.722] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.723] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.723] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0275.723] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571160) returned 1 [0275.723] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0275.723] CryptHashData (hHash=0x55e190, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.723] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0275.724] CryptDestroyHash (hHash=0x55e190) returned 1 [0275.724] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0275.724] GetLastError () returned 0x0 [0275.724] GetLastError () returned 0x0 [0275.724] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.725] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.725] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.726] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0275.726] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.726] SetEndOfFile (hFile=0x244) returned 1 [0275.726] CloseHandle (hObject=0x244) returned 1 [0275.727] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.727] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.728] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0275.728] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.728] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.728] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.729] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.729] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.729] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.729] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.729] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.730] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0275.730] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0275.730] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*.*" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f424, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f404, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0275.730] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0 [0275.730] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0275.730] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207972, dwReserved1=0x7265746e, cFileName="Roaming", cAlternateFileName="")) returned 1 [0275.730] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.730] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.730] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.730] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0275.731] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571160) returned 1 [0275.731] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0275.731] CryptHashData (hHash=0x55e190, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.731] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e590) returned 1 [0275.731] CryptDestroyHash (hHash=0x55e190) returned 1 [0275.731] CryptEncrypt (in: hKey=0x55e590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18) returned 1 [0275.731] GetLastError () returned 0x0 [0275.731] GetLastError () returned 0x0 [0275.731] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.732] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0275.733] WriteFile (in: hFile=0x240, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.734] SetEndOfFile (hFile=0x240) returned 1 [0275.734] CloseHandle (hObject=0x240) returned 1 [0275.734] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.735] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.735] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0275.736] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.736] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.736] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.736] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.737] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.737] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0275.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.737] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.737] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.737] CryptDestroyKey (hKey=0x55e590) returned 1 [0275.737] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0275.738] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4844f757, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0275.738] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4844f757, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.738] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4844f757, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4844f757, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4844f757, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.738] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0275.738] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.738] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.738] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.738] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0275.738] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570748) returned 1 [0275.739] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0275.739] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.739] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e190) returned 1 [0275.739] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0275.739] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0275.739] GetLastError () returned 0x0 [0275.739] GetLastError () returned 0x0 [0275.739] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.740] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.741] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.741] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0275.744] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.745] SetEndOfFile (hFile=0x244) returned 1 [0275.745] CloseHandle (hObject=0x244) returned 1 [0275.745] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.746] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.746] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.746] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.746] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.746] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.746] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0275.746] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.746] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.747] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.747] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.747] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.747] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.747] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.748] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.748] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.748] CryptDestroyKey (hKey=0x55e190) returned 1 [0275.748] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0275.748] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4847570b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0275.748] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4847570b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.748] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4847570b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4847570b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4847570b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.748] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0275.749] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.749] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.749] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.749] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0275.749] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571160) returned 1 [0275.749] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0275.749] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.750] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e190) returned 1 [0275.750] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0275.750] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18) returned 1 [0275.750] GetLastError () returned 0x0 [0275.750] GetLastError () returned 0x0 [0275.750] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.750] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0275.751] WriteFile (in: hFile=0x248, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.753] SetEndOfFile (hFile=0x248) returned 1 [0275.753] CloseHandle (hObject=0x248) returned 1 [0275.753] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.754] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.754] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0275.754] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.755] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.755] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.779] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.779] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.779] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.780] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.780] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.780] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.791] CryptDestroyKey (hKey=0x55e190) returned 1 [0275.791] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0275.791] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4847570b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0275.791] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4847570b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.791] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4847570b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4847570b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4847570b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.791] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28fc1d37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28fc1d37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0275.791] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.791] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.791] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.791] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0275.792] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c10) returned 1 [0275.792] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.792] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.792] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0275.792] CryptDestroyHash (hHash=0x55e710) returned 1 [0275.792] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.792] GetLastError () returned 0x0 [0275.792] GetLastError () returned 0x0 [0275.792] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.793] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.794] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.794] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.796] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.797] SetEndOfFile (hFile=0x24c) returned 1 [0275.797] CloseHandle (hObject=0x24c) returned 1 [0275.797] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.798] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.798] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0275.798] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.799] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.799] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.799] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.799] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.799] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.800] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.800] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.800] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.800] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0275.800] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0275.800] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28fc1d37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x484e6eaf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0275.800] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28fc1d37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x484e6eaf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.801] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f9bb16, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28f9bb16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28f9bb16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0275.801] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x484e6eaf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x484e6eaf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x484e6eaf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.801] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28fc1d37, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28fc1d37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28fc1d37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Shows Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SHOWSD~1.CRY")) returned 1 [0275.801] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28fc1d37, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28fc1d37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28fc1d37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Window Switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~1.CRY")) returned 1 [0275.801] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28fc1d37, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28fc1d37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28fc1d37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Window Switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~1.CRY")) returned 0 [0275.801] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0275.801] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x28fc1d37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28fc1d37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 0 [0275.801] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0275.801] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x636e7561, dwReserved1=0x5f4f5468, cFileName="Windows", cAlternateFileName="")) returned 1 [0275.801] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.801] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.801] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.801] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0275.802] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570a78) returned 1 [0275.803] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0275.803] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.803] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e210) returned 1 [0275.803] CryptDestroyHash (hHash=0x55e710) returned 1 [0275.803] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0275.804] GetLastError () returned 0x0 [0275.804] GetLastError () returned 0x0 [0275.804] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.804] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0275.805] WriteFile (in: hFile=0x248, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.806] SetEndOfFile (hFile=0x248) returned 1 [0275.806] CloseHandle (hObject=0x248) returned 1 [0275.806] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.807] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.807] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.807] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.807] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.807] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.807] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0275.808] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.808] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.808] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.808] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.808] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.809] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.809] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.809] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.809] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.809] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.809] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.809] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.809] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.809] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.809] CryptDestroyKey (hKey=0x55e210) returned 1 [0275.809] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0275.809] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4850d146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0275.810] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4850d146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.810] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4850d146, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4850d146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4850d146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.810] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1 [0275.810] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.810] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.810] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.810] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.810] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.810] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0275.810] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0275.811] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.811] CryptHashData (hHash=0x55e210, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.811] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0275.811] CryptDestroyHash (hHash=0x55e210) returned 1 [0275.811] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.811] GetLastError () returned 0x0 [0275.811] GetLastError () returned 0x0 [0275.811] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.812] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.812] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.813] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\network shortcuts\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.813] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.814] SetEndOfFile (hFile=0x24c) returned 1 [0275.814] CloseHandle (hObject=0x24c) returned 1 [0275.815] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.815] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.815] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.819] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0275.819] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.819] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.819] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.820] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.820] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.820] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.820] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.820] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.821] CryptDestroyKey (hKey=0x55e190) returned 1 [0275.821] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0275.821] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\network shortcuts\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4850d146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0275.821] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4850d146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.821] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4850d146, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4850d146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4850d146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.821] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4850d146, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4850d146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4850d146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.821] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0275.821] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1 [0275.821] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.821] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.822] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.822] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.822] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.822] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0275.822] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570f40) returned 1 [0275.822] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.822] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.822] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0275.822] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0275.822] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.823] GetLastError () returned 0x0 [0275.823] GetLastError () returned 0x0 [0275.823] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.823] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\printer shortcuts\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.824] WriteFile (in: hFile=0x24c, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.825] SetEndOfFile (hFile=0x24c) returned 1 [0275.825] CloseHandle (hObject=0x24c) returned 1 [0275.825] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.826] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.826] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.826] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.826] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.826] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.826] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0275.826] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.827] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.827] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.827] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.827] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.827] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.828] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.828] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.828] CryptDestroyKey (hKey=0x55e650) returned 1 [0275.828] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0275.828] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\printer shortcuts\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x48534d80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0275.828] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x48534d80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.828] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48534d80, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48534d80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48534d80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.828] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48534d80, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48534d80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48534d80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.829] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0275.829] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Recent", cAlternateFileName="")) returned 1 [0275.829] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.829] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.829] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.829] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0275.829] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0275.830] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.830] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.830] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0275.830] CryptDestroyHash (hHash=0x55e190) returned 1 [0275.830] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.830] GetLastError () returned 0x0 [0275.830] GetLastError () returned 0x0 [0275.830] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.830] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.831] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.831] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.833] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.835] SetEndOfFile (hFile=0x24c) returned 1 [0275.835] CloseHandle (hObject=0x24c) returned 1 [0275.835] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.835] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.835] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.836] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0275.836] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.836] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.836] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.837] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.837] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.837] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.837] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.837] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.838] CryptDestroyKey (hKey=0x55e290) returned 1 [0275.838] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0275.838] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x48534d80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0275.838] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x48534d80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.838] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48534d80, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48534d80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x485599eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.838] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48534d80, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48534d80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x485599eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.838] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0275.838] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2905a6a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2905a6a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SendTo", cAlternateFileName="")) returned 1 [0275.838] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.838] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.839] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.839] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.839] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0275.839] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0275.839] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.839] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.839] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0275.839] CryptDestroyHash (hHash=0x55e190) returned 1 [0275.839] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.839] GetLastError () returned 0x0 [0275.839] GetLastError () returned 0x0 [0275.840] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.840] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.841] WriteFile (in: hFile=0x24c, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.842] SetEndOfFile (hFile=0x24c) returned 1 [0275.842] CloseHandle (hObject=0x24c) returned 1 [0275.842] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.843] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.843] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0275.844] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.844] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.844] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.844] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.845] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.845] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.845] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.845] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.845] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.845] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.845] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.846] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.846] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.846] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.846] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.846] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.846] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.846] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.847] CryptDestroyKey (hKey=0x55e790) returned 1 [0275.847] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0275.847] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2905a6a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x485599eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0275.847] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2905a6a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x485599eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.847] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Compressed (zipped) Folder.ZFSendToTarget", cAlternateFileName="COMPRE~1.ZFS")) returned 1 [0275.847] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973d55c1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop (create shortcut).DeskLink", cAlternateFileName="DESKTO~1.DES")) returned 1 [0275.847] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28fe7f24, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x28fe7f24, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x28fe7f24, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x22e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0275.847] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2905a6a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2905a6a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2905a6a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Fax Recipient.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FAXREC~1.CRY")) returned 1 [0275.847] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x485599eb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x485599eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x485599eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.848] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 1 [0275.848] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37a4145, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x973fb817, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 0 [0275.848] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0275.848] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69706963, dwReserved1=0x2e746e65, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0275.848] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.848] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.848] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.848] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.848] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0275.849] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0275.851] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.851] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.851] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0275.851] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0275.851] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.851] GetLastError () returned 0x0 [0275.851] GetLastError () returned 0x0 [0275.851] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.852] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.853] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.853] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.857] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.858] SetEndOfFile (hFile=0x24c) returned 1 [0275.859] CloseHandle (hObject=0x24c) returned 1 [0275.859] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.859] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.860] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.860] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.860] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0275.860] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.860] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.860] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.860] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.861] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.861] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.861] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.861] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.861] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.862] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.862] CryptDestroyKey (hKey=0x55e310) returned 1 [0275.862] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0275.862] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4857f990, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0275.862] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4857f990, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.862] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4857f990, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4857f990, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4857f990, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.862] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0275.863] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.863] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.863] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.863] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0275.863] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0275.863] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0275.864] CryptHashData (hHash=0x55e190, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.864] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0275.864] CryptDestroyHash (hHash=0x55e190) returned 1 [0275.864] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0275.864] GetLastError () returned 0x0 [0275.864] GetLastError () returned 0x0 [0275.864] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.864] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0275.866] WriteFile (in: hFile=0x250, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.867] SetEndOfFile (hFile=0x250) returned 1 [0275.867] CloseHandle (hObject=0x250) returned 1 [0275.867] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.868] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.868] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0275.869] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.869] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.869] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.869] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.872] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.872] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.872] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.872] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.873] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0275.873] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0275.873] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x485a5bf8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0275.873] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x485a5bf8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.873] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x290ccd90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x290ccd90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1 [0275.873] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.873] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.873] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.873] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0275.874] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571408) returned 1 [0275.874] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0275.874] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.874] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e650) returned 1 [0275.874] CryptDestroyHash (hHash=0x55e190) returned 1 [0275.874] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ea58*=0x18) returned 1 [0275.874] GetLastError () returned 0x0 [0275.874] GetLastError () returned 0x0 [0275.874] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.876] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.876] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.877] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0275.887] WriteFile (in: hFile=0x254, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.888] SetEndOfFile (hFile=0x254) returned 1 [0275.888] CloseHandle (hObject=0x254) returned 1 [0275.888] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.890] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.890] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.890] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.890] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.890] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.890] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0275.891] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.891] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.891] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.891] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.891] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.892] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.892] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.892] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.892] CryptDestroyKey (hKey=0x55e650) returned 1 [0275.893] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0275.893] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x290ccd90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x485cbd35, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0275.893] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x290ccd90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x485cbd35, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.893] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290807f9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x290807f9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x290807f9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0275.893] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x485cbd35, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x485cbd35, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x485cbd35, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.893] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290a6c15, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x290a6c15, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x290a6c15, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Magnify.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MAGNIF~1.CRY")) returned 1 [0275.893] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290a6c15, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x290a6c15, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x290a6c15, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Narrator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NARRAT~1.CRY")) returned 1 [0275.893] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290ccd90, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x290ccd90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x290ccd90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x405534, dwReserved1=0x0, cFileName="On-Screen Keyboard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ON-SCR~1.CRY")) returned 1 [0275.893] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290ccd90, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x290ccd90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x290ccd90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x405534, dwReserved1=0x0, cFileName="On-Screen Keyboard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ON-SCR~1.CRY")) returned 0 [0275.893] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0275.893] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29119170, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29119170, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4b206e65, dwReserved1=0x6f627965, cFileName="Accessories", cAlternateFileName="ACCESS~2")) returned 1 [0275.894] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.894] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.894] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.894] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.894] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.894] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0275.894] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570da8) returned 1 [0275.895] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0275.895] CryptHashData (hHash=0x55e190, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.895] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e7d0) returned 1 [0275.895] CryptDestroyHash (hHash=0x55e190) returned 1 [0275.895] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ea58*=0x18) returned 1 [0275.895] GetLastError () returned 0x0 [0275.895] GetLastError () returned 0x0 [0275.895] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.896] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0275.906] WriteFile (in: hFile=0x254, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.907] SetEndOfFile (hFile=0x254) returned 1 [0275.908] CloseHandle (hObject=0x254) returned 1 [0275.908] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.909] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.909] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.909] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.909] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.910] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0275.910] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.910] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.910] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.910] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.910] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.910] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.910] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.910] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.910] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.911] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.911] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.911] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.911] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.912] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0275.912] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0275.912] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29119170, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x485f1ff4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0275.912] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29119170, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x485f1ff4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.912] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290f2f3c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x290f2f3c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x290f2f3c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0275.912] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x485f1ff4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x485f1ff4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x485f1ff4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.912] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290f2f3c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x290f2f3c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29119170, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Notepad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NOTEPA~1.CRY")) returned 1 [0275.912] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x290f2f3c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x290f2f3c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29119170, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Notepad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NOTEPA~1.CRY")) returned 0 [0275.912] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0275.912] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x485a5bf8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x485a5bf8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x485a5bf8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6b6e6c2e, dwReserved1=0x7972632e, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.912] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29119170, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29119170, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b6e6c2e, dwReserved1=0x7972632e, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0275.913] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.913] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.913] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.913] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0275.913] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570a78) returned 1 [0275.914] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0275.914] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.914] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e690) returned 1 [0275.914] CryptDestroyHash (hHash=0x55e650) returned 1 [0275.914] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ea58*=0x18) returned 1 [0275.914] GetLastError () returned 0x0 [0275.914] GetLastError () returned 0x0 [0275.914] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.915] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.916] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.917] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0275.921] WriteFile (in: hFile=0x254, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.924] SetEndOfFile (hFile=0x254) returned 1 [0275.924] CloseHandle (hObject=0x254) returned 1 [0275.924] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.925] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.925] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.928] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.928] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0275.928] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.928] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.928] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.928] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.928] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.929] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.929] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.929] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.929] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.929] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.929] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.929] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.929] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.929] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.930] CryptDestroyKey (hKey=0x55e690) returned 1 [0275.930] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0275.930] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29119170, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48618234, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0275.930] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29119170, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48618234, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.930] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29119170, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x29119170, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29119170, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0275.930] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48618234, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48618234, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48618234, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.930] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48618234, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48618234, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48618234, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.930] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0275.930] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x292c9618, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x292c9618, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0275.931] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.931] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.931] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.931] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0275.931] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570858) returned 1 [0275.932] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0275.932] CryptHashData (hHash=0x55e690, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.932] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e7d0) returned 1 [0275.932] CryptDestroyHash (hHash=0x55e690) returned 1 [0275.932] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ea58*=0x18) returned 1 [0275.932] GetLastError () returned 0x0 [0275.932] GetLastError () returned 0x0 [0275.932] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.932] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0275.933] WriteFile (in: hFile=0x254, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.934] SetEndOfFile (hFile=0x254) returned 1 [0275.935] CloseHandle (hObject=0x254) returned 1 [0275.935] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.935] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.936] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.936] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.936] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.936] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.936] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0275.936] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.936] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.936] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.936] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.936] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.937] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.937] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.937] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.937] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.937] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.937] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.937] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.937] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.937] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.937] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.937] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.937] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.937] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.937] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.938] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0275.938] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0275.938] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x292c9618, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4863e56f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0275.938] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x292c9618, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4863e56f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.938] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2913f4f3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2913f4f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2913f4f3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x476, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="COMMAN~1.CRY")) returned 1 [0275.938] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2913f4f3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2913f4f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x291fe0ea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x14f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="computer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="COMPUT~1.CRY")) returned 1 [0275.938] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x292241d3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x292241d3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x292241d3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x195, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTRO~1.CRY")) returned 1 [0275.939] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x292241d3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x292241d3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2924a9d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Default Apps.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DEFAUL~1.CRY")) returned 1 [0275.939] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2924a9d4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2924a9d4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2927064a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3e0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0275.939] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2927064a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2927064a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2927064a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Devices.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DEVICE~1.CRY")) returned 1 [0275.939] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x292968c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x292968c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x292968c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x405534, dwReserved1=0x0, cFileName="File Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILEEX~1.CRY")) returned 1 [0275.939] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4863e56f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4863e56f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4863e56f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.939] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x292968c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x292968c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x292968c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RUNLNK~1.CRY")) returned 1 [0275.939] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x292968c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x292968c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x292968c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RUNLNK~1.CRY")) returned 0 [0275.939] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0275.939] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29344d69, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29344d69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7972632e, dwReserved1=0x64657470, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0275.939] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.939] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.939] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.939] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0275.939] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570d20) returned 1 [0275.940] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0275.940] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.940] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e690) returned 1 [0275.940] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0275.940] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ea58*=0x18) returned 1 [0275.940] GetLastError () returned 0x0 [0275.940] GetLastError () returned 0x0 [0275.940] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.941] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.942] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.942] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0275.964] WriteFile (in: hFile=0x254, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.965] SetEndOfFile (hFile=0x254) returned 1 [0275.966] CloseHandle (hObject=0x254) returned 1 [0275.966] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.967] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.967] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0275.967] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.968] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.968] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.968] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.968] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.968] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.968] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.969] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.969] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.969] CryptDestroyKey (hKey=0x55e690) returned 1 [0275.969] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0275.969] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29344d69, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4868aa44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0275.969] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29344d69, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4868aa44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.969] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x292c9618, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x292c9618, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x292e9439, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0275.969] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4868aa44, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4868aa44, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4868aa44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.969] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x292f547e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x292f547e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x292fffa3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x8bc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows PowerShell (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~1.CRY")) returned 1 [0275.969] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2930d735, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2930d735, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29319582, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows PowerShell ISE (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~2.CRY")) returned 1 [0275.969] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2931e8d2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2931e8d2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29344d69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows PowerShell ISE.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~3.CRY")) returned 1 [0275.969] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29344d69, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x29344d69, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29344d69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x8bc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~4.CRY")) returned 1 [0275.970] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29344d69, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x29344d69, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29344d69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x8bc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~4.CRY")) returned 0 [0275.970] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0275.970] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29344d69, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29344d69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7972632e, dwReserved1=0x64657470, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 0 [0275.970] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0275.970] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 0 [0275.970] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0275.970] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0275.970] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.970] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.970] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.970] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.970] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.970] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0275.971] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0275.971] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0275.971] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.971] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0275.971] CryptDestroyHash (hHash=0x55e790) returned 1 [0275.971] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0275.971] GetLastError () returned 0x0 [0275.971] GetLastError () returned 0x0 [0275.971] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.972] CreateFileA (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\templates\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0275.973] WriteFile (in: hFile=0x24c, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.974] SetEndOfFile (hFile=0x24c) returned 1 [0275.974] CloseHandle (hObject=0x24c) returned 1 [0275.975] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.976] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.976] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.976] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.976] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.976] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0275.977] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.977] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.977] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.977] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.978] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.978] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0275.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.978] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.978] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.978] CryptDestroyKey (hKey=0x55e290) returned 1 [0275.978] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0275.978] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*.*" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\templates\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4868aa44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0275.979] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4868aa44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0275.979] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4868aa44, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4868aa44, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4868aa44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0275.979] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4868aa44, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4868aa44, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4868aa44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0275.979] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0275.979] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0275.979] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0275.979] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x636e7561, dwReserved1=0x5f4f5468, cFileName="Windows", cAlternateFileName="")) returned 0 [0275.979] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0275.979] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0275.979] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0275.979] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49207972, dwReserved1=0x7265746e, cFileName="Roaming", cAlternateFileName="")) returned 0 [0275.979] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0275.979] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d54d8a8, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d54d8a8, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d54d8a8, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0275.980] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.980] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.980] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.980] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0275.980] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570b00) returned 1 [0275.981] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0275.981] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.981] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e7d0) returned 1 [0275.981] CryptDestroyHash (hHash=0x55e790) returned 1 [0275.981] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0275.981] GetLastError () returned 0x0 [0275.981] GetLastError () returned 0x0 [0275.981] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.982] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.982] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.982] CreateFileA (lpFileName="C:\\Users\\Default\\Application Data\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\application data\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0275.983] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.983] SetEndOfFile (hFile=0x23c) returned 1 [0275.983] CloseHandle (hObject=0x23c) returned 1 [0275.983] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.984] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.986] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0275.986] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.987] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.987] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.987] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.987] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.987] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0275.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.988] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.988] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.988] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0275.988] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0275.988] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Application Data\\*.*" (normalized: "c:\\users\\default\\application data\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10éU")) returned 0xffffffff [0275.988] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1b, cFileName="Cookies", cAlternateFileName="")) returned 1 [0275.989] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.989] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0275.989] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570a78) returned 1 [0275.990] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0275.990] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.990] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e590) returned 1 [0275.990] CryptDestroyHash (hHash=0x55e650) returned 1 [0275.990] CryptEncrypt (in: hKey=0x55e590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0275.990] GetLastError () returned 0x0 [0275.990] GetLastError () returned 0x0 [0275.990] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.991] CreateFileA (lpFileName="C:\\Users\\Default\\Cookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\cookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0275.991] WriteFile (in: hFile=0x23c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0275.991] SetEndOfFile (hFile=0x23c) returned 1 [0275.991] CloseHandle (hObject=0x23c) returned 1 [0275.992] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.992] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.992] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.992] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0275.993] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0275.993] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0275.993] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.993] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.993] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.993] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0275.993] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0275.993] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.994] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.994] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0275.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0275.994] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0275.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0275.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0275.994] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0275.994] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0275.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0275.995] CryptDestroyKey (hKey=0x55e590) returned 1 [0275.995] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0275.995] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Cookies\\*.*" (normalized: "c:\\users\\default\\cookies\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10éU")) returned 0xffffffff [0275.995] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Desktop", cAlternateFileName="")) returned 1 [0275.995] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0275.995] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0275.995] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0275.995] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0275.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0275.995] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570858) returned 1 [0275.996] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0275.996] CryptHashData (hHash=0x55e690, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0275.996] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e710) returned 1 [0275.996] CryptDestroyHash (hHash=0x55e690) returned 1 [0275.996] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0275.996] GetLastError () returned 0x0 [0275.996] GetLastError () returned 0x0 [0275.996] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0275.997] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0275.997] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0275.998] CreateFileA (lpFileName="C:\\Users\\Default\\Desktop\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\desktop\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0275.999] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.000] SetEndOfFile (hFile=0x23c) returned 1 [0276.000] CloseHandle (hObject=0x23c) returned 1 [0276.000] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.001] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.001] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.001] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.001] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.001] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.001] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.002] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.002] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.002] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.002] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.003] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.003] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.003] CryptDestroyKey (hKey=0x55e710) returned 1 [0276.003] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0276.003] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Desktop\\*.*" (normalized: "c:\\users\\default\\desktop\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x486d6d60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0276.003] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x486d6d60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.003] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486d6d60, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x486d6d60, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x486d6d60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.003] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486d6d60, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x486d6d60, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x486d6d60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.003] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0276.003] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0276.004] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.004] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.004] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.004] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0276.004] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x5710d8) returned 1 [0276.005] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.005] CryptHashData (hHash=0x55e590, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.005] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e590, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e210) returned 1 [0276.005] CryptDestroyHash (hHash=0x55e590) returned 1 [0276.005] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.005] GetLastError () returned 0x0 [0276.005] GetLastError () returned 0x0 [0276.005] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.010] CreateFileA (lpFileName="C:\\Users\\Default\\Documents\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\documents\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.012] WriteFile (in: hFile=0x23c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.013] SetEndOfFile (hFile=0x23c) returned 1 [0276.013] CloseHandle (hObject=0x23c) returned 1 [0276.013] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.014] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.014] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0276.014] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.015] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.015] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.015] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.015] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.015] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.016] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.016] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.016] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.016] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.016] CryptDestroyKey (hKey=0x55e210) returned 1 [0276.016] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0276.016] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Documents\\*.*" (normalized: "c:\\users\\default\\documents\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x486fd0da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0276.016] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x486fd0da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.016] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486fd0da, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x486fd0da, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x486fd0da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.016] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0276.017] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.017] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.017] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.017] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0276.017] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570b88) returned 1 [0276.017] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0276.017] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.018] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e190) returned 1 [0276.018] CryptDestroyHash (hHash=0x55e290) returned 1 [0276.018] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f660*=0x18) returned 1 [0276.018] GetLastError () returned 0x0 [0276.018] GetLastError () returned 0x0 [0276.018] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.018] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.019] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.019] CreateFileA (lpFileName="C:\\Users\\Default\\Documents\\My Music\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\documents\\my music\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0276.021] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.022] SetEndOfFile (hFile=0x240) returned 1 [0276.022] CloseHandle (hObject=0x240) returned 1 [0276.022] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.023] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.023] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0276.023] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.024] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.024] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.024] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.024] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.024] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.025] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.025] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.025] CryptDestroyKey (hKey=0x55e190) returned 1 [0276.025] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0276.025] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*.*" (normalized: "c:\\users\\default\\documents\\my music\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f68c, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f66c, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0276.025] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1b, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0276.025] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.025] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.026] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.026] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0276.026] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5712f8) returned 1 [0276.026] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0276.026] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.026] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e190) returned 1 [0276.026] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0276.027] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f660*=0x18) returned 1 [0276.027] GetLastError () returned 0x0 [0276.027] GetLastError () returned 0x0 [0276.027] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.027] CreateFileA (lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\documents\\my pictures\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0276.028] WriteFile (in: hFile=0x240, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.029] SetEndOfFile (hFile=0x240) returned 1 [0276.029] CloseHandle (hObject=0x240) returned 1 [0276.029] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.030] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.030] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.030] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.030] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.030] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.030] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0276.030] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.031] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.031] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.031] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.031] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.031] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.032] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.032] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.032] CryptDestroyKey (hKey=0x55e190) returned 1 [0276.032] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0276.032] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*.*" (normalized: "c:\\users\\default\\documents\\my pictures\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f68c, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f66c, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0276.032] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1b, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0276.033] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.033] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.033] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.033] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0276.033] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570a78) returned 1 [0276.033] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0276.034] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.034] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0276.034] CryptDestroyHash (hHash=0x55e650) returned 1 [0276.034] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0276.034] GetLastError () returned 0x0 [0276.034] GetLastError () returned 0x0 [0276.034] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.034] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.035] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.035] CreateFileA (lpFileName="C:\\Users\\Default\\Documents\\My Videos\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\documents\\my videos\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0276.036] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.044] SetEndOfFile (hFile=0x240) returned 1 [0276.044] CloseHandle (hObject=0x240) returned 1 [0276.044] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.045] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.045] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.045] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.045] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.045] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.045] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0276.045] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.045] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.046] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.046] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.046] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.046] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.046] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.047] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.047] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.047] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0276.047] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0276.047] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*.*" (normalized: "c:\\users\\default\\documents\\my videos\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f68c, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f66c, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0276.048] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1b, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0276.048] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0276.048] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7365736f, dwReserved1=0x5f4f545f, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0276.048] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.048] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.048] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.048] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0276.049] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570b88) returned 1 [0276.049] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.049] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.049] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e750) returned 1 [0276.049] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0276.049] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.049] GetLastError () returned 0x0 [0276.049] GetLastError () returned 0x0 [0276.049] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.050] CreateFileA (lpFileName="C:\\Users\\Default\\Downloads\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\downloads\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.051] WriteFile (in: hFile=0x23c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.071] SetEndOfFile (hFile=0x23c) returned 1 [0276.072] CloseHandle (hObject=0x23c) returned 1 [0276.072] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.073] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.073] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.073] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.073] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.074] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.074] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.074] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.074] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.074] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.074] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.074] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.074] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.074] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.074] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.075] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.075] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.075] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.075] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.075] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.075] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.075] CryptDestroyKey (hKey=0x55e750) returned 1 [0276.075] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0276.075] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Downloads\\*.*" (normalized: "c:\\users\\default\\downloads\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x487495c2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0276.076] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x487495c2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.076] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487495c2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x487495c2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48795a54, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.076] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487495c2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x487495c2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48795a54, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.076] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0276.076] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0276.076] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.076] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.076] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.076] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0276.076] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570d20) returned 1 [0276.077] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.077] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.077] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e690) returned 1 [0276.077] CryptDestroyHash (hHash=0x55e710) returned 1 [0276.077] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.077] GetLastError () returned 0x0 [0276.077] GetLastError () returned 0x0 [0276.077] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.078] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.079] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.079] CreateFileA (lpFileName="C:\\Users\\Default\\Favorites\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\favorites\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.080] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.081] SetEndOfFile (hFile=0x23c) returned 1 [0276.082] CloseHandle (hObject=0x23c) returned 1 [0276.082] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.082] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.082] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.082] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.083] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.083] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0276.083] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.083] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.084] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.084] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.084] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.084] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.084] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.084] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.084] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.084] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.084] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.085] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.085] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.085] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.085] CryptDestroyKey (hKey=0x55e690) returned 1 [0276.085] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0276.085] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Favorites\\*.*" (normalized: "c:\\users\\default\\favorites\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x48795a54, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0276.085] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x48795a54, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.085] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48795a54, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48795a54, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48795a54, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.085] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48795a54, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48795a54, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48795a54, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.085] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0276.085] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4815383a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4815383a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4815383a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.085] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Links", cAlternateFileName="")) returned 1 [0276.086] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.086] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.086] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.086] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0276.086] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571408) returned 1 [0276.087] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.087] CryptHashData (hHash=0x55e190, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.087] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e590) returned 1 [0276.087] CryptDestroyHash (hHash=0x55e190) returned 1 [0276.087] CryptEncrypt (in: hKey=0x55e590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.087] GetLastError () returned 0x0 [0276.087] GetLastError () returned 0x0 [0276.087] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.087] CreateFileA (lpFileName="C:\\Users\\Default\\Links\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\links\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.088] WriteFile (in: hFile=0x23c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.089] SetEndOfFile (hFile=0x23c) returned 1 [0276.089] CloseHandle (hObject=0x23c) returned 1 [0276.089] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.090] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.090] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.090] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.090] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.090] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.091] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0276.091] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.091] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.091] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.091] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.091] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.091] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.092] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.092] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.092] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.092] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.092] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.092] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.092] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.092] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.092] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.092] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.092] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.093] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.093] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.093] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.093] CryptDestroyKey (hKey=0x55e590) returned 1 [0276.093] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0276.093] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Links\\*.*" (normalized: "c:\\users\\default\\links\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x487bbbef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0276.093] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x487bbbef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.094] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487bbbef, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x487bbbef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x487bbbef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.094] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487bbbef, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x487bbbef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x487bbbef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.094] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0276.094] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0276.094] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.094] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.094] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.094] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.094] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.094] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0276.094] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570b00) returned 1 [0276.095] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.095] CryptHashData (hHash=0x55e2d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.095] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e390) returned 1 [0276.095] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0276.095] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.095] GetLastError () returned 0x0 [0276.095] GetLastError () returned 0x0 [0276.096] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.096] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.097] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.098] CreateFileA (lpFileName="C:\\Users\\Default\\Local Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\local settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.098] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.098] SetEndOfFile (hFile=0x23c) returned 1 [0276.098] CloseHandle (hObject=0x23c) returned 1 [0276.099] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.103] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.103] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.103] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0276.104] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.104] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.104] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.105] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.105] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.105] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.105] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.105] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.105] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.105] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.106] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.106] CryptDestroyKey (hKey=0x55e390) returned 1 [0276.106] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0276.106] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Local Settings\\*.*" (normalized: "c:\\users\\default\\local settings\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10éU")) returned 0xffffffff [0276.106] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Music", cAlternateFileName="")) returned 1 [0276.107] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.107] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.107] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.107] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0276.107] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570c98) returned 1 [0276.108] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.108] CryptHashData (hHash=0x55e690, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.108] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e590) returned 1 [0276.108] CryptDestroyHash (hHash=0x55e690) returned 1 [0276.108] CryptEncrypt (in: hKey=0x55e590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.108] GetLastError () returned 0x0 [0276.108] GetLastError () returned 0x0 [0276.108] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.109] CreateFileA (lpFileName="C:\\Users\\Default\\Music\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\music\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.109] WriteFile (in: hFile=0x23c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.109] SetEndOfFile (hFile=0x23c) returned 1 [0276.110] CloseHandle (hObject=0x23c) returned 1 [0276.110] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.111] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.111] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.111] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.111] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.111] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.111] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0276.111] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.111] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.112] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.112] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.112] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.112] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.112] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.112] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.112] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.112] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.112] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.112] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.113] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.113] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.113] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.113] CryptDestroyKey (hKey=0x55e590) returned 1 [0276.114] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0276.114] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Music\\*.*" (normalized: "c:\\users\\default\\music\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x486fd0da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0276.114] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x486fd0da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.114] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486fd0da, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x486fd0da, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x487e295d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.114] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486fd0da, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x486fd0da, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x487e295d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.114] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0276.114] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d527734, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d527734, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d527734, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0276.114] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.114] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.121] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.121] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.121] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.121] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0276.121] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571490) returned 1 [0276.122] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.122] CryptHashData (hHash=0x55e190, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.122] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e5d0) returned 1 [0276.122] CryptDestroyHash (hHash=0x55e190) returned 1 [0276.122] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.122] GetLastError () returned 0x0 [0276.122] GetLastError () returned 0x0 [0276.122] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.123] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.124] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.124] CreateFileA (lpFileName="C:\\Users\\Default\\My Documents\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\my documents\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.125] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.125] SetEndOfFile (hFile=0x23c) returned 1 [0276.125] CloseHandle (hObject=0x23c) returned 1 [0276.125] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.126] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.126] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.126] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.127] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.127] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.127] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.127] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.127] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.127] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.127] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.128] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.128] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.128] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.128] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.129] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.129] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.129] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0276.129] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0276.129] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\My Documents\\*.*" (normalized: "c:\\users\\default\\my documents\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10éU")) returned 0xffffffff [0276.129] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1b, cFileName="NetHood", cAlternateFileName="")) returned 1 [0276.130] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.130] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.130] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.130] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.130] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.130] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0276.130] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570e30) returned 1 [0276.131] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.131] CryptHashData (hHash=0x55e690, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.131] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e390) returned 1 [0276.131] CryptDestroyHash (hHash=0x55e690) returned 1 [0276.131] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.131] GetLastError () returned 0x0 [0276.131] GetLastError () returned 0x0 [0276.131] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.134] CreateFileA (lpFileName="C:\\Users\\Default\\NetHood\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\nethood\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.134] WriteFile (in: hFile=0x23c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.135] SetEndOfFile (hFile=0x23c) returned 1 [0276.135] CloseHandle (hObject=0x23c) returned 1 [0276.135] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.136] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.136] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0276.137] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.137] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.137] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.138] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.138] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.138] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.138] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.138] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.139] CryptDestroyKey (hKey=0x55e390) returned 1 [0276.139] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0276.139] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\NetHood\\*.*" (normalized: "c:\\users\\default\\nethood\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10éU")) returned 0xffffffff [0276.139] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2936c366, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2936c366, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x294562e3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="NTUSER.DAT.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NTUSER~1.CRY")) returned 1 [0276.139] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x31cb9166, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x31cb9166, ftLastAccessTime.dwHighDateTime=0x1d112dc, ftLastWriteTime.dwLowDateTime=0x31cb9166, ftLastWriteTime.dwHighDateTime=0x1d112dc, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0276.139] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x31cb9166, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x31cb9166, ftLastAccessTime.dwHighDateTime=0x1d112dc, ftLastWriteTime.dwLowDateTime=0x31cb9166, ftLastWriteTime.dwHighDateTime=0x1d112dc, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0276.139] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d5f4e96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d5f4e96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0276.139] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d5f4e96, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d5f4e96, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0276.140] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8d61ae52, ftCreationTime.dwHighDateTime=0x1d700aa, ftLastAccessTime.dwLowDateTime=0x8d61ae52, ftLastAccessTime.dwHighDateTime=0x1d700aa, ftLastWriteTime.dwLowDateTime=0x8d61ae52, ftLastWriteTime.dwHighDateTime=0x1d700aa, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0276.140] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Pictures", cAlternateFileName="")) returned 1 [0276.140] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.140] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.140] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.140] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.140] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.140] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0276.140] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570b88) returned 1 [0276.141] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.141] CryptHashData (hHash=0x55e290, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.141] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e190) returned 1 [0276.141] CryptDestroyHash (hHash=0x55e290) returned 1 [0276.141] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.141] GetLastError () returned 0x0 [0276.141] GetLastError () returned 0x0 [0276.141] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.142] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.143] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.143] CreateFileA (lpFileName="C:\\Users\\Default\\Pictures\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\pictures\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.144] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.144] SetEndOfFile (hFile=0x23c) returned 1 [0276.144] CloseHandle (hObject=0x23c) returned 1 [0276.144] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.145] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.145] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0276.146] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.146] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.147] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.147] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.147] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.147] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.148] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.148] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.148] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.149] CryptDestroyKey (hKey=0x55e190) returned 1 [0276.149] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0276.149] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Pictures\\*.*" (normalized: "c:\\users\\default\\pictures\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x487231cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0276.149] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x487231cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.149] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487231cd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x487231cd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x488318fe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.149] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487231cd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x487231cd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x488318fe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.149] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0276.150] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0276.150] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.150] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.150] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.150] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.150] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.150] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0276.150] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570748) returned 1 [0276.151] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.151] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.151] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e290) returned 1 [0276.151] CryptDestroyHash (hHash=0x55e790) returned 1 [0276.151] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.151] GetLastError () returned 0x0 [0276.151] GetLastError () returned 0x0 [0276.151] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.152] CreateFileA (lpFileName="C:\\Users\\Default\\PrintHood\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\printhood\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.152] WriteFile (in: hFile=0x23c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.153] SetEndOfFile (hFile=0x23c) returned 1 [0276.153] CloseHandle (hObject=0x23c) returned 1 [0276.153] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.154] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.154] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0276.154] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.157] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.157] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.158] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.158] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.158] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.158] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.158] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.158] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.158] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.158] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.158] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.159] CryptDestroyKey (hKey=0x55e290) returned 1 [0276.159] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0276.159] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\PrintHood\\*.*" (normalized: "c:\\users\\default\\printhood\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10éU")) returned 0xffffffff [0276.159] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1b, cFileName="Recent", cAlternateFileName="")) returned 1 [0276.159] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.159] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.159] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.159] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.159] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.159] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0276.159] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570b00) returned 1 [0276.160] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.160] CryptHashData (hHash=0x55e590, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.160] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e590, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e5d0) returned 1 [0276.160] CryptDestroyHash (hHash=0x55e590) returned 1 [0276.160] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.160] GetLastError () returned 0x0 [0276.160] GetLastError () returned 0x0 [0276.160] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.161] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.163] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.164] CreateFileA (lpFileName="C:\\Users\\Default\\Recent\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\recent\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.164] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.164] SetEndOfFile (hFile=0x23c) returned 1 [0276.164] CloseHandle (hObject=0x23c) returned 1 [0276.164] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.165] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.165] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0276.166] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.166] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.166] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.166] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.167] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.167] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.167] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.167] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.167] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.167] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.167] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.168] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0276.168] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0276.168] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Recent\\*.*" (normalized: "c:\\users\\default\\recent\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10éU")) returned 0xffffffff [0276.168] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0276.168] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.168] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.168] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.168] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0276.168] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571490) returned 1 [0276.169] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.169] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.169] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e5d0) returned 1 [0276.169] CryptDestroyHash (hHash=0x55e190) returned 1 [0276.169] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.169] GetLastError () returned 0x0 [0276.169] GetLastError () returned 0x0 [0276.169] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.170] CreateFileA (lpFileName="C:\\Users\\Default\\Saved Games\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\saved games\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.170] WriteFile (in: hFile=0x23c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.171] SetEndOfFile (hFile=0x23c) returned 1 [0276.171] CloseHandle (hObject=0x23c) returned 1 [0276.172] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.172] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.173] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.173] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.173] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0276.173] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.174] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.174] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.174] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.174] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.174] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.175] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.175] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.175] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.175] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.175] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.176] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0276.176] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0276.176] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Saved Games\\*.*" (normalized: "c:\\users\\default\\saved games\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4887abd6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0276.176] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x4887abd6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.176] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4887abd6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4887abd6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4887abd6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.176] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4887abd6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4887abd6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4887abd6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.176] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0276.176] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="SendTo", cAlternateFileName="")) returned 1 [0276.176] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.176] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.177] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.177] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0276.177] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x5709f0) returned 1 [0276.179] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.180] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.180] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e590) returned 1 [0276.180] CryptDestroyHash (hHash=0x55e210) returned 1 [0276.180] CryptEncrypt (in: hKey=0x55e590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.180] GetLastError () returned 0x0 [0276.180] GetLastError () returned 0x0 [0276.180] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.181] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.182] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.182] CreateFileA (lpFileName="C:\\Users\\Default\\SendTo\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\sendto\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.182] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.183] SetEndOfFile (hFile=0x23c) returned 1 [0276.183] CloseHandle (hObject=0x23c) returned 1 [0276.183] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.184] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.184] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.184] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.184] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.184] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.184] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0276.185] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.185] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.185] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.185] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.185] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.185] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.185] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.185] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.185] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.186] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.186] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.186] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.186] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.186] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.186] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.186] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.187] CryptDestroyKey (hKey=0x55e590) returned 1 [0276.187] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0276.187] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\SendTo\\*.*" (normalized: "c:\\users\\default\\sendto\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10éU")) returned 0xffffffff [0276.187] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1b, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0276.187] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.187] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.187] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.187] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.188] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.188] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0276.188] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x5712f8) returned 1 [0276.188] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.189] CryptHashData (hHash=0x55e390, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.189] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e610) returned 1 [0276.189] CryptDestroyHash (hHash=0x55e390) returned 1 [0276.189] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.189] GetLastError () returned 0x0 [0276.189] GetLastError () returned 0x0 [0276.189] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.189] CreateFileA (lpFileName="C:\\Users\\Default\\Start Menu\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\start menu\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.190] WriteFile (in: hFile=0x23c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.190] SetEndOfFile (hFile=0x23c) returned 1 [0276.190] CloseHandle (hObject=0x23c) returned 1 [0276.191] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.191] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.191] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.192] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0276.192] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.192] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.193] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.193] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.193] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.193] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.194] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.194] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.194] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.194] CryptDestroyKey (hKey=0x55e610) returned 1 [0276.194] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0276.194] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Start Menu\\*.*" (normalized: "c:\\users\\default\\start menu\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10éU")) returned 0xffffffff [0276.195] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1b, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0276.195] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.195] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.195] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.195] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0276.195] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570fc8) returned 1 [0276.196] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.196] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.196] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e210) returned 1 [0276.196] CryptDestroyHash (hHash=0x55e650) returned 1 [0276.196] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.196] GetLastError () returned 0x0 [0276.196] GetLastError () returned 0x0 [0276.196] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.197] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.198] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.199] CreateFileA (lpFileName="C:\\Users\\Default\\Templates\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\templates\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.199] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.199] SetEndOfFile (hFile=0x23c) returned 1 [0276.199] CloseHandle (hObject=0x23c) returned 1 [0276.199] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.200] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.200] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.200] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.200] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0276.201] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.201] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.201] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.201] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.201] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.202] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.202] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.202] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.202] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.203] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.203] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.203] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.203] CryptDestroyKey (hKey=0x55e210) returned 1 [0276.203] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0276.203] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Templates\\*.*" (normalized: "c:\\users\\default\\templates\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10éU")) returned 0xffffffff [0276.203] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Videos", cAlternateFileName="")) returned 1 [0276.204] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.204] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.204] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.204] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0276.204] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x5706c0) returned 1 [0276.205] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.205] CryptHashData (hHash=0x55e590, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.205] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e590, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e190) returned 1 [0276.205] CryptDestroyHash (hHash=0x55e590) returned 1 [0276.205] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.205] GetLastError () returned 0x0 [0276.205] GetLastError () returned 0x0 [0276.205] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.206] CreateFileA (lpFileName="C:\\Users\\Default\\Videos\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default\\videos\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.206] WriteFile (in: hFile=0x23c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.206] SetEndOfFile (hFile=0x23c) returned 1 [0276.207] CloseHandle (hObject=0x23c) returned 1 [0276.207] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.208] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.208] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.208] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.208] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.208] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.208] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0276.214] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.214] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.214] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.214] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.214] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.214] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.218] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.218] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.219] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.219] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.219] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.220] CryptDestroyKey (hKey=0x55e190) returned 1 [0276.220] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0276.220] FindFirstFileA (in: lpFileName="C:\\Users\\Default\\Videos\\*.*" (normalized: "c:\\users\\default\\videos\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x487231cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0276.220] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0x487231cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.220] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487231cd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x487231cd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x488c6ecc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.220] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487231cd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x487231cd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x488c6ecc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.220] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0276.220] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd9eaaa, ftLastAccessTime.dwHighDateTime=0x1d112e4, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Videos", cAlternateFileName="")) returned 0 [0276.220] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0276.221] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x4f6643a1, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0x4f6643a1, ftLastAccessTime.dwHighDateTime=0x1d112ea, ftLastWriteTime.dwLowDateTime=0x4f6643a1, ftLastWriteTime.dwHighDateTime=0x1d112ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x31653236, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0276.221] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.221] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.221] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.221] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.221] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.221] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0276.221] CryptAcquireContextA (in: phProv=0x19fb24, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19fb24*=0x571490) returned 1 [0276.222] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19fadc | out: phHash=0x19fadc) returned 1 [0276.222] CryptHashData (hHash=0x55e2d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.222] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19fb20 | out: phKey=0x19fb20*=0x55e590) returned 1 [0276.222] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0276.222] CryptEncrypt (in: hKey=0x55e590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19fb30*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19fb30*=0x18) returned 1 [0276.222] GetLastError () returned 0x0 [0276.222] GetLastError () returned 0x0 [0276.222] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.223] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.224] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.253] CreateFileA (lpFileName="C:\\Users\\Default User\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\default user\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0276.253] WriteFile (in: hFile=0x238, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f858, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f858*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.254] SetEndOfFile (hFile=0x238) returned 1 [0276.254] CloseHandle (hObject=0x238) returned 1 [0276.254] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.256] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.256] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.257] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.257] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.257] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.257] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.257] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.257] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.257] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.257] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.258] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.258] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.258] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.258] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.258] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.258] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.258] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.258] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.259] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.259] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.259] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.259] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.259] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.259] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.259] CryptDestroyKey (hKey=0x55e590) returned 1 [0276.259] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0276.259] FindFirstFileA (in: lpFileName="C:\\Users\\Default User\\*.*" (normalized: "c:\\users\\default user\\*.*"), lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19fb5c, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19fb3c, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="PâU")) returned 0xffffffff [0276.260] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2949c3c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2949c3c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2949c3c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0276.260] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2950e9aa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2950e9aa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Public", cAlternateFileName="")) returned 1 [0276.260] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.260] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.260] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.260] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0276.260] CryptAcquireContextA (in: phProv=0x19fb24, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19fb24*=0x5709f0) returned 1 [0276.261] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19fadc | out: phHash=0x19fadc) returned 1 [0276.261] CryptHashData (hHash=0x55e210, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.261] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19fb20 | out: phKey=0x19fb20*=0x55e590) returned 1 [0276.261] CryptDestroyHash (hHash=0x55e210) returned 1 [0276.261] CryptEncrypt (in: hKey=0x55e590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19fb30*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19fb30*=0x18) returned 1 [0276.261] GetLastError () returned 0x0 [0276.261] GetLastError () returned 0x0 [0276.262] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.262] CreateFileA (lpFileName="C:\\Users\\Public\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\public\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0276.263] WriteFile (in: hFile=0x238, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f858, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f858*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.265] SetEndOfFile (hFile=0x238) returned 1 [0276.265] CloseHandle (hObject=0x238) returned 1 [0276.265] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.266] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.266] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.266] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.266] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.266] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.266] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0276.267] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.267] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.267] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.267] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.267] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.267] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.267] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.267] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.267] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.268] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.268] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.268] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.268] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.268] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.268] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.268] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.268] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.268] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.268] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.268] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.269] CryptDestroyKey (hKey=0x55e590) returned 1 [0276.269] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0276.269] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\*.*" (normalized: "c:\\users\\public\\*.*"), lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2950e9aa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4895fa72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0276.269] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2950e9aa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4895fa72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.269] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x294c2623, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x294c2623, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AccountPictures", cAlternateFileName="ACCOUN~1")) returned 1 [0276.269] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.269] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.269] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.270] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.270] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.270] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0276.270] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570e30) returned 1 [0276.271] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.271] CryptHashData (hHash=0x55e910, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.271] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e650) returned 1 [0276.271] CryptDestroyHash (hHash=0x55e910) returned 1 [0276.271] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.271] GetLastError () returned 0x0 [0276.271] GetLastError () returned 0x0 [0276.271] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.272] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.273] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.274] CreateFileA (lpFileName="C:\\Users\\Public\\AccountPictures\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\public\\accountpictures\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.281] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.283] SetEndOfFile (hFile=0x23c) returned 1 [0276.283] CloseHandle (hObject=0x23c) returned 1 [0276.283] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.284] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.284] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.284] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.284] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.284] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.285] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0276.285] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.285] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.285] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.285] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.285] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.285] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.286] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.286] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.286] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.286] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.286] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.286] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.286] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.286] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.314] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.314] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.314] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.315] CryptDestroyKey (hKey=0x55e650) returned 1 [0276.315] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0276.315] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\AccountPictures\\*.*" (normalized: "c:\\users\\public\\accountpictures\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x294c2623, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4898592a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0276.315] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x294c2623, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4898592a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.315] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x294c2623, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x294c2623, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x294c2623, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0276.315] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4898592a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4898592a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4898592a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.315] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4898592a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4898592a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4898592a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.315] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0276.316] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x43e03d2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43e03d2f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Desktop", cAlternateFileName="")) returned 1 [0276.316] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.316] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.316] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.316] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.316] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.316] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0276.316] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570da8) returned 1 [0276.317] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.317] CryptHashData (hHash=0x55e210, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.317] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e590) returned 1 [0276.317] CryptDestroyHash (hHash=0x55e210) returned 1 [0276.317] CryptEncrypt (in: hKey=0x55e590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.317] GetLastError () returned 0x0 [0276.317] GetLastError () returned 0x0 [0276.317] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.320] CreateFileA (lpFileName="C:\\Users\\Public\\Desktop\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\public\\desktop\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.320] WriteFile (in: hFile=0x23c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.321] SetEndOfFile (hFile=0x23c) returned 1 [0276.412] CloseHandle (hObject=0x23c) returned 1 [0276.412] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.413] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.413] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.414] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.414] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.414] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.415] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.415] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.415] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.415] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.416] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.416] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.416] CryptDestroyKey (hKey=0x55e590) returned 1 [0276.416] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0276.416] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Desktop\\*.*" (normalized: "c:\\users\\public\\desktop\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x43e03d2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43e03d2f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0276.417] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x43e03d2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43e03d2f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.417] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x294e8700, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x294e8700, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x294e8700, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0276.417] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e03d2f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43e03d2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48a908b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.417] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e03d2f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43e03d2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48a908b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.417] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0276.417] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x294e8700, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x294e8700, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2950e9aa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0276.417] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29534d71, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29534d71, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0276.417] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.417] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.417] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.418] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.418] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0276.418] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570da8) returned 1 [0276.418] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.418] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.418] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e690) returned 1 [0276.418] CryptDestroyHash (hHash=0x55e210) returned 1 [0276.419] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.419] GetLastError () returned 0x0 [0276.419] GetLastError () returned 0x0 [0276.419] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.420] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.420] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.421] CreateFileA (lpFileName="C:\\Users\\Public\\Documents\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\public\\documents\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.421] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.422] SetEndOfFile (hFile=0x23c) returned 1 [0276.423] CloseHandle (hObject=0x23c) returned 1 [0276.423] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.424] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.424] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.424] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.424] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0276.424] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.425] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.425] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.425] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.425] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.426] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.426] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.426] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.427] CryptDestroyKey (hKey=0x55e690) returned 1 [0276.427] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0276.427] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Documents\\*.*" (normalized: "c:\\users\\public\\documents\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29534d71, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43e29fd6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0276.429] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29534d71, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43e29fd6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.429] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2950e9aa, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2950e9aa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29534d71, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0276.429] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43e29fd6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43e29fd6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48adcd32, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.429] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0276.429] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.429] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.429] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.429] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.429] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.430] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0276.430] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570e30) returned 1 [0276.430] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0276.430] CryptHashData (hHash=0x55e790, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.430] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e390) returned 1 [0276.430] CryptDestroyHash (hHash=0x55e790) returned 1 [0276.430] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f660*=0x18) returned 1 [0276.431] GetLastError () returned 0x0 [0276.431] GetLastError () returned 0x0 [0276.431] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.431] CreateFileA (lpFileName="C:\\Users\\Public\\Documents\\My Music\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\public\\documents\\my music\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0276.432] WriteFile (in: hFile=0x240, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.433] SetEndOfFile (hFile=0x240) returned 1 [0276.433] CloseHandle (hObject=0x240) returned 1 [0276.433] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.434] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.434] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.434] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.434] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0276.434] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.435] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.435] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.435] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.435] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.435] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.436] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.436] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.436] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.436] CryptDestroyKey (hKey=0x55e390) returned 1 [0276.436] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0276.436] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*.*" (normalized: "c:\\users\\public\\documents\\my music\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f68c, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f66c, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10éU")) returned 0xffffffff [0276.436] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d599f22, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d599f22, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d599f22, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1b, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0276.436] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.436] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.437] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.437] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0276.437] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570b00) returned 1 [0276.437] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0276.437] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.437] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e190) returned 1 [0276.437] CryptDestroyHash (hHash=0x55e710) returned 1 [0276.438] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f660*=0x18) returned 1 [0276.438] GetLastError () returned 0x0 [0276.438] GetLastError () returned 0x0 [0276.438] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.438] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.439] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.439] CreateFileA (lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\public\\documents\\my pictures\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0276.440] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.441] SetEndOfFile (hFile=0x240) returned 1 [0276.441] CloseHandle (hObject=0x240) returned 1 [0276.441] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.442] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.442] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0276.464] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.464] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.464] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.464] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.465] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.465] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.465] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.465] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.466] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.466] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.466] CryptDestroyKey (hKey=0x55e190) returned 1 [0276.466] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0276.467] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*.*" (normalized: "c:\\users\\public\\documents\\my pictures\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f68c, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f66c, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10éU")) returned 0xffffffff [0276.467] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d5bfea2, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1b, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0276.467] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.467] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.467] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.467] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0276.468] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570fc8) returned 1 [0276.468] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0276.468] CryptHashData (hHash=0x55e590, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.468] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e590, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0276.468] CryptDestroyHash (hHash=0x55e590) returned 1 [0276.468] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f660*=0x18) returned 1 [0276.469] GetLastError () returned 0x0 [0276.469] GetLastError () returned 0x0 [0276.469] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.470] CreateFileA (lpFileName="C:\\Users\\Public\\Documents\\My Videos\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\public\\documents\\my videos\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0276.470] WriteFile (in: hFile=0x240, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.472] SetEndOfFile (hFile=0x240) returned 1 [0276.472] CloseHandle (hObject=0x240) returned 1 [0276.472] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.473] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.473] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.477] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0276.477] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.478] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.478] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.478] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.478] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.479] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.479] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.479] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.479] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.479] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.480] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0276.480] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0276.480] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*.*" (normalized: "c:\\users\\public\\documents\\my videos\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f68c, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f66c, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10éU")) returned 0xffffffff [0276.480] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d5bfea2, ftCreationTime.dwHighDateTime=0x1d7005f, ftLastAccessTime.dwLowDateTime=0x5d5bfea2, ftLastAccessTime.dwHighDateTime=0x1d7005f, ftLastWriteTime.dwLowDateTime=0x5d5bfea2, ftLastWriteTime.dwHighDateTime=0x1d7005f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x1b, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0276.480] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0276.480] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2955aeac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2955aeac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7365736f, dwReserved1=0x5f4f545f, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0276.480] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.480] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.480] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.480] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.480] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.481] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0276.481] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570fc8) returned 1 [0276.481] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.481] CryptHashData (hHash=0x55e390, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.481] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e310) returned 1 [0276.481] CryptDestroyHash (hHash=0x55e390) returned 1 [0276.482] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.482] GetLastError () returned 0x0 [0276.482] GetLastError () returned 0x0 [0276.482] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.483] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.483] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.483] CreateFileA (lpFileName="C:\\Users\\Public\\Downloads\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\public\\downloads\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.486] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.487] SetEndOfFile (hFile=0x23c) returned 1 [0276.487] CloseHandle (hObject=0x23c) returned 1 [0276.487] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.488] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.488] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.488] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.488] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.489] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.489] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.489] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.489] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.489] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.491] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.491] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.491] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.491] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.491] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.491] CryptDestroyKey (hKey=0x55e310) returned 1 [0276.491] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0276.491] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Downloads\\*.*" (normalized: "c:\\users\\public\\downloads\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2955aeac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b75c04, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0276.492] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2955aeac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b75c04, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.492] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29534d71, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x29534d71, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2955aeac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0276.492] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b75c04, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48b75c04, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b75c04, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.492] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b75c04, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48b75c04, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b75c04, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.492] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0276.492] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4895fa72, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4895fa72, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4895fa72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.492] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2955aeac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2955aeac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0276.492] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.492] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.492] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.492] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.492] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.492] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0276.492] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571050) returned 1 [0276.493] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.493] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.493] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e590) returned 1 [0276.493] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0276.493] CryptEncrypt (in: hKey=0x55e590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.493] GetLastError () returned 0x0 [0276.493] GetLastError () returned 0x0 [0276.493] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.494] CreateFileA (lpFileName="C:\\Users\\Public\\Libraries\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\public\\libraries\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.495] WriteFile (in: hFile=0x23c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.496] SetEndOfFile (hFile=0x23c) returned 1 [0276.496] CloseHandle (hObject=0x23c) returned 1 [0276.496] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.497] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.497] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.497] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.497] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0276.497] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.497] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.498] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.498] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.498] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.498] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.498] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.498] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.498] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.498] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.498] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.499] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.499] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.499] CryptDestroyKey (hKey=0x55e590) returned 1 [0276.499] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0276.499] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Libraries\\*.*" (normalized: "c:\\users\\public\\libraries\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2955aeac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b9b8ed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0276.499] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x2955aeac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b9b8ed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.499] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2955aeac, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2955aeac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2955aeac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0276.499] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b9b8ed, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48b9b8ed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b9b8ed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.499] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0276.499] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0 [0276.500] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0276.500] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29581182, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29581182, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e565464, dwReserved1=0x7262696c, cFileName="Music", cAlternateFileName="")) returned 1 [0276.500] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.500] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.500] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.500] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0276.500] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x5712f8) returned 1 [0276.501] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.501] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.501] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e910) returned 1 [0276.501] CryptDestroyHash (hHash=0x55e310) returned 1 [0276.501] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.501] GetLastError () returned 0x0 [0276.501] GetLastError () returned 0x0 [0276.501] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.502] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.502] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.503] CreateFileA (lpFileName="C:\\Users\\Public\\Music\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\public\\music\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.503] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.503] SetEndOfFile (hFile=0x23c) returned 1 [0276.503] CloseHandle (hObject=0x23c) returned 1 [0276.503] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.504] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.504] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.504] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.505] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.505] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.505] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0276.505] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.505] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.512] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.512] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.512] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.512] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.512] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.512] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.512] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.512] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.512] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.512] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.513] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.513] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.513] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.513] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.513] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.513] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.513] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.513] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.513] CryptDestroyKey (hKey=0x55e910) returned 1 [0276.513] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0276.513] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Music\\*.*" (normalized: "c:\\users\\public\\music\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29581182, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b02ff0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0276.514] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x29581182, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b02ff0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.514] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29581182, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x29581182, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29581182, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0276.514] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b02ff0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48b02ff0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b9b8ed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.514] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b02ff0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48b02ff0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b9b8ed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.514] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0276.514] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x295a72e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x295a72e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Pictures", cAlternateFileName="")) returned 1 [0276.514] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.514] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.514] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.514] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.514] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.514] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0276.515] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571050) returned 1 [0276.515] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.515] CryptHashData (hHash=0x55e390, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.515] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e290) returned 1 [0276.515] CryptDestroyHash (hHash=0x55e390) returned 1 [0276.515] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.515] GetLastError () returned 0x0 [0276.515] GetLastError () returned 0x0 [0276.515] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.516] CreateFileA (lpFileName="C:\\Users\\Public\\Pictures\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\public\\pictures\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.516] WriteFile (in: hFile=0x23c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.516] SetEndOfFile (hFile=0x23c) returned 1 [0276.516] CloseHandle (hObject=0x23c) returned 1 [0276.517] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.517] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.518] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0276.518] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.518] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.518] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.519] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.519] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.519] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.519] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.519] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.520] CryptDestroyKey (hKey=0x55e290) returned 1 [0276.520] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0276.520] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Pictures\\*.*" (normalized: "c:\\users\\public\\pictures\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x295a72e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b02ff0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0276.520] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x295a72e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b02ff0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.520] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29581182, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x29581182, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x295a72e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0276.520] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b02ff0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48b02ff0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48bc1bfd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.520] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b02ff0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48b02ff0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48bc1bfd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.520] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0276.520] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x295cd5b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x295cd5b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Videos", cAlternateFileName="")) returned 1 [0276.520] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.520] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.521] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.521] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.521] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.521] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0276.521] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x5712f8) returned 1 [0276.522] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.522] CryptHashData (hHash=0x55e390, pbData=0x69ac30, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.522] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e310) returned 1 [0276.522] CryptDestroyHash (hHash=0x55e390) returned 1 [0276.522] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.522] GetLastError () returned 0x0 [0276.522] GetLastError () returned 0x0 [0276.522] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.523] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.523] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.524] CreateFileA (lpFileName="C:\\Users\\Public\\Videos\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\public\\videos\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.524] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.524] SetEndOfFile (hFile=0x23c) returned 1 [0276.524] CloseHandle (hObject=0x23c) returned 1 [0276.524] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.525] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.525] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0276.526] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.526] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.526] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.526] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.527] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.527] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.527] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.527] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.528] CryptDestroyKey (hKey=0x55e310) returned 1 [0276.528] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0276.528] FindFirstFileA (in: lpFileName="C:\\Users\\Public\\Videos\\*.*" (normalized: "c:\\users\\public\\videos\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x295cd5b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b4f59d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0276.528] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x295cd5b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48b4f59d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.528] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295a72e0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x295a72e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x295cd5b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0276.528] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b4f59d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48b4f59d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48be7df1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.528] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b4f59d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48b4f59d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48be7df1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.528] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0276.528] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x295cd5b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x295cd5b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Videos", cAlternateFileName="")) returned 0 [0276.528] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0276.528] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42973839, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42973839, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e7373, dwReserved1=0x5f4f545f, cFileName="RDhJ0CNFevzX", cAlternateFileName="RDHJ0C~1")) returned 1 [0276.528] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.528] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.528] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.529] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0276.529] CryptAcquireContextA (in: phProv=0x19fb24, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19fb24*=0x570858) returned 1 [0276.529] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19fadc | out: phHash=0x19fadc) returned 1 [0276.529] CryptHashData (hHash=0x55e590, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.529] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e590, dwFlags=0x0, phKey=0x19fb20 | out: phKey=0x19fb20*=0x55e390) returned 1 [0276.529] CryptDestroyHash (hHash=0x55e590) returned 1 [0276.529] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19fb30*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19fb30*=0x18) returned 1 [0276.529] GetLastError () returned 0x0 [0276.529] GetLastError () returned 0x0 [0276.530] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.530] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x238 [0276.531] WriteFile (in: hFile=0x238, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f858, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f858*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.532] SetEndOfFile (hFile=0x238) returned 1 [0276.532] CloseHandle (hObject=0x238) returned 1 [0276.532] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.533] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.537] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.537] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.538] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.538] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.538] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.538] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.538] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.538] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.538] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.539] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.539] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.539] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.539] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.539] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.539] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.539] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.540] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.540] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.540] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.540] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.540] CryptDestroyKey (hKey=0x55e390) returned 1 [0276.540] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0276.540] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\*.*"), lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42973839, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48be7df1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e590 [0276.540] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42973839, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48be7df1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.541] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0276.541] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.541] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.541] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.541] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.541] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.541] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0276.541] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570b00) returned 1 [0276.542] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0276.542] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.542] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e210) returned 1 [0276.542] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0276.542] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0276.542] GetLastError () returned 0x0 [0276.542] GetLastError () returned 0x0 [0276.542] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.544] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.544] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.545] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0276.549] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.551] SetEndOfFile (hFile=0x23c) returned 1 [0276.551] CloseHandle (hObject=0x23c) returned 1 [0276.551] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.552] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.552] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.552] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.553] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.553] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.553] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0276.553] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.553] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.553] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.553] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.553] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.553] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.554] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.554] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.554] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.554] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.554] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.554] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.554] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.554] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.554] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.554] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.555] CryptDestroyKey (hKey=0x55e210) returned 1 [0276.555] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0276.555] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x48c0efd4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0276.555] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x48c0efd4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.555] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c0efd4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48c0efd4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48c0efd4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.555] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a277d29, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a277d29, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0276.555] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.555] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.555] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.556] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.556] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0276.556] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5708e0) returned 1 [0276.556] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0276.556] CryptHashData (hHash=0x55e750, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.556] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e310) returned 1 [0276.556] CryptDestroyHash (hHash=0x55e750) returned 1 [0276.556] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f660*=0x18) returned 1 [0276.556] GetLastError () returned 0x0 [0276.556] GetLastError () returned 0x0 [0276.557] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.557] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0276.559] WriteFile (in: hFile=0x240, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.559] SetEndOfFile (hFile=0x240) returned 1 [0276.560] CloseHandle (hObject=0x240) returned 1 [0276.560] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.561] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.561] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0276.561] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.562] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.562] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.562] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.562] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.562] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.562] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.562] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.562] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.562] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.563] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.563] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.563] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.563] CryptDestroyKey (hKey=0x55e310) returned 1 [0276.563] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0276.563] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a277d29, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48c347be, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0276.563] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a277d29, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48c347be, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.563] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x7c3f133, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActiveSync", cAlternateFileName="ACTIVE~1")) returned 1 [0276.563] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.564] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.564] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.564] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0276.564] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571160) returned 1 [0276.564] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0276.564] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.564] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0276.565] CryptDestroyHash (hHash=0x55e210) returned 1 [0276.565] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0276.565] GetLastError () returned 0x0 [0276.565] GetLastError () returned 0x0 [0276.565] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.566] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.566] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.566] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\activesync\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0276.568] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.569] SetEndOfFile (hFile=0x244) returned 1 [0276.569] CloseHandle (hObject=0x244) returned 1 [0276.569] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.570] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.570] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.571] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.571] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.571] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.571] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.571] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.572] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.572] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.572] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.572] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.572] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.572] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0276.572] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0276.572] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\ActiveSync\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\activesync\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x48c347be, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0276.573] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c3f133, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7c3f133, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x48c347be, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.573] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c347be, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48c347be, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48c5ac7f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.573] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c347be, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48c347be, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48c5ac7f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.573] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0276.573] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0276.573] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.573] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.573] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.573] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0276.573] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570c98) returned 1 [0276.574] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0276.574] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.574] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e310) returned 1 [0276.574] CryptDestroyHash (hHash=0x55e910) returned 1 [0276.574] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0276.574] GetLastError () returned 0x0 [0276.574] GetLastError () returned 0x0 [0276.575] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.575] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\application data\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0276.575] WriteFile (in: hFile=0x244, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.575] SetEndOfFile (hFile=0x244) returned 1 [0276.576] CloseHandle (hObject=0x244) returned 1 [0276.576] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.576] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.576] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0276.577] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.577] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.577] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.577] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.578] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.578] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.578] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.578] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.579] CryptDestroyKey (hKey=0x55e310) returned 1 [0276.579] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0276.579] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Application Data\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\application data\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f424, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f404, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10çU")) returned 0xffffffff [0276.579] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2397496d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x241f3052, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Comms", cAlternateFileName="")) returned 1 [0276.579] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.579] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.579] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.579] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0276.579] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570858) returned 1 [0276.580] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0276.580] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.580] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e790) returned 1 [0276.580] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0276.580] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0276.580] GetLastError () returned 0x0 [0276.580] GetLastError () returned 0x0 [0276.580] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.581] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.581] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.582] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0276.585] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.586] SetEndOfFile (hFile=0x244) returned 1 [0276.586] CloseHandle (hObject=0x244) returned 1 [0276.586] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.587] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.587] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.587] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.587] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.587] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.588] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0276.588] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.588] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.588] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.588] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.588] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.588] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.588] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.588] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.589] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.589] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.589] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.589] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.589] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.589] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.589] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.589] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.589] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.589] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.589] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.589] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.590] CryptDestroyKey (hKey=0x55e790) returned 1 [0276.590] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0276.590] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x241f3052, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x48c80636, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0276.590] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x241f3052, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x48c80636, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.590] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c5ac7f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48c5ac7f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48c80636, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.590] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x295cd5b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x295cd5b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0276.590] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.590] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.590] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.590] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.590] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0276.591] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570748) returned 1 [0276.591] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0276.591] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.591] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e290) returned 1 [0276.591] CryptDestroyHash (hHash=0x55e610) returned 1 [0276.591] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0276.591] GetLastError () returned 0x0 [0276.591] GetLastError () returned 0x0 [0276.592] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.592] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0276.593] WriteFile (in: hFile=0x248, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.594] SetEndOfFile (hFile=0x248) returned 1 [0276.594] CloseHandle (hObject=0x248) returned 1 [0276.594] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.595] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.595] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.595] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.596] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.596] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.596] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.596] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.596] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.596] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.596] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.596] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.596] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.596] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.596] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.596] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.596] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.597] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.597] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.597] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.597] CryptDestroyKey (hKey=0x55e290) returned 1 [0276.597] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0276.597] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\temp\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x295cd5b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48c80636, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0276.597] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x241f3052, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x295cd5b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48c80636, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.597] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295cd5b4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x295cd5b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x295cd5b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CalendarCache.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CALEND~1.CRY")) returned 1 [0276.597] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c80636, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48c80636, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48c80636, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.597] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c80636, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48c80636, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48c80636, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.598] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0276.598] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23c4973c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Unistore", cAlternateFileName="")) returned 1 [0276.598] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.598] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.598] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.598] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0276.598] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571270) returned 1 [0276.599] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0276.599] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.599] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0276.599] CryptDestroyHash (hHash=0x55e790) returned 1 [0276.599] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0276.599] GetLastError () returned 0x0 [0276.599] GetLastError () returned 0x0 [0276.599] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.599] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.600] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.600] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0276.606] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.610] SetEndOfFile (hFile=0x248) returned 1 [0276.610] CloseHandle (hObject=0x248) returned 1 [0276.611] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.611] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.612] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.612] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0276.612] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.612] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.612] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.612] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.613] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.613] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.613] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.613] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.613] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.613] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.613] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.613] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.613] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.613] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.613] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.614] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.614] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.614] CryptDestroyKey (hKey=0x55e910) returned 1 [0276.614] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0276.614] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\Unistore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistore\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x48cb338d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0276.615] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c4973c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23c4973c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x48cb338d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.615] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48cb338d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48cb338d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48cb338d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.615] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48cb338d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48cb338d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48cb338d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.615] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0276.615] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a251afe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a251afe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1 [0276.615] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.615] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.615] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.616] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0276.616] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571490) returned 1 [0276.616] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0276.616] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.616] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0276.617] CryptDestroyHash (hHash=0x55e610) returned 1 [0276.617] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0276.617] GetLastError () returned 0x0 [0276.617] GetLastError () returned 0x0 [0276.617] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.617] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0276.618] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.620] SetEndOfFile (hFile=0x248) returned 1 [0276.620] CloseHandle (hObject=0x248) returned 1 [0276.620] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.621] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.621] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0276.622] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.622] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.622] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.622] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.623] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.623] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.623] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.623] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.624] CryptDestroyKey (hKey=0x55e910) returned 1 [0276.624] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0276.624] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Comms\\UnistoreDB\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\comms\\unistoredb\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a251afe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48cccc1b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0276.624] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a251afe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48cccc1b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.624] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48cccc1b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48cccc1b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48cccc1b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.624] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23a0d188, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x23a0d188, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xe22f57b6, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x600000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="store.vol", cAlternateFileName="")) returned 1 [0276.624] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295f3864, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x295f3864, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x295f3864, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="USS.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USSCHK~1.CRY")) returned 1 [0276.624] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295f3864, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x295f3864, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x29d66e99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="USS.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USSLOG~1.CRY")) returned 1 [0276.624] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239c0dc2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239c0dc2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239c0dc2, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="USSres00001.jrs", cAlternateFileName="USSRES~1.JRS")) returned 1 [0276.624] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239c0dc2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x239c0dc2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239c0dc2, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="USSres00002.jrs", cAlternateFileName="USSRES~2.JRS")) returned 1 [0276.624] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29db3848, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x29db3848, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a251afe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="USStmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USSTMP~1.CRY")) returned 1 [0276.625] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29db3848, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x29db3848, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a251afe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="USStmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USSTMP~1.CRY")) returned 0 [0276.625] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0276.625] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2397496d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a251afe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a251afe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 0 [0276.625] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0276.625] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="History", cAlternateFileName="")) returned 1 [0276.625] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.625] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.625] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.625] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0276.625] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571270) returned 1 [0276.626] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0276.626] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.626] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0276.626] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0276.626] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0276.626] GetLastError () returned 0x0 [0276.626] GetLastError () returned 0x0 [0276.626] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.627] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.628] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.628] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\history\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0276.653] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.655] SetEndOfFile (hFile=0x244) returned 1 [0276.655] CloseHandle (hObject=0x244) returned 1 [0276.655] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.656] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.670] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.670] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.670] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.670] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.671] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.671] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.671] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.671] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.671] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.671] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.671] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.671] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.671] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.672] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.672] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.672] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.672] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.672] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.672] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.672] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.673] CryptDestroyKey (hKey=0x55e610) returned 1 [0276.673] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0276.673] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\History\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\history\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f424, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f404, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10çU")) returned 0xffffffff [0276.673] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a277d29, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a277d29, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a277d29, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6b5d, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="IconCache.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ICONCA~1.CRY")) returned 1 [0276.673] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c347be, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48c347be, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48c347be, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.673] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0276.673] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.673] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.674] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.674] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.674] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.674] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0276.674] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570da8) returned 1 [0276.675] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0276.675] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.675] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0276.675] CryptDestroyHash (hHash=0x55e790) returned 1 [0276.675] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0276.675] GetLastError () returned 0x0 [0276.675] GetLastError () returned 0x0 [0276.675] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.676] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0276.677] WriteFile (in: hFile=0x244, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.678] SetEndOfFile (hFile=0x244) returned 1 [0276.679] CloseHandle (hObject=0x244) returned 1 [0276.679] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.680] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.680] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.680] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.680] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0276.681] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.681] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.681] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.681] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.681] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.681] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.682] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.682] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.682] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.683] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0276.683] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0276.683] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x48d4c2c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0276.683] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x48d4c2c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.683] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x6078303, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CLR_v2.0", cAlternateFileName="")) returned 1 [0276.683] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.683] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.683] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.683] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.684] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0276.684] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570b88) returned 1 [0276.684] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0276.684] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.684] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e390) returned 1 [0276.684] CryptDestroyHash (hHash=0x55e910) returned 1 [0276.684] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0276.685] GetLastError () returned 0x0 [0276.685] GetLastError () returned 0x0 [0276.685] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.686] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.687] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.687] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0276.696] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.698] SetEndOfFile (hFile=0x248) returned 1 [0276.698] CloseHandle (hObject=0x248) returned 1 [0276.698] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.699] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.699] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0276.700] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.700] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.700] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.700] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.700] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.700] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.700] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.701] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.701] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.701] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.701] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.701] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.701] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.701] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.701] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.701] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.702] CryptDestroyKey (hKey=0x55e390) returned 1 [0276.702] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0276.702] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x48d8b72b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0276.702] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x6078303, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x48d8b72b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.702] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d8b72b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48d8b72b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48d8b72b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.702] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x2a29e146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a29e146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0276.702] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.702] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.703] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.703] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.703] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.703] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0276.703] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570638) returned 1 [0276.704] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0276.704] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.704] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0276.704] CryptDestroyHash (hHash=0x55e210) returned 1 [0276.704] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0276.704] GetLastError () returned 0x0 [0276.704] GetLastError () returned 0x0 [0276.704] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.705] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0276.709] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.710] SetEndOfFile (hFile=0x24c) returned 1 [0276.710] CloseHandle (hObject=0x24c) returned 1 [0276.710] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.712] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.712] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.712] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.713] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.713] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.713] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.713] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.713] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.713] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.713] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.713] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.713] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.714] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.714] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.714] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.714] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.714] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.715] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0276.715] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0276.715] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x2a29e146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48d8b72b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0276.715] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x2a29e146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48d8b72b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.715] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a29e146, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a29e146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a29e146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="addinutil.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ADDINU~1.CRY")) returned 1 [0276.715] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d8b72b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48d8b72b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48db1eda, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.715] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d8b72b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48d8b72b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48db1eda, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.715] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0276.716] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6078303, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x2a29e146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a29e146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0276.716] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0276.716] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe263fd06, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e7367, dwReserved1=0x5f4f545f, cFileName="CLR_v2.0_32", cAlternateFileName="CLR_V2~1.0_3")) returned 1 [0276.716] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.716] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.716] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.716] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0276.716] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5709f0) returned 1 [0276.717] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0276.717] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.717] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0276.717] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0276.717] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0276.717] GetLastError () returned 0x0 [0276.717] GetLastError () returned 0x0 [0276.717] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.718] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.719] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.719] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0276.720] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.722] SetEndOfFile (hFile=0x248) returned 1 [0276.722] CloseHandle (hObject=0x248) returned 1 [0276.722] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.723] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.723] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0276.724] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.724] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.724] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.724] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.725] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.725] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.725] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.725] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.725] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.726] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.726] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.726] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.726] CryptDestroyKey (hKey=0x55e910) returned 1 [0276.726] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0276.726] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x48db1eda, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0276.726] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe263fd06, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x48db1eda, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.726] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48db1eda, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48db1eda, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48db1eda, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.727] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x2a2ea554, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a2ea554, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0276.727] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.727] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.727] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.727] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0276.727] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0276.728] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0276.728] CryptHashData (hHash=0x55e190, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.728] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0276.728] CryptDestroyHash (hHash=0x55e190) returned 1 [0276.728] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0276.728] GetLastError () returned 0x0 [0276.728] GetLastError () returned 0x0 [0276.728] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.729] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\UsageLogs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\usagelogs\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0276.730] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.731] SetEndOfFile (hFile=0x24c) returned 1 [0276.732] CloseHandle (hObject=0x24c) returned 1 [0276.732] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.733] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.733] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0276.733] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.734] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.734] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.734] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.734] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.734] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.735] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.735] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.735] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0276.735] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0276.735] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v2.0_32\\UsageLogs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v2.0_32\\usagelogs\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x2a2ea554, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48dd7d66, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0276.736] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x2a2ea554, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48dd7d66, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.736] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a2c436a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a2c436a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a2c436a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="9EE11E~1.CRY")) returned 1 [0276.736] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48dd7d66, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48dd7d66, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48dd7d66, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.736] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48dd7d66, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48dd7d66, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48dd7d66, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.736] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0276.736] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe263fd06, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x2a2ea554, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a2ea554, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0276.736] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0276.736] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x5b2eec3b, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e7367, dwReserved1=0x5f4f545f, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1 [0276.736] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.736] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.737] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.737] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0276.737] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570fc8) returned 1 [0276.737] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0276.737] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.738] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0276.738] CryptDestroyHash (hHash=0x55e210) returned 1 [0276.738] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0276.738] GetLastError () returned 0x0 [0276.738] GetLastError () returned 0x0 [0276.738] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.739] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.739] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.741] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0276.742] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.743] SetEndOfFile (hFile=0x248) returned 1 [0276.743] CloseHandle (hObject=0x248) returned 1 [0276.744] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.744] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.744] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.745] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.745] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.745] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.746] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.746] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.746] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.746] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.746] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.746] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.746] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.746] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.746] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.746] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.746] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.747] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.747] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.747] CryptDestroyKey (hKey=0x55e910) returned 1 [0276.747] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0276.747] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x48dfdf73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0276.747] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5b2eec3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x48dfdf73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.747] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48dfdf73, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48dfdf73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48dfdf73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.748] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a35cc3d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a35cc3d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0276.748] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.748] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.748] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.748] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0276.748] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571518) returned 1 [0276.749] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0276.749] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.749] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0276.749] CryptDestroyHash (hHash=0x55e910) returned 1 [0276.749] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0276.749] GetLastError () returned 0x0 [0276.749] GetLastError () returned 0x0 [0276.749] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.750] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0276.751] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.752] SetEndOfFile (hFile=0x24c) returned 1 [0276.752] CloseHandle (hObject=0x24c) returned 1 [0276.752] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.753] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.753] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0276.754] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.754] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.754] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.755] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.755] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.755] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.755] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.756] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.756] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.756] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.756] CryptDestroyKey (hKey=0x55e610) returned 1 [0276.756] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0276.756] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a35cc3d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48dfdf73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0276.756] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a35cc3d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48dfdf73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.756] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48dfdf73, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48dfdf73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48dfdf73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.756] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a2ea554, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a2ea554, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a2ea554, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x954, dwReserved0=0x405534, dwReserved1=0x0, cFileName="powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="POWERS~1.CRY")) returned 1 [0276.756] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a2ea554, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a2ea554, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a35cc3d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x15dd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="sdiagnhost.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SDIAGN~1.CRY")) returned 1 [0276.757] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a2ea554, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a2ea554, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a35cc3d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x15dd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="sdiagnhost.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SDIAGN~1.CRY")) returned 0 [0276.757] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0276.757] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b2eec3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a35cc3d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a35cc3d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0276.757] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0276.757] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73c78cc8, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e7367, dwReserved1=0x5f4f545f, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1 [0276.757] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.757] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.757] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.757] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.757] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.757] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0276.757] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570748) returned 1 [0276.758] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0276.758] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.758] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0276.758] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0276.758] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0276.758] GetLastError () returned 0x0 [0276.758] GetLastError () returned 0x0 [0276.758] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.759] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.760] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.760] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0276.761] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.766] SetEndOfFile (hFile=0x248) returned 1 [0276.766] CloseHandle (hObject=0x248) returned 1 [0276.766] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.767] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.767] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0276.768] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.768] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.768] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.768] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.769] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.769] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.769] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.769] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.769] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.769] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.769] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.769] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.770] CryptDestroyKey (hKey=0x55e910) returned 1 [0276.770] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0276.770] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x48e241c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0276.770] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73c78cc8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x48e241c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.770] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48e241c4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48e241c4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48e241c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.770] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a386a92, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a386a92, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0276.770] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.770] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.771] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.771] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0276.771] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0276.772] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0276.772] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.772] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0276.772] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0276.772] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0276.772] GetLastError () returned 0x0 [0276.772] GetLastError () returned 0x0 [0276.772] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.773] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0276.776] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.777] SetEndOfFile (hFile=0x24c) returned 1 [0276.777] CloseHandle (hObject=0x24c) returned 1 [0276.777] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.778] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.778] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.778] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.778] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.778] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.778] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.779] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.779] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.779] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.779] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.779] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.780] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.780] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.780] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.780] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.781] CryptDestroyKey (hKey=0x55e790) returned 1 [0276.781] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0276.781] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a386a92, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48e4a54c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0276.781] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a386a92, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48e4a54c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.781] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48e4a54c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48e4a54c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48e4a54c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.781] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a35cc3d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a35cc3d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a386a92, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1078, dwReserved0=0x405534, dwReserved1=0x0, cFileName="powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="POWERS~1.CRY")) returned 1 [0276.781] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a35cc3d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a35cc3d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a386a92, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1078, dwReserved0=0x405534, dwReserved1=0x0, cFileName="powershell.exe.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="POWERS~1.CRY")) returned 0 [0276.781] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0276.781] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73c78cc8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a386a92, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a386a92, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0276.781] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0276.782] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb51b0, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fb51b0, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e7367, dwReserved1=0x5f4f545f, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0276.782] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.782] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.782] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.782] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0276.782] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570638) returned 1 [0276.783] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0276.783] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.783] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e2d0) returned 1 [0276.783] CryptDestroyHash (hHash=0x55e910) returned 1 [0276.783] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0276.783] GetLastError () returned 0x0 [0276.783] GetLastError () returned 0x0 [0276.783] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.784] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.785] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.785] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\credentials\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0276.817] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.818] SetEndOfFile (hFile=0x248) returned 1 [0276.819] CloseHandle (hObject=0x248) returned 1 [0276.819] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.820] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.820] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0276.821] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.821] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.821] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.821] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.821] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.821] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.821] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.821] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.821] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.821] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.822] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.822] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.822] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.822] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.822] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.822] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.822] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.822] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.822] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.823] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0276.823] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0276.823] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Credentials\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\credentials\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb51b0, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x48e96810, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0276.823] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb51b0, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x48e96810, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.823] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x508b12b7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x82fb3e5e, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x82fba0be, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x2ac0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 1 [0276.823] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48e96810, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48e96810, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48ebc9f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.823] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48e96810, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48e96810, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48ebc9f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.823] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0276.823] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a64cda3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Feeds", cAlternateFileName="")) returned 1 [0276.823] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.823] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.824] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.824] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0276.824] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570e30) returned 1 [0276.825] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0276.825] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.825] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0276.825] CryptDestroyHash (hHash=0x55e790) returned 1 [0276.825] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0276.825] GetLastError () returned 0x0 [0276.825] GetLastError () returned 0x0 [0276.825] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.826] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0276.828] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.830] SetEndOfFile (hFile=0x248) returned 1 [0276.830] CloseHandle (hObject=0x248) returned 1 [0276.830] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.831] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.831] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.831] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.831] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0276.832] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.832] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.832] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.832] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.832] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.833] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.833] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.833] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.833] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.833] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.833] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.833] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.833] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.840] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.840] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.840] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.840] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.840] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.841] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0276.841] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0276.841] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x48ebc9f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0276.841] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x48ebc9f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.841] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a64cda3, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d4915cd, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1 [0276.841] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ebc9f5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48ebc9f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48ebc9f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.841] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7a45a8f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a64cda3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1 [0276.842] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.842] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.842] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.842] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0276.842] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0276.843] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0276.843] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.843] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0276.843] CryptDestroyHash (hHash=0x55e790) returned 1 [0276.843] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0276.843] GetLastError () returned 0x0 [0276.843] GetLastError () returned 0x0 [0276.843] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.844] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.845] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.845] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0276.873] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.875] SetEndOfFile (hFile=0x24c) returned 1 [0276.875] CloseHandle (hObject=0x24c) returned 1 [0276.875] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.876] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.876] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.876] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.876] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.877] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.877] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.877] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.877] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.878] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.878] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.878] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.878] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.878] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.878] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.878] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.878] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.878] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.878] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.878] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.879] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0276.879] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0276.879] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7a45a8f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x48f2f255, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0276.879] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7a45a8f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x48f2f255, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.879] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48ee2d32, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48ee2d32, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48f2f255, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.879] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a64cda3, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d4915cd, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Internet Explorer Suggested Sites~.feed-ms", cAlternateFileName="INTERN~1.FEE")) returned 1 [0276.879] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a64cda3, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d4915cd, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Internet Explorer Suggested Sites~.feed-ms", cAlternateFileName="INTERN~1.FEE")) returned 0 [0276.879] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0276.879] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7a45a8f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a64cda3, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a64cda3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 0 [0276.880] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0276.880] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a3a92a9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a3a92a9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x362d4446, dwReserved1=0x2d363334, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0276.880] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.880] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.880] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.905] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.905] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.905] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0276.905] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570e30) returned 1 [0276.906] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0276.906] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.906] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e390) returned 1 [0276.906] CryptDestroyHash (hHash=0x55e790) returned 1 [0276.906] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0276.906] GetLastError () returned 0x0 [0276.906] GetLastError () returned 0x0 [0276.906] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.907] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0276.908] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.910] SetEndOfFile (hFile=0x248) returned 1 [0276.910] CloseHandle (hObject=0x248) returned 1 [0276.910] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.911] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.911] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0276.912] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.912] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.912] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.913] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.913] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.913] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.913] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.913] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.913] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.913] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.913] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.913] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.914] CryptDestroyKey (hKey=0x55e390) returned 1 [0276.914] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0276.914] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a3a92a9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48f7b6b2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0276.914] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ec4ba, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a3a92a9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48f7b6b2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.914] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37a4261d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x37a4261d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x37a4261d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="71KSOQXX", cAlternateFileName="")) returned 1 [0276.914] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.914] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.915] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.915] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.915] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.915] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0276.915] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0276.916] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0276.916] CryptHashData (hHash=0x55e390, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.916] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0276.916] CryptDestroyHash (hHash=0x55e390) returned 1 [0276.916] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0276.916] GetLastError () returned 0x0 [0276.916] GetLastError () returned 0x0 [0276.916] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.917] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.917] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.918] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\71KSOQXX\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\71ksoqxx\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0276.921] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.922] SetEndOfFile (hFile=0x24c) returned 1 [0276.922] CloseHandle (hObject=0x24c) returned 1 [0276.922] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.923] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.923] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.931] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0276.931] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.931] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.931] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.932] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.932] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.932] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.932] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.932] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.933] CryptDestroyKey (hKey=0x55e610) returned 1 [0276.933] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0276.933] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\71KSOQXX\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\71ksoqxx\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37a4261d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x37a4261d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48fa1882, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0276.933] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37a4261d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x37a4261d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48fa1882, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.933] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48fa1882, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48fa1882, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48fa1882, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.933] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48fa1882, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48fa1882, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48fa1882, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.934] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0276.934] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="B4FCKDUE", cAlternateFileName="")) returned 1 [0276.934] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.934] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.934] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.934] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.934] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.934] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0276.934] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0276.935] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0276.935] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.935] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0276.935] CryptDestroyHash (hHash=0x55e210) returned 1 [0276.935] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0276.935] GetLastError () returned 0x0 [0276.935] GetLastError () returned 0x0 [0276.936] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.936] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\B4FCKDUE\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\b4fckdue\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0276.937] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.939] SetEndOfFile (hFile=0x24c) returned 1 [0276.939] CloseHandle (hObject=0x24c) returned 1 [0276.939] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.940] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.940] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.941] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.941] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.941] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.941] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.942] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.942] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.942] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.942] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.943] CryptDestroyKey (hKey=0x55e610) returned 1 [0276.943] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0276.943] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\B4FCKDUE\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\b4fckdue\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x48fcbf02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0276.943] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x48fcbf02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.943] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ieonlinews.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1 [0276.943] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48fcbf02, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48fcbf02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48fcbf02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.943] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48fcbf02, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48fcbf02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48fcbf02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.944] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0276.944] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x379374cb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x379374cb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x379374cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0276.944] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a386a92, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a386a92, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a386a92, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0276.944] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="GGQ6NIXC", cAlternateFileName="")) returned 1 [0276.944] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.944] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.944] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.944] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.944] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.944] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0276.944] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0276.945] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0276.945] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.945] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0276.945] CryptDestroyHash (hHash=0x55e790) returned 1 [0276.945] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0276.945] GetLastError () returned 0x0 [0276.945] GetLastError () returned 0x0 [0276.945] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.946] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.947] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.947] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\GGQ6NIXC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\ggq6nixc\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0276.948] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.950] SetEndOfFile (hFile=0x24c) returned 1 [0276.950] CloseHandle (hObject=0x24c) returned 1 [0276.950] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.951] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.951] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.951] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.951] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0276.952] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.952] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.952] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.952] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.952] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.952] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.952] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.952] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.953] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.953] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.953] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.953] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0276.953] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.953] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.953] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.953] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.954] CryptDestroyKey (hKey=0x55e390) returned 1 [0276.954] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0276.954] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\GGQ6NIXC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\ggq6nixc\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x48fedd7a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0276.954] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x48fedd7a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.955] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48fedd7a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48fedd7a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48fedd7a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.955] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48fedd7a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48fedd7a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48fedd7a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.955] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0276.955] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48f7b6b2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48f7b6b2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48f7b6b2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.955] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="KYN7N324", cAlternateFileName="")) returned 1 [0276.955] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.955] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.955] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.955] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0276.955] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5708e0) returned 1 [0276.956] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0276.956] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.956] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0276.956] CryptDestroyHash (hHash=0x55e610) returned 1 [0276.956] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0276.956] GetLastError () returned 0x0 [0276.956] GetLastError () returned 0x0 [0276.956] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.957] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\KYN7N324\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\kyn7n324\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0276.958] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.964] SetEndOfFile (hFile=0x24c) returned 1 [0276.964] CloseHandle (hObject=0x24c) returned 1 [0276.964] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.965] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.965] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.966] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.966] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.966] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0276.966] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.966] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.966] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.966] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.967] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.967] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.967] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.967] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0276.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.968] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.968] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.968] CryptDestroyKey (hKey=0x55e390) returned 1 [0276.968] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0276.969] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\KYN7N324\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\kyn7n324\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x48fedd7a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0276.969] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x48fedd7a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.969] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48fedd7a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48fedd7a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49013f6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.969] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x48fedd7a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48fedd7a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49013f6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.969] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0276.969] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37a4261d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x37a4261d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x37a4261d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="N18G05UU", cAlternateFileName="")) returned 1 [0276.969] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.969] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.969] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.970] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.970] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0276.970] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0276.970] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0276.970] CryptHashData (hHash=0x55e290, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.971] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0276.971] CryptDestroyHash (hHash=0x55e290) returned 1 [0276.971] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0276.971] GetLastError () returned 0x0 [0276.971] GetLastError () returned 0x0 [0276.971] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.972] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.972] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.973] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\N18G05UU\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\n18g05uu\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0276.975] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.976] SetEndOfFile (hFile=0x24c) returned 1 [0276.976] CloseHandle (hObject=0x24c) returned 1 [0276.976] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.977] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.978] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0276.978] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.978] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.979] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.979] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.979] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.979] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0276.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.980] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.980] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.980] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.980] CryptDestroyKey (hKey=0x55e910) returned 1 [0276.980] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0276.980] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\N18G05UU\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\n18g05uu\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37a4261d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x37a4261d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49013f6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0276.980] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37a4261d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x37a4261d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49013f6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.981] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49013f6f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49013f6f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4903a14f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.981] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49013f6f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49013f6f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4903a14f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.981] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0276.981] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a6709c7, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="OQ1FANI7", cAlternateFileName="")) returned 1 [0276.981] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.981] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.981] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.981] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0276.981] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0276.982] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0276.982] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.982] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0276.982] CryptDestroyHash (hHash=0x55e610) returned 1 [0276.982] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0276.982] GetLastError () returned 0x0 [0276.982] GetLastError () returned 0x0 [0276.982] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.983] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\OQ1FANI7\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\oq1fani7\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0276.984] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0276.985] SetEndOfFile (hFile=0x24c) returned 1 [0276.985] CloseHandle (hObject=0x24c) returned 1 [0276.986] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.986] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0276.987] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0276.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0276.987] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.987] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0276.988] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0276.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.988] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.988] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0276.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0276.988] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0276.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0276.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0276.993] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0276.993] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.993] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0276.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0276.993] CryptDestroyKey (hKey=0x55e910) returned 1 [0276.993] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0276.993] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\OQ1FANI7\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\oq1fani7\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4903a14f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0276.994] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7a6709c7, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a6709c7, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4903a14f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0276.994] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4903a14f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4903a14f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4903a14f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0276.994] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4903a14f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4903a14f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4903a14f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0276.994] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0276.994] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37a4261d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x37a4261d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x37a4261d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SNE9O5UN", cAlternateFileName="")) returned 1 [0276.994] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0276.994] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0276.994] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0276.994] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0276.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0276.995] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0276.995] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0276.995] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0276.995] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0276.995] CryptDestroyHash (hHash=0x55e610) returned 1 [0276.996] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0276.996] GetLastError () returned 0x0 [0276.996] GetLastError () returned 0x0 [0276.996] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0276.996] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0276.997] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0276.997] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\SNE9O5UN\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\sne9o5un\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0276.999] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.000] SetEndOfFile (hFile=0x24c) returned 1 [0277.000] CloseHandle (hObject=0x24c) returned 1 [0277.000] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.001] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.001] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.001] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.002] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.002] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.002] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.003] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.003] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.003] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.003] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.003] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.004] CryptDestroyKey (hKey=0x55e790) returned 1 [0277.004] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0277.004] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\SNE9O5UN\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\sne9o5un\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37a4261d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a4a32ed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49064476, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0277.004] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37a4261d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a4a32ed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49064476, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.004] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a4a32ed, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a4a32ed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a4a32ed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ieonlinews.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1 [0277.004] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49064476, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49064476, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49064476, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.004] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49064476, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49064476, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49064476, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.004] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0277.005] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37a4261d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x37a4261d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x37a4261d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="XD6WDBVB", cAlternateFileName="")) returned 1 [0277.005] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.005] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.005] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.006] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.006] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0277.007] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.007] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.007] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0277.007] CryptDestroyHash (hHash=0x55e610) returned 1 [0277.007] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.007] GetLastError () returned 0x0 [0277.007] GetLastError () returned 0x0 [0277.008] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.008] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\XD6WDBVB\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\xd6wdbvb\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.009] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.010] SetEndOfFile (hFile=0x24c) returned 1 [0277.011] CloseHandle (hObject=0x24c) returned 1 [0277.011] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.011] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.012] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0277.012] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.012] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.013] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.013] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.013] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.013] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0277.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.014] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.014] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.014] CryptDestroyKey (hKey=0x55e910) returned 1 [0277.014] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0277.014] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Feeds Cache\\XD6WDBVB\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\feeds cache\\xd6wdbvb\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37a4261d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x37a4261d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4908677c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0277.014] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37a4261d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x37a4261d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4908677c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.015] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4908677c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4908677c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4908677c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.015] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4908677c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4908677c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4908677c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.015] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0277.015] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37a4261d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x37a4261d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x37a4261d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="XD6WDBVB", cAlternateFileName="")) returned 0 [0277.015] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.015] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x2a41b8f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a41b8f3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4142, dwReserved1=0x5f4f545f, cFileName="FORMS", cAlternateFileName="")) returned 1 [0277.015] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.015] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.015] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.015] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.015] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571408) returned 1 [0277.016] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0277.016] CryptHashData (hHash=0x55e290, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.016] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0277.016] CryptDestroyHash (hHash=0x55e290) returned 1 [0277.016] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0277.016] GetLastError () returned 0x0 [0277.016] GetLastError () returned 0x0 [0277.016] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.017] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.018] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.018] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\forms\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0277.022] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.023] SetEndOfFile (hFile=0x248) returned 1 [0277.023] CloseHandle (hObject=0x248) returned 1 [0277.023] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.024] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.024] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0277.025] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.025] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.025] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.025] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.026] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.026] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.026] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.026] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0277.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.026] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.026] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.026] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.027] CryptDestroyKey (hKey=0x55e910) returned 1 [0277.027] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0277.027] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\FORMS\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\forms\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x2a41b8f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4908677c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0277.027] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a17d745, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x2a41b8f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4908677c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.027] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a3a92a9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a3a92a9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a41b8f3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FRMCACHE.DAT.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FRMCAC~1.CRY")) returned 1 [0277.027] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4908677c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4908677c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x490adea0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.027] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4908677c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4908677c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x490adea0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.027] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0277.027] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x2a41b8f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a41b8f3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="GameDVR", cAlternateFileName="")) returned 1 [0277.028] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.028] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.028] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.028] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.028] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.028] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0277.028] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5710d8) returned 1 [0277.029] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0277.029] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.029] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0277.029] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.029] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0277.029] GetLastError () returned 0x0 [0277.029] GetLastError () returned 0x0 [0277.029] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.030] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\gamedvr\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0277.033] WriteFile (in: hFile=0x248, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.034] SetEndOfFile (hFile=0x248) returned 1 [0277.035] CloseHandle (hObject=0x248) returned 1 [0277.035] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.036] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.036] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.036] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.036] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.036] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.036] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.037] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.037] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.037] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.037] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.037] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.037] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.037] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.037] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.037] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.038] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.038] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.038] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.038] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.038] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.038] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.038] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.038] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.039] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0277.039] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0277.039] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\GameDVR\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\gamedvr\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x2a41b8f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x490adea0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0277.039] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x809248a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x2a41b8f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x490adea0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.039] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x490adea0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x490adea0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x490adea0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.039] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7db342, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xc7db342, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x212d1b5b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xd23c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 1 [0277.039] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a41b8f3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a41b8f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a441b7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xd23c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="KnownGameList.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="KNOWNG~1.CRY")) returned 1 [0277.039] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a41b8f3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a41b8f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a441b7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xd23c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="KnownGameList.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="KNOWNG~1.CRY")) returned 0 [0277.039] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0277.040] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d4c2c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48d4c2c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48d655b0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x694c656d, dwReserved1=0x622e7473, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.040] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x694c656d, dwReserved1=0x622e7473, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0277.040] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.040] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.040] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.040] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.040] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571160) returned 1 [0277.041] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0277.041] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.041] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e190) returned 1 [0277.041] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.041] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0277.041] GetLastError () returned 0x0 [0277.041] GetLastError () returned 0x0 [0277.041] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.042] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.043] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.043] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\inputpersonalization\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0277.091] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.093] SetEndOfFile (hFile=0x248) returned 1 [0277.093] CloseHandle (hObject=0x248) returned 1 [0277.094] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.104] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.104] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0277.105] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.105] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.105] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.105] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.106] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.106] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.106] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.107] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.107] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.107] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.111] CryptDestroyKey (hKey=0x55e190) returned 1 [0277.112] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0277.112] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\inputpersonalization\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4914523e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0277.112] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4914523e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.112] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x490d2b43, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x490d2b43, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4914523e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.112] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0277.113] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.113] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.113] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.113] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.113] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5706c0) returned 1 [0277.114] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.115] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.115] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0277.115] CryptDestroyHash (hHash=0x55e290) returned 1 [0277.115] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.115] GetLastError () returned 0x0 [0277.115] GetLastError () returned 0x0 [0277.115] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.116] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.118] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.119] SetEndOfFile (hFile=0x24c) returned 1 [0277.120] CloseHandle (hObject=0x24c) returned 1 [0277.120] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.120] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.121] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.121] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0277.122] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.122] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.122] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.123] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.123] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.123] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0277.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.123] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.124] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.124] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.124] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.124] CryptDestroyKey (hKey=0x55e210) returned 1 [0277.124] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0277.124] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4919174e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0277.124] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4919174e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.125] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4919174e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4919174e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4919174e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.125] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4919174e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4919174e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4919174e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.125] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.125] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 0 [0277.125] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0277.125] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61746144, dwReserved1=0x726f7453, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1 [0277.125] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.125] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.125] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.125] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0277.126] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570eb8) returned 1 [0277.126] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0277.126] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.126] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e310) returned 1 [0277.126] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.126] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0277.127] GetLastError () returned 0x0 [0277.127] GetLastError () returned 0x0 [0277.127] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.127] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.128] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.129] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\installagent\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0277.138] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.140] SetEndOfFile (hFile=0x248) returned 1 [0277.140] CloseHandle (hObject=0x248) returned 1 [0277.140] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.141] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.141] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.141] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.141] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.141] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.141] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.142] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.142] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.142] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.142] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.143] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.143] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.143] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.143] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0277.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.143] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.143] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.143] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.144] CryptDestroyKey (hKey=0x55e310) returned 1 [0277.144] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0277.144] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\installagent\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x491b8b16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0277.144] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x491b8b16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.144] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf5b61023, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 1 [0277.145] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.145] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.145] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.145] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.145] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0277.146] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.146] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.146] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0277.146] CryptDestroyHash (hHash=0x55e610) returned 1 [0277.146] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.146] GetLastError () returned 0x0 [0277.147] GetLastError () returned 0x0 [0277.147] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.147] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\installagent\\checkpoints\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.149] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.150] SetEndOfFile (hFile=0x24c) returned 1 [0277.150] CloseHandle (hObject=0x24c) returned 1 [0277.150] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.151] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.151] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.151] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.151] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0277.152] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.152] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.152] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.153] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.153] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.153] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.153] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.153] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.154] CryptDestroyKey (hKey=0x55e650) returned 1 [0277.154] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0277.154] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\installagent\\checkpoints\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x491ddb90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0277.154] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5b61023, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf5b61023, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x491ddb90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.154] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x491ddb90, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x491ddb90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x491ddb90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.154] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x491ddb90, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x491ddb90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x491ddb90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.155] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0277.155] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x491b8b16, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x491b8b16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x491b8b16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.155] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x491b8b16, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x491b8b16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x491b8b16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.155] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.155] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a575c45, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a575c45, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0277.155] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.155] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.155] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.155] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.156] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5712f8) returned 1 [0277.156] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0277.156] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.156] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0277.156] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.156] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0277.156] GetLastError () returned 0x0 [0277.156] GetLastError () returned 0x0 [0277.157] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.157] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.158] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.158] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0277.159] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.161] SetEndOfFile (hFile=0x248) returned 1 [0277.161] CloseHandle (hObject=0x248) returned 1 [0277.161] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.162] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.162] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.162] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.163] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.163] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0277.163] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.163] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.163] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.164] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.164] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.164] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.164] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.165] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.165] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.165] CryptDestroyKey (hKey=0x55e610) returned 1 [0277.165] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0277.165] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a575c45, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x491ddb90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0277.165] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4137bbef, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x2a575c45, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x491ddb90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.166] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4302da2a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4302da2a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x430ec4ba, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x19b3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0277.166] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe31df21d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DomainSuggestions", cAlternateFileName="DOMAIN~1")) returned 1 [0277.166] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.166] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.166] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.166] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0277.166] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0277.167] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.167] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.167] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0277.167] CryptDestroyHash (hHash=0x55e210) returned 1 [0277.167] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.167] GetLastError () returned 0x0 [0277.167] GetLastError () returned 0x0 [0277.167] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.168] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.169] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.170] SetEndOfFile (hFile=0x24c) returned 1 [0277.170] CloseHandle (hObject=0x24c) returned 1 [0277.171] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.171] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.171] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.172] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.172] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.172] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.173] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.173] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.173] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.173] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.173] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.173] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.173] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0277.174] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.174] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.174] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.174] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.174] CryptDestroyKey (hKey=0x55e610) returned 1 [0277.174] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0277.174] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe31df21d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x4920487b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0277.175] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe31df21d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x4920487b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.175] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe31df21d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4700, dwReserved0=0x405534, dwReserved1=0x0, cFileName="en-US.1", cAlternateFileName="")) returned 1 [0277.175] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4920487b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4920487b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4920487b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.175] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4920487b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4920487b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4920487b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.175] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0277.175] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2a4e4c2c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a4e4c2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="EmieSiteList", cAlternateFileName="EMIESI~1")) returned 1 [0277.175] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.175] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.175] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.175] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.175] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0277.176] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.176] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.176] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0277.176] CryptDestroyHash (hHash=0x55e610) returned 1 [0277.176] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.176] GetLastError () returned 0x0 [0277.176] GetLastError () returned 0x0 [0277.176] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.180] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.181] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.181] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.185] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.186] SetEndOfFile (hFile=0x24c) returned 1 [0277.186] CloseHandle (hObject=0x24c) returned 1 [0277.186] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.187] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.187] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.187] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.187] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.187] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.187] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0277.188] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.188] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.188] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.188] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.188] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.188] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.188] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.188] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.189] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.189] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.189] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.189] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.189] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.189] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.189] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0277.189] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.189] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.189] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.189] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.189] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.190] CryptDestroyKey (hKey=0x55e790) returned 1 [0277.190] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0277.190] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2a4e4c2c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4922abf2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0277.190] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2a4e4c2c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4922abf2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.190] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a4e4c2c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a4e4c2c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a4e4c2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0277.190] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4922abf2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4922abf2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4922abf2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.190] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4922abf2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4922abf2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4922abf2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.190] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0277.190] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2a5006f9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a5006f9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="EmieUserList", cAlternateFileName="EMIEUS~1")) returned 1 [0277.191] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.191] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.191] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.191] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.191] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.191] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.191] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0277.192] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.192] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.192] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0277.192] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.192] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.192] GetLastError () returned 0x0 [0277.192] GetLastError () returned 0x0 [0277.192] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.193] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.196] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.197] SetEndOfFile (hFile=0x24c) returned 1 [0277.197] CloseHandle (hObject=0x24c) returned 1 [0277.197] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.198] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.198] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0277.199] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.199] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.199] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.199] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.199] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.200] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.200] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.200] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.200] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.200] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.200] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.200] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.200] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.201] CryptDestroyKey (hKey=0x55e610) returned 1 [0277.201] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0277.201] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2a5006f9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x492503dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0277.201] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x759f70fb, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2a5006f9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x492503dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.201] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a5006f9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a5006f9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a5006f9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0277.201] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x492503dd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x492503dd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x492503dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.201] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x492503dd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x492503dd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x492503dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.201] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0277.201] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a5006f9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a5006f9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a54cb50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ie4uinit-ClearIconCache.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IE4UIN~1.CRY")) returned 1 [0277.201] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a54cb50, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a54cb50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a575c45, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ie4uinit-UserConfig.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IE4UIN~2.CRY")) returned 1 [0277.201] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IECompatData", cAlternateFileName="IECOMP~1")) returned 1 [0277.202] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.202] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.202] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.202] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0277.202] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0277.203] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.203] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.203] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0277.203] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.203] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.203] GetLastError () returned 0x0 [0277.203] GetLastError () returned 0x0 [0277.203] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.204] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.204] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.205] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.206] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.207] SetEndOfFile (hFile=0x24c) returned 1 [0277.207] CloseHandle (hObject=0x24c) returned 1 [0277.208] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.209] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.209] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.209] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.209] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.209] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.209] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.210] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.210] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.210] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.210] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.211] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.211] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.211] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.211] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.212] CryptDestroyKey (hKey=0x55e610) returned 1 [0277.212] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0277.212] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x492503dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.212] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x492503dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.212] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc10, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iecompatdata.xml", cAlternateFileName="IECOMP~1.XML")) returned 1 [0277.212] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x492503dd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x492503dd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x492503dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.212] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x492503dd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x492503dd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x492503dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.212] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.212] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27d216a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2aa5dba7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2aa5dba7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IEFlipAheadCache", cAlternateFileName="IEFLIP~1")) returned 1 [0277.212] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.212] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.213] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.213] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.213] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.213] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.213] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0277.214] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.214] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.214] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0277.214] CryptDestroyHash (hHash=0x55e610) returned 1 [0277.214] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.214] GetLastError () returned 0x0 [0277.214] GetLastError () returned 0x0 [0277.214] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.215] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.216] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.217] SetEndOfFile (hFile=0x24c) returned 1 [0277.217] CloseHandle (hObject=0x24c) returned 1 [0277.217] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.218] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.218] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0277.219] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.219] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.219] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.219] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.219] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.220] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.220] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.220] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0277.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.220] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.220] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.220] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.221] CryptDestroyKey (hKey=0x55e390) returned 1 [0277.221] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0277.221] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27d216a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2aa5dba7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x492766a5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0277.221] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27d216a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2aa5dba7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x492766a5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.221] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2aa5dba7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2aa5dba7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2aa5dba7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0277.221] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x492766a5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x492766a5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x492766a5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.221] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x492766a5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x492766a5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x492766a5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.221] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0277.221] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x491ddb90, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x491ddb90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x491ddb90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.221] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x7a2dd1f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a2dd1f9, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="imagestore", cAlternateFileName="IMAGES~1")) returned 1 [0277.221] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.221] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.222] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.222] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.222] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.222] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.222] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0277.223] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.223] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.223] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0277.223] CryptDestroyHash (hHash=0x55e650) returned 1 [0277.223] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.223] GetLastError () returned 0x0 [0277.223] GetLastError () returned 0x0 [0277.223] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.223] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.268] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.269] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\imagestore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.274] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.275] SetEndOfFile (hFile=0x24c) returned 1 [0277.275] CloseHandle (hObject=0x24c) returned 1 [0277.275] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.276] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.276] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.276] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.276] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.276] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.277] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0277.277] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.277] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.277] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.277] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.277] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.277] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.277] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.278] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.278] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.278] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.278] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.278] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.278] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.278] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.278] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0277.278] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.278] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.278] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.278] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.278] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.279] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0277.279] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0277.279] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\imagestore\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x7a2dd1f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x492e8cd0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0277.279] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x7a2dd1f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x492e8cd0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.279] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x492e8cd0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x492e8cd0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4930fc4a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.279] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad892634, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xad892634, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="wmamu79", cAlternateFileName="")) returned 1 [0277.279] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.280] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.280] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.280] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.280] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.280] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0277.280] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0277.281] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.281] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.281] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0277.281] CryptDestroyHash (hHash=0x55e790) returned 1 [0277.281] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.281] GetLastError () returned 0x0 [0277.281] GetLastError () returned 0x0 [0277.281] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.282] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\wmamu79\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\imagestore\\wmamu79\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.283] WriteFile (in: hFile=0x250, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.284] SetEndOfFile (hFile=0x250) returned 1 [0277.284] CloseHandle (hObject=0x250) returned 1 [0277.293] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.295] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.295] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.295] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.295] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.295] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.295] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.295] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.295] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.296] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.296] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.296] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.296] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.296] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.296] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.296] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.297] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.297] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.297] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.297] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.297] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.297] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.297] CryptDestroyKey (hKey=0x55e650) returned 1 [0277.297] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0277.297] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\wmamu79\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\imagestore\\wmamu79\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad892634, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4930fc4a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0277.298] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad892634, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xad892634, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4930fc4a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.298] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4930fc4a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4930fc4a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4930fc4a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.298] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4930fc4a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4930fc4a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4930fc4a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.298] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0277.300] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2dd1f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a2dd1f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a2dd1f9, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="zuf01b5", cAlternateFileName="")) returned 1 [0277.300] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.300] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.300] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.300] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.300] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0277.301] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.301] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.301] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e790) returned 1 [0277.301] CryptDestroyHash (hHash=0x55e650) returned 1 [0277.301] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.301] GetLastError () returned 0x0 [0277.301] GetLastError () returned 0x0 [0277.301] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.304] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.305] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.305] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\zuf01b5\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\imagestore\\zuf01b5\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.306] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.307] SetEndOfFile (hFile=0x250) returned 1 [0277.308] CloseHandle (hObject=0x250) returned 1 [0277.308] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.309] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.309] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.309] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.309] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0277.309] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.309] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.310] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.310] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.310] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.310] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.310] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.310] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.310] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.310] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.310] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.310] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.311] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.311] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.311] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.311] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.311] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.311] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.311] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.311] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.311] CryptDestroyKey (hKey=0x55e790) returned 1 [0277.311] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0277.312] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\zuf01b5\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\imagestore\\zuf01b5\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2dd1f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a2dd1f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4935b8a9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0277.312] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2dd1f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a2dd1f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4935b8a9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.312] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4935b8a9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4935b8a9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4935b8a9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.312] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4935b8a9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4935b8a9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4935b8a9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.312] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0277.312] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2dd1f9, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7a2dd1f9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a2dd1f9, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="zuf01b5", cAlternateFileName="")) returned 0 [0277.312] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0277.312] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f386ce5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f386ce5, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f386ce5, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Recovery", cAlternateFileName="")) returned 1 [0277.312] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.312] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.313] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.313] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.313] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.313] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.313] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0277.314] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.314] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.314] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0277.314] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.314] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.314] GetLastError () returned 0x0 [0277.314] GetLastError () returned 0x0 [0277.314] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.315] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.316] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.317] SetEndOfFile (hFile=0x24c) returned 1 [0277.317] CloseHandle (hObject=0x24c) returned 1 [0277.317] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.318] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.318] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.333] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.333] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0277.334] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.334] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.334] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.334] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.334] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.335] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.335] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.335] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.335] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.335] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.335] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.335] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.335] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0277.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.336] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.336] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.336] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.337] CryptDestroyKey (hKey=0x55e790) returned 1 [0277.337] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0277.337] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f386ce5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f386ce5, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4935b8a9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0277.337] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f386ce5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f386ce5, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4935b8a9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.337] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f386ce5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2a599052, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a599052, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1 [0277.337] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.337] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.337] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.338] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.338] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.338] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0277.338] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570e30) returned 1 [0277.338] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.338] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.339] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0277.339] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0277.339] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.339] GetLastError () returned 0x0 [0277.339] GetLastError () returned 0x0 [0277.339] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.340] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.340] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.341] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.344] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.345] SetEndOfFile (hFile=0x250) returned 1 [0277.345] CloseHandle (hObject=0x250) returned 1 [0277.345] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.346] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.346] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.346] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.347] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.347] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.347] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.347] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.347] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.348] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.348] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.348] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.348] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.348] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.348] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.348] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.348] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.348] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0277.348] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.348] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.348] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.348] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.349] CryptDestroyKey (hKey=0x55e910) returned 1 [0277.349] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0277.349] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f386ce5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2a599052, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x493a7884, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0277.350] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f386ce5, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x2a599052, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x493a7884, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.350] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x493a7884, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x493a7884, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x493a7884, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.350] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3abcc4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f3abcc4, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0xcaa009d9, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RecoveryStore.{AABF9BF1-2D21-11ED-B0CF-7896845E3B84}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0277.350] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a599052, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a599052, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a599052, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RecoveryStore.{AABF9BF1-2D21-11ED-B0CF-7896845E3B84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RECOVE~1.CRY")) returned 1 [0277.350] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74625823, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x74625823, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7a3296ce, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{B20A1ECA-2D21-11ED-B0CF-7896845E3B84}.dat", cAlternateFileName="{B20A1~1.DAT")) returned 1 [0277.350] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a599052, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a599052, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a599052, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{B20A1ECA-2D21-11ED-B0CF-7896845E3B84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{B20A1~1.CRY")) returned 1 [0277.350] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8bd80d, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d8bd80d, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7dda841c, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat", cAlternateFileName="{B80A0~1.DAT")) returned 1 [0277.350] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a599052, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a599052, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a599052, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{B80A0~1.CRY")) returned 1 [0277.350] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a599052, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a599052, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a599052, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{B80A0BDD-2D21-11ED-B0CF-7896845E3B84}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{B80A0~1.CRY")) returned 0 [0277.350] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0277.350] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4935b8a9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4935b8a9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4935b8a9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x322d4444, dwReserved1=0x2d313244, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.350] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4935b8a9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4935b8a9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4935b8a9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x322d4444, dwReserved1=0x2d313244, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.350] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0277.350] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TabRoaming", cAlternateFileName="TABROA~1")) returned 1 [0277.351] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.351] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.351] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.351] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.351] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.351] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.351] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0277.352] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.352] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.352] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0277.352] CryptDestroyHash (hHash=0x55e210) returned 1 [0277.352] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.352] GetLastError () returned 0x0 [0277.352] GetLastError () returned 0x0 [0277.352] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.353] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\tabroaming\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.354] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.355] SetEndOfFile (hFile=0x24c) returned 1 [0277.355] CloseHandle (hObject=0x24c) returned 1 [0277.356] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.356] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.357] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0277.357] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.357] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.358] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.358] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.358] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.358] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.359] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.359] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.359] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.359] CryptDestroyKey (hKey=0x55e790) returned 1 [0277.359] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0277.359] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\tabroaming\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x493cda59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0277.359] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x493cda59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.359] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x493cda59, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x493cda59, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x493cda59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.360] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x493cda59, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x493cda59, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x493cda59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.360] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0277.360] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Tracking Protection", cAlternateFileName="TRACKI~1")) returned 1 [0277.360] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.360] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.360] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.360] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.360] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.360] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.360] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0277.361] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.361] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.361] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0277.361] CryptDestroyHash (hHash=0x55e790) returned 1 [0277.361] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.361] GetLastError () returned 0x0 [0277.361] GetLastError () returned 0x0 [0277.361] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.362] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.363] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.363] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\tracking protection\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.364] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.366] SetEndOfFile (hFile=0x24c) returned 1 [0277.366] CloseHandle (hObject=0x24c) returned 1 [0277.366] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.367] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.367] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0277.368] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.368] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.368] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.368] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.368] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.369] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.369] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.369] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.369] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.369] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.369] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.369] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.370] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0277.370] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0277.370] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\tracking protection\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x493cda59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0277.370] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x493cda59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.370] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x493cda59, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x493cda59, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x493f3d0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.370] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x493cda59, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x493cda59, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x493f3d0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.370] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0277.370] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5284b9d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc52aacec, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc52aacec, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="VersionManager", cAlternateFileName="VERSIO~1")) returned 1 [0277.370] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.370] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.371] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.371] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.371] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.371] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0277.371] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0277.372] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.372] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.372] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0277.372] CryptDestroyHash (hHash=0x55e610) returned 1 [0277.372] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.372] GetLastError () returned 0x0 [0277.372] GetLastError () returned 0x0 [0277.372] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.373] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.374] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.375] SetEndOfFile (hFile=0x24c) returned 1 [0277.375] CloseHandle (hObject=0x24c) returned 1 [0277.375] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.376] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.376] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.377] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.377] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.377] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.378] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.378] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.378] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0277.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.378] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.378] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.379] CryptDestroyKey (hKey=0x55e650) returned 1 [0277.379] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0277.379] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5284b9d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc52aacec, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x493f3d0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0277.379] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5284b9d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc52aacec, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x493f3d0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.379] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x493f3d0d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x493f3d0d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x493f3d0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.379] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5284b9d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc5284b9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc5284b9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3f96, dwReserved0=0x405534, dwReserved1=0x0, cFileName="versionlist.xml", cAlternateFileName="VERSIO~1.XML")) returned 1 [0277.379] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5284b9d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc5284b9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc5284b9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x3f96, dwReserved0=0x405534, dwReserved1=0x0, cFileName="versionlist.xml", cAlternateFileName="VERSIO~1.XML")) returned 0 [0277.379] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0277.380] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5284b9d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xc52aacec, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xc52aacec, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="VersionManager", cAlternateFileName="VERSIO~1")) returned 0 [0277.380] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.380] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x760d4d6f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x760d4d6f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x616e614d, dwReserved1=0x63726567, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0277.380] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.380] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.382] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.382] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.382] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.382] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.382] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570d20) returned 1 [0277.383] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0277.383] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.383] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e7d0) returned 1 [0277.383] CryptDestroyHash (hHash=0x55e790) returned 1 [0277.383] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0277.383] GetLastError () returned 0x0 [0277.383] GetLastError () returned 0x0 [0277.383] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.384] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.385] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.386] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0277.390] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.391] SetEndOfFile (hFile=0x248) returned 1 [0277.391] CloseHandle (hObject=0x248) returned 1 [0277.391] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.392] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.392] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0277.393] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.393] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.393] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.393] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.393] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.394] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.394] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0277.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.394] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.394] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.394] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.394] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0277.394] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0277.394] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x760d4d6f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x49419fad, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0277.395] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x760d4d6f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x49419fad, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.395] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49419fad, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49419fad, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49419fad, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.395] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0277.395] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.395] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.395] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.395] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.395] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0277.396] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.396] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.396] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0277.396] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.396] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.396] GetLastError () returned 0x0 [0277.396] GetLastError () returned 0x0 [0277.396] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.397] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\sync playlists\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.398] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.399] SetEndOfFile (hFile=0x24c) returned 1 [0277.399] CloseHandle (hObject=0x24c) returned 1 [0277.399] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.400] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.400] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.400] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.400] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.400] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.400] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0277.401] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.401] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.401] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.401] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.401] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.401] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.402] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.402] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.402] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.402] CryptDestroyKey (hKey=0x55e390) returned 1 [0277.402] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0277.402] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\sync playlists\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x49440191, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.403] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x49440191, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.403] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0277.403] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.403] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.403] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.403] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0277.403] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0277.404] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.404] CryptHashData (hHash=0x55e2d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.404] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e390) returned 1 [0277.404] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0277.404] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.404] GetLastError () returned 0x0 [0277.404] GetLastError () returned 0x0 [0277.404] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.405] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.405] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.406] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.407] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.408] SetEndOfFile (hFile=0x250) returned 1 [0277.409] CloseHandle (hObject=0x250) returned 1 [0277.409] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.410] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.410] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.410] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.410] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.410] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.411] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.411] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.411] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.411] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.411] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.411] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.411] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.412] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.412] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.412] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.413] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.413] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.413] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.414] CryptDestroyKey (hKey=0x55e390) returned 1 [0277.414] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0277.414] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x49440191, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0277.414] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x49440191, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.414] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fe83ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fe83ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="00007F03", cAlternateFileName="")) returned 1 [0277.414] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.414] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.414] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.415] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.415] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.415] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570c98) returned 1 [0277.416] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0277.416] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.416] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e610) returned 1 [0277.416] CryptDestroyHash (hHash=0x55e790) returned 1 [0277.416] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0277.416] GetLastError () returned 0x0 [0277.416] GetLastError () returned 0x0 [0277.416] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.417] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00007F03\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00007f03\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0277.419] WriteFile (in: hFile=0x254, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.420] SetEndOfFile (hFile=0x254) returned 1 [0277.420] CloseHandle (hObject=0x254) returned 1 [0277.420] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.421] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.421] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0277.421] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.422] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.422] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.422] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.422] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.422] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0277.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.423] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.423] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.423] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.423] CryptDestroyKey (hKey=0x55e610) returned 1 [0277.423] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0277.423] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00007F03\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00007f03\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fe83ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x49466522, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0277.423] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fe83ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x49466522, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x405534, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40f9be3f, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x405534, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f9be3f, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40f9be3f, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x405534, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x405534, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x405534, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x405534, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fc20df, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x405534, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc20df, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fc20df, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fe83ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x405534, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fe83ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40fe83ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40fe83ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x405534, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49466522, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49466522, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49466522, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49466522, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49466522, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49466522, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.424] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49440191, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49440191, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49440191, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49440191, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49440191, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49440191, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.424] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49440191, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49440191, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49440191, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49440191, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49440191, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49440191, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.424] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.424] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x760d4d6f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x760d4d6f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x760d4d6f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0277.425] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.425] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.425] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.425] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.425] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5706c0) returned 1 [0277.426] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.426] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.426] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0277.426] CryptDestroyHash (hHash=0x55e610) returned 1 [0277.426] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.426] GetLastError () returned 0x0 [0277.426] GetLastError () returned 0x0 [0277.426] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.427] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.429] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.430] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\transcoded files cache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.432] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.433] SetEndOfFile (hFile=0x24c) returned 1 [0277.433] CloseHandle (hObject=0x24c) returned 1 [0277.433] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.434] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.434] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.434] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.434] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0277.435] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.435] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.435] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.436] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.436] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.436] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.436] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.436] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.436] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0277.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.436] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.436] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.436] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.437] CryptDestroyKey (hKey=0x55e650) returned 1 [0277.437] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0277.437] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\media player\\transcoded files cache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x760d4d6f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x760d4d6f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x4948c7fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0277.437] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x760d4d6f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x760d4d6f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x4948c7fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.437] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4948c7fa, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4948c7fa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4948c7fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.437] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4948c7fa, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4948c7fa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4948c7fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.437] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0277.437] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x760d4d6f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x760d4d6f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x760d4d6f, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0 [0277.438] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.438] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x696efe32, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x696efe32, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20646564, dwReserved1=0x656c6946, cFileName="Office", cAlternateFileName="")) returned 1 [0277.438] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.438] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.438] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.438] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0277.438] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5709f0) returned 1 [0277.439] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0277.439] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.439] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e790) returned 1 [0277.439] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.439] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0277.439] GetLastError () returned 0x0 [0277.439] GetLastError () returned 0x0 [0277.439] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.440] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0277.441] WriteFile (in: hFile=0x248, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.442] SetEndOfFile (hFile=0x248) returned 1 [0277.442] CloseHandle (hObject=0x248) returned 1 [0277.442] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.445] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.445] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.445] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.445] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.446] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.446] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.446] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.446] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.447] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.447] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.447] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0277.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.447] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.450] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.451] CryptDestroyKey (hKey=0x55e790) returned 1 [0277.451] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0277.451] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x696efe32, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x4948c7fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0277.451] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x696efe32, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x4948c7fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.451] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x3b96fdbf, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3b96fdbf, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="16.0", cAlternateFileName="")) returned 1 [0277.452] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.452] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.452] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.452] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.452] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0277.453] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.453] CryptHashData (hHash=0x55e390, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.453] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0277.453] CryptDestroyHash (hHash=0x55e390) returned 1 [0277.453] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.453] GetLastError () returned 0x0 [0277.454] GetLastError () returned 0x0 [0277.454] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.454] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.455] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.456] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.457] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.459] SetEndOfFile (hFile=0x24c) returned 1 [0277.459] CloseHandle (hObject=0x24c) returned 1 [0277.459] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.460] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.460] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.460] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.460] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0277.461] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.461] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.461] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.461] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.461] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.462] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.462] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.462] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.462] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.462] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.462] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.462] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.462] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.462] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.462] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.463] CryptDestroyKey (hKey=0x55e610) returned 1 [0277.463] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0277.463] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x3b96fdbf, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x494b3e56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0277.463] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x3b96fdbf, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x494b3e56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.463] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaba9333c, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xaba9333c, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x6b3f26a7, ftLastWriteTime.dwHighDateTime=0x1d7b058, nFileSizeHigh=0x0, nFileSizeLow=0x13bd9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="excel.exe_Rules.xml", cAlternateFileName="EXCELE~1.XML")) returned 1 [0277.463] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x494b3e56, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x494b3e56, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x494d8b6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.463] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cb2b47, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8cb2b47, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8cb2b47, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x11d02, dwReserved0=0x405534, dwReserved1=0x0, cFileName="msaccess.exe_Rules.xml", cAlternateFileName="MSACCE~1.XML")) returned 1 [0277.463] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20bb7bfa, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x20bb7bfa, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x20bb8ff9, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x4050, dwReserved0=0x405534, dwReserved1=0x0, cFileName="officec2rclient.exe_Rules.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0277.463] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cfcf021, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1cfcf021, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0xfa561739, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x4050, dwReserved0=0x405534, dwReserved1=0x0, cFileName="officeclicktorun.exe_Rules.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0277.463] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b96fdbf, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3b96fdbf, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3b96fdbf, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x14a91, dwReserved0=0x405534, dwReserved1=0x0, cFileName="outlook.exe_Rules.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0277.463] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb50ff70b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb50ff70b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb50ff70b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x12c3e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="powerpnt.exe_Rules.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0277.463] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5781bc17, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x5781bc17, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x9d540b29, ftLastWriteTime.dwHighDateTime=0x1d70502, nFileSizeHigh=0x0, nFileSizeLow=0x4d2aa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="setup.exe_Rules.xml", cAlternateFileName="SETUPE~1.XML")) returned 1 [0277.463] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18417d03, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x18417d03, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1841a3b9, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x4050, dwReserved0=0x405534, dwReserved1=0x0, cFileName="setup32.exe_Rules.xml", cAlternateFileName="SETUP3~1.XML")) returned 1 [0277.463] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1fe741f9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x1fe741f9, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WebServiceCache", cAlternateFileName="WEBSER~1")) returned 1 [0277.463] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.463] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.464] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.464] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.464] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.464] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.464] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0277.464] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.464] CryptHashData (hHash=0x55e390, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.464] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e310) returned 1 [0277.464] CryptDestroyHash (hHash=0x55e390) returned 1 [0277.465] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.465] GetLastError () returned 0x0 [0277.465] GetLastError () returned 0x0 [0277.465] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.465] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.466] WriteFile (in: hFile=0x250, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.467] SetEndOfFile (hFile=0x250) returned 1 [0277.467] CloseHandle (hObject=0x250) returned 1 [0277.467] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.468] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.468] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0277.469] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.469] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.469] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.469] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.469] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.469] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.470] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.470] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.470] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.470] CryptDestroyKey (hKey=0x55e310) returned 1 [0277.470] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0277.470] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1fe741f9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x494d8b6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.471] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1fe741f9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x494d8b6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.471] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1fe741f9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x82347855, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AllUsers", cAlternateFileName="")) returned 1 [0277.471] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.471] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.471] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.471] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0277.471] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571050) returned 1 [0277.472] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0277.472] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.472] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e790) returned 1 [0277.472] CryptDestroyHash (hHash=0x55e610) returned 1 [0277.472] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ea58*=0x18) returned 1 [0277.472] GetLastError () returned 0x0 [0277.472] GetLastError () returned 0x0 [0277.472] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.473] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0277.509] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.510] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0277.513] WriteFile (in: hFile=0x254, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.514] SetEndOfFile (hFile=0x254) returned 1 [0277.514] CloseHandle (hObject=0x254) returned 1 [0277.514] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.515] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.516] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.516] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.516] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.516] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.517] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.517] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.517] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.517] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.517] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.518] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0277.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.518] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.519] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.519] CryptDestroyKey (hKey=0x55e790) returned 1 [0277.519] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0277.520] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1fe741f9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x4954b2ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0277.520] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0x1fe741f9, ftLastAccessTime.dwHighDateTime=0x1d705ed, ftLastWriteTime.dwLowDateTime=0x4954b2ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.520] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82347855, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x5d4d30d2, ftLastAccessTime.dwHighDateTime=0x1d7b058, ftLastWriteTime.dwLowDateTime=0x5d4d30d2, ftLastWriteTime.dwHighDateTime=0x1d7b058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="binaries.templates.cdn.office.net", cAlternateFileName="BINARI~1.NET")) returned 1 [0277.520] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.520] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.521] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.525] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.525] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.525] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570d20) returned 1 [0277.526] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0277.526] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.526] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e210) returned 1 [0277.526] CryptDestroyHash (hHash=0x55e610) returned 1 [0277.526] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0277.526] GetLastError () returned 0x0 [0277.526] GetLastError () returned 0x0 [0277.527] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.527] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\binaries.templates.cdn.office.net\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\binaries.templates.cdn.office.net\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0277.529] WriteFile (in: hFile=0x258, lpBuffer=0x23e52cc*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e52cc*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.530] SetEndOfFile (hFile=0x258) returned 1 [0277.530] CloseHandle (hObject=0x258) returned 1 [0277.530] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.531] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.531] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.531] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.531] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.531] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.531] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0277.532] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.532] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.532] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.532] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.532] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.532] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.532] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.532] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.532] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.532] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.532] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.533] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0277.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.533] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.533] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.533] CryptDestroyKey (hKey=0x55e210) returned 1 [0277.533] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0277.533] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\binaries.templates.cdn.office.net\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\binaries.templates.cdn.office.net\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82347855, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x5d4d30d2, ftLastAccessTime.dwHighDateTime=0x1d7b058, ftLastWriteTime.dwLowDateTime=0x4957158f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82347855, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x5d4d30d2, ftLastAccessTime.dwHighDateTime=0x1d7b058, ftLastWriteTime.dwLowDateTime=0x4957158f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4e03b9e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4e03b9e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4e03b9e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xaff, dwReserved0=0x405534, dwReserved1=0x0, cFileName="033A5E2E-F52B-4392-A855-EB1B603352F7", cAlternateFileName="033A5E~1")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb2bc31, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabb2bc31, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabb2d062, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2b3a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0431222D-6E07-4867-BED3-3672DEAE6648", cAlternateFileName="043122~1")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ca303e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82ca303e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82ca303e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3be8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="05BDDC85-1B21-40A1-AD47-D6AD70518BA9", cAlternateFileName="05BDDC~1")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8494d29, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8494d29, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8496206, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xa96, dwReserved0=0x405534, dwReserved1=0x0, cFileName="08DD48C4-4C22-48B1-8676-03955502381B", cAlternateFileName="08DD48~1")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b5398c, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82b5398c, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82b54d17, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x5ba7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0BB3D81C-E14E-48A8-9E37-42996BD92C45", cAlternateFileName="0BB3D8~1")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c946be, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82c946be, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82c946be, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x14b50, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0FFEDD2D-75F1-4D91-8A68-D07299430A95", cAlternateFileName="0FFEDD~1")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b28e4c, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82b28e4c, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82b28e4c, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2426, dwReserved0=0x405534, dwReserved1=0x0, cFileName="136081F3-73A0-4FF7-B28C-3470DE19BBF1", cAlternateFileName="136081~1")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84be520, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc84be520, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc84bf915, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1193, dwReserved0=0x405534, dwReserved1=0x0, cFileName="149EF4F4-82E0-49BF-99DB-2EA4A1B5FD74", cAlternateFileName="149EF4~1")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d9ad45, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4d9ad45, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4d9ad45, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x812e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="15A1ED83-2E0D-4739-B941-AD1703A61A1C", cAlternateFileName="15A1ED~1")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb6b457, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabb6b457, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabb6b457, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1bc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1604DFC0-3711-40F4-A312-5716BCF1C705", cAlternateFileName="1604DF~1")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc860f3fd, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc860f3fd, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc86107a9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xc69, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1A8199FD-6A7F-407E-BA91-64E3C5A3EECB", cAlternateFileName="1A8199~1")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9f20e3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9f20e3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9f20e3, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x80bb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1E1D102B-3E38-42D5-97CF-F307C2E53FA9", cAlternateFileName="1E1D10~1")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb5b5f4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabb5b5f4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabb5dbcb, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x405534, dwReserved1=0x0, cFileName="21676BA8-01CC-477B-8C3D-258E774A1164", cAlternateFileName="21676B~1")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4efb86e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4efb86e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4efcbea, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x6b94, dwReserved0=0x405534, dwReserved1=0x0, cFileName="23BF312F-1BE9-4411-BFF6-FA34461B5139", cAlternateFileName="23BF31~1")) returned 1 [0277.534] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9d4b04, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9d4b04, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9d5f98, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3bcb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="23FB071D-E9EC-4666-A0CB-7D6993563959", cAlternateFileName="23FB07~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a897d3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8a897d3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8a8ab48, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1fdd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="292EB0B0-CEFD-4710-B2BC-B6DEBB11376B", cAlternateFileName="292EB0~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49f4ff8, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb49f4ff8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb49f62e6, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2fff, dwReserved0=0x405534, dwReserved1=0x0, cFileName="29A9F36E-19FA-474E-A88B-9EE7C96DCBA2", cAlternateFileName="29A9F3~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb502ff48, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb502ff48, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb503124f, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x666c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2A756DDE-34E8-4DC2-855B-44682E9D4845", cAlternateFileName="2A756D~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49fb16b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb49fb16b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb49fb16b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4af4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2DFAAC69-9C98-47D4-8E3B-6AD109FD232D", cAlternateFileName="2DFAAC~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a80f08, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8a80f08, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8a883fc, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2EC88447-26FF-4E32-8D81-5ABC75AE65DB", cAlternateFileName="2EC884~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ea9c0d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4ea9c0d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4ea9c0d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x8b27, dwReserved0=0x405534, dwReserved1=0x0, cFileName="33F63883-F0AE-4AB6-B4F0-30BB1951B381", cAlternateFileName="33F638~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bdad10, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82bdad10, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82bdad10, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x8440, dwReserved0=0x405534, dwReserved1=0x0, cFileName="3628527B-53B7-45AD-A6DB-2BB7CCE4B284", cAlternateFileName="362852~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab8e2fcd, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab8e2fcd, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab8e2fcd, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4a91, dwReserved0=0x405534, dwReserved1=0x0, cFileName="393DA17C-492D-4E39-93B9-A0EB68F559AE", cAlternateFileName="393DA1~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829648ac, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x829648ac, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x829648ac, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x63f1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="3BA4462F-9DE4-49DE-B3B4-C55DE0BC2436", cAlternateFileName="3BA446~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c74994, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82c74994, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82c770d1, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x235a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="3C5BB25A-C5B4-4565-A1C7-47EA3C32B62B", cAlternateFileName="3C5BB2~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaba3536d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xaba3536d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xaba3536d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a3b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="3E543A2A-53F0-47F8-9F51-FF1B9D7890AD", cAlternateFileName="3E543A~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d79e71, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82d79e71, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82d7b256, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2aee, dwReserved0=0x405534, dwReserved1=0x0, cFileName="3FFAE199-5C90-4A06-AA16-96546E1FDFD1", cAlternateFileName="3FFAE1~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82960d16, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82960d16, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82962239, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x341b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="406E18D5-EC82-4FCC-82A8-2D148D067E02", cAlternateFileName="406E18~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84c0c6a, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc84c0c6a, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc84c20aa, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x97c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="43F05AC3-1345-4232-9173-E5AEAF85BF98", cAlternateFileName="43F05A~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc847f2b8, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc847f2b8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc847f2b8, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4BCC7FD4-613C-4B15-9DBE-908105E4ED54", cAlternateFileName="4BCC7F~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828dd133, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x828dd133, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x828dd133, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4825, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4CA2E262-1B83-48AB-BA5B-2A052BA6485B", cAlternateFileName="4CA2E2~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5074490, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb5074490, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb5074490, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2171, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4F183948-A9C6-492E-8CD3-78756D7F03CF", cAlternateFileName="4F1839~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84da778, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc84da778, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc84db9c3, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x438, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4F9F0AEF-1D87-4F0C-910C-0ADC7E172289", cAlternateFileName="4F9F0A~1")) returned 1 [0277.535] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4b06560, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4b06560, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4b07902, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2c73, dwReserved0=0x405534, dwReserved1=0x0, cFileName="511B4AE9-CD73-4ED0-A899-602921314CEC", cAlternateFileName="511B4A~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabaab9cf, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabaab9cf, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabaacd7e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1cab, dwReserved0=0x405534, dwReserved1=0x0, cFileName="580DF0A8-7B09-4BAC-BD6B-1096E9BDA073", cAlternateFileName="580DF0~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b14252, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82b14252, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82b14252, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x23c3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5B268694-C256-497F-B57F-0B2D793CBA10", cAlternateFileName="5B2686~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4cefda3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4cefda3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4cefda3, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x5128, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5B7E87C2-FC64-4F92-8D24-251DE6AF63C0", cAlternateFileName="5B7E87~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9fe464, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9fe464, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9fe464, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x487e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5F3382B8-AFBF-4FEA-8B79-20898FE63A3D", cAlternateFileName="5F3382~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabbd098a, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabbd098a, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabbd1d40, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x242b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6B8DE11F-3D5A-48C6-81AA-977DA661E2C5", cAlternateFileName="6B8DE1~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82cfd55e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82cfd55e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82d37ecc, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x7b5, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6E234531-C2BA-4F08-BC11-2ECA97A03E84", cAlternateFileName="6E2345~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc853d4e0, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc853d4e0, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc85646d8, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xbec, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6E4EC81F-6A7B-442E-91B3-150ED476524B", cAlternateFileName="6E4EC8~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b980a1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82b980a1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82b99326, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x401d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6E87FFA6-570D-4F3C-832C-0F0ED39D0DE2", cAlternateFileName="6E87FF~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4cf260c, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4cf260c, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4cf260c, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xb156, dwReserved0=0x405534, dwReserved1=0x0, cFileName="719CA5E5-2264-4D2B-B1BC-1979AE2F8481", cAlternateFileName="719CA5~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b05ffa, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8b05ffa, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8b07378, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x60e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="73949334-7885-4202-9F99-AD59E8565AB6", cAlternateFileName="739493~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc882d53e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc882d53e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc882e8bd, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x722, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7600EED5-3234-4650-8D9A-67C39E956D87", cAlternateFileName="7600EE~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabae28fb, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabae28fb, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabae3bb5, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7C92FCEB-66EB-471D-9BA1-BDEE0E12FD94", cAlternateFileName="7C92FC~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b59afa, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82b59afa, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82b59afa, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x98d6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7F96D0A4-ECC8-4300-A3C4-8C2B5918BBAA", cAlternateFileName="7F96D0~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a05a2f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8a05a2f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8a06e54, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xc11, dwReserved0=0x405534, dwReserved1=0x0, cFileName="806760D6-0D46-4F0D-9A2A-5619D868318C", cAlternateFileName="806760~1")) returned 1 [0277.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8565b98, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8565b98, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8565b98, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="825BFDEB-777E-4DF1-818C-7CA4FC0D3016", cAlternateFileName="825BFD~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84e7d50, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc84e7d50, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc84e9287, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x9c3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="82B38E75-3368-40D2-B1E5-193E0E558D48", cAlternateFileName="82B38E~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaba093e4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xaba093e4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xaba093e4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x507d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="8618DFC3-EF76-4235-AA5D-06BEABD6E242", cAlternateFileName="8618DF~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c2c9d8, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4c2c9d8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4c2c9d8, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x17be, dwReserved0=0x405534, dwReserved1=0x0, cFileName="89953CAA-1AB9-4A6E-A488-DFEFC5075387", cAlternateFileName="89953C~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ac863d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82ac863d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82ac9960, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x541f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="8EE3590E-CE33-42C6-8250-DF185AF8DAA4", cAlternateFileName="8EE359~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb476eaa3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb476eaa3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb476fe6d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4c3c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9056E597-0C30-4F42-BA7A-70B004BF042A", cAlternateFileName="9056E5~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49b7e91, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb49b7e91, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb49b7e91, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x12b8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="92D09C47-EFFB-4E54-B85D-797F67B0527C", cAlternateFileName="92D09C~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc848065f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc848065f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc84819da, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3b7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="95301B49-34BE-47D5-99D1-1C50A4B80C13", cAlternateFileName="95301B~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb715e7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabb715e7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabb715e7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x372b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="95AFB9A8-DEAD-49F6-9234-BEA10973F0CD", cAlternateFileName="95AFB9~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a305e3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8a305e3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8a7fd33, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x7d42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9639F732-A0F4-4A33-92A0-01330C0BB8C3", cAlternateFileName="9639F7~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83bbe8a, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc83bbe8a, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc83bd386, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="96BAA0E7-CE03-46C0-A45A-8F71ADB9C825", cAlternateFileName="96BAA0~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82b07c5d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82b07c5d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82b07c5d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xd2e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9A557D1E-5B55-45D0-B83F-66D1CCFBCC32", cAlternateFileName="9A557D~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8a15964, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8a15964, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8a16c5a, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9CFC7195-9421-404F-A40A-EEBD8F033365", cAlternateFileName="9CFC71~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabbdccf8, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabbdccf8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabbdccf8, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x135f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="A0D2B79B-05BB-4871-8DE6-E766643BD65E", cAlternateFileName="A0D2B7~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabae01a6, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabae01a6, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabae01a6, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x108a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="A1E234BD-B121-49A0-9B4B-BBF6A832161B", cAlternateFileName="A1E234~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829ef008, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x829ef008, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x829ef008, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x990a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="A2F95592-6A7F-475A-878F-C593DA8BBEDD", cAlternateFileName="A2F955~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bb0641, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82bb0641, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82bb19b0, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2c34, dwReserved0=0x405534, dwReserved1=0x0, cFileName="A50A8D38-2A06-4EF5-A84C-B00C714F6B16", cAlternateFileName="A50A8D~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc89f5df6, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc89f5df6, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc89f5df6, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x405534, dwReserved1=0x0, cFileName="A5DEC71F-CF32-4AAD-A02A-3B306B7F1FCC", cAlternateFileName="A5DEC7~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49c69cc, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb49c69cc, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb49c69cc, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x75b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AA8B315F-D191-411A-80E8-BBCCCE176DA7", cAlternateFileName="AA8B31~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabac2fca, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabac2fca, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabac3f0e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x14c5, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ABF009F6-7021-47EC-8025-BE55AD5EBB57", cAlternateFileName="ABF009~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9c9b2e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9c9b2e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9c9b2e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x367e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AF769060-9C3B-4F97-8FB8-1EB72198BA39", cAlternateFileName="AF7690~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9f96f2, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9f96f2, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9faa6d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2132, dwReserved0=0x405534, dwReserved1=0x0, cFileName="B1725647-3A36-4C56-9803-89EDCA8238A8", cAlternateFileName="B17256~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8c666c7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8c666c7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8c666c7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="B20989ED-6B03-4803-ADD0-4360553EC384", cAlternateFileName="B20989~1")) returned 1 [0277.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4df9f3a, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4df9f3a, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4df9f3a, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x7cb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="B6937276-0D21-44E4-B6A5-2F13F90E1698", cAlternateFileName="B69372~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82cd8b94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82cd8b94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82cd8b94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x5505, dwReserved0=0x405534, dwReserved1=0x0, cFileName="B74632A4-B059-4F5A-849D-252172A06A99", cAlternateFileName="B74632~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9f482a, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9f482a, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9f482a, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3888, dwReserved0=0x405534, dwReserved1=0x0, cFileName="BB41F806-1043-41B2-9372-8F6E7066247A", cAlternateFileName="BB41F8~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabae635e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabae635e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabae635e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x7f46, dwReserved0=0x405534, dwReserved1=0x0, cFileName="BFB97937-ABF1-480A-946B-D367067F68C4", cAlternateFileName="BFB979~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9c1295, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9c1295, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9c1295, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3c73, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C0B5FEFE-C6C1-439E-B89D-E39A2031E527", cAlternateFileName="C0B5FE~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb474db8b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb474db8b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb474ef1c, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1ffd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C3DC5BD1-4AB1-4BDD-ACB0-FCCA65EE3D2A", cAlternateFileName="C3DC5B~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9cfd00, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9cfd00, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9d23da, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2f7e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C4181E33-213A-4456-87BA-15FD83064187", cAlternateFileName="C4181E~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4974447, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4974447, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb49759af, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2bd8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C52B4A7C-C9FD-485A-8375-F97F3A24C1BA", cAlternateFileName="C52B4A~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc83e6a80, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc83e6a80, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc83e6a80, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1167, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C7B65EEC-91E0-4362-AC18-80B09C3C95AC", cAlternateFileName="C7B65E~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829b15f8, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x829b15f8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x829b5109, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x634f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C85A59C5-2B02-4194-AB2C-0E6E2B6031A0", cAlternateFileName="C85A59~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4e2fa78, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4e2fa78, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4e30e51, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x5543, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C9B26F48-B9B2-452D-9E4F-BD539A769B1B", cAlternateFileName="C9B26F~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabad3e63, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabad3e63, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabad3e63, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a54, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CA094F8F-D41E-43AB-8A32-1A2F34851250", cAlternateFileName="CA094F~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8293e9d0, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x8293e9d0, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x8293ff31, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1e19, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CCB1B3FC-5E0C-4241-ABC1-CA67B6C56947", cAlternateFileName="CCB1B3~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d94a38, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4d94a38, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4d94a38, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x422e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CFC05EA4-9A97-47D5-9459-FB2F94EE79CC", cAlternateFileName="CFC05E~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d89a80, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4d89a80, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4d8ae10, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x595d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="D03B54D7-2F02-4F26-B245-6759FD3E5356", cAlternateFileName="D03B54~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab9d990d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xab9d990d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xab9ee668, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4c5d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="D1658A87-36B4-4565-B36F-CEF71FFC7033", cAlternateFileName="D1658A~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c85c72, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82c85c72, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82c8700a, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3894, dwReserved0=0x405534, dwReserved1=0x0, cFileName="D69FD789-7AAA-4B6A-86DB-6AD5F309B97F", cAlternateFileName="D69FD7~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4e43432, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4e43432, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4e43432, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x6f72, dwReserved0=0x405534, dwReserved1=0x0, cFileName="D7F62263-4202-4285-AB58-35DFBBB7899C", cAlternateFileName="D7F622~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc856808a, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc856808a, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc856808a, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DB4F9AB3-289C-4C85-93DC-C7725673E79B", cAlternateFileName="DB4F9A~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d69f78, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82d69f78, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82d69f78, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2913, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DC2A3CBD-DDE4-4C82-98B2-97C578971471", cAlternateFileName="DC2A3C~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc89439d3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc89439d3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc89439d3, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2516, dwReserved0=0x405534, dwReserved1=0x0, cFileName="E2B74C9D-38F9-4AF3-849B-6F6ED185FFC9", cAlternateFileName="E2B74C~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4e4e325, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4e4e325, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4e4f6b9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xa99, dwReserved0=0x405534, dwReserved1=0x0, cFileName="E36912C5-9C2D-452F-95F8-CFA1FC049148", cAlternateFileName="E36912~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8850b3e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8850b3e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8850b3e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x38f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="E457C019-B991-4CCC-8425-CCD48E271DFC", cAlternateFileName="E457C0~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4e928f1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4e928f1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4e93c87, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1f40, dwReserved0=0x405534, dwReserved1=0x0, cFileName="E64AA1EE-3ABD-40DD-9A7A-E7E891151C82", cAlternateFileName="E64AA1~1")) returned 1 [0277.538] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bd5ee3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82bd5ee3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82bd85f4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3380, dwReserved0=0x405534, dwReserved1=0x0, cFileName="E8B41E01-FE51-4F72-9829-70D724467D17", cAlternateFileName="E8B41E~1")) returned 1 [0277.539] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabb679a6, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xabb679a6, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xabb679a6, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x292e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="EA6554FC-7DB2-4685-948E-52402E811540", cAlternateFileName="EA6554~1")) returned 1 [0277.539] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8424f42, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xc8424f42, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc8427531, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x153e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="F0A28B79-40AC-459C-968D-4F68E9798715", cAlternateFileName="F0A28B~1")) returned 1 [0277.539] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x829bd95b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x829bd95b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x829bef86, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x7629, dwReserved0=0x405534, dwReserved1=0x0, cFileName="F192A1E6-5284-47FF-83DA-D65DCB35FC9F", cAlternateFileName="F192A1~1")) returned 1 [0277.539] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaba00b7d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xaba00b7d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xaba00b7d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x18bd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="F31F431A-DF78-48BC-9A30-E15E83A7DF3B", cAlternateFileName="F31F43~1")) returned 1 [0277.539] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d4df95, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82d4df95, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82d4df95, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1362, dwReserved0=0x405534, dwReserved1=0x0, cFileName="F8C7174F-633A-4FA0-9187-67153391986A", cAlternateFileName="F8C717~1")) returned 1 [0277.539] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c2675f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb4c2675f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb4c2675f, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x447b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="F97CF839-8F66-44ED-8DB4-5A4D6D408F2E", cAlternateFileName="F97CF8~1")) returned 1 [0277.539] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb49ec6e1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xb49ec6e1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xb49eda26, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x486e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FDAC0094-8C06-4BE5-856F-0DB7BB8F69B9", cAlternateFileName="FDAC00~1")) returned 1 [0277.539] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4957158f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4957158f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4957158f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.539] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4957158f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4957158f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4957158f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.539] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0277.539] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4954b2ce, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4954b2ce, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4954b2ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.539] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xf836a81f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xf8387c8b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="officeclient.microsoft.com", cAlternateFileName="OFFICE~1.COM")) returned 1 [0277.539] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.539] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.539] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.539] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.540] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0277.540] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571408) returned 1 [0277.540] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0277.540] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.540] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e610) returned 1 [0277.540] CryptDestroyHash (hHash=0x55e790) returned 1 [0277.540] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0277.540] GetLastError () returned 0x0 [0277.540] GetLastError () returned 0x0 [0277.540] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.541] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0277.543] WriteFile (in: hFile=0x258, lpBuffer=0x23e35d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e35d4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.544] SetEndOfFile (hFile=0x258) returned 1 [0277.544] CloseHandle (hObject=0x258) returned 1 [0277.544] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.545] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.545] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.545] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.545] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.546] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.546] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.546] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.546] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.546] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.546] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.546] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.546] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.546] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.546] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.546] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.546] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.546] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.546] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.546] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.547] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.547] CryptDestroyKey (hKey=0x55e610) returned 1 [0277.547] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0277.547] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xf836a81f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x49597771, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0277.547] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xf836a81f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x49597771, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.547] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d374b6c, ftCreationTime.dwHighDateTime=0x1d7b058, ftLastAccessTime.dwLowDateTime=0x5d374b6c, ftLastAccessTime.dwHighDateTime=0x1d7b058, ftLastWriteTime.dwLowDateTime=0x5d37726a, ftLastWriteTime.dwHighDateTime=0x1d7b058, nFileSizeHigh=0x0, nFileSizeLow=0x21d15, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4958AB69-A28E-4C1F-916A-BDF19CB99CF0", cAlternateFileName="4958AB~1")) returned 1 [0277.547] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf836a81f, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xf836a81f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xf836bb5a, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x24712, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6AEB661E-B31C-4DE4-AD1C-ED3FF837AE7D", cAlternateFileName="6AEB66~1")) returned 1 [0277.547] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49597771, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49597771, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49597771, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.547] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49597771, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49597771, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49597771, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.547] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0277.547] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1fe741f9, ftCreationTime.dwHighDateTime=0x1d705ed, ftLastAccessTime.dwLowDateTime=0xf836a81f, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xf8387c8b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="officeclient.microsoft.com", cAlternateFileName="OFFICE~1.COM")) returned 0 [0277.548] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0277.548] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x494d8b6b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x494d8b6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x494d8b6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6e65696c, dwReserved1=0x696d2e74, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.548] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x494d8b6b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x494d8b6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x494d8b6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6e65696c, dwReserved1=0x696d2e74, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.548] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.548] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fa7c66, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82fa7c66, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82fa7c66, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x197d6, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="winword.exe_Rules.xml", cAlternateFileName="WINWOR~1.XML")) returned 1 [0277.548] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fa7c66, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x82fa7c66, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x82fa7c66, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x197d6, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="winword.exe_Rules.xml", cAlternateFileName="WINWOR~1.XML")) returned 0 [0277.548] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0277.548] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4948c7fa, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4948c7fa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4948c7fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6578652e, dwReserved1=0x6c75525f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.548] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x696efe32, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x2aed615e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2aed615e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6578652e, dwReserved1=0x6c75525f, cFileName="OTele", cAlternateFileName="")) returned 1 [0277.548] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.548] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.548] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.548] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.548] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.548] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.548] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0277.549] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.549] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.549] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0277.549] CryptDestroyHash (hHash=0x55e610) returned 1 [0277.549] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.549] GetLastError () returned 0x0 [0277.549] GetLastError () returned 0x0 [0277.549] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.550] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.551] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3614*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3614*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.559] SetEndOfFile (hFile=0x24c) returned 1 [0277.559] CloseHandle (hObject=0x24c) returned 1 [0277.559] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.560] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.560] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.560] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.560] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0277.560] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.560] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.561] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.561] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.561] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.561] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.561] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0277.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.562] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.562] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.562] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.562] CryptDestroyKey (hKey=0x55e790) returned 1 [0277.562] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0277.562] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Office\\OTele\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\office\\otele\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x696efe32, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x2aed615e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49597771, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0277.562] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x696efe32, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x2aed615e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49597771, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.562] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49597771, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49597771, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x495bd991, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.562] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a73c9e2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a73c9e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a73c9e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{12E26~1.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a7639b4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a7639b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a7639b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (0) - 3576 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{12E26~2.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a7639b4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a7639b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a7895c1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{12E26~3.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a7895c1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a7895c1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a7afaae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{12E262E7-D2B6-4D7F-8C8E-099A50A4E1B9} (1) - 3576 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{12E26~4.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a7afaae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a7afaae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a7afaae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{14280~1.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a7afaae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a7afaae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a7d5271, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (0) - 3904 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{14280~2.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a7d5271, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a7d5271, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a7fb6c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{14280~3.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a7fb6c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a7fb6c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a7fb6c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{14280630-395B-4995-BD22-15BD491A464A} (1) - 3904 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{14280~4.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a7fb6c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a7fb6c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a7fb6c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{47686~1.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a821796, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a821796, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a821796, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (0) - 3924 - winword.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{47686~2.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a821796, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a821796, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a84791a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{47686~3.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a84791a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a84791a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a84791a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{476867B0-6C71-41F9-B8EE-957D2C806C59} (1) - 3924 - winword.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{47686~4.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a87091d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a87091d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a87091d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{5ABD4~1.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a87091d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a87091d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a87091d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (0) - 3620 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{5ABD4~2.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a893e83, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a893e83, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a893e83, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{5ABD4~3.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a893e83, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a893e83, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a8bb988, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{5ABD4B01-ABA3-41BD-9FD7-3DB72380D196} (1) - 3620 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{5ABD4~4.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a8bb988, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a8bb988, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a8bb988, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{69050~1.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a8bb988, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a8bb988, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a8bb988, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (0) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{69050~2.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a8e039e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a8e039e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a8e039e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{69050~3.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a8e039e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a8e039e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a9064fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{69050054-7F79-4E06-8AA2-536C8BF4F0D3} (1) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{69050~4.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9064fa, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a9064fa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a9064fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{6B789~1.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9064fa, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a9064fa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a92c887, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (0) - 3248 - outlook.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{6B789~2.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a92c887, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a92c887, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a92c887, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{6B789~3.CRY")) returned 1 [0277.563] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a92c887, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a92c887, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a9529d6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} (1) - 3248 - outlook.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{6B789~4.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9529d6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a9529d6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a9529d6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{730EE~1.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9529d6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a9529d6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a9794f9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (0) - 3644 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{730EE~2.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9794f9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a9794f9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a9794f9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{730EE~3.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a99ee55, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a99ee55, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a99ee55, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{730EED67-CB03-48EB-B6A2-97FADD6A81FB} (1) - 3644 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{730EE~4.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a99ee55, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a99ee55, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a9c50ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{76787~1.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9c50ff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2a9c50ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2a9efc13, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (0) - 3608 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{76787~2.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa1169a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2aa1169a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2aa1169a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{76787~3.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa379d3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2aa379d3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2aa379d3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{76787746-0EF6-4759-84BC-631B78C93EB7} (1) - 3608 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{76787~4.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa379d3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2aa379d3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2aa379d3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{78AE2~1.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab1ce19, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ab1ce19, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ab1ce19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (0) - 776 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{78AE2~2.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab1ce19, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ab1ce19, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ab429a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{78AE2~3.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab429a3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ab429a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ab8ed9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{78AE2E81-404D-463F-8150-C93CDDA45E7B} (1) - 776 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{78AE2~4.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ab8ed9f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ab8ed9f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2abb5043, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{7D881~1.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abb5043, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2abb5043, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2abb5043, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (0) - 3440 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{7D881~2.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abdb2a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2abdb2a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2abdb2a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{7D881~3.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2abdb2a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2abdb2a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ac0140c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{7D881D02-986E-4A6B-893F-406DB8A8A682} (1) - 3440 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{7D881~4.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac0140c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ac0140c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ac0140c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{BCA15~1.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac2788b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ac2788b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ac2788b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (0) - 3500 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{BCA15~2.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac4dac0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ac4dac0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ac745fc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{BCA15~3.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ac745fc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ac745fc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ac745fc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{BCA15875-E8CF-40E2-A2A2-A665FC46F3A7} (1) - 3500 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{BCA15~4.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ada9fc8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ada9fc8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ada9fc8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{C9F88~1.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ada9fc8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ada9fc8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2adcb17d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (0) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{C9F88~2.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2adcb17d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2adcb17d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2adcb17d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{C9F88~3.CRY")) returned 1 [0277.564] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2adf1409, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2adf1409, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2adf1409, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{C9F887AB-1565-4D03-878C-E985B67FFEF2} (1) - 3748 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{C9F88~4.CRY")) returned 1 [0277.565] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2adf1409, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2adf1409, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ae17657, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{D32DD~1.CRY")) returned 1 [0277.565] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae17657, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ae17657, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ae17657, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (0) - 3812 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{D32DD~2.CRY")) returned 1 [0277.565] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae3d8f5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ae3d8f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ae3d8f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{D32DD~3.CRY")) returned 1 [0277.565] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae3d8f5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ae3d8f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ae639fb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{D32DDB02-A781-4D79-BBB3-90DD7781C33D} (1) - 3812 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{D32DD~4.CRY")) returned 1 [0277.565] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae639fb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ae639fb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ae639fb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{E347E~1.CRY")) returned 1 [0277.565] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae89f0a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ae89f0a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ae89f0a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (0) - 3128 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{E347E~2.CRY")) returned 1 [0277.565] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae89f0a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ae89f0a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2aeb20eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTele.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{E347E~3.CRY")) returned 1 [0277.565] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aeb20eb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2aeb20eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2aed615e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{E347E~4.CRY")) returned 1 [0277.565] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aeb20eb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2aeb20eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2aed615e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{E347E1DF-602B-433D-B049-596C6048612B} (1) - 3128 - excel.exe - OTeleMediumCost.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{E347E~4.CRY")) returned 0 [0277.565] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0277.565] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x696efe32, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x2aed615e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2aed615e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6578652e, dwReserved1=0x6c75525f, cFileName="OTele", cAlternateFileName="")) returned 0 [0277.565] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.565] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb1ac323a, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2c68d12, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0277.565] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.565] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.565] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.565] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0277.566] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5712f8) returned 1 [0277.566] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0277.566] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.566] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0277.566] CryptDestroyHash (hHash=0x55e310) returned 1 [0277.566] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f190*=0x18) returned 1 [0277.566] GetLastError () returned 0x0 [0277.566] GetLastError () returned 0x0 [0277.567] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.567] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0277.569] WriteFile (in: hFile=0x248, lpBuffer=0x23e3654*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3654*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.570] SetEndOfFile (hFile=0x248) returned 1 [0277.570] CloseHandle (hObject=0x248) returned 1 [0277.571] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.572] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.572] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.572] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.572] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0277.572] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.572] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.572] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.572] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.573] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.573] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.573] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.573] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0277.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.573] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.574] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.574] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0277.574] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0277.574] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb1ac323a, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x495e39d6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0277.574] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb1ac323a, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x495e39d6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.574] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x883c79d5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x2b66fae9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b66fae9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="17.3.5892.0626", cAlternateFileName="173589~1.062")) returned 1 [0277.574] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.574] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.575] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.575] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.575] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0277.575] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.575] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.575] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0277.575] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0277.575] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.576] GetLastError () returned 0x0 [0277.576] GetLastError () returned 0x0 [0277.576] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.576] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.577] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3664*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3664*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.579] SetEndOfFile (hFile=0x24c) returned 1 [0277.579] CloseHandle (hObject=0x24c) returned 1 [0277.579] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.580] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.580] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.581] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.581] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.581] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.581] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.582] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.582] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.582] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.582] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.582] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.583] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0277.583] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0277.583] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x883c79d5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x2b66fae9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x495e39d6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0277.583] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x883c79d5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x2b66fae9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x495e39d6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.583] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aed615e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2aed615e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2aefc365, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AUTOPL~1.CRY")) returned 1 [0277.583] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aefc365, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2aefc365, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2af94d8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AUTOPL~2.CRY")) returned 1 [0277.584] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2afbafa2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2afbafa2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2afbafa2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AUTOPL~3.CRY")) returned 1 [0277.584] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2afe1721, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2afe1721, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b00a4ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="COLLEC~1.CRY")) returned 1 [0277.584] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b00a4ce, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2b00a4ce, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b00a4ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ETWLOG~1.CRY")) returned 1 [0277.584] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94689b47, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94689b47, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9489fc30, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ExclusionList.xml", cAlternateFileName="EXCLUS~1.XML")) returned 1 [0277.584] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b02d716, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2b02d716, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b0539c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~1.CRY")) returned 1 [0277.584] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b079daf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2b079daf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b66fae9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xf8000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~2.CRY")) returned 1 [0277.584] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x495e39d6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x495e39d6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x495e39d6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.584] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bbcedb7, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8bbcedb7, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x8edba01f, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1 [0277.584] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.584] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.584] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.584] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.584] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0277.585] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.585] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.585] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0277.585] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.585] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.585] GetLastError () returned 0x0 [0277.585] GetLastError () returned 0x0 [0277.585] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.586] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.587] WriteFile (in: hFile=0x250, lpBuffer=0x23e36a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e36a4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.588] SetEndOfFile (hFile=0x250) returned 1 [0277.588] CloseHandle (hObject=0x250) returned 1 [0277.588] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.589] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.589] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.589] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.589] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.589] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.589] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0277.589] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.589] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.590] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.590] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.590] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.590] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.590] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.590] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.590] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.590] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.590] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.590] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.590] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.590] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.590] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.590] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.591] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.591] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.591] CryptDestroyKey (hKey=0x55e290) returned 1 [0277.591] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0277.591] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bbcedb7, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8edba01f, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x49609dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0277.591] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bbcedb7, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8edba01f, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x49609dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.591] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8edba01f, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8edba01f, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x8f89abc5, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x152c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.591] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49609dcc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49609dcc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49609dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.591] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49609dcc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49609dcc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49609dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.592] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0277.592] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fca0d59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8fca0d59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x907a79a9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="it", cAlternateFileName="")) returned 1 [0277.592] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.592] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.592] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.592] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0277.592] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570748) returned 1 [0277.593] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.593] CryptHashData (hHash=0x55e2d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.593] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e390) returned 1 [0277.593] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0277.593] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.593] GetLastError () returned 0x0 [0277.593] GetLastError () returned 0x0 [0277.593] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.594] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.595] WriteFile (in: hFile=0x250, lpBuffer=0x23e36e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e36e4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.596] SetEndOfFile (hFile=0x250) returned 1 [0277.596] CloseHandle (hObject=0x250) returned 1 [0277.596] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.597] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.597] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.597] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.597] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0277.597] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.597] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.598] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.598] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.598] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.598] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.598] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.599] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.599] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.601] CryptDestroyKey (hKey=0x55e390) returned 1 [0277.601] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0277.601] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fca0d59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x907a79a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x49609dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0277.601] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fca0d59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x907a79a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x49609dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.601] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a79a9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x907a79a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x90ea89ac, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.601] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49609dcc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49609dcc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49609dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.601] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49609dcc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49609dcc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49609dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.601] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.601] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90f6733c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x90f6733c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x91510d84, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ja", cAlternateFileName="")) returned 1 [0277.601] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.601] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.601] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.602] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.602] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.602] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571490) returned 1 [0277.602] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.602] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.602] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0277.602] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.602] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.602] GetLastError () returned 0x0 [0277.602] GetLastError () returned 0x0 [0277.603] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.603] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\ja\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.605] WriteFile (in: hFile=0x250, lpBuffer=0x23e3724*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3724*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.606] SetEndOfFile (hFile=0x250) returned 1 [0277.606] CloseHandle (hObject=0x250) returned 1 [0277.606] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.607] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.607] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.607] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.607] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.607] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.607] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.607] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.607] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.607] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.608] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.608] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.608] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.608] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.608] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.608] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.608] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.608] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.608] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.608] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.608] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.608] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.608] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.609] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.609] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.609] CryptDestroyKey (hKey=0x55e190) returned 1 [0277.609] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0277.609] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\ja\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90f6733c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x91510d84, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4962ff5d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0277.609] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90f6733c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x91510d84, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4962ff5d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.609] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91510d84, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x91510d84, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9259b185, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xfcc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.609] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4962ff5d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4962ff5d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4962ff5d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.609] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4962ff5d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4962ff5d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4962ff5d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.609] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0277.610] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92954bae, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92954bae, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93186f59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ka", cAlternateFileName="")) returned 1 [0277.610] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.610] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.610] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.610] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.610] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570858) returned 1 [0277.611] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.611] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.611] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0277.611] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.611] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.611] GetLastError () returned 0x0 [0277.611] GetLastError () returned 0x0 [0277.611] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.611] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ka\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\ka\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.612] WriteFile (in: hFile=0x250, lpBuffer=0x23e3764*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3764*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.613] SetEndOfFile (hFile=0x250) returned 1 [0277.613] CloseHandle (hObject=0x250) returned 1 [0277.614] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.614] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.615] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0277.615] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.616] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.616] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.616] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.616] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.616] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.617] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.617] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.617] CryptDestroyKey (hKey=0x55e910) returned 1 [0277.617] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0277.617] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ka\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\ka\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92954bae, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93186f59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4962ff5d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.617] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92954bae, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93186f59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4962ff5d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.618] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93186f59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93186f59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93faeefa, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.618] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4962ff5d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4962ff5d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4962ff5d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.618] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4962ff5d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4962ff5d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4962ff5d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.618] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.618] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944bfdaf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x944bfdaf, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94e232ee, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kk", cAlternateFileName="")) returned 1 [0277.618] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.618] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.618] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.618] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0277.618] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0277.619] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.619] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.619] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0277.619] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.619] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.619] GetLastError () returned 0x0 [0277.619] GetLastError () returned 0x0 [0277.619] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.620] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\kk\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\kk\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.621] WriteFile (in: hFile=0x250, lpBuffer=0x23e37a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e37a4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.622] SetEndOfFile (hFile=0x250) returned 1 [0277.622] CloseHandle (hObject=0x250) returned 1 [0277.622] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.622] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.623] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0277.623] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.623] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.623] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.624] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.624] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.624] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.624] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.624] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.625] CryptDestroyKey (hKey=0x55e290) returned 1 [0277.625] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0277.625] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\kk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\kk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944bfdaf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94e232ee, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x496562f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.625] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x944bfdaf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94e232ee, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x496562f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.625] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94e232ee, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94e232ee, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x952c1a4e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.625] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x496562f5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x496562f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x496562f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.625] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x496562f5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x496562f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x496562f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.625] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.625] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95c97643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95c97643, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x962b3645, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="km-kh", cAlternateFileName="")) returned 1 [0277.625] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.625] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.626] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.626] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.626] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.626] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571408) returned 1 [0277.626] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.626] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.626] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0277.626] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.626] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.626] GetLastError () returned 0x0 [0277.626] GetLastError () returned 0x0 [0277.627] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.627] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\km-kh\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\km-kh\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.628] WriteFile (in: hFile=0x250, lpBuffer=0x23e37e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e37e4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.629] SetEndOfFile (hFile=0x250) returned 1 [0277.629] CloseHandle (hObject=0x250) returned 1 [0277.629] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.630] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.630] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.631] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.631] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.631] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.631] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.632] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.632] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.632] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.632] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.632] CryptDestroyKey (hKey=0x55e610) returned 1 [0277.632] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0277.633] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\km-kh\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\km-kh\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95c97643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x962b3645, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x496562f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.633] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95c97643, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x962b3645, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x496562f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.633] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x962b3645, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x962b3645, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x96647060, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.633] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x496562f5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x496562f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x496562f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.633] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x496562f5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x496562f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x496562f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.633] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.633] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x967520dd, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x967520dd, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x96f11a4d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kn", cAlternateFileName="")) returned 1 [0277.633] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.633] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.633] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.633] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.634] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571490) returned 1 [0277.634] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.634] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.634] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0277.634] CryptDestroyHash (hHash=0x55e610) returned 1 [0277.634] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.634] GetLastError () returned 0x0 [0277.634] GetLastError () returned 0x0 [0277.634] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.635] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\kn\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\kn\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.641] WriteFile (in: hFile=0x250, lpBuffer=0x23e3824*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3824*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.642] SetEndOfFile (hFile=0x250) returned 1 [0277.642] CloseHandle (hObject=0x250) returned 1 [0277.642] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.643] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.645] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.645] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0277.647] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.647] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.647] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.647] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.648] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.648] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.648] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.648] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.649] CryptDestroyKey (hKey=0x55e910) returned 1 [0277.649] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0277.649] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\kn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\kn\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x967520dd, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x96f11a4d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4967c544, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.649] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x967520dd, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x96f11a4d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4967c544, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.649] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f11a4d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x96f11a4d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x97317979, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x172c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.649] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4967c544, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4967c544, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4967c544, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.649] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4967c544, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4967c544, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4967c544, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.649] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.649] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973d65a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x973d65a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x97a3ea55, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ko", cAlternateFileName="")) returned 1 [0277.649] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.649] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.649] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.649] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0277.650] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0277.650] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.650] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.650] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0277.650] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.650] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.651] GetLastError () returned 0x0 [0277.651] GetLastError () returned 0x0 [0277.651] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.651] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ko\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\ko\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.652] WriteFile (in: hFile=0x250, lpBuffer=0x23e3864*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3864*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.653] SetEndOfFile (hFile=0x250) returned 1 [0277.654] CloseHandle (hObject=0x250) returned 1 [0277.654] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.654] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.654] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.655] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.655] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.655] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.655] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0277.655] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.655] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.655] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.655] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.655] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.656] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.656] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.656] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.656] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.665] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.665] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.665] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.665] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.665] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.665] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.665] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0277.666] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0277.666] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ko\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\ko\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973d65a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x97a3ea55, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x496a273d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.666] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973d65a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x97a3ea55, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x496a273d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.666] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a3ea55, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x97a3ea55, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x97edd415, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xf2c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.666] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x496a273d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x496a273d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x496a273d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.666] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x496a273d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x496a273d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x496a273d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.666] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.666] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x980cd2db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x980cd2db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x980cd2db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kok", cAlternateFileName="")) returned 1 [0277.666] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.666] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.667] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.667] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.667] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.667] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.667] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570a78) returned 1 [0277.667] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.667] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.667] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0277.667] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.667] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.668] GetLastError () returned 0x0 [0277.668] GetLastError () returned 0x0 [0277.668] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.668] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\kok\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\kok\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.669] WriteFile (in: hFile=0x250, lpBuffer=0x23e38a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e38a4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.670] SetEndOfFile (hFile=0x250) returned 1 [0277.670] CloseHandle (hObject=0x250) returned 1 [0277.670] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.671] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.671] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.671] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.671] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.671] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.672] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.672] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.672] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.672] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.672] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.673] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.673] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.673] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.673] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.673] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.673] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.673] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.673] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.673] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0277.673] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.673] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.674] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.674] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.674] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.674] CryptDestroyKey (hKey=0x55e910) returned 1 [0277.674] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0277.674] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\kok\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\kok\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x980cd2db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x980cd2db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x496ce8f2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.674] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x980cd2db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x980cd2db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x496ce8f2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.674] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x496ce8f2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x496ce8f2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x496ce8f2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.674] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x496ce8f2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x496ce8f2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x496ce8f2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.674] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.675] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x980cd2db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x980cd2db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x980cd2db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kok", cAlternateFileName="")) returned 0 [0277.675] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0277.675] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13a98591, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x2c3b5b52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2c3b5b52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="17.3.5892.0626_1", cAlternateFileName="173589~2.062")) returned 1 [0277.675] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.675] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.675] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.675] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.675] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0277.676] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.676] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.676] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0277.676] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.676] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.676] GetLastError () returned 0x0 [0277.676] GetLastError () returned 0x0 [0277.676] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.677] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.695] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38b4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.696] SetEndOfFile (hFile=0x24c) returned 1 [0277.696] CloseHandle (hObject=0x24c) returned 1 [0277.696] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.697] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.697] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.697] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0277.698] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.698] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.698] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.699] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.699] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.699] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.699] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.699] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.700] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0277.700] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0277.700] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13a98591, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x2c3b5b52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x496ce8f2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0277.700] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13a98591, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x2c3b5b52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x496ce8f2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.700] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b7ca2b7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2b7ca2b7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b7ca2b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AUTOPL~1.CRY")) returned 1 [0277.700] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b7ed14a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2b7ed14a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ba4f644, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AUTOPL~2.CRY")) returned 1 [0277.700] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba4f644, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ba4f644, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2bcb1cb9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AUTOPL~3.CRY")) returned 1 [0277.700] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcb1cb9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2bcb1cb9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2bcd7e38, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="COLLEC~1.CRY")) returned 1 [0277.700] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bcd7e38, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2bcd7e38, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2bd96ac0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ETWLOG~1.CRY")) returned 1 [0277.700] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15de92d7, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x15de92d7, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x15f66b03, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ExclusionList.xml", cAlternateFileName="EXCLUS~1.XML")) returned 1 [0277.700] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd96ac0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2bd96ac0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2bdbcd10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~1.CRY")) returned 1 [0277.700] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bde2f9e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2bde2f9e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2c0b7c35, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~2.CRY")) returned 1 [0277.700] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c0ddd97, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2c0ddd97, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2c19de2a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x362c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSyncApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~3.CRY")) returned 1 [0277.700] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c19de2a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2c19de2a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2c3b5b52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSyncClient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~4.CRY")) returned 1 [0277.700] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e196bc, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x27e196bc, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x27eb206a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x238c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSyncConfig.exe", cAlternateFileName="FILESY~1.EXE")) returned 1 [0277.700] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x496ce8f2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x496ce8f2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49714ee8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.700] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13d93484, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13d93484, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1425801e, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1 [0277.701] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.701] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0277.701] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5707d0) returned 1 [0277.701] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.702] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.702] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0277.702] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.702] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.702] GetLastError () returned 0x0 [0277.702] GetLastError () returned 0x0 [0277.702] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.702] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\is\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.704] WriteFile (in: hFile=0x250, lpBuffer=0x23e38f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e38f4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.705] SetEndOfFile (hFile=0x250) returned 1 [0277.705] CloseHandle (hObject=0x250) returned 1 [0277.706] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.706] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.707] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0277.707] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.707] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.715] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.715] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.715] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.715] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.715] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.716] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.716] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.716] CryptDestroyKey (hKey=0x55e210) returned 1 [0277.716] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0277.716] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\is\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13d93484, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1425801e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49714ee8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0277.716] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13d93484, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1425801e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49714ee8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.716] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1425801e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1425801e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x146118b3, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x152c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.716] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49714ee8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49714ee8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49714ee8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.717] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49714ee8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49714ee8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49714ee8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.717] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0277.717] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x146118b3, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x146118b3, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x14a89f12, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="it", cAlternateFileName="")) returned 1 [0277.717] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.717] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.717] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.717] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.717] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0277.718] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.718] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.718] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0277.718] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.718] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.718] GetLastError () returned 0x0 [0277.718] GetLastError () returned 0x0 [0277.718] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.719] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\it\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.720] WriteFile (in: hFile=0x250, lpBuffer=0x23e3934*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3934*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.721] SetEndOfFile (hFile=0x250) returned 1 [0277.722] CloseHandle (hObject=0x250) returned 1 [0277.722] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.723] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.723] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.724] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.724] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.724] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.724] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.724] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.724] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.725] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.725] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.725] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.725] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.725] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.726] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.726] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0277.726] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0277.726] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\it\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x146118b3, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x14a89f12, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x497434f3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.726] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x146118b3, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x14a89f12, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x497434f3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.726] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a89f12, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x14a89f12, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x151d75c6, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.726] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497434f3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x497434f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x497434f3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.726] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497434f3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x497434f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x497434f3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.727] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.727] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x153086e5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x153086e5, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x158d8246, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ja", cAlternateFileName="")) returned 1 [0277.727] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.727] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.727] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.727] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.727] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570968) returned 1 [0277.728] CryptCreateHash (in: hProv=0x570968, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.728] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.728] CryptDeriveKey (in: hProv=0x570968, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0277.728] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.728] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.728] GetLastError () returned 0x0 [0277.728] GetLastError () returned 0x0 [0277.728] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.729] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ja\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.730] WriteFile (in: hFile=0x250, lpBuffer=0x23e3974*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3974*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.731] SetEndOfFile (hFile=0x250) returned 1 [0277.731] CloseHandle (hObject=0x250) returned 1 [0277.731] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.732] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.732] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.732] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.732] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0277.733] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.733] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.733] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.733] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.734] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.734] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.734] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.734] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.735] CryptDestroyKey (hKey=0x55e650) returned 1 [0277.735] CryptReleaseContext (hProv=0x570968, dwFlags=0x0) returned 1 [0277.735] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ja\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x153086e5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x158d8246, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4976122b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0277.735] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x153086e5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x158d8246, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4976122b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.735] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x158d8246, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x158d8246, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x15bf948f, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0xfcc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.735] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4976122b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4976122b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4976122b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.735] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4976122b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4976122b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4976122b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.735] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0277.735] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15e0f45b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x15e0f45b, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1610a43c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ka", cAlternateFileName="")) returned 1 [0277.735] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.735] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.736] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.736] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0277.736] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0277.737] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.737] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.737] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0277.737] CryptDestroyHash (hHash=0x55e210) returned 1 [0277.737] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.737] GetLastError () returned 0x0 [0277.737] GetLastError () returned 0x0 [0277.737] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.737] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ka\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.738] WriteFile (in: hFile=0x250, lpBuffer=0x23e39b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e39b4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.742] SetEndOfFile (hFile=0x250) returned 1 [0277.742] CloseHandle (hObject=0x250) returned 1 [0277.742] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.743] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.743] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.743] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.744] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.744] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0277.744] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.744] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.744] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.744] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.744] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.744] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.745] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.745] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.745] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.745] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.745] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.746] CryptDestroyKey (hKey=0x55e910) returned 1 [0277.746] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0277.746] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ka\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15e0f45b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1610a43c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4976122b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.746] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15e0f45b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1610a43c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4976122b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.746] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1610a43c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1610a43c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x16392bdd, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.746] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4976122b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4976122b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49787774, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.746] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4976122b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4976122b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49787774, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.746] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.746] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16582b22, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x16582b22, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x169161d2, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kk", cAlternateFileName="")) returned 1 [0277.746] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.746] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.747] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.747] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.747] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571490) returned 1 [0277.747] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.747] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.747] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0277.748] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.748] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.748] GetLastError () returned 0x0 [0277.748] GetLastError () returned 0x0 [0277.748] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.748] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kk\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.750] WriteFile (in: hFile=0x250, lpBuffer=0x23e39f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e39f4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.751] SetEndOfFile (hFile=0x250) returned 1 [0277.751] CloseHandle (hObject=0x250) returned 1 [0277.751] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.752] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.752] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.752] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.752] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.752] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.752] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.752] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.753] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.753] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.753] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.753] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.753] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.754] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.754] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.754] CryptDestroyKey (hKey=0x55e190) returned 1 [0277.754] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0277.754] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16582b22, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x169161d2, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49787774, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.755] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16582b22, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x169161d2, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49787774, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.755] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x169161d2, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x169161d2, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x17206ef6, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.755] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49787774, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49787774, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49787774, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.755] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49787774, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49787774, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49787774, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.755] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.755] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x173aa99c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x173aa99c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x17f23e2a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="km-kh", cAlternateFileName="")) returned 1 [0277.756] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.756] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.756] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.756] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.756] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.756] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.756] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0277.757] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.757] CryptHashData (hHash=0x55e390, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.757] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0277.757] CryptDestroyHash (hHash=0x55e390) returned 1 [0277.757] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.757] GetLastError () returned 0x0 [0277.757] GetLastError () returned 0x0 [0277.757] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.757] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\km-kh\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.758] WriteFile (in: hFile=0x250, lpBuffer=0x23e3a34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a34*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.760] SetEndOfFile (hFile=0x250) returned 1 [0277.760] CloseHandle (hObject=0x250) returned 1 [0277.760] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.761] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.761] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0277.761] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.762] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.762] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.762] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.762] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.762] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.763] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.763] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.763] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.763] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.763] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.763] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.763] CryptDestroyKey (hKey=0x55e290) returned 1 [0277.763] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0277.763] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\km-kh\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x173aa99c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x17f23e2a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x497ada99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.764] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x173aa99c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x17f23e2a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x497ada99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.764] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17f23e2a, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x17f23e2a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x189de896, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.764] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497ada99, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x497ada99, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x497ada99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.764] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497ada99, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x497ada99, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x497ada99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.764] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.764] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18b820b8, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x18b820b8, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1989ef6a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kn", cAlternateFileName="")) returned 1 [0277.764] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.764] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.764] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.764] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.764] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.764] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0277.764] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5712f8) returned 1 [0277.765] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.765] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.765] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0277.765] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.765] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.765] GetLastError () returned 0x0 [0277.765] GetLastError () returned 0x0 [0277.765] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.766] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kn\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kn\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.767] WriteFile (in: hFile=0x250, lpBuffer=0x23e3a74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a74*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.768] SetEndOfFile (hFile=0x250) returned 1 [0277.768] CloseHandle (hObject=0x250) returned 1 [0277.768] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.769] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.769] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.769] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.769] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0277.770] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.770] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.770] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.770] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.770] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.770] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.770] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.770] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.770] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.771] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.772] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.772] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.772] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.775] CryptDestroyKey (hKey=0x55e910) returned 1 [0277.775] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0277.776] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kn\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18b820b8, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1989ef6a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x497ada99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.776] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18b820b8, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1989ef6a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x497ada99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.776] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1989ef6a, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1989ef6a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1a464b30, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x172c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.776] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497ada99, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x497ada99, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x497ada99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.776] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497ada99, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x497ada99, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x497ada99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.776] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.776] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a48ae1d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1a48ae1d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1a7abf56, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ko", cAlternateFileName="")) returned 1 [0277.776] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.776] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.776] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.776] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.776] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.776] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.777] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570d20) returned 1 [0277.777] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.777] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.777] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0277.777] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.777] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.777] GetLastError () returned 0x0 [0277.777] GetLastError () returned 0x0 [0277.777] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.778] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ko\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ko\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.779] WriteFile (in: hFile=0x250, lpBuffer=0x23e3ab4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ab4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.780] SetEndOfFile (hFile=0x250) returned 1 [0277.780] CloseHandle (hObject=0x250) returned 1 [0277.780] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.781] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.781] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.782] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.782] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.782] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.782] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.782] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.783] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.783] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.783] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.783] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.783] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.783] CryptDestroyKey (hKey=0x55e910) returned 1 [0277.783] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0277.783] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ko\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ko\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a48ae1d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1a7abf56, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x497d3a02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0277.784] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a48ae1d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1a7abf56, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x497d3a02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.784] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7abf56, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1a7abf56, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1a94f788, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0xf2c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.784] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497d3a02, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x497d3a02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x497d3a02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.784] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497d3a02, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x497d3a02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x497d3a02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.784] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.784] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a975942, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1a975942, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1ac24464, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kok", cAlternateFileName="")) returned 1 [0277.784] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.784] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.784] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.784] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.784] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.784] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.785] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0277.785] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.785] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.785] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0277.785] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.785] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.785] GetLastError () returned 0x0 [0277.785] GetLastError () returned 0x0 [0277.786] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.786] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kok\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kok\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.789] WriteFile (in: hFile=0x250, lpBuffer=0x23e3af4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3af4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.790] SetEndOfFile (hFile=0x250) returned 1 [0277.790] CloseHandle (hObject=0x250) returned 1 [0277.790] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.791] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.791] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0277.791] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.792] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.792] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.792] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.792] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.792] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.793] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.793] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.793] CryptDestroyKey (hKey=0x55e910) returned 1 [0277.793] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0277.793] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kok\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kok\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a975942, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1ac24464, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x497f9c8c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0277.793] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a975942, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1ac24464, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x497f9c8c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.793] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ac24464, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1ac24464, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1ad092fa, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.793] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497f9c8c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x497f9c8c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x497f9c8c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.793] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497f9c8c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x497f9c8c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x497f9c8c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.794] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.794] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ae142b4, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1ae142b4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b1a7cae, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ku-arab", cAlternateFileName="")) returned 1 [0277.794] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.794] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.794] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.794] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.794] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.794] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0277.794] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0277.795] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.795] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.795] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0277.795] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.795] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.795] GetLastError () returned 0x0 [0277.795] GetLastError () returned 0x0 [0277.795] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.795] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ku-arab\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ku-arab\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.796] WriteFile (in: hFile=0x250, lpBuffer=0x23e3b34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3b34*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.797] SetEndOfFile (hFile=0x250) returned 1 [0277.797] CloseHandle (hObject=0x250) returned 1 [0277.800] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.801] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.801] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0277.802] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.802] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.802] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.802] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.803] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.803] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.803] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.803] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.803] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.803] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.804] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.804] CryptDestroyKey (hKey=0x55e190) returned 1 [0277.804] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0277.804] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ku-arab\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ku-arab\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ae142b4, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b1a7cae, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x497f9c8c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0277.804] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ae142b4, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b1a7cae, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x497f9c8c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.804] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b1a7cae, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b1a7cae, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b2b2bd5, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x15cc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.804] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497f9c8c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x497f9c8c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x497f9c8c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.804] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497f9c8c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x497f9c8c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x497f9c8c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.804] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0277.804] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b37172b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b37172b, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b587918, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ky", cAlternateFileName="")) returned 1 [0277.805] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.805] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.805] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.805] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.805] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0277.805] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.806] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.806] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0277.806] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.806] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.806] GetLastError () returned 0x0 [0277.806] GetLastError () returned 0x0 [0277.806] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.806] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ky\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ky\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.807] WriteFile (in: hFile=0x250, lpBuffer=0x23e3b74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3b74*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.808] SetEndOfFile (hFile=0x250) returned 1 [0277.808] CloseHandle (hObject=0x250) returned 1 [0277.809] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.809] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.809] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.810] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.810] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.810] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.810] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.810] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.810] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.810] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.810] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.810] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.810] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.811] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.811] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.811] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.811] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.811] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.812] CryptDestroyKey (hKey=0x55e610) returned 1 [0277.812] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0277.812] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ky\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ky\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b37172b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b587918, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4981ff00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0277.812] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b37172b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b587918, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4981ff00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.812] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b587918, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b587918, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b6464e2, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.812] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4981ff00, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4981ff00, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4981ff00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.812] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4981ff00, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4981ff00, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4981ff00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.812] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0277.812] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6464e2, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6464e2, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b91b09f, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="lb-lu", cAlternateFileName="")) returned 1 [0277.813] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.813] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.813] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.813] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.813] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0277.814] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.814] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.814] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0277.814] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.814] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.814] GetLastError () returned 0x0 [0277.814] GetLastError () returned 0x0 [0277.814] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.815] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\lb-lu\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\lb-lu\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.816] WriteFile (in: hFile=0x250, lpBuffer=0x23e3bb4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3bb4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.817] SetEndOfFile (hFile=0x250) returned 1 [0277.817] CloseHandle (hObject=0x250) returned 1 [0277.817] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.818] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.818] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0277.818] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.819] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.819] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.819] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.819] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.819] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.820] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.820] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.820] CryptDestroyKey (hKey=0x55e290) returned 1 [0277.820] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0277.820] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\lb-lu\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\lb-lu\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6464e2, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b91b09f, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4981ff00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.820] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6464e2, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b91b09f, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4981ff00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.820] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b91b09f, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b91b09f, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1bf10fb1, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.821] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4981ff00, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4981ff00, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4981ff00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.821] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4981ff00, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4981ff00, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4981ff00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.821] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.821] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4ba8d9, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1c4ba8d9, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1c5eb9fa, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="lt", cAlternateFileName="")) returned 1 [0277.821] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.821] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.821] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.821] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0277.821] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0277.822] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.822] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.822] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0277.822] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.822] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.822] GetLastError () returned 0x0 [0277.822] GetLastError () returned 0x0 [0277.822] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.823] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\lt\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\lt\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.826] WriteFile (in: hFile=0x250, lpBuffer=0x23e3bf4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3bf4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.828] SetEndOfFile (hFile=0x250) returned 1 [0277.828] CloseHandle (hObject=0x250) returned 1 [0277.828] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.828] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.829] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0277.829] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.829] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.829] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.830] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.830] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.830] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.830] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.830] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.831] CryptDestroyKey (hKey=0x55e650) returned 1 [0277.831] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0277.831] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\lt\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\lt\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4ba8d9, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1c5eb9fa, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49846340, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0277.831] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1c4ba8d9, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1c5eb9fa, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49846340, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.831] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c5eb9fa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1c5eb9fa, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1df1a8aa, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.831] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49846340, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49846340, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49846340, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.831] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49846340, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49846340, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49846340, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.831] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.831] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x246849d3, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x246849d3, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x29b4e321, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="lv", cAlternateFileName="")) returned 1 [0277.831] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.831] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.832] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.832] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.832] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5706c0) returned 1 [0277.832] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.832] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.832] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e310) returned 1 [0277.832] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.832] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.832] GetLastError () returned 0x0 [0277.832] GetLastError () returned 0x0 [0277.833] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.833] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\lv\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\lv\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.834] WriteFile (in: hFile=0x250, lpBuffer=0x23e3c34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c34*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.835] SetEndOfFile (hFile=0x250) returned 1 [0277.835] CloseHandle (hObject=0x250) returned 1 [0277.835] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.836] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.836] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.837] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.837] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.837] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.837] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.837] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.843] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.843] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.843] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.844] CryptDestroyKey (hKey=0x55e310) returned 1 [0277.844] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0277.844] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\lv\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\lv\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x246849d3, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x29b4e321, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4986c358, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0277.844] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x246849d3, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x29b4e321, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4986c358, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.844] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b4e321, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x29b4e321, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2b646bb1, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.844] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4986c358, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4986c358, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4986c358, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.844] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4986c358, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4986c358, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4986c358, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.844] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.844] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x246849d3, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x246849d3, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x29b4e321, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="lv", cAlternateFileName="")) returned 0 [0277.844] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0277.844] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf111177, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x2f656e02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2f656e02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="17.3.5892.0626_2", cAlternateFileName="173589~3.062")) returned 1 [0277.844] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.844] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.845] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.845] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.845] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0277.845] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0277.845] CryptHashData (hHash=0x55e7d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.845] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0277.846] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0277.846] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0277.846] GetLastError () returned 0x0 [0277.846] GetLastError () returned 0x0 [0277.846] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.846] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0277.847] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.848] SetEndOfFile (hFile=0x24c) returned 1 [0277.848] CloseHandle (hObject=0x24c) returned 1 [0277.848] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.851] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.851] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.851] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.851] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0277.852] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.852] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.852] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.853] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.853] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.853] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.853] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.853] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.854] CryptDestroyKey (hKey=0x55e910) returned 1 [0277.854] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0277.854] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf111177, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x2f656e02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4986c358, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0277.854] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf111177, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x2f656e02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4986c358, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.854] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4283f4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2c4283f4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2c4283f4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AUTOPL~1.CRY")) returned 1 [0277.854] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4283f4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2c4283f4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2c4c0d41, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AUTOPL~2.CRY")) returned 1 [0277.854] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4e6f76, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2c4e6f76, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2c4e6f76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AUTOPL~3.CRY")) returned 1 [0277.854] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4e6f76, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2c4e6f76, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2c50d08c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="COLLEC~1.CRY")) returned 1 [0277.854] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c50d08c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2c50d08c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2c533356, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ETWLOG~1.CRY")) returned 1 [0277.854] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42ba1e4, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe42ba1e4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xe7c64fd5, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ExclusionList.xml", cAlternateFileName="EXCLUS~1.XML")) returned 1 [0277.854] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c533356, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2c533356, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2c57f73b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~1.CRY")) returned 1 [0277.854] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c57f73b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2c57f73b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2c87a7b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~2.CRY")) returned 1 [0277.854] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c8c703c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2c8c703c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2c9131b3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x362c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSyncApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~3.CRY")) returned 1 [0277.854] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c9131b3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2c9131b3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2cbb6e4e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSyncClient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~4.CRY")) returned 1 [0277.855] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcbbde9d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfcbbde9d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfd2fec9b, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x238c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSyncConfig.exe", cAlternateFileName="FILESY~1.EXE")) returned 1 [0277.855] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc036ef, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2cc036ef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ce3fa23, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1464c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSyncSessions.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FI7343~1.CRY")) returned 1 [0277.855] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ce3fa23, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ce3fa23, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2d055b67, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x182cc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSyncShell.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FIF3B5~1.CRY")) returned 1 [0277.855] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4986c358, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4986c358, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4986c358, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.855] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2538864, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd2538864, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xd779fe38, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1 [0277.855] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.855] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.855] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.855] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0277.855] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571518) returned 1 [0277.856] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.856] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.856] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0277.856] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0277.856] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.856] GetLastError () returned 0x0 [0277.856] GetLastError () returned 0x0 [0277.856] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.857] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\is\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\is\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.858] WriteFile (in: hFile=0x250, lpBuffer=0x23e3c84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c84*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.859] SetEndOfFile (hFile=0x250) returned 1 [0277.863] CloseHandle (hObject=0x250) returned 1 [0277.864] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.865] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.865] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.865] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.865] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0277.865] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.865] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.865] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.865] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.866] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.866] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.866] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.866] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.866] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.866] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.866] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.866] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.866] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.866] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.866] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0277.866] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.866] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.867] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.867] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.867] CryptDestroyKey (hKey=0x55e910) returned 1 [0277.867] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0277.867] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\is\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\is\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2538864, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd779fe38, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49892ab9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0277.867] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2538864, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd779fe38, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49892ab9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.867] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd779fe38, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd779fe38, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xda79b1fb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x152c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.867] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49892ab9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49892ab9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49892ab9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.867] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49892ab9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49892ab9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49892ab9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.867] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0277.867] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdab2e911, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdab2e911, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbda8c94, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="it", cAlternateFileName="")) returned 1 [0277.868] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.868] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.868] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.868] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.868] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0277.869] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.869] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.869] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0277.869] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.869] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.869] GetLastError () returned 0x0 [0277.869] GetLastError () returned 0x0 [0277.869] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.869] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\it\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\it\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.871] WriteFile (in: hFile=0x250, lpBuffer=0x23e3cc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3cc4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.872] SetEndOfFile (hFile=0x250) returned 1 [0277.872] CloseHandle (hObject=0x250) returned 1 [0277.872] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.873] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.873] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.874] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.874] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.874] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.874] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.874] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.875] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.875] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.875] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.875] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.875] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.875] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.875] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.875] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.875] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.875] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.875] CryptDestroyKey (hKey=0x55e610) returned 1 [0277.875] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0277.875] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\it\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\it\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdab2e911, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbda8c94, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x498b884d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0277.876] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdab2e911, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbda8c94, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x498b884d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.876] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbda8c94, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbda8c94, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdce33339, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.876] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498b884d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x498b884d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x498b884d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.876] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498b884d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x498b884d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x498b884d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.876] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0277.876] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe210ce16, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xe210ce16, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xec58f0d9, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ja", cAlternateFileName="")) returned 1 [0277.876] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.876] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.876] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.876] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.876] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570748) returned 1 [0277.877] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.877] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.877] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0277.877] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.877] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.877] GetLastError () returned 0x0 [0277.877] GetLastError () returned 0x0 [0277.877] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.878] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ja\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ja\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.879] WriteFile (in: hFile=0x250, lpBuffer=0x23e3d04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3d04*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.881] SetEndOfFile (hFile=0x250) returned 1 [0277.882] CloseHandle (hObject=0x250) returned 1 [0277.882] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.883] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.883] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.884] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.884] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0277.885] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.885] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.886] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.887] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.887] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.887] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.888] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.888] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.888] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.888] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.888] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.889] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0277.889] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0277.890] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ja\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ja\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe210ce16, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xec58f0d9, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x498b884d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0277.890] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe210ce16, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xec58f0d9, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x498b884d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.890] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec58f0d9, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xec58f0d9, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xec9e1598, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0xfcc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.890] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498b884d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x498b884d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x498deac4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.890] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498b884d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x498b884d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x498deac4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.890] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.890] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf187d5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xecf187d5, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xed5cd1ea, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ka", cAlternateFileName="")) returned 1 [0277.891] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.891] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.891] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.891] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0277.891] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5710d8) returned 1 [0277.892] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.892] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.892] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0277.892] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.892] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.892] GetLastError () returned 0x0 [0277.892] GetLastError () returned 0x0 [0277.892] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.893] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ka\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ka\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.894] WriteFile (in: hFile=0x250, lpBuffer=0x23e3d44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3d44*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.895] SetEndOfFile (hFile=0x250) returned 1 [0277.895] CloseHandle (hObject=0x250) returned 1 [0277.895] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.897] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.897] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.897] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.897] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0277.897] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.898] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.898] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.898] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.898] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.898] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.898] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.898] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.898] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.899] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.899] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.899] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.899] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.900] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0277.900] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0277.900] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ka\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ka\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf187d5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xed5cd1ea, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x498deac4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0277.900] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf187d5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xed5cd1ea, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x498deac4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.900] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5cd1ea, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xed5cd1ea, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xeda459b8, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.900] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498deac4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x498deac4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x498deac4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.900] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x498deac4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x498deac4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x498deac4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.900] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0277.901] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedade28a, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xedade28a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xede4b9d3, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kk", cAlternateFileName="")) returned 1 [0277.901] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.901] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.901] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.901] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.901] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5708e0) returned 1 [0277.902] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.902] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.902] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e390) returned 1 [0277.902] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.903] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.903] GetLastError () returned 0x0 [0277.903] GetLastError () returned 0x0 [0277.903] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.903] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\kk\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\kk\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.904] WriteFile (in: hFile=0x250, lpBuffer=0x23e3d84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3d84*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.906] SetEndOfFile (hFile=0x250) returned 1 [0277.906] CloseHandle (hObject=0x250) returned 1 [0277.906] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.907] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.907] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.908] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.908] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.908] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.908] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.908] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.909] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.909] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.909] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.909] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.909] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.909] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.909] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.910] CryptDestroyKey (hKey=0x55e390) returned 1 [0277.910] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0277.910] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\kk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\kk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedade28a, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xede4b9d3, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49905da0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0277.910] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedade28a, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xede4b9d3, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49905da0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.910] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede4b9d3, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xede4b9d3, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xee29dc95, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.910] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49905da0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49905da0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49905da0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.910] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49905da0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49905da0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49905da0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.910] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.911] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee3f513b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xee3f513b, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xeea3742a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="km-kh", cAlternateFileName="")) returned 1 [0277.911] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.911] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.911] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.911] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.912] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0277.913] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.913] CryptHashData (hHash=0x55e7d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.913] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0277.913] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0277.913] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.913] GetLastError () returned 0x0 [0277.913] GetLastError () returned 0x0 [0277.913] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.914] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\km-kh\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\km-kh\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.916] WriteFile (in: hFile=0x250, lpBuffer=0x23e3dc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3dc4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.917] SetEndOfFile (hFile=0x250) returned 1 [0277.918] CloseHandle (hObject=0x250) returned 1 [0277.918] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.919] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.919] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.919] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.919] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0277.919] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.920] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.920] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.920] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.920] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.920] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.921] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.921] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.921] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.921] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.921] CryptDestroyKey (hKey=0x55e210) returned 1 [0277.921] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0277.921] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\km-kh\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\km-kh\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee3f513b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xeea3742a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4992aea3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0277.921] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee3f513b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xeea3742a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4992aea3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.921] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea3742a, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xeea3742a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xef0c5c11, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.922] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4992aea3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4992aea3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4992aea3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.922] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4992aea3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4992aea3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4992aea3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.922] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0277.922] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef1846bf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xef1846bf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf0497564, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kn", cAlternateFileName="")) returned 1 [0277.922] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.922] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.922] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.922] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.922] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.922] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0277.922] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570858) returned 1 [0277.923] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.923] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.923] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0277.923] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0277.923] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.923] GetLastError () returned 0x0 [0277.923] GetLastError () returned 0x0 [0277.924] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.924] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\kn\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\kn\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.925] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e04*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.927] SetEndOfFile (hFile=0x250) returned 1 [0277.927] CloseHandle (hObject=0x250) returned 1 [0277.927] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.928] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.928] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.928] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.928] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0277.929] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.929] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.929] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.929] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.929] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.930] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.930] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.930] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.930] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.930] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.930] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.930] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.931] CryptDestroyKey (hKey=0x55e910) returned 1 [0277.931] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0277.931] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\kn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\kn\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef1846bf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf0497564, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4992aea3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0277.931] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef1846bf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf0497564, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4992aea3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.931] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0497564, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf0497564, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf0dfa874, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x172c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.931] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4992aea3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4992aea3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4992aea3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.931] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4992aea3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4992aea3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4992aea3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.931] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.931] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e933a5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf0e933a5, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf1bfc6d0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ko", cAlternateFileName="")) returned 1 [0277.931] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.931] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.932] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.932] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.932] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0277.932] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.932] CryptHashData (hHash=0x55e390, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.933] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0277.933] CryptDestroyHash (hHash=0x55e390) returned 1 [0277.933] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.933] GetLastError () returned 0x0 [0277.933] GetLastError () returned 0x0 [0277.933] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.934] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ko\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ko\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.934] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e44*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.936] SetEndOfFile (hFile=0x250) returned 1 [0277.936] CloseHandle (hObject=0x250) returned 1 [0277.936] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.937] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.937] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.937] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.937] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.937] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.938] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.938] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.938] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.938] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.939] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.939] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.939] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.939] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.940] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.940] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.940] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0277.941] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0277.941] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ko\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ko\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e933a5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1bfc6d0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4995117a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0277.941] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e933a5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1bfc6d0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4995117a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.941] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bfc6d0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1bfc6d0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf1f43a35, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0xf2c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.941] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4995117a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4995117a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4995117a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.941] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4995117a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4995117a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4995117a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.941] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0277.941] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2002503, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf2002503, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf223ea69, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kok", cAlternateFileName="")) returned 1 [0277.941] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.941] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.942] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.942] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.942] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0277.942] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.942] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.943] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0277.943] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.943] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.943] GetLastError () returned 0x0 [0277.943] GetLastError () returned 0x0 [0277.943] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.944] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\kok\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\kok\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.945] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e84*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.946] SetEndOfFile (hFile=0x250) returned 1 [0277.946] CloseHandle (hObject=0x250) returned 1 [0277.946] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.947] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.947] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.947] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.948] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0277.948] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.948] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.948] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.948] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.949] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.949] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.949] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.949] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.949] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.950] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.950] CryptDestroyKey (hKey=0x55e610) returned 1 [0277.950] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0277.950] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\kok\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\kok\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2002503, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf223ea69, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x499774da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0277.950] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2002503, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf223ea69, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x499774da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.950] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf223ea69, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf223ea69, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf24ed57a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.950] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499774da, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x499774da, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x499774da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.950] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499774da, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x499774da, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x499774da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.950] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0277.950] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf25ac394, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf25ac394, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf5b19f9c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ku-arab", cAlternateFileName="")) returned 1 [0277.951] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.951] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.951] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.951] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0277.951] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0277.952] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.952] CryptHashData (hHash=0x55e290, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.952] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0277.952] CryptDestroyHash (hHash=0x55e290) returned 1 [0277.952] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.952] GetLastError () returned 0x0 [0277.952] GetLastError () returned 0x0 [0277.952] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.953] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ku-arab\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ku-arab\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.955] WriteFile (in: hFile=0x250, lpBuffer=0x23e3ec4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ec4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.956] SetEndOfFile (hFile=0x250) returned 1 [0277.957] CloseHandle (hObject=0x250) returned 1 [0277.957] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.957] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.957] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.958] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.958] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.958] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.958] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0277.958] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.959] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.959] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.959] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.959] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.960] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.960] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.960] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.960] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0277.960] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0277.960] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ku-arab\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ku-arab\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf25ac394, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf5b19f9c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x499774da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0277.961] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf25ac394, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf5b19f9c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x499774da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.961] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5b19f9c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf5b19f9c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf5d3009a, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x15cc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.961] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499774da, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x499774da, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x499774da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.961] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499774da, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x499774da, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x499774da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.961] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0277.961] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf79de4ea, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf79de4ea, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf8282d8b, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ky", cAlternateFileName="")) returned 1 [0277.961] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.961] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.961] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.961] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.962] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0277.962] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.962] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.962] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0277.962] CryptDestroyHash (hHash=0x55e910) returned 1 [0277.962] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.962] GetLastError () returned 0x0 [0277.962] GetLastError () returned 0x0 [0277.962] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.963] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ky\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ky\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.964] WriteFile (in: hFile=0x250, lpBuffer=0x23e3f04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f04*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.965] SetEndOfFile (hFile=0x250) returned 1 [0277.965] CloseHandle (hObject=0x250) returned 1 [0277.965] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.966] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.966] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.966] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.966] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.966] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.966] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.967] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.967] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.967] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.967] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.967] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.968] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.971] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.971] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.971] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.971] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.971] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.971] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.971] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0277.971] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0277.971] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ky\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ky\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf79de4ea, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf8282d8b, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4999d6a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0277.972] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf79de4ea, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf8282d8b, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4999d6a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.972] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8282d8b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf8282d8b, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf8878a7e, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.972] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4999d6a3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4999d6a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4999d6a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.972] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4999d6a3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4999d6a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4999d6a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.972] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0277.972] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf89aa04e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf89aa04e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf90f72a6, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="lb-lu", cAlternateFileName="")) returned 1 [0277.972] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.972] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.972] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.972] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.972] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0277.973] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570eb8) returned 1 [0277.973] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.973] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.973] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0277.973] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.973] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.973] GetLastError () returned 0x0 [0277.973] GetLastError () returned 0x0 [0277.974] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.974] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\lb-lu\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\lb-lu\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.976] WriteFile (in: hFile=0x250, lpBuffer=0x23e3f44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f44*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.977] SetEndOfFile (hFile=0x250) returned 1 [0277.977] CloseHandle (hObject=0x250) returned 1 [0277.977] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.978] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.978] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0277.978] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.978] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.979] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.979] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.979] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.979] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.979] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.980] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.980] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.980] CryptDestroyKey (hKey=0x55e910) returned 1 [0277.980] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0277.980] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\lb-lu\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\lb-lu\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf89aa04e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf90f72a6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x499c3d60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0277.980] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf89aa04e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf90f72a6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x499c3d60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.980] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf90f72a6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf90f72a6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xf9608373, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.980] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499c3d60, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x499c3d60, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x499c3d60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.980] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499c3d60, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x499c3d60, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x499c3d60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.980] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0277.980] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0a1f10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2d0a1f10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2d0ee558, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LoggingPlatform.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="LOGGIN~1.CRY")) returned 1 [0277.981] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9739439, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf9739439, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfa977fad, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="lt", cAlternateFileName="")) returned 1 [0277.981] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.981] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.981] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.981] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0277.981] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0277.982] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.982] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.982] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0277.982] CryptDestroyHash (hHash=0x55e210) returned 1 [0277.982] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.982] GetLastError () returned 0x0 [0277.982] GetLastError () returned 0x0 [0277.982] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.982] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\lt\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\lt\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.983] WriteFile (in: hFile=0x250, lpBuffer=0x23e3f84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f84*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.984] SetEndOfFile (hFile=0x250) returned 1 [0277.985] CloseHandle (hObject=0x250) returned 1 [0277.985] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.986] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.986] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0277.986] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.987] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.987] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.987] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.987] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.987] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.988] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.988] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.988] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0277.988] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0277.988] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\lt\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\lt\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9739439, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfa977fad, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x499c3d60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0277.988] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9739439, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfa977fad, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x499c3d60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0277.988] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa977fad, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfa977fad, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfaefb782, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0277.988] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499c3d60, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x499c3d60, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x499c3d60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0277.988] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499c3d60, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x499c3d60, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x499c3d60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0277.989] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0277.989] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb006851, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb006851, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfb3017e0, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="lv", cAlternateFileName="")) returned 1 [0277.989] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0277.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0277.989] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0277.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0277.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0277.989] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570d20) returned 1 [0277.992] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0277.992] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0277.992] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0277.992] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0277.992] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0277.992] GetLastError () returned 0x0 [0277.992] GetLastError () returned 0x0 [0277.992] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0277.993] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\lv\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\lv\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0277.994] WriteFile (in: hFile=0x250, lpBuffer=0x23e3fc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3fc4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0277.996] SetEndOfFile (hFile=0x250) returned 1 [0277.996] CloseHandle (hObject=0x250) returned 1 [0277.996] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0277.997] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0277.997] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0277.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0277.997] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.998] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0277.998] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0277.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.998] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.998] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0277.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0277.998] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0277.999] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0277.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0277.999] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0277.999] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0277.999] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0277.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.000] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.000] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0278.000] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\lv\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\lv\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb006851, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb3017e0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x499e9b79, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.000] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb006851, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb3017e0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x499e9b79, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.000] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb3017e0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb3017e0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfb622788, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.000] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499e9b79, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x499e9b79, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x499e9b79, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.000] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499e9b79, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x499e9b79, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x499e9b79, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.000] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.001] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb969ac6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb969ac6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfbe2e789, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mi-nz", cAlternateFileName="")) returned 1 [0278.001] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.001] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.001] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.001] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.001] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.001] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.001] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c10) returned 1 [0278.002] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.002] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.002] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.002] CryptDestroyHash (hHash=0x55e310) returned 1 [0278.002] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.002] GetLastError () returned 0x0 [0278.002] GetLastError () returned 0x0 [0278.002] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.003] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mi-nz\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mi-nz\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.004] WriteFile (in: hFile=0x250, lpBuffer=0x23e5d0c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e5d0c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.008] SetEndOfFile (hFile=0x250) returned 1 [0278.008] CloseHandle (hObject=0x250) returned 1 [0278.008] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.008] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.008] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.008] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.008] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.008] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.008] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.009] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.009] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.009] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.009] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.009] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.009] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.009] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.009] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.009] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.009] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.009] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.009] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.009] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.010] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0278.010] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.010] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.010] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.010] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.010] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.010] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.010] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0278.010] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mi-nz\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mi-nz\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb969ac6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfbe2e789, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x499e9b79, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0278.010] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb969ac6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfbe2e789, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x499e9b79, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.011] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe2e789, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfbe2e789, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfbfd20c1, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.011] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499e9b79, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x499e9b79, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49a0fd55, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.011] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499e9b79, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x499e9b79, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49a0fd55, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.011] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0278.011] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc090d46, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc090d46, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfc2f31ae, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mk", cAlternateFileName="")) returned 1 [0278.011] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.011] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.011] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.011] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.011] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.011] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.011] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571408) returned 1 [0278.012] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.012] CryptHashData (hHash=0x55e7d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.012] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.012] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0278.012] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.012] GetLastError () returned 0x0 [0278.012] GetLastError () returned 0x0 [0278.012] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.013] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.013] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mk\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mk\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.014] WriteFile (in: hFile=0x250, lpBuffer=0x23e4014*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e4014*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.015] SetEndOfFile (hFile=0x250) returned 1 [0278.016] CloseHandle (hObject=0x250) returned 1 [0278.016] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.016] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.017] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.017] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.017] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.017] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.017] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.018] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.018] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.018] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.018] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.018] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.018] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.018] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.018] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.018] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.018] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.018] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.019] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.019] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0278.019] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.019] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.019] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.019] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.019] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.019] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.019] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0278.020] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc090d46, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc2f31ae, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49a0fd55, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0278.020] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc090d46, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc2f31ae, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49a0fd55, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.020] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2f31ae, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc2f31ae, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfc63a815, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x162c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.020] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a0fd55, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49a0fd55, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49a0fd55, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.020] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a0fd55, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49a0fd55, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49a0fd55, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.020] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0278.020] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc71f7fa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc71f7fa, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfcf9de36, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ml-in", cAlternateFileName="")) returned 1 [0278.020] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.020] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.021] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.021] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.021] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.021] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.021] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0278.022] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.022] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.022] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0278.022] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.022] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.022] GetLastError () returned 0x0 [0278.022] GetLastError () returned 0x0 [0278.022] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.023] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ml-in\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ml-in\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.024] WriteFile (in: hFile=0x250, lpBuffer=0x23e4034*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e4034*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.025] SetEndOfFile (hFile=0x250) returned 1 [0278.026] CloseHandle (hObject=0x250) returned 1 [0278.026] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.026] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.026] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.027] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.027] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.027] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.027] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.027] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.027] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.027] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.027] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.028] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.028] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.028] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.028] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.028] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.028] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.028] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.028] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.028] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.028] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.028] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.029] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.029] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.029] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.029] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.029] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.029] CryptDestroyKey (hKey=0x55e610) returned 1 [0278.029] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0278.029] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ml-in\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ml-in\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc71f7fa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfcf9de36, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49a36076, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.030] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc71f7fa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfcf9de36, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49a36076, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.030] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcf9de36, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfcf9de36, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfd4c8811, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x186c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.030] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a36076, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49a36076, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49a36076, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.030] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a36076, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49a36076, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49a36076, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.030] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.030] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd587570, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfd587570, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfe14cdcb, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mn", cAlternateFileName="")) returned 1 [0278.030] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.030] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.030] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.030] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.030] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.031] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570a78) returned 1 [0278.031] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.031] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.031] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.031] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.031] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.032] GetLastError () returned 0x0 [0278.032] GetLastError () returned 0x0 [0278.032] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.032] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mn\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mn\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.065] WriteFile (in: hFile=0x250, lpBuffer=0x23e52dc*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e52dc*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.067] SetEndOfFile (hFile=0x250) returned 1 [0278.067] CloseHandle (hObject=0x250) returned 1 [0278.067] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.068] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.069] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.069] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.069] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.070] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.070] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.070] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.070] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.070] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.070] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.070] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.070] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.070] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.070] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.070] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.070] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.071] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.071] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.071] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.071] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0278.071] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mn\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd587570, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe14cdcb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49a8291a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0278.071] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd587570, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe14cdcb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49a8291a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.071] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe14cdcb, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe14cdcb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfe388ff2, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.072] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a8291a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49a8291a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49a8291a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.072] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a8291a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49a8291a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49a8291a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.072] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0278.072] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe46dff5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe46dff5, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xfe683ed2, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mr", cAlternateFileName="")) returned 1 [0278.072] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.072] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.072] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.072] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.072] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0278.073] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.073] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.073] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0278.073] CryptDestroyHash (hHash=0x55e910) returned 1 [0278.073] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.073] GetLastError () returned 0x0 [0278.073] GetLastError () returned 0x0 [0278.073] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.074] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0278.075] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.075] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mr\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mr\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.077] WriteFile (in: hFile=0x250, lpBuffer=0x23e35f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e35f4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.078] SetEndOfFile (hFile=0x250) returned 1 [0278.078] CloseHandle (hObject=0x250) returned 1 [0278.078] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.079] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.079] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.079] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.079] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.080] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.080] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.080] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.080] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.080] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.080] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.080] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.080] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.080] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.080] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.081] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.081] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0278.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.081] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.081] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.081] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.081] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0278.081] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0278.081] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mr\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mr\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe46dff5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe683ed2, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49aa8f03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.082] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe46dff5, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe683ed2, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x49aa8f03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.082] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe683ed2, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe683ed2, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xff2499db, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x15cc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.082] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49aa8f03, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49aa8f03, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49aa8f03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.082] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49aa8f03, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49aa8f03, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49aa8f03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.082] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.085] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffc1f3cf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xffc1f3cf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xb4ba12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ms", cAlternateFileName="")) returned 1 [0278.085] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.085] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.085] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.086] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.086] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.086] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570858) returned 1 [0278.086] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.086] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.086] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0278.086] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.086] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.086] GetLastError () returned 0x0 [0278.087] GetLastError () returned 0x0 [0278.087] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.087] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ms\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ms\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.088] WriteFile (in: hFile=0x250, lpBuffer=0x23e3634*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3634*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.089] SetEndOfFile (hFile=0x250) returned 1 [0278.089] CloseHandle (hObject=0x250) returned 1 [0278.089] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.090] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.090] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.090] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.090] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.090] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.091] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.091] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.091] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.091] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.091] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.091] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.091] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.091] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.091] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.091] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.091] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.092] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.092] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.092] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.092] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.092] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0278.092] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.092] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.092] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.092] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.092] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.092] CryptDestroyKey (hKey=0x55e610) returned 1 [0278.092] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0278.093] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ms\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ms\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffc1f3cf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xb4ba12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49ace983, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.093] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffc1f3cf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xb4ba12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49ace983, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.093] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ba12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb4ba12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1a7e8c8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15cc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.093] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ace983, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49ace983, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49ace983, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.093] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ace983, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49ace983, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49ace983, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.093] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.093] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d13aa1b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2d13aa1b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2e76e76c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6f2a0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MSVCP1~1.CRY")) returned 1 [0278.093] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e7949da, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2e7949da, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ebe6e00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xed0a0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MSVCR1~1.CRY")) returned 1 [0278.093] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e38526, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1e38526, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2d4510a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mt-mt", cAlternateFileName="")) returned 1 [0278.093] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.093] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.093] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.093] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.093] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.094] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.094] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0278.094] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.094] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.094] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.094] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.094] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.094] GetLastError () returned 0x0 [0278.094] GetLastError () returned 0x0 [0278.094] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.095] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0278.096] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.096] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mt-mt\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mt-mt\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.097] WriteFile (in: hFile=0x250, lpBuffer=0x23e35f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e35f4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.098] SetEndOfFile (hFile=0x250) returned 1 [0278.098] CloseHandle (hObject=0x250) returned 1 [0278.098] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.099] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.099] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.110] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.110] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.110] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.110] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.110] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.110] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.110] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.110] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.111] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.111] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.111] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.111] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.111] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.111] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.111] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.111] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.111] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.111] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.111] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.112] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.112] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.112] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.112] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.112] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0278.112] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\mt-mt\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\mt-mt\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e38526, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x2d4510a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49ace983, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0278.113] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1e38526, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x2d4510a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49ace983, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.113] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d4510a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x2d4510a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x3bb95f5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.113] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ace983, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49ace983, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49ace983, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.113] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ace983, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49ace983, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49ace983, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.113] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0278.113] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f00a8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3f00a8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d8cca0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="nb-no", cAlternateFileName="")) returned 1 [0278.113] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.113] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.114] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.114] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.114] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.114] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571518) returned 1 [0278.115] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.115] CryptHashData (hHash=0x55e390, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.115] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.115] CryptDestroyHash (hHash=0x55e390) returned 1 [0278.115] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.115] GetLastError () returned 0x0 [0278.115] GetLastError () returned 0x0 [0278.115] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.116] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\nb-no\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\nb-no\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.118] WriteFile (in: hFile=0x250, lpBuffer=0x23e3604*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3604*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.119] SetEndOfFile (hFile=0x250) returned 1 [0278.119] CloseHandle (hObject=0x250) returned 1 [0278.119] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.120] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.120] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.121] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.121] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.121] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.121] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.121] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.122] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.122] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.122] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.122] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0278.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.123] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.123] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.123] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.123] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0278.123] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\nb-no\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\nb-no\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f00a8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d8cca0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49b1ad93, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.124] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f00a8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d8cca0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49b1ad93, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.124] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d8cca0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d8cca0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6d7e5c9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x14cc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.124] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b1ad93, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49b1ad93, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49b1ad93, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.124] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b1ad93, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49b1ad93, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49b1ad93, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.124] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.124] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a4f09e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x7a4f09e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x8fea519, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ne-np", cAlternateFileName="")) returned 1 [0278.124] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.124] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.124] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.124] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.124] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.125] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5708e0) returned 1 [0278.125] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.125] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.125] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0278.126] CryptDestroyHash (hHash=0x55e290) returned 1 [0278.126] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.126] GetLastError () returned 0x0 [0278.126] GetLastError () returned 0x0 [0278.126] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.127] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0278.127] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.128] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ne-np\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ne-np\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.129] WriteFile (in: hFile=0x250, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.132] SetEndOfFile (hFile=0x250) returned 1 [0278.132] CloseHandle (hObject=0x250) returned 1 [0278.133] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.133] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.134] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.134] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.134] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.134] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.134] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.134] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.135] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.135] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.135] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.135] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.135] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.135] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.135] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.135] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.135] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.135] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.135] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.136] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.136] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.136] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0278.136] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0278.136] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ne-np\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ne-np\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a4f09e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8fea519, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49b1ad93, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.137] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a4f09e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8fea519, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49b1ad93, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.137] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fea519, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8fea519, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9aa4e53, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.137] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b1ad93, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49b1ad93, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49b4108b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.137] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b1ad93, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49b1ad93, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49b4108b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.137] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.137] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0c0f2f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xa0c0f2f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xacd2f90, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="nl", cAlternateFileName="")) returned 1 [0278.137] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.137] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.137] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.137] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.138] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570d20) returned 1 [0278.138] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.138] CryptHashData (hHash=0x55e290, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.138] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.139] CryptDestroyHash (hHash=0x55e290) returned 1 [0278.139] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.139] GetLastError () returned 0x0 [0278.139] GetLastError () returned 0x0 [0278.139] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.139] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\nl\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\nl\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.141] WriteFile (in: hFile=0x250, lpBuffer=0x23e3594*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3594*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.142] SetEndOfFile (hFile=0x250) returned 1 [0278.143] CloseHandle (hObject=0x250) returned 1 [0278.143] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.144] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.144] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.144] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.144] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.144] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.145] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.145] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.145] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.145] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.145] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.146] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0278.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.147] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.147] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.148] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.148] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0278.148] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\nl\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\nl\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0c0f2f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xacd2f90, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49b4108b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.148] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0c0f2f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xacd2f90, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49b4108b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.148] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacd2f90, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xacd2f90, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb5515c4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.149] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b4108b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49b4108b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49b4108b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.149] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b4108b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49b4108b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49b4108b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.149] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.149] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5515c4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb5515c4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xbd5d4c4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="nn-no", cAlternateFileName="")) returned 1 [0278.149] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.149] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.149] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.149] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.149] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.149] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.149] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570858) returned 1 [0278.150] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.150] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.150] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e390) returned 1 [0278.150] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0278.150] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.150] GetLastError () returned 0x0 [0278.150] GetLastError () returned 0x0 [0278.151] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.151] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\nn-no\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\nn-no\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.152] WriteFile (in: hFile=0x250, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.154] SetEndOfFile (hFile=0x250) returned 1 [0278.154] CloseHandle (hObject=0x250) returned 1 [0278.154] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.155] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.155] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.155] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.155] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.156] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.156] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.156] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.156] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.156] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.156] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.156] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.157] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.157] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.157] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0278.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.157] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.158] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.158] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.158] CryptDestroyKey (hKey=0x55e390) returned 1 [0278.158] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0278.158] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\nn-no\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\nn-no\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5515c4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbd5d4c4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49b67380, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.159] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5515c4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbd5d4c4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49b67380, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.159] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd5d4c4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbd5d4c4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xc2484cb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x14cc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.159] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b67380, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49b67380, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49b67380, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.159] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b67380, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49b67380, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49b67380, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.159] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.159] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc593d87, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc593d87, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xc88a52c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="nso-za", cAlternateFileName="")) returned 1 [0278.159] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.159] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.159] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.159] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.159] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.160] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5712f8) returned 1 [0278.160] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.160] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.160] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0278.161] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.161] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.161] GetLastError () returned 0x0 [0278.161] GetLastError () returned 0x0 [0278.161] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.162] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0278.163] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.164] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\nso-za\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\nso-za\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.168] WriteFile (in: hFile=0x250, lpBuffer=0x23e3584*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3584*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.169] SetEndOfFile (hFile=0x250) returned 1 [0278.169] CloseHandle (hObject=0x250) returned 1 [0278.169] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.170] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.170] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.171] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.171] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.171] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.171] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.171] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.171] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.171] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.171] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.172] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.172] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.172] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.172] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.173] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.173] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.173] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.173] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.173] CryptDestroyKey (hKey=0x55e610) returned 1 [0278.173] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0278.173] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\nso-za\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\nso-za\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc593d87, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc88a52c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49b8d7bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0278.174] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc593d87, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc88a52c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49b8d7bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.174] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc88a52c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc88a52c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xd4e8897, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x16cc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.174] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b8d7bd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49b8d7bd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49b8d7bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.174] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b8d7bd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49b8d7bd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49b8d7bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.174] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0278.174] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe50f40d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe50f40d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xefa8864, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x5d4c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="OneDrive.exe", cAlternateFileName="")) returned 1 [0278.174] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd63fe7d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xd63fe7d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xdb049b8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="or-in", cAlternateFileName="")) returned 1 [0278.174] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.174] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.174] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.174] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.174] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.175] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571518) returned 1 [0278.175] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.175] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.175] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0278.176] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.176] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.176] GetLastError () returned 0x0 [0278.176] GetLastError () returned 0x0 [0278.176] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.176] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\or-in\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\or-in\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.178] WriteFile (in: hFile=0x250, lpBuffer=0x23e35a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e35a4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.179] SetEndOfFile (hFile=0x250) returned 1 [0278.180] CloseHandle (hObject=0x250) returned 1 [0278.180] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.181] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.181] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.181] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.181] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.181] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.181] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.181] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.181] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.182] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.182] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.182] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.182] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.182] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.182] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.182] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.183] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.183] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0278.183] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.183] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.183] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.183] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.183] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.183] CryptDestroyKey (hKey=0x55e650) returned 1 [0278.183] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0278.184] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\or-in\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\or-in\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd63fe7d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xdb049b8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49b8d7bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0278.184] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd63fe7d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xdb049b8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49b8d7bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.184] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb049b8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xdb049b8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xdee5c50, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.184] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b8d7bd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49b8d7bd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49bb37bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.184] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b8d7bd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49b8d7bd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49bb37bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.184] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0278.184] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee5c50, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xdee5c50, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xe640666, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="pa", cAlternateFileName="")) returned 1 [0278.184] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.184] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.184] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.184] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.185] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.185] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.185] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571490) returned 1 [0278.185] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.185] CryptHashData (hHash=0x55e210, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.186] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.186] CryptDestroyHash (hHash=0x55e210) returned 1 [0278.186] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.186] GetLastError () returned 0x0 [0278.186] GetLastError () returned 0x0 [0278.186] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.187] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0278.187] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.188] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pa\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pa\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.189] WriteFile (in: hFile=0x250, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.190] SetEndOfFile (hFile=0x250) returned 1 [0278.191] CloseHandle (hObject=0x250) returned 1 [0278.191] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.192] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.192] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.192] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.200] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.200] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.200] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.201] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.201] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.201] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.201] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.201] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.201] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.201] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.201] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.201] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.202] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.202] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.202] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0278.202] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pa\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pa\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee5c50, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe640666, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49bb37bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.203] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee5c50, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe640666, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49bb37bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.203] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe640666, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe640666, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xe6d91fe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.203] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bb37bd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49bb37bd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49bb37bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.203] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bb37bd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49bb37bd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49bb37bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.203] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.203] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d91fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe6d91fe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xedb3e67, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="pa-arab", cAlternateFileName="")) returned 1 [0278.203] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.203] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.203] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.203] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.203] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.203] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.204] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0278.204] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.204] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.204] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0278.204] CryptDestroyHash (hHash=0x55e910) returned 1 [0278.204] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.205] GetLastError () returned 0x0 [0278.205] GetLastError () returned 0x0 [0278.205] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.205] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pa-arab\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pa-arab\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.206] WriteFile (in: hFile=0x250, lpBuffer=0x23e3594*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3594*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.208] SetEndOfFile (hFile=0x250) returned 1 [0278.208] CloseHandle (hObject=0x250) returned 1 [0278.210] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.211] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.211] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.211] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.212] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.212] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.212] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.212] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.212] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.212] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.212] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.212] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.212] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.212] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.212] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.212] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.213] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0278.213] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.213] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.213] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.213] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.213] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.213] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0278.213] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0278.213] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pa-arab\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pa-arab\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d91fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xedb3e67, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49bd9a24, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.214] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d91fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xedb3e67, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49bd9a24, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.214] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb3e67, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xedb3e67, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xfb947ac, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.214] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bd9a24, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49bd9a24, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49bd9a24, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.214] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bd9a24, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49bd9a24, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49bd9a24, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.214] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.214] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc5962, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xfcc5962, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x103c6b62, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="pa-arab-pk", cAlternateFileName="PA-ARA~1")) returned 1 [0278.214] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.214] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.214] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.214] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.214] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.215] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.215] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0278.215] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.215] CryptHashData (hHash=0x55e390, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.215] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0278.216] CryptDestroyHash (hHash=0x55e390) returned 1 [0278.216] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.216] GetLastError () returned 0x0 [0278.216] GetLastError () returned 0x0 [0278.216] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.217] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0278.217] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.218] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pa-arab-pk\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pa-arab-pk\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.239] WriteFile (in: hFile=0x250, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.256] SetEndOfFile (hFile=0x250) returned 1 [0278.256] CloseHandle (hObject=0x250) returned 1 [0278.256] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.257] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.258] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.258] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.258] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.258] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.258] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.259] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.259] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.259] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.259] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.259] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.259] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.259] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.259] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.259] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.259] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.259] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.259] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0278.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.260] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.260] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.260] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.260] CryptDestroyKey (hKey=0x55e290) returned 1 [0278.260] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0278.260] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pa-arab-pk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pa-arab-pk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc5962, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x103c6b62, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49c25ec8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0278.261] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc5962, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x103c6b62, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49c25ec8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.261] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103c6b62, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x103c6b62, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1083ed90, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.261] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c25ec8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49c25ec8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49c723b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.261] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c25ec8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49c25ec8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49c723b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.261] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0278.261] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10bd26fa, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x10bd26fa, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1102b950, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="pl", cAlternateFileName="")) returned 1 [0278.261] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.261] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.262] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.262] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.262] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.262] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.262] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571408) returned 1 [0278.263] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.263] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.263] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0278.263] CryptDestroyHash (hHash=0x55e910) returned 1 [0278.263] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.263] GetLastError () returned 0x0 [0278.263] GetLastError () returned 0x0 [0278.263] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.264] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pl\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pl\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.265] WriteFile (in: hFile=0x250, lpBuffer=0x23e3594*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3594*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.266] SetEndOfFile (hFile=0x250) returned 1 [0278.267] CloseHandle (hObject=0x250) returned 1 [0278.267] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.267] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.268] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.268] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.268] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.268] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.268] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.268] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.268] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.268] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.269] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.269] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.269] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.269] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.269] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.269] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.269] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.269] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.269] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.269] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.269] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.270] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.270] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.270] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.270] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.270] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.270] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.270] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0278.270] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0278.270] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pl\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pl\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10bd26fa, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1102b950, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49c723b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0278.271] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10bd26fa, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1102b950, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49c723b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.271] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1102b950, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1102b950, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1149d5d9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x16ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.271] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c723b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49c723b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49c723b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.271] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c723b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49c723b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49c723b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.271] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0278.271] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x116ff8a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x116ff8a5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x11e72c7e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="prs-af", cAlternateFileName="")) returned 1 [0278.271] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.271] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.271] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.271] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.272] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.272] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.272] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570e30) returned 1 [0278.272] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.272] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.272] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.273] CryptDestroyHash (hHash=0x55e650) returned 1 [0278.273] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.273] GetLastError () returned 0x0 [0278.273] GetLastError () returned 0x0 [0278.273] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.274] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\prs-af\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\prs-af\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.275] WriteFile (in: hFile=0x250, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.276] SetEndOfFile (hFile=0x250) returned 1 [0278.276] CloseHandle (hObject=0x250) returned 1 [0278.276] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.277] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.277] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.278] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.278] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.278] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.278] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.278] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.278] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.278] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.278] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.279] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.279] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.279] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.279] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.279] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.279] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.279] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.279] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.279] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.279] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.279] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0278.279] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.280] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.280] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.280] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.280] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.280] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.280] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0278.280] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\prs-af\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\prs-af\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x116ff8a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x11e72c7e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49c9857f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.280] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x116ff8a5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x11e72c7e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49c9857f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.281] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11e72c7e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x11e72c7e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x12ba82ea, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.281] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c9857f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49c9857f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49c9857f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.281] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c9857f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49c9857f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49c9857f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.281] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.281] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x130c8fc0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x130c8fc0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x133517d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="pt-br", cAlternateFileName="")) returned 1 [0278.281] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.281] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.281] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.281] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.281] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.281] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.281] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0278.282] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.282] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.282] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.282] CryptDestroyHash (hHash=0x55e910) returned 1 [0278.282] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.282] GetLastError () returned 0x0 [0278.282] GetLastError () returned 0x0 [0278.282] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.284] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0278.284] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.285] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pt-br\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pt-br\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.286] WriteFile (in: hFile=0x250, lpBuffer=0x23e3584*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3584*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.292] SetEndOfFile (hFile=0x250) returned 1 [0278.292] CloseHandle (hObject=0x250) returned 1 [0278.292] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.293] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.293] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.299] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.299] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.299] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.300] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.300] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.300] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.300] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.300] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.300] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.300] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.300] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.300] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.300] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.301] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.301] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.301] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.301] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0278.301] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.301] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.301] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.301] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.301] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.302] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.302] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0278.302] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pt-br\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pt-br\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x130c8fc0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x133517d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49c9857f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0278.302] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x130c8fc0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x133517d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49c9857f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.302] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x133517d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x133517d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x135ad91f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.302] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c9857f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49c9857f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49cbe83d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.302] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c9857f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49c9857f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49cbe83d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.302] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0278.302] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13646246, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13646246, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x13967473, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="pt-pt", cAlternateFileName="")) returned 1 [0278.303] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.303] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.303] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.303] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.303] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.303] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.303] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0278.304] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.304] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.304] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.304] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.304] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.304] GetLastError () returned 0x0 [0278.304] GetLastError () returned 0x0 [0278.304] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.305] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pt-pt\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pt-pt\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.307] WriteFile (in: hFile=0x250, lpBuffer=0x23e35a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e35a4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.308] SetEndOfFile (hFile=0x250) returned 1 [0278.309] CloseHandle (hObject=0x250) returned 1 [0278.309] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.310] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.310] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.310] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.310] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.310] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.310] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.311] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.311] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.311] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.311] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.311] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.311] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.311] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.311] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.311] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.312] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.312] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.312] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.312] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.312] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.312] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0278.312] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.312] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.312] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.312] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.312] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.313] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.313] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0278.313] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\pt-pt\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\pt-pt\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13646246, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13967473, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49ce4990, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.313] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13646246, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13967473, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49ce4990, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.313] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13967473, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13967473, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x13e071a6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.313] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ce4990, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49ce4990, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49ce4990, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.313] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ce4990, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49ce4990, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49ce4990, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.313] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.313] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13e9e78d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13e9e78d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x141bf6d6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="qut-latn", cAlternateFileName="")) returned 1 [0278.314] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.314] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.314] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.314] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.314] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0278.315] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.315] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.315] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.315] CryptDestroyHash (hHash=0x55e290) returned 1 [0278.315] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.315] GetLastError () returned 0x0 [0278.315] GetLastError () returned 0x0 [0278.315] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.316] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0278.316] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.317] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\qut-latn\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\qut-latn\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.320] WriteFile (in: hFile=0x250, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.321] SetEndOfFile (hFile=0x250) returned 1 [0278.322] CloseHandle (hObject=0x250) returned 1 [0278.322] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.323] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.323] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.323] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.323] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.323] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.323] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.323] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.324] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.324] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.324] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.324] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.324] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.324] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.324] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.324] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.324] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.324] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.324] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.325] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.325] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.325] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0278.325] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.325] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.325] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.325] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.325] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.325] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.326] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0278.326] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\qut-latn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\qut-latn\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13e9e78d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x141bf6d6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49d0ac9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0278.326] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13e9e78d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x141bf6d6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49d0ac9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.326] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141bf6d6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x141bf6d6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1489a4b4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x17ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.326] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ce4990, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49ce4990, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49d0ac9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.326] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ce4990, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49ce4990, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49d0ac9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.326] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0278.326] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14933008, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x14933008, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x14b24ea6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="quz-pe", cAlternateFileName="")) returned 1 [0278.326] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.326] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.326] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.327] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.327] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.327] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.327] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0278.327] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.327] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.327] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.328] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.328] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.328] GetLastError () returned 0x0 [0278.328] GetLastError () returned 0x0 [0278.328] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.328] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\quz-pe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\quz-pe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.330] WriteFile (in: hFile=0x250, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.360] SetEndOfFile (hFile=0x250) returned 1 [0278.360] CloseHandle (hObject=0x250) returned 1 [0278.361] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.362] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.362] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.375] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.375] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.375] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.376] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.376] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.376] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.376] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.377] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.377] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.377] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.377] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0278.377] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\quz-pe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\quz-pe\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14933008, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x14b24ea6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49d0ac9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.378] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14933008, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x14b24ea6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49d0ac9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.378] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14b24ea6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x14b24ea6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x16a608f5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x168c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.378] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d0ac9d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49d0ac9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49d572b9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.378] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d0ac9d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49d0ac9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49d572b9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.378] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.378] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ec59797, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ec59797, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ef2e1f0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa0ec0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RemoteAccess.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="REMOTE~1.CRY")) returned 1 [0278.378] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16b45b0a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x16b45b0a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x170a2d96, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ro", cAlternateFileName="")) returned 1 [0278.378] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.378] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.378] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.379] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.379] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0278.379] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.379] CryptHashData (hHash=0x55e210, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.380] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.380] CryptDestroyHash (hHash=0x55e210) returned 1 [0278.380] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.380] GetLastError () returned 0x0 [0278.380] GetLastError () returned 0x0 [0278.380] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.381] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0278.382] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.382] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ro\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ro\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.383] WriteFile (in: hFile=0x250, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.385] SetEndOfFile (hFile=0x250) returned 1 [0278.385] CloseHandle (hObject=0x250) returned 1 [0278.385] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.386] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.386] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.387] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.387] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.387] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.387] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.387] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.388] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.388] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.388] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.388] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.388] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0278.388] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.388] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.388] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.388] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.388] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.389] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.389] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0278.389] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ro\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ro\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16b45b0a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x170a2d96, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49da4950, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.389] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16b45b0a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x170a2d96, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49da4950, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.389] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x170a2d96, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x170a2d96, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x17292a39, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.389] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49da4950, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49da4950, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49da4950, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.389] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49da4950, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49da4950, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49da4950, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.389] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.389] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x172deef5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x172deef5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x174cef11, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ru", cAlternateFileName="")) returned 1 [0278.389] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.389] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.390] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.390] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.390] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.390] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.390] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570748) returned 1 [0278.391] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.391] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.391] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.391] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0278.391] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.391] GetLastError () returned 0x0 [0278.391] GetLastError () returned 0x0 [0278.391] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.392] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ru\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ru\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.393] WriteFile (in: hFile=0x250, lpBuffer=0x23e3594*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3594*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.395] SetEndOfFile (hFile=0x250) returned 1 [0278.395] CloseHandle (hObject=0x250) returned 1 [0278.395] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.398] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.398] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.398] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.398] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.399] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.399] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.399] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.399] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.399] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.399] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.400] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.400] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.400] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.400] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.400] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.400] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.400] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.400] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.400] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0278.400] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.400] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.401] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.401] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.401] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.401] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0278.401] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\ru\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\ru\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x172deef5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x174cef11, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49da4950, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.401] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x172deef5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x174cef11, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49da4950, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.401] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x174cef11, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x174cef11, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x17ac4b94, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.402] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49da4950, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49da4950, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49da4950, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.402] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49da4950, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49da4950, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49da4950, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.402] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.402] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bf5de5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x17bf5de5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1954aec9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="rw", cAlternateFileName="")) returned 1 [0278.402] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.402] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.402] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.402] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.402] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0278.403] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.403] CryptHashData (hHash=0x55e310, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.403] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.403] CryptDestroyHash (hHash=0x55e310) returned 1 [0278.403] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.403] GetLastError () returned 0x0 [0278.403] GetLastError () returned 0x0 [0278.403] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.404] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\rw\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\rw\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.405] WriteFile (in: hFile=0x250, lpBuffer=0x23e52ac*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e52ac*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.407] SetEndOfFile (hFile=0x250) returned 1 [0278.407] CloseHandle (hObject=0x250) returned 1 [0278.407] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.408] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.408] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.408] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.408] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.408] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.408] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.408] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.409] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.409] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.409] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.409] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.409] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.410] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.410] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.410] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.410] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.410] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.411] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.411] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0278.411] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\rw\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\rw\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bf5de5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1954aec9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49dc9d03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0278.411] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bf5de5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1954aec9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49dc9d03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.411] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1954aec9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1954aec9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1986bebc, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.411] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49dc9d03, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49dc9d03, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49dc9d03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.411] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49dc9d03, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49dc9d03, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49dc9d03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.411] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0278.411] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ef7a726, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2ef7a726, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2ef7a726, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x124b, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ScreenshotLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SCREEN~1.CRY")) returned 1 [0278.423] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efa0aab, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2efa0aab, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2f05f4ee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6c00a, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ScreenshotOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SCREEN~2.CRY")) returned 1 [0278.423] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1986bebc, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1986bebc, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1aec60c3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="sd-arab", cAlternateFileName="")) returned 1 [0278.423] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.423] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.423] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.423] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.424] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0278.424] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.424] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.424] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.424] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.425] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.425] GetLastError () returned 0x0 [0278.425] GetLastError () returned 0x0 [0278.425] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.426] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sd-arab\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sd-arab\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.427] WriteFile (in: hFile=0x250, lpBuffer=0x23e52bc*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e52bc*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.428] SetEndOfFile (hFile=0x250) returned 1 [0278.428] CloseHandle (hObject=0x250) returned 1 [0278.429] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.430] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.431] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.431] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.431] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.431] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.431] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.432] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.432] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.432] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.432] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0278.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.433] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.433] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.433] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.433] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0278.433] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sd-arab\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sd-arab\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1986bebc, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1aec60c3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49defbb3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0278.434] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1986bebc, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1aec60c3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49defbb3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.434] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1aec60c3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1aec60c3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1bb96a1e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.434] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49defbb3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49defbb3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49defbb3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.434] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49defbb3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49defbb3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49defbb3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.434] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0278.434] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bc7bb71, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1bc7bb71, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x1bc7bb71, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="sd-arab-pk", cAlternateFileName="SD-ARA~1")) returned 1 [0278.434] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.434] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.434] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.435] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.435] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570a78) returned 1 [0278.435] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.435] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.436] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.436] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0278.436] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.436] GetLastError () returned 0x0 [0278.436] GetLastError () returned 0x0 [0278.436] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.437] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sd-arab-pk\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sd-arab-pk\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.438] WriteFile (in: hFile=0x250, lpBuffer=0x23e35f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e35f4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.439] SetEndOfFile (hFile=0x250) returned 1 [0278.439] CloseHandle (hObject=0x250) returned 1 [0278.440] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.440] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.441] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.441] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.441] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.442] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.442] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.442] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.442] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0278.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.443] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.443] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.443] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.444] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.444] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0278.444] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_2\\sd-arab-pk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_2\\sd-arab-pk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bc7bb71, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1bc7bb71, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49e1c4e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.444] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1bc7bb71, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1bc7bb71, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49e1c4e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.444] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e1c4e0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49e1c4e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49e1c4e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.444] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e1c4e0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49e1c4e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49e1c4e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.444] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.444] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0855b5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2f0855b5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2f1e2bb7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2ff40, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="sqmapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SQMAPI~1.CRY")) returned 1 [0278.444] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f202f30, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2f202f30, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2f202f30, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SqmWrapper.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SQMWRA~1.CRY")) returned 1 [0278.445] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f228fb2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2f228fb2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2f630a90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x130000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SyncEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SYNCEN~1.CRY")) returned 1 [0278.445] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f228fb2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2f228fb2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2f630a90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x130000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SyncEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SYNCEN~1.CRY")) returned 0 [0278.445] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0278.445] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4be92b64, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x334e3f18, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x334e3f18, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e656e69, dwReserved1=0x2e6c6c64, cFileName="17.3.5892.0626_3", cAlternateFileName="173589~4.062")) returned 1 [0278.445] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.445] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.445] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.445] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.445] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0278.446] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0278.446] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.446] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0278.446] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.446] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0278.446] GetLastError () returned 0x0 [0278.446] GetLastError () returned 0x0 [0278.446] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.447] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0278.449] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3604*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3604*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.450] SetEndOfFile (hFile=0x24c) returned 1 [0278.450] CloseHandle (hObject=0x24c) returned 1 [0278.450] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.451] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.451] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.452] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.452] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.452] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.452] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.452] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.452] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.453] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.453] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.453] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.453] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.453] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.453] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.453] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.453] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.453] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.453] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.453] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.454] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.454] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.454] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.454] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.454] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0278.454] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4be92b64, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x334e3f18, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49e3bfd6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0278.454] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4be92b64, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x334e3f18, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49e3bfd6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.455] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6915b22f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6915b22f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x693e3c42, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1 [0278.455] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.455] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.455] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.455] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.455] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.455] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.455] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0278.456] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.456] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.456] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0278.456] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.456] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.456] GetLastError () returned 0x0 [0278.456] GetLastError () returned 0x0 [0278.456] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.457] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\af\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\af\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.458] WriteFile (in: hFile=0x250, lpBuffer=0x23e3644*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3644*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.463] SetEndOfFile (hFile=0x250) returned 1 [0278.463] CloseHandle (hObject=0x250) returned 1 [0278.463] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.464] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.464] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.464] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.465] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.465] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.465] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.466] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.466] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.466] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.466] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.467] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.467] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.467] CryptDestroyKey (hKey=0x55e650) returned 1 [0278.467] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0278.467] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\af\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\af\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6915b22f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x693e3c42, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49e3bfd6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0278.468] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6915b22f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x693e3c42, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49e3bfd6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.468] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x693e3c42, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x693e3c42, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6969295c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x158c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.468] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e3bfd6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49e3bfd6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49e62090, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.468] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e3bfd6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49e3bfd6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49e62090, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.468] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0278.468] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69941380, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x69941380, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6a02b589, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="am-et", cAlternateFileName="")) returned 1 [0278.468] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.468] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.469] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.469] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.469] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.469] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570638) returned 1 [0278.469] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.470] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.470] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e310) returned 1 [0278.470] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.470] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.470] GetLastError () returned 0x0 [0278.470] GetLastError () returned 0x0 [0278.470] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.471] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\am-et\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\am-et\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.472] WriteFile (in: hFile=0x250, lpBuffer=0x23e3684*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3684*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.473] SetEndOfFile (hFile=0x250) returned 1 [0278.473] CloseHandle (hObject=0x250) returned 1 [0278.473] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.475] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.475] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.476] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.476] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.476] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.476] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.477] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.477] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.477] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.477] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.478] CryptDestroyKey (hKey=0x55e310) returned 1 [0278.478] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0278.478] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\am-et\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\am-et\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69941380, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6a02b589, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49e62090, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0278.478] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69941380, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6a02b589, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49e62090, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.478] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a02b589, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6a02b589, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6abcad0b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.478] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e62090, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49e62090, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49e62090, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.478] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e62090, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49e62090, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49e62090, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.478] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0278.478] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6abcad0b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x2f7d44b9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2f7d44b9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="amd64", cAlternateFileName="")) returned 1 [0278.479] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.479] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.479] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.479] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.479] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0278.480] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.480] CryptHashData (hHash=0x55e390, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.480] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.480] CryptDestroyHash (hHash=0x55e390) returned 1 [0278.480] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.480] GetLastError () returned 0x0 [0278.480] GetLastError () returned 0x0 [0278.480] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.481] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\amd64\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\amd64\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.482] WriteFile (in: hFile=0x250, lpBuffer=0x23e36c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e36c4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.483] SetEndOfFile (hFile=0x250) returned 1 [0278.483] CloseHandle (hObject=0x250) returned 1 [0278.483] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.485] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.485] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.485] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.486] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.486] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.486] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.486] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.486] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.487] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.487] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.487] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.487] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0278.488] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\amd64\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\amd64\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6abcad0b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x2f7d44b9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49e891a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0278.488] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6abcad0b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x2f7d44b9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49e891a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.488] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f656e02, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2f656e02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2f7d44b9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSyncApi64.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~1.CRY")) returned 1 [0278.488] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e891a7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49e891a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49e891a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.488] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e891a7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49e891a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49e891a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.488] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0278.488] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7d44b9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2f7d44b9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2f7fa757, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x123c, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="AutoPlayLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AUTOPL~1.CRY")) returned 1 [0278.488] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7fa757, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2f7fa757, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2f892fa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="AutoPlayOptIn.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AUTOPL~2.CRY")) returned 1 [0278.488] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f8b917c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2f8b917c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2f905799, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x27f2, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="AutoPlayOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AUTOPL~3.CRY")) returned 1 [0278.488] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f905799, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2f905799, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2f905799, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x16da, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="CollectOneDriveLogs.bat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="COLLEC~1.CRY")) returned 1 [0278.488] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f92b9f9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2f92b9f9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2f92b9f9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ETWlog.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ETWLOG~1.CRY")) returned 1 [0278.488] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fa075cf, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4fa075cf, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4fc43cb2, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ExclusionList.xml", cAlternateFileName="EXCLUS~1.XML")) returned 1 [0278.488] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f92b9f9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2f92b9f9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2f99e18b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x140c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="FileSync.LocalizedResources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~1.CRY")) returned 1 [0278.488] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f99e18b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x2f99e18b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x301f63a1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="FileSync.Resources.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~2.CRY")) returned 1 [0278.488] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3024b92b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3024b92b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x303c0250, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x362c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="FileSyncApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~3.CRY")) returned 1 [0278.489] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303e63fb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x303e63fb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3079fcb6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="FileSyncClient.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~4.CRY")) returned 1 [0278.489] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5096097b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5096097b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x50a920f2, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x238c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="FileSyncConfig.exe", cAlternateFileName="FILESY~1.EXE")) returned 1 [0278.489] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x307f226d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x307f226d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3098fb20, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1464c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="FileSyncSessions.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FI7343~1.CRY")) returned 1 [0278.489] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x309b5ea2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x309b5ea2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x30b0d3d3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x182cc0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="FileSyncShell.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FIF3B5~1.CRY")) returned 1 [0278.489] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49e3bfd6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49e3bfd6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49e3bfd6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.489] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c2bee50, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4c2bee50, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c7a9cca, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="is", cAlternateFileName="")) returned 1 [0278.489] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.489] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.489] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.489] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.490] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0278.490] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.490] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.490] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0278.490] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.491] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.491] GetLastError () returned 0x0 [0278.491] GetLastError () returned 0x0 [0278.491] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.491] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\is\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\is\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.523] WriteFile (in: hFile=0x250, lpBuffer=0x23e36d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e36d4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.524] SetEndOfFile (hFile=0x250) returned 1 [0278.524] CloseHandle (hObject=0x250) returned 1 [0278.524] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.525] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.526] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.526] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.526] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.527] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.527] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.527] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.527] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0278.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.528] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.528] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.528] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.528] CryptDestroyKey (hKey=0x55e650) returned 1 [0278.528] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0278.528] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\is\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\is\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c2bee50, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4c7a9cca, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49efabfb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0278.529] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c2bee50, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4c7a9cca, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49efabfb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.529] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c7a9cca, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4c7a9cca, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4caa4b91, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x152c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.529] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49efabfb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49efabfb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49efabfb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.529] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49efabfb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49efabfb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49efabfb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.529] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0278.529] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4cfdbdcf, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4cfdbdcf, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4e9ef895, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="it", cAlternateFileName="")) returned 1 [0278.529] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.529] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.529] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.529] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.530] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570748) returned 1 [0278.530] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.530] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.530] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.530] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.530] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.530] GetLastError () returned 0x0 [0278.530] GetLastError () returned 0x0 [0278.531] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.531] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\it\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\it\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.532] WriteFile (in: hFile=0x250, lpBuffer=0x23e3714*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3714*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.534] SetEndOfFile (hFile=0x250) returned 1 [0278.534] CloseHandle (hObject=0x250) returned 1 [0278.534] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.535] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.535] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.536] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.536] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.539] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.539] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.540] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.540] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.540] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.540] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.540] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.540] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.540] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.540] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.540] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.540] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.540] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.540] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.541] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.541] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.541] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0278.541] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\it\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\it\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4cfdbdcf, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4e9ef895, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49efabfb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.541] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4cfdbdcf, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4e9ef895, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49efabfb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.541] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9ef895, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4e9ef895, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4edf5bbb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.541] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49efabfb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49efabfb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49efabfb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.542] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49efabfb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49efabfb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49efabfb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.542] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.542] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f5b5174, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4f5b5174, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4f7cb58f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ja", cAlternateFileName="")) returned 1 [0278.542] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.542] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.542] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.542] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.542] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5710d8) returned 1 [0278.543] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.543] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.543] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.543] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.543] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.543] GetLastError () returned 0x0 [0278.543] GetLastError () returned 0x0 [0278.543] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.544] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ja\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ja\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.545] WriteFile (in: hFile=0x250, lpBuffer=0x23e3754*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3754*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.547] SetEndOfFile (hFile=0x250) returned 1 [0278.547] CloseHandle (hObject=0x250) returned 1 [0278.547] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.548] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.548] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.548] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.548] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.548] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.548] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.549] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.549] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.549] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.549] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.550] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.550] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.550] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.550] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.550] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.550] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.550] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.550] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.551] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.551] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0278.551] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ja\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ja\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f5b5174, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4f7cb58f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49f20e64, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0278.551] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f5b5174, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4f7cb58f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49f20e64, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.551] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f7cb58f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4f7cb58f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4f8fc8ef, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xfcc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.551] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f20e64, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49f20e64, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49f20e64, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.551] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f20e64, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49f20e64, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49f20e64, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.551] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0278.551] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f8fc8ef, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4f8fc8ef, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4faa013a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ka", cAlternateFileName="")) returned 1 [0278.552] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.552] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.552] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.552] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.552] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.552] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.552] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5708e0) returned 1 [0278.553] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.553] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.553] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e390) returned 1 [0278.553] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.553] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.553] GetLastError () returned 0x0 [0278.553] GetLastError () returned 0x0 [0278.554] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.554] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ka\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ka\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.555] WriteFile (in: hFile=0x250, lpBuffer=0x23e3794*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3794*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.557] SetEndOfFile (hFile=0x250) returned 1 [0278.557] CloseHandle (hObject=0x250) returned 1 [0278.557] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.558] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.558] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.560] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.560] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.560] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.560] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.561] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.561] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.561] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.561] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.561] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.562] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.562] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.562] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.562] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.562] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.562] CryptDestroyKey (hKey=0x55e390) returned 1 [0278.562] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0278.563] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ka\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ka\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f8fc8ef, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4faa013a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49f47057, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.563] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f8fc8ef, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4faa013a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49f47057, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.563] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4faa013a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x4faa013a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x50286173, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.563] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f47057, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49f47057, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49f47057, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.563] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f47057, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49f47057, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49f47057, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.563] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.563] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50286173, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x50286173, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5042992c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kk", cAlternateFileName="")) returned 1 [0278.563] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.563] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.564] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.564] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.564] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0278.564] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.565] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.565] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0278.565] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0278.565] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.565] GetLastError () returned 0x0 [0278.565] GetLastError () returned 0x0 [0278.565] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.566] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\kk\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\kk\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.570] WriteFile (in: hFile=0x250, lpBuffer=0x23e37d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e37d4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.571] SetEndOfFile (hFile=0x250) returned 1 [0278.572] CloseHandle (hObject=0x250) returned 1 [0278.572] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.573] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.573] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.574] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.574] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.574] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.575] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.575] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.575] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.575] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.575] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.575] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.575] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.575] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.575] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.576] CryptDestroyKey (hKey=0x55e210) returned 1 [0278.576] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0278.576] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\kk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\kk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50286173, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5042992c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49f47057, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.576] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50286173, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5042992c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49f47057, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.576] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5042992c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5042992c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x504e8433, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.576] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f47057, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49f47057, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49f6dcb3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.576] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f47057, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49f47057, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49f6dcb3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.576] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.577] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5050e68c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5050e68c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5068bb42, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="km-kh", cAlternateFileName="")) returned 1 [0278.577] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.577] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.577] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.577] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.577] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0278.578] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.578] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.578] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.578] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.578] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.578] GetLastError () returned 0x0 [0278.578] GetLastError () returned 0x0 [0278.578] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.579] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\km-kh\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\km-kh\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.580] WriteFile (in: hFile=0x250, lpBuffer=0x23e3814*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3814*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.581] SetEndOfFile (hFile=0x250) returned 1 [0278.581] CloseHandle (hObject=0x250) returned 1 [0278.581] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.582] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.583] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.583] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.584] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.584] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.584] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.584] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.584] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.584] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.584] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.584] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.584] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.584] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.585] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.585] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.585] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.585] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.585] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.585] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.585] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.585] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0278.585] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\km-kh\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\km-kh\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5050e68c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5068bb42, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49f6dcb3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.586] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5050e68c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5068bb42, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49f6dcb3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.586] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5068bb42, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5068bb42, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x507bcfb7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.586] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f6dcb3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49f6dcb3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49f6dcb3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.586] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f6dcb3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49f6dcb3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49f6dcb3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.586] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.586] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x507bcfb7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x507bcfb7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x509f95ae, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kn", cAlternateFileName="")) returned 1 [0278.586] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.586] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.586] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.587] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.587] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.587] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.587] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0278.587] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.588] CryptHashData (hHash=0x55e390, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.588] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0278.588] CryptDestroyHash (hHash=0x55e390) returned 1 [0278.588] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.588] GetLastError () returned 0x0 [0278.588] GetLastError () returned 0x0 [0278.588] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.589] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\kn\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\kn\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.590] WriteFile (in: hFile=0x250, lpBuffer=0x23e3854*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3854*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.591] SetEndOfFile (hFile=0x250) returned 1 [0278.591] CloseHandle (hObject=0x250) returned 1 [0278.591] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.592] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.592] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.593] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.593] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.593] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.594] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.594] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.594] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.594] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.595] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.595] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0278.595] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0278.595] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\kn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\kn\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x507bcfb7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x509f95ae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49f93445, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0278.595] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x507bcfb7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x509f95ae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49f93445, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.595] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x509f95ae, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x509f95ae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x50a920f2, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x172c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.595] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f93445, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49f93445, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49f93445, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.596] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f93445, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49f93445, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49f93445, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.596] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0278.596] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b9ce08, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x50b9ce08, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x50e97fc4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ko", cAlternateFileName="")) returned 1 [0278.596] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.596] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.596] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.596] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.596] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.596] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.596] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0278.597] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.597] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.597] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0278.597] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.597] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.597] GetLastError () returned 0x0 [0278.597] GetLastError () returned 0x0 [0278.598] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.598] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ko\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ko\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.600] WriteFile (in: hFile=0x250, lpBuffer=0x23e3894*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3894*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.601] SetEndOfFile (hFile=0x250) returned 1 [0278.602] CloseHandle (hObject=0x250) returned 1 [0278.602] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.602] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.602] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.603] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.603] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.603] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.604] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.604] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.604] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.604] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.605] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.605] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.605] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.605] CryptDestroyKey (hKey=0x55e650) returned 1 [0278.605] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0278.605] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ko\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ko\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b9ce08, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x50e97fc4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49fb97bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.606] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b9ce08, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x50e97fc4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49fb97bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.606] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e97fc4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x50e97fc4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x50f3092d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0xf2c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.606] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f93445, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49f93445, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49fb97bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.606] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49f93445, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49f93445, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49fb97bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.606] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.606] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f3092d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x50f3092d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x510d3ed4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kok", cAlternateFileName="")) returned 1 [0278.606] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.606] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.606] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.606] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.606] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.607] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.607] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0278.607] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.608] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.608] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0278.608] CryptDestroyHash (hHash=0x55e290) returned 1 [0278.608] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.608] GetLastError () returned 0x0 [0278.608] GetLastError () returned 0x0 [0278.608] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.609] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\kok\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\kok\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.612] WriteFile (in: hFile=0x250, lpBuffer=0x23e38d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e38d4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.613] SetEndOfFile (hFile=0x250) returned 1 [0278.614] CloseHandle (hObject=0x250) returned 1 [0278.614] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.615] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.615] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.616] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.616] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.616] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.617] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.617] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.617] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.617] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.617] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.618] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0278.618] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0278.618] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\kok\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\kok\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f3092d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x510d3ed4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49fb97bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0278.618] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f3092d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x510d3ed4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49fb97bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.618] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510d3ed4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x510d3ed4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5116c84b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.618] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49fb97bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49fb97bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49fb97bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.618] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49fb97bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49fb97bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49fb97bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.618] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0278.619] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5116c84b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5116c84b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x513cef43, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ku-arab", cAlternateFileName="")) returned 1 [0278.619] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.619] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.619] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.619] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.619] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0278.620] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.620] CryptHashData (hHash=0x55e390, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.620] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0278.620] CryptDestroyHash (hHash=0x55e390) returned 1 [0278.620] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.620] GetLastError () returned 0x0 [0278.620] GetLastError () returned 0x0 [0278.620] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.621] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ku-arab\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ku-arab\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.622] WriteFile (in: hFile=0x250, lpBuffer=0x23e3914*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3914*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.624] SetEndOfFile (hFile=0x250) returned 1 [0278.624] CloseHandle (hObject=0x250) returned 1 [0278.624] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.625] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.626] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.626] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.626] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.626] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.626] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.627] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.627] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.627] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.627] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.627] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.627] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.627] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.627] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.627] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.628] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.628] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.628] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.628] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.628] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.628] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.628] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.628] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.628] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.628] CryptDestroyKey (hKey=0x55e650) returned 1 [0278.628] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0278.628] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ku-arab\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ku-arab\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5116c84b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x513cef43, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49fdf906, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0278.629] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5116c84b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x513cef43, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x49fdf906, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.629] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513cef43, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x513cef43, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x51467b17, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15cc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.629] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49fdf906, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49fdf906, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49fdf906, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.629] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49fdf906, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x49fdf906, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x49fdf906, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.629] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0278.629] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51467b17, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x51467b17, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x51631498, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ky", cAlternateFileName="")) returned 1 [0278.629] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.629] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.629] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.629] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.629] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570eb8) returned 1 [0278.631] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.631] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.631] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.631] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.631] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.631] GetLastError () returned 0x0 [0278.631] GetLastError () returned 0x0 [0278.632] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.632] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ky\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ky\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.633] WriteFile (in: hFile=0x250, lpBuffer=0x23e3954*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3954*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.634] SetEndOfFile (hFile=0x250) returned 1 [0278.634] CloseHandle (hObject=0x250) returned 1 [0278.634] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.635] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.635] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.635] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.635] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.636] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.636] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.636] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.636] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.636] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.636] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.636] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.636] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.636] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.636] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.636] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.637] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.637] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.637] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.637] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.637] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.637] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0278.637] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ky\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ky\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51467b17, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x51631498, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a005ad4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.638] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51467b17, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x51631498, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a005ad4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.638] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51631498, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x51631498, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x516f0240, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.638] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a005ad4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a005ad4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a005ad4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.638] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a005ad4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a005ad4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a005ad4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.638] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.638] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517161bf, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x517161bf, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x518dffc5, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="lb-lu", cAlternateFileName="")) returned 1 [0278.638] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.638] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.638] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.638] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.638] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.638] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.638] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5708e0) returned 1 [0278.639] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.639] CryptHashData (hHash=0x55e2d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.639] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.639] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0278.639] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.639] GetLastError () returned 0x0 [0278.639] GetLastError () returned 0x0 [0278.639] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.640] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\lb-lu\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\lb-lu\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.641] WriteFile (in: hFile=0x250, lpBuffer=0x23e3994*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3994*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.642] SetEndOfFile (hFile=0x250) returned 1 [0278.642] CloseHandle (hObject=0x250) returned 1 [0278.642] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.643] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.643] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.643] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.644] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.644] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.644] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.644] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.644] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.644] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.644] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.644] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.644] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.644] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.645] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.645] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.645] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.645] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.645] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0278.645] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\lb-lu\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\lb-lu\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517161bf, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x518dffc5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a005ad4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.645] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517161bf, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x518dffc5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a005ad4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.645] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x518dffc5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x518dffc5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x519787fb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.645] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a005ad4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a005ad4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a005ad4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.645] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a005ad4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a005ad4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a005ad4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.645] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.646] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b5979a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x30b5979a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x30cd7011, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1a8c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LoggingPlatform.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="LOGGIN~1.CRY")) returned 1 [0278.647] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519787fb, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x519787fb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x52079625, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="lt", cAlternateFileName="")) returned 1 [0278.647] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.647] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.647] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.647] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.648] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570d20) returned 1 [0278.648] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.648] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.648] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.648] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.648] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.648] GetLastError () returned 0x0 [0278.648] GetLastError () returned 0x0 [0278.648] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.649] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\lt\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\lt\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.650] WriteFile (in: hFile=0x250, lpBuffer=0x23e39d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e39d4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.651] SetEndOfFile (hFile=0x250) returned 1 [0278.652] CloseHandle (hObject=0x250) returned 1 [0278.652] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.653] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.653] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.653] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.653] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.653] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.653] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.653] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.653] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.653] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.653] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.653] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.653] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.654] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.654] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.654] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.654] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.654] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.654] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.654] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.654] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.654] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.654] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.654] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.654] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.654] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.654] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.655] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.655] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0278.655] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\lt\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\lt\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519787fb, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x52079625, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a02beef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.655] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x519787fb, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x52079625, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a02beef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.655] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52079625, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x52079625, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x526e1a8e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.655] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a02beef, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a02beef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a02beef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.655] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a02beef, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a02beef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a02beef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.655] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.655] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52990592, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x52990592, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x52eedb83, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="lv", cAlternateFileName="")) returned 1 [0278.655] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.655] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.656] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.656] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.656] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c10) returned 1 [0278.656] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.656] CryptHashData (hHash=0x55e2d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.656] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.656] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0278.656] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.657] GetLastError () returned 0x0 [0278.657] GetLastError () returned 0x0 [0278.657] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.657] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\lv\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\lv\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.658] WriteFile (in: hFile=0x250, lpBuffer=0x23e3a14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a14*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.659] SetEndOfFile (hFile=0x250) returned 1 [0278.659] CloseHandle (hObject=0x250) returned 1 [0278.659] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.660] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.660] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.681] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.681] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.681] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.682] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.682] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.682] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.682] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.682] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.683] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.683] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.683] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.683] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.684] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0278.684] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\lv\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\lv\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52990592, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x52eedb83, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a02beef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.684] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52990592, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x52eedb83, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a02beef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.685] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52eedb83, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x52eedb83, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x53935b56, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.685] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a02beef, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a02beef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a02beef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.685] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a02beef, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a02beef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a02beef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.685] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.685] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53b98171, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x53b98171, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55a96ece, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mi-nz", cAlternateFileName="")) returned 1 [0278.685] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.685] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.685] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.685] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.685] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.685] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.685] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0278.686] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.686] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.686] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0278.686] CryptDestroyHash (hHash=0x55e650) returned 1 [0278.686] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.687] GetLastError () returned 0x0 [0278.687] GetLastError () returned 0x0 [0278.687] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.687] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\mi-nz\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\mi-nz\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.689] WriteFile (in: hFile=0x250, lpBuffer=0x23e3a54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a54*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.690] SetEndOfFile (hFile=0x250) returned 1 [0278.690] CloseHandle (hObject=0x250) returned 1 [0278.690] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.691] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.691] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.691] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.691] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.691] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.692] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.692] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.692] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.692] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.692] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.692] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.692] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.692] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.692] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.692] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.692] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.699] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.699] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.699] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0278.699] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0278.699] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\mi-nz\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\mi-nz\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53b98171, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55a96ece, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a0782bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0278.699] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53b98171, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55a96ece, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a0782bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.700] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a96ece, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55a96ece, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x55d1f366, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.700] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0782bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a0782bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a0782bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.700] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0782bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a0782bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a0782bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.700] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0278.700] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55f81a48, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55f81a48, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x562eeec6, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mk", cAlternateFileName="")) returned 1 [0278.700] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.700] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.700] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.700] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.700] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.700] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.700] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0278.701] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.701] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.701] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0278.701] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.701] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.701] GetLastError () returned 0x0 [0278.701] GetLastError () returned 0x0 [0278.701] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.702] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\mk\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\mk\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.703] WriteFile (in: hFile=0x250, lpBuffer=0x23e3a94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a94*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.704] SetEndOfFile (hFile=0x250) returned 1 [0278.704] CloseHandle (hObject=0x250) returned 1 [0278.704] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.705] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.705] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.706] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.706] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.706] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.706] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.706] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.707] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.707] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.707] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.707] CryptDestroyKey (hKey=0x55e650) returned 1 [0278.707] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0278.707] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\mk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\mk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55f81a48, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x562eeec6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a09e43a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55f81a48, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x562eeec6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a09e43a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x562eeec6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x562eeec6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5668283e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x162c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a09e43a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a09e43a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a09e43a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.708] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a09e43a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a09e43a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a09e43a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.708] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.708] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5678da05, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5678da05, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b938ba, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ml-in", cAlternateFileName="")) returned 1 [0278.708] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.708] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.709] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.709] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.709] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.709] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0278.709] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.709] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.709] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.709] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0278.709] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.709] GetLastError () returned 0x0 [0278.710] GetLastError () returned 0x0 [0278.710] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.710] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ml-in\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ml-in\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.712] WriteFile (in: hFile=0x250, lpBuffer=0x23e3ad4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ad4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.713] SetEndOfFile (hFile=0x250) returned 1 [0278.713] CloseHandle (hObject=0x250) returned 1 [0278.713] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.714] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.714] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.714] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.714] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.714] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.715] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.715] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.715] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.715] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.715] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.716] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.716] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.716] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.716] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.716] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0278.716] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ml-in\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ml-in\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5678da05, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b938ba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a0c4844, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0278.716] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5678da05, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b938ba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a0c4844, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.716] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b938ba, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b938ba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56f011c0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x186c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.716] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0c4844, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a0c4844, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a0c4844, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.716] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0c4844, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a0c4844, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a0c4844, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.717] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0278.717] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56fbfa3c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56fbfa3c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x57438001, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mn", cAlternateFileName="")) returned 1 [0278.717] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.717] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.717] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.717] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.717] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0278.718] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.718] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.718] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0278.718] CryptDestroyHash (hHash=0x55e910) returned 1 [0278.718] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.718] GetLastError () returned 0x0 [0278.718] GetLastError () returned 0x0 [0278.718] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.718] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\mn\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\mn\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.719] WriteFile (in: hFile=0x250, lpBuffer=0x23e3b14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3b14*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.720] SetEndOfFile (hFile=0x250) returned 1 [0278.720] CloseHandle (hObject=0x250) returned 1 [0278.721] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.721] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.721] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.721] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.722] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.722] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.722] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.722] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.722] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.722] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.722] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.722] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.722] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.722] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.722] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.723] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.723] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.723] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.723] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.723] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0278.724] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0278.724] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\mn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\mn\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56fbfa3c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x57438001, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a0c4844, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.724] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56fbfa3c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x57438001, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a0c4844, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.724] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57438001, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x57438001, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5783de52, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.724] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0c4844, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a0c4844, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a0c4844, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.724] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0c4844, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a0c4844, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a0c4844, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.724] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.724] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57a07ba6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x57a07ba6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x58a9209a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mr", cAlternateFileName="")) returned 1 [0278.724] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.724] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.724] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.724] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.725] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570858) returned 1 [0278.725] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.725] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.725] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0278.725] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.725] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.725] GetLastError () returned 0x0 [0278.725] GetLastError () returned 0x0 [0278.725] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.726] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\mr\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\mr\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.727] WriteFile (in: hFile=0x250, lpBuffer=0x23e3b54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3b54*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.728] SetEndOfFile (hFile=0x250) returned 1 [0278.728] CloseHandle (hObject=0x250) returned 1 [0278.728] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.729] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.729] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.729] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.729] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.730] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.730] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.730] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.730] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.730] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.730] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.731] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.731] CryptDestroyKey (hKey=0x55e650) returned 1 [0278.731] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0278.731] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\mr\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\mr\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57a07ba6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x58a9209a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a0eaa51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.731] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x57a07ba6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x58a9209a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a0eaa51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.731] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58a9209a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x58a9209a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5acd7b5a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15cc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.731] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0eaa51, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a0eaa51, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a0eaa51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.731] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0eaa51, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a0eaa51, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a0eaa51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.731] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.731] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b3b2896, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b3b2896, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5bdd475a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ms", cAlternateFileName="")) returned 1 [0278.731] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.731] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.732] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.732] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.732] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0278.732] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.732] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.732] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.732] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.732] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.733] GetLastError () returned 0x0 [0278.733] GetLastError () returned 0x0 [0278.733] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.733] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ms\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ms\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.734] WriteFile (in: hFile=0x250, lpBuffer=0x23e3b94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3b94*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.736] SetEndOfFile (hFile=0x250) returned 1 [0278.736] CloseHandle (hObject=0x250) returned 1 [0278.736] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.736] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.737] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.737] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.737] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.737] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.738] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.738] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.738] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.738] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.738] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.739] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.739] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0278.739] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ms\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ms\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b3b2896, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5bdd475a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a0eaa51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.739] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b3b2896, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5bdd475a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a0eaa51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.739] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bdd475a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5bdd475a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5cb63e92, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15cc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.739] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0eaa51, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a0eaa51, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a0eaa51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.739] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0eaa51, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a0eaa51, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a0eaa51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.739] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.739] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30d08e0f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x30d08e0f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x30f3945c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6f2a0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MSVCP1~1.CRY")) returned 1 [0278.739] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30f3945c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x30f3945c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x312cce1f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xed0a0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MSVCR1~1.CRY")) returned 1 [0278.739] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5cf8febe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5cf8febe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d349bc1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mt-mt", cAlternateFileName="")) returned 1 [0278.742] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.742] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.742] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.742] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.742] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0278.743] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.743] CryptHashData (hHash=0x55e190, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.743] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0278.743] CryptDestroyHash (hHash=0x55e190) returned 1 [0278.743] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.743] GetLastError () returned 0x0 [0278.743] GetLastError () returned 0x0 [0278.743] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.744] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\mt-mt\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\mt-mt\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.745] WriteFile (in: hFile=0x250, lpBuffer=0x23e3bd4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3bd4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.746] SetEndOfFile (hFile=0x250) returned 1 [0278.747] CloseHandle (hObject=0x250) returned 1 [0278.747] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.747] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.747] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.748] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.748] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.748] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.748] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.749] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.749] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.749] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.749] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.750] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0278.750] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0278.750] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\mt-mt\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\mt-mt\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5cf8febe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d349bc1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a110d03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0278.750] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5cf8febe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d349bc1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a110d03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.750] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d349bc1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d349bc1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d51389a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.750] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a110d03, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a110d03, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a110d03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.750] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a110d03, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a110d03, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a110d03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.750] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0278.750] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d5ac1b2, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d5ac1b2, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d80e6a3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="nb-no", cAlternateFileName="")) returned 1 [0278.750] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.750] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.750] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.750] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.751] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570f40) returned 1 [0278.751] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.751] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.751] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0278.751] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.751] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.751] GetLastError () returned 0x0 [0278.751] GetLastError () returned 0x0 [0278.751] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.752] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\nb-no\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\nb-no\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.753] WriteFile (in: hFile=0x250, lpBuffer=0x23e3c14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c14*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.754] SetEndOfFile (hFile=0x250) returned 1 [0278.754] CloseHandle (hObject=0x250) returned 1 [0278.754] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.760] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.760] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.760] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.760] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.761] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.761] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.761] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.761] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.761] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.762] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.762] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.762] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.762] CryptDestroyKey (hKey=0x55e210) returned 1 [0278.762] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0278.762] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\nb-no\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\nb-no\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d5ac1b2, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d80e6a3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a110d03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.763] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5d5ac1b2, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d80e6a3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a110d03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.763] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d80e6a3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d80e6a3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5dd1f677, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x14cc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.763] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a110d03, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a110d03, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a110d03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.763] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a110d03, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a110d03, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a110d03, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.763] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.763] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5dd6ba86, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5dd6ba86, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5dfa7ed7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ne-np", cAlternateFileName="")) returned 1 [0278.763] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.763] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.763] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.763] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.763] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.764] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.764] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570e30) returned 1 [0278.764] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.764] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.764] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.764] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0278.764] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.764] GetLastError () returned 0x0 [0278.764] GetLastError () returned 0x0 [0278.764] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.765] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ne-np\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ne-np\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.766] WriteFile (in: hFile=0x250, lpBuffer=0x23e3c54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c54*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.767] SetEndOfFile (hFile=0x250) returned 1 [0278.767] CloseHandle (hObject=0x250) returned 1 [0278.767] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.768] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.768] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.769] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.769] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.769] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.769] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.769] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.770] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.770] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.770] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.770] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.770] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.770] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.770] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.770] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.770] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.770] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.771] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.771] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.772] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.772] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0278.772] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ne-np\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ne-np\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5dd6ba86, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5dfa7ed7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a136e24, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.772] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5dd6ba86, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5dfa7ed7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a136e24, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.772] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dfa7ed7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5dfa7ed7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5e197eee, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.772] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a136e24, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a136e24, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a136e24, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.773] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a136e24, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a136e24, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a136e24, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.773] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.773] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e23074d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5e23074d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5e492cdf, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="nl", cAlternateFileName="")) returned 1 [0278.773] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.773] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.773] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.773] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.773] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.773] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.773] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570858) returned 1 [0278.774] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.774] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.774] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e390) returned 1 [0278.774] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0278.774] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.774] GetLastError () returned 0x0 [0278.774] GetLastError () returned 0x0 [0278.774] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.775] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\nl\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\nl\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.776] WriteFile (in: hFile=0x250, lpBuffer=0x23e3c94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c94*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.778] SetEndOfFile (hFile=0x250) returned 1 [0278.778] CloseHandle (hObject=0x250) returned 1 [0278.778] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.779] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.779] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.779] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.779] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.780] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.780] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.780] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.780] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.780] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.781] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.781] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.781] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.782] CryptDestroyKey (hKey=0x55e390) returned 1 [0278.782] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0278.782] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\nl\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\nl\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e23074d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5e492cdf, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a15d207, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0278.782] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e23074d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5e492cdf, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a15d207, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.782] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e492cdf, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5e492cdf, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5e7da121, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.782] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a15d207, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a15d207, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a15d207, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.782] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a15d207, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a15d207, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a15d207, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.782] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0278.782] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e80018f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5e80018f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5ea3c6d9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="nn-no", cAlternateFileName="")) returned 1 [0278.782] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.782] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.783] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.783] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.783] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570f40) returned 1 [0278.784] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.784] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.784] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0278.784] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.784] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.784] GetLastError () returned 0x0 [0278.784] GetLastError () returned 0x0 [0278.784] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.784] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\nn-no\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\nn-no\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.811] WriteFile (in: hFile=0x250, lpBuffer=0x23e3cd4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3cd4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.812] SetEndOfFile (hFile=0x250) returned 1 [0278.812] CloseHandle (hObject=0x250) returned 1 [0278.812] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.813] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.814] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.814] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.814] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.814] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.814] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.814] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.814] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.815] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.815] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.815] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.815] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.815] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.815] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.815] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.815] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.815] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.815] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.816] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.816] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.816] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.816] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.816] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.816] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.816] CryptDestroyKey (hKey=0x55e650) returned 1 [0278.816] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0278.816] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\nn-no\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\nn-no\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e80018f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ea3c6d9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a1a9538, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.817] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e80018f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ea3c6d9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a1a9538, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.817] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ea3c6d9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ea3c6d9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5ebe02eb, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x14cc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.817] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a1a9538, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a1a9538, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a1a9538, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.817] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a1a9538, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a1a9538, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a1a9538, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.817] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.817] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ec78c0d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ec78c0d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5f222205, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="nso-za", cAlternateFileName="")) returned 1 [0278.817] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.817] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.823] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.823] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.823] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c10) returned 1 [0278.824] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.824] CryptHashData (hHash=0x55e650, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.824] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0278.824] CryptDestroyHash (hHash=0x55e650) returned 1 [0278.824] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.824] GetLastError () returned 0x0 [0278.824] GetLastError () returned 0x0 [0278.824] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.825] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\nso-za\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\nso-za\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.826] WriteFile (in: hFile=0x250, lpBuffer=0x23e3d14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3d14*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.827] SetEndOfFile (hFile=0x250) returned 1 [0278.827] CloseHandle (hObject=0x250) returned 1 [0278.828] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.829] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.829] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.829] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.830] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.830] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.830] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.830] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.831] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.831] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.831] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.831] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.831] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.831] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0278.831] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0278.832] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\nso-za\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\nso-za\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ec78c0d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5f222205, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a1d531f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.832] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ec78c0d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5f222205, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a1d531f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.832] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f222205, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5f222205, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5fc90822, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x16cc0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.832] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a1d531f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a1d531f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a1d531f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.832] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a1d531f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a1d531f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a1d531f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.832] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.832] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x518475c3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x518475c3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x519eadfe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x5d4c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="OneDrive.exe", cAlternateFileName="")) returned 1 [0278.832] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ff65328, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ff65328, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x60e25c42, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="or-in", cAlternateFileName="")) returned 1 [0278.832] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.832] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.832] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.833] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.833] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.833] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570e30) returned 1 [0278.834] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.834] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.834] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.834] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.834] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.834] GetLastError () returned 0x0 [0278.834] GetLastError () returned 0x0 [0278.834] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.835] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\or-in\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\or-in\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.836] WriteFile (in: hFile=0x250, lpBuffer=0x23e3d54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3d54*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.837] SetEndOfFile (hFile=0x250) returned 1 [0278.837] CloseHandle (hObject=0x250) returned 1 [0278.837] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.838] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.839] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.839] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.839] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.839] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.840] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.840] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.840] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.840] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.840] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.840] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.840] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.840] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.840] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.840] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.840] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.840] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.841] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.841] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.841] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.841] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.841] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0278.841] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\or-in\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\or-in\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ff65328, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x60e25c42, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a1f59e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.842] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ff65328, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x60e25c42, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a1f59e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.842] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60e25c42, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x60e25c42, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6129e362, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.842] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a1f59e2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a1f59e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a1f59e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.842] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a1f59e2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a1f59e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a1f59e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.842] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.842] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61e63d2f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x61e63d2f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x620c61fa, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="pa", cAlternateFileName="")) returned 1 [0278.842] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.842] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.842] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.843] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.843] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0278.843] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.843] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.843] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0278.844] CryptDestroyHash (hHash=0x55e910) returned 1 [0278.844] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.844] GetLastError () returned 0x0 [0278.844] GetLastError () returned 0x0 [0278.844] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.844] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\pa\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\pa\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.845] WriteFile (in: hFile=0x250, lpBuffer=0x23e3d94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3d94*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.847] SetEndOfFile (hFile=0x250) returned 1 [0278.847] CloseHandle (hObject=0x250) returned 1 [0278.847] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.848] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.848] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.848] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.853] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.854] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.854] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.854] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.854] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.855] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.855] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.859] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.859] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.860] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.860] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0278.860] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0278.860] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\pa\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\pa\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61e63d2f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x620c61fa, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a1f59e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.861] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61e63d2f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x620c61fa, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a1f59e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.861] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x620c61fa, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x620c61fa, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6247ff69, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x160c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.861] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a1f59e2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a1f59e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a1f59e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.861] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a1f59e2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a1f59e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a1f59e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.861] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.864] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b701d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x629b701d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x637def0d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="pa-arab", cAlternateFileName="")) returned 1 [0278.865] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.865] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.865] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.865] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.866] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570748) returned 1 [0278.867] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.867] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.867] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.867] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.867] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.867] GetLastError () returned 0x0 [0278.867] GetLastError () returned 0x0 [0278.867] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.868] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\pa-arab\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\pa-arab\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.871] WriteFile (in: hFile=0x250, lpBuffer=0x23e3dd4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3dd4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.874] SetEndOfFile (hFile=0x250) returned 1 [0278.874] CloseHandle (hObject=0x250) returned 1 [0278.874] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.876] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.877] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.877] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.878] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.878] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.878] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.878] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.878] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.878] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.878] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.878] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.879] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.879] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.879] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.879] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.879] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.879] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.879] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.879] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.879] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.879] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.880] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.880] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.880] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0278.880] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\pa-arab\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\pa-arab\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b701d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x637def0d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a24de6a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.880] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x629b701d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x637def0d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a24de6a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.880] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x637def0d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x637def0d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6435835e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.881] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a24de6a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a24de6a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a253f2b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.881] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a24de6a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a24de6a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a253f2b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.881] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.881] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x643f0dfd, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x643f0dfd, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x64653213, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="pa-arab-pk", cAlternateFileName="PA-ARA~1")) returned 1 [0278.881] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.881] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.882] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.882] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.882] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.882] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0278.883] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.883] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.883] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e390) returned 1 [0278.883] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.883] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.883] GetLastError () returned 0x0 [0278.883] GetLastError () returned 0x0 [0278.883] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.884] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\pa-arab-pk\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\pa-arab-pk\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.888] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e14*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.889] SetEndOfFile (hFile=0x250) returned 1 [0278.889] CloseHandle (hObject=0x250) returned 1 [0278.889] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.890] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.890] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.891] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.891] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.891] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.892] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.892] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.892] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.892] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.893] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.893] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.893] CryptDestroyKey (hKey=0x55e390) returned 1 [0278.893] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0278.893] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\pa-arab-pk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\pa-arab-pk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x643f0dfd, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x64653213, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a277b53, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0278.894] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x643f0dfd, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x64653213, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a277b53, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.894] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64653213, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x64653213, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x64aa577d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.894] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2719e7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a2719e7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a277b53, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.894] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2719e7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a2719e7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a277b53, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.894] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0278.894] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64decb7e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x64decb7e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6523efba, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="pl", cAlternateFileName="")) returned 1 [0278.894] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.894] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.894] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.894] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.894] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.895] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570e30) returned 1 [0278.895] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.895] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.895] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.895] CryptDestroyHash (hHash=0x55e650) returned 1 [0278.896] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.896] GetLastError () returned 0x0 [0278.896] GetLastError () returned 0x0 [0278.896] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.896] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\pl\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\pl\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.897] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e54*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.899] SetEndOfFile (hFile=0x250) returned 1 [0278.899] CloseHandle (hObject=0x250) returned 1 [0278.899] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.900] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.900] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.900] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.900] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.900] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.900] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.901] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.901] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.901] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.901] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.901] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.901] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.901] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.901] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.901] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.901] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.902] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.902] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.902] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.902] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.902] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.902] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.902] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.902] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.902] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.905] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.905] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0278.905] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\pl\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\pl\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64decb7e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6523efba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a277b53, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.905] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x64decb7e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6523efba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a277b53, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.905] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6523efba, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6523efba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x654edd0a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x16ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.905] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a277b53, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a277b53, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a277b53, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.905] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a277b53, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a277b53, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a277b53, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.905] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.905] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65560215, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x65560215, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x65834c57, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="prs-af", cAlternateFileName="")) returned 1 [0278.906] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.906] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.906] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.906] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.906] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.906] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.906] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0278.907] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.907] CryptHashData (hHash=0x55e7d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.907] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0278.907] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0278.907] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.907] GetLastError () returned 0x0 [0278.907] GetLastError () returned 0x0 [0278.907] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.908] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\prs-af\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\prs-af\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.912] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e94*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.914] SetEndOfFile (hFile=0x250) returned 1 [0278.914] CloseHandle (hObject=0x250) returned 1 [0278.914] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.915] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.915] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.915] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.915] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.915] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.916] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.916] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.916] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.916] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.916] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.916] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.916] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.916] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.917] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.917] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.917] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.917] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.917] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.917] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.917] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.918] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.918] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.918] CryptDestroyKey (hKey=0x55e650) returned 1 [0278.918] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0278.918] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\prs-af\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\prs-af\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65560215, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x65834c57, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a29e9e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.919] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x65560215, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x65834c57, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a29e9e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.919] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65834c57, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x65834c57, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x65b2fd08, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.919] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a29e9e9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a29e9e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a29e9e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.919] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a29e9e9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a29e9e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a29e9e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.919] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.919] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661645b7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x661645b7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x66f401b4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="pt-br", cAlternateFileName="")) returned 1 [0278.919] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.919] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.919] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.919] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.919] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.919] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.920] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570e30) returned 1 [0278.920] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.920] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.920] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e310) returned 1 [0278.920] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.920] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.920] GetLastError () returned 0x0 [0278.920] GetLastError () returned 0x0 [0278.921] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.921] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\pt-br\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\pt-br\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.923] WriteFile (in: hFile=0x250, lpBuffer=0x23e3ed4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ed4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.924] SetEndOfFile (hFile=0x250) returned 1 [0278.924] CloseHandle (hObject=0x250) returned 1 [0278.924] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.925] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.925] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.925] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.925] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.925] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.925] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.926] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.926] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.926] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.926] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.926] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.926] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.927] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.927] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.927] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.927] CryptDestroyKey (hKey=0x55e310) returned 1 [0278.927] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0278.927] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\pt-br\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\pt-br\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661645b7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x66f401b4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a2c4313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0278.928] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661645b7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x66f401b4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a2c4313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.928] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f401b4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x66f401b4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6758246d, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.928] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2c4313, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a2c4313, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a2c4313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.928] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2c4313, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a2c4313, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a2c4313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.928] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0278.928] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6761ad3f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6761ad3f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6787d40a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="pt-pt", cAlternateFileName="")) returned 1 [0278.928] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.928] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.928] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.928] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.928] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0278.929] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.929] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.929] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0278.929] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.929] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.929] GetLastError () returned 0x0 [0278.929] GetLastError () returned 0x0 [0278.929] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.930] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\pt-pt\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\pt-pt\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.931] WriteFile (in: hFile=0x250, lpBuffer=0x23e3f14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f14*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.932] SetEndOfFile (hFile=0x250) returned 1 [0278.932] CloseHandle (hObject=0x250) returned 1 [0278.932] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.933] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.933] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.933] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.933] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.934] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.934] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.934] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.934] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.934] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.934] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.935] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.935] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.935] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.935] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.935] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.935] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.935] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.935] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.935] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.935] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.935] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.935] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.936] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.936] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.936] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.936] CryptDestroyKey (hKey=0x55e650) returned 1 [0278.936] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0278.936] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\pt-pt\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\pt-pt\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6761ad3f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6787d40a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a2c4313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0278.936] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6761ad3f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6787d40a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a2c4313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.937] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6787d40a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6787d40a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67b05aac, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x15ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.937] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2c4313, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a2c4313, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a2c4313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.937] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2c4313, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a2c4313, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a2c4313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.937] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0278.937] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67d68156, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67d68156, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6820824a, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="qut-latn", cAlternateFileName="")) returned 1 [0278.937] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.937] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.937] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.937] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.937] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.937] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.937] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571380) returned 1 [0278.938] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.938] CryptHashData (hHash=0x55e390, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.938] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.938] CryptDestroyHash (hHash=0x55e390) returned 1 [0278.938] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.938] GetLastError () returned 0x0 [0278.938] GetLastError () returned 0x0 [0278.939] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.939] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\qut-latn\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\qut-latn\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.940] WriteFile (in: hFile=0x250, lpBuffer=0x23e3f54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f54*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.942] SetEndOfFile (hFile=0x250) returned 1 [0278.942] CloseHandle (hObject=0x250) returned 1 [0278.942] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.943] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.943] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.943] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.943] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.943] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.943] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.943] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.943] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.943] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.944] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.944] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.944] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.944] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.944] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.944] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.944] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.944] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.944] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.944] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.944] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.944] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.944] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.944] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.945] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.945] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.945] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.945] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.945] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0278.945] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\qut-latn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\qut-latn\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67d68156, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6820824a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a2ea5e1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0278.945] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67d68156, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6820824a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a2ea5e1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.945] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6820824a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6820824a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x684b56cd, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x17ec0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.945] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2ea5e1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a2ea5e1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a2ea5e1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.945] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2ea5e1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a2ea5e1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a2ea5e1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.946] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0278.946] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68501b94, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x68501b94, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x68ad15e9, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="quz-pe", cAlternateFileName="")) returned 1 [0278.946] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.946] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.946] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.946] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.946] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.946] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.946] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0278.947] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.947] CryptHashData (hHash=0x55e7d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.947] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0278.947] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0278.947] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.947] GetLastError () returned 0x0 [0278.947] GetLastError () returned 0x0 [0278.947] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.948] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\quz-pe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\quz-pe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.949] WriteFile (in: hFile=0x250, lpBuffer=0x23e3f94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f94*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.960] SetEndOfFile (hFile=0x250) returned 1 [0278.960] CloseHandle (hObject=0x250) returned 1 [0278.960] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.961] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.961] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.961] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.962] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.962] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.962] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.962] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.962] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.963] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.963] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.963] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.963] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.963] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0278.963] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0278.963] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\quz-pe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\quz-pe\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68501b94, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x68ad15e9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a2ea5e1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.963] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68501b94, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x68ad15e9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a2ea5e1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.964] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ad15e9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x68ad15e9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6902ec5e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x168c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.964] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2ea5e1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a2ea5e1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a3107ed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.964] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2ea5e1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a2ea5e1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a3107ed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.964] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.964] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3131919d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3131919d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x316140d2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa0ec0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RemoteAccess.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="REMOTE~1.CRY")) returned 1 [0278.964] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6928c707, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6928c707, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x694c8d43, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ro", cAlternateFileName="")) returned 1 [0278.964] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.964] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.964] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.964] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.964] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570748) returned 1 [0278.965] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.966] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.966] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.966] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0278.966] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.966] GetLastError () returned 0x0 [0278.966] GetLastError () returned 0x0 [0278.966] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.966] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ro\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ro\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.968] WriteFile (in: hFile=0x250, lpBuffer=0x23e3fd4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3fd4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.969] SetEndOfFile (hFile=0x250) returned 1 [0278.969] CloseHandle (hObject=0x250) returned 1 [0278.970] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.970] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.970] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.971] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.971] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.971] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.971] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0278.971] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.971] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.971] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.972] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.972] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.972] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.972] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.972] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.972] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.973] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.973] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.973] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.974] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0278.974] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ro\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ro\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6928c707, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x694c8d43, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a336a23, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0278.974] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6928c707, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x694c8d43, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a336a23, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.974] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x694c8d43, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x694c8d43, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x69b573d0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.974] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a336a23, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a336a23, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a336a23, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.974] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a336a23, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a336a23, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a336a23, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.974] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0278.974] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b573d0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x69b573d0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6a811240, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ru", cAlternateFileName="")) returned 1 [0278.975] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.975] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.975] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.975] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0278.975] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0278.976] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.976] CryptHashData (hHash=0x55e310, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.976] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0278.976] CryptDestroyHash (hHash=0x55e310) returned 1 [0278.976] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.976] GetLastError () returned 0x0 [0278.976] GetLastError () returned 0x0 [0278.976] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.977] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ru\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ru\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.978] WriteFile (in: hFile=0x250, lpBuffer=0x23e5d1c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e5d1c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.979] SetEndOfFile (hFile=0x250) returned 1 [0278.980] CloseHandle (hObject=0x250) returned 1 [0278.980] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.980] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.980] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.980] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0278.982] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.982] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.982] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.982] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.982] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.982] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.982] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.982] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.982] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.982] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.982] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.983] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.983] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.983] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.983] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.983] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.984] CryptDestroyKey (hKey=0x55e910) returned 1 [0278.984] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0278.984] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\ru\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\ru\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b573d0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6a811240, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a336a23, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0278.984] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69b573d0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6a811240, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a336a23, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.984] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a811240, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6a811240, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6acfbf1e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.984] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a336a23, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a336a23, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a336a23, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.984] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a336a23, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a336a23, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a336a23, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.984] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0278.984] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aeebefe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6aeebefe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6b2cbc78, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="rw", cAlternateFileName="")) returned 1 [0278.984] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.984] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.984] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.985] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.985] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0278.985] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0278.985] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0278.985] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.985] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0278.985] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0278.985] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0278.985] GetLastError () returned 0x0 [0278.985] GetLastError () returned 0x0 [0278.986] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.986] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.987] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\rw\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\rw\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0278.988] WriteFile (in: hFile=0x250, lpBuffer=0x23e4024*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e4024*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0278.989] SetEndOfFile (hFile=0x250) returned 1 [0278.989] CloseHandle (hObject=0x250) returned 1 [0278.989] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0278.990] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.990] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0278.990] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0278.990] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0278.990] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.991] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0278.991] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0278.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.991] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.991] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0278.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0278.991] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0278.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0278.992] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0278.992] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0278.992] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.992] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0278.992] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0278.992] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0278.992] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0278.992] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_3\\rw\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_3\\rw\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aeebefe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6b2cbc78, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a35e5ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0278.993] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aeebefe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6b2cbc78, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a35e5ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0278.993] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b2cbc78, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6b2cbc78, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6b71df77, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSync.LocalizedResources.dll.mui", cAlternateFileName="FILESY~1.MUI")) returned 1 [0278.993] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a35e5ac, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a35e5ac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a35e5ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0278.993] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a35e5ac, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a35e5ac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a35e5ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0278.993] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0278.993] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316868d5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x316868d5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x316868d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x124b, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ScreenshotLogo.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SCREEN~1.CRY")) returned 1 [0278.993] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x316868d5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x316868d5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x31d8772b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6c00a, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ScreenshotOptIn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SCREEN~2.CRY")) returned 1 [0278.993] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31d8772b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x31d8772b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x31df9e97, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2ff40, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="sqmapi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SQMAPI~1.CRY")) returned 1 [0278.993] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31f774ea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x31f774ea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x31f9d848, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SqmWrapper.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SQMWRA~1.CRY")) returned 1 [0278.993] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31fc39b9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x31fc39b9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x324663c2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3018c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SyncEngine.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SYNCEN~1.CRY")) returned 1 [0278.993] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x324663c2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x324663c2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x325bd98a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x494c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Telemetry.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TELEME~1.CRY")) returned 1 [0278.993] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325e3b6d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x325e3b6d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3281fe04, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x632c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="VideoStreamingPlugin.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VIDEOS~1.CRY")) returned 1 [0278.993] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32846116, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x32846116, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x32af41c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x684c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="wlmfds.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WLMFDS~1.CRY")) returned 1 [0278.993] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b1a3b0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x32b1a3b0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x334ddd7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x5d6c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="WnsClientApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WNSCLI~1.CRY")) returned 1 [0278.993] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b1a3b0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x32b1a3b0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x334ddd7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x5d6c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="WnsClientApi.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WNSCLI~1.CRY")) returned 0 [0278.993] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0278.993] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2a1d565, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xb2c68d12, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2c68d12, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7041746e, dwReserved1=0x6c642e69, cFileName="17.3.5892.0626_4", cAlternateFileName="177A54~1.062")) returned 1 [0278.993] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0278.994] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0278.994] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0278.994] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0278.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0278.994] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0278.994] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0278.995] CryptHashData (hHash=0x55e390, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0278.995] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0278.995] CryptDestroyHash (hHash=0x55e390) returned 1 [0278.995] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0278.995] GetLastError () returned 0x0 [0278.995] GetLastError () returned 0x0 [0278.995] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0278.995] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0278.996] WriteFile (in: hFile=0x24c, lpBuffer=0x23e4044*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e4044*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.002] SetEndOfFile (hFile=0x24c) returned 1 [0279.002] CloseHandle (hObject=0x24c) returned 1 [0279.002] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.003] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.003] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0279.003] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.004] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.004] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.004] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.004] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.004] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.005] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.005] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.005] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0279.005] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0279.005] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2a1d565, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xb2c68d12, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x4a35e5ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0279.005] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2a1d565, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xb2c68d12, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x4a35e5ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.005] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c2b9548, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x33e4b162, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x33e4b162, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0279.006] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.006] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.006] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.006] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0279.006] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0279.007] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.007] CryptHashData (hHash=0x55e390, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.007] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e310) returned 1 [0279.007] CryptDestroyHash (hHash=0x55e390) returned 1 [0279.007] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.007] GetLastError () returned 0x0 [0279.007] GetLastError () returned 0x0 [0279.007] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.007] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.009] WriteFile (in: hFile=0x250, lpBuffer=0x23e527c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e527c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.010] SetEndOfFile (hFile=0x250) returned 1 [0279.010] CloseHandle (hObject=0x250) returned 1 [0279.010] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.011] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.011] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.011] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0279.014] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.015] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.015] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.015] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.015] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.015] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.016] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.016] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.016] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.016] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.016] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.016] CryptDestroyKey (hKey=0x55e310) returned 1 [0279.016] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0279.016] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c2b9548, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x33e4b162, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a383f7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0279.016] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c2b9548, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x33e4b162, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a383f7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.016] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334e7980, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x334e7980, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x339603c1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18f6c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FileSyncShell64.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILESY~1.CRY")) returned 1 [0279.016] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a383f7e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a383f7e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a383f7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.017] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33986abe, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x33986abe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x33b500db, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="msvcp120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MSVCP1~1.CRY")) returned 1 [0279.017] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bc2946, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x33bc2946, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x33e4b162, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MSVCR1~1.CRY")) returned 1 [0279.017] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bc2946, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x33bc2946, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x33e4b162, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="msvcr120.dll.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MSVCR1~1.CRY")) returned 0 [0279.017] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0279.017] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a35e5ac, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a35e5ac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a383f7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6c642e30, dwReserved1=0x72632e6c, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.017] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a35e5ac, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a35e5ac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a383f7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6c642e30, dwReserved1=0x72632e6c, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.017] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0279.017] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x495e39d6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x495e39d6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x495e39d6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.017] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b49234, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87b49234, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="setup", cAlternateFileName="")) returned 1 [0279.017] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.017] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.017] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.017] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.018] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0279.018] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571490) returned 1 [0279.018] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.018] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.018] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0279.018] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.018] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.018] GetLastError () returned 0x0 [0279.018] GetLastError () returned 0x0 [0279.018] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.019] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.020] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.020] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.021] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.023] SetEndOfFile (hFile=0x24c) returned 1 [0279.023] CloseHandle (hObject=0x24c) returned 1 [0279.023] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.024] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.024] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0279.024] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.024] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.025] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.025] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.025] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.025] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.025] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.026] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.026] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.026] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0279.026] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0279.026] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b49234, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4a3ab2fe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.026] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b49234, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4a3ab2fe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.026] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a3ab2fe, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a3ab2fe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a3ab2fe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.026] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x34951fdd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34951fdd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0279.027] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.027] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.027] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.027] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.027] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.027] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0279.027] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0279.028] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.028] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.028] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0279.028] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.028] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.028] GetLastError () returned 0x0 [0279.028] GetLastError () returned 0x0 [0279.028] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.029] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.030] WriteFile (in: hFile=0x250, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.031] SetEndOfFile (hFile=0x250) returned 1 [0279.031] CloseHandle (hObject=0x250) returned 1 [0279.031] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.032] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.032] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0279.032] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.033] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.033] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.033] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.033] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.033] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.034] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.034] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.034] CryptDestroyKey (hKey=0x55e610) returned 1 [0279.034] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0279.034] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x34951fdd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a3cf42d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0279.034] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x34951fdd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a3cf42d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.034] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e71397, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x33e71397, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x33e97511, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x215e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2021-02-18_130550_474-cac.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="2021-0~1.CRY")) returned 1 [0279.034] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33e97511, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x33e97511, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x33fc8821, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2021-02-18_130550_ac-d08.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="2021-0~2.CRY")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a3cf42d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a3cf42d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a3cf42d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33fc8821, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x33fc8821, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3422ae9b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x234b2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Install-PerUser_2021-02-11_125336_9c0-9f8.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="INSTAL~1.CRY")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34251010, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34251010, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x342e98cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2745e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Install-PerUser_2021-02-11_131859_f38-f3c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="INSTAL~2.CRY")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x342e98cd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x342e98cd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3435c344, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x36366, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Install-PerUser_2021-02-11_132413_e60-e64.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="INSTAL~3.CRY")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3435c344, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3435c344, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x343a863d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x390a2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Install-PerUser_2021-02-11_132743_ca8-cac.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="INSTAL~4.CRY")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x343ce8b7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x343ce8b7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x344d9833, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x5c1cc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Install-PerUser_2021-02-11_134548_958-b14.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IND092~1.CRY")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344ffbfa, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x344ffbfa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34525cc5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Install_2021-02-11_125336_460-898.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IN8255~1.CRY")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34525cc5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34525cc5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3454becc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Install_2021-02-11_131858_ed0-ed4.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IN0654~1.CRY")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3454becc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3454becc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x345be71f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Install_2021-02-11_132412_e10-e14.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IN4C58~1.CRY")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345e4c30, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x345e4c30, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3463239b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xf5f6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Install_2021-02-11_132742_c8c-c90.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IN41CD~1.CRY")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3463239b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3463239b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34656f27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xfa9c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Install_2021-02-11_134547_2bc-868.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IN8D61~1.CRY")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34656f27, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34656f27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34715b80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x10c74, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Uninstall-PerMachine_2022-08-03_151233_e44-b50.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UNINST~1.CRY")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34715b80, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34715b80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x347d4785, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x11f56, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Uninstall-PerUser_2022-08-03_151233_600-778.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UNINST~2.CRY")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x347d4785, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x347d4785, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34951fdd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xfc98, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Uninstall_2022-08-03_151232_fb8-87c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UNINST~3.CRY")) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x347d4785, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x347d4785, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34951fdd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xfc98, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Uninstall_2022-08-03_151232_fb8-87c.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UNINST~3.CRY")) returned 0 [0279.035] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x34951fdd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34951fdd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 0 [0279.035] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87b49234, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87b49234, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87b49234, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="setup", cAlternateFileName="")) returned 0 [0279.035] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0279.035] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11bc67, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x847a2bfc, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Outlook", cAlternateFileName="")) returned 1 [0279.036] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.036] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.036] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.036] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.036] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.036] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0279.036] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571050) returned 1 [0279.037] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0279.037] CryptHashData (hHash=0x55e390, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.037] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e290) returned 1 [0279.037] CryptDestroyHash (hHash=0x55e390) returned 1 [0279.037] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0279.037] GetLastError () returned 0x0 [0279.037] GetLastError () returned 0x0 [0279.037] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.037] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.038] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.038] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0279.039] WriteFile (in: hFile=0x248, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.040] SetEndOfFile (hFile=0x248) returned 1 [0279.040] CloseHandle (hObject=0x248) returned 1 [0279.041] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.042] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.042] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0279.042] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.042] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.043] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.043] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.044] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.044] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.044] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.044] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.044] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.044] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.044] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.044] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.044] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.044] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.045] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.045] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.045] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.045] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.045] CryptDestroyKey (hKey=0x55e290) returned 1 [0279.045] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0279.045] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11bc67, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x4a3cf42d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0279.045] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11bc67, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x847a2bfc, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x4a3cf42d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.045] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11cf49, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a11cf49, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x3a11cf49, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="gliding", cAlternateFileName="")) returned 1 [0279.046] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.046] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.046] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.046] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0279.046] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0279.047] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.047] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.047] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0279.047] CryptDestroyHash (hHash=0x55e790) returned 1 [0279.047] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.047] GetLastError () returned 0x0 [0279.047] GetLastError () returned 0x0 [0279.047] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.048] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\gliding\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\gliding\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.049] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.050] SetEndOfFile (hFile=0x24c) returned 1 [0279.050] CloseHandle (hObject=0x24c) returned 1 [0279.050] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.051] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.051] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.051] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.052] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.052] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0279.052] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.052] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.052] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.052] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.052] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.052] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.053] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.053] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.053] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.053] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.053] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.053] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.053] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.053] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.053] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.053] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.053] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.053] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.053] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.054] CryptDestroyKey (hKey=0x55e610) returned 1 [0279.054] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0279.054] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\gliding\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\gliding\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11cf49, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a11cf49, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x4a3f5712, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0279.054] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a11cf49, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x3a11cf49, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x4a3f5712, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.054] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a3f5712, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a3f5712, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a3f5712, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.054] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a3f5712, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a3f5712, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a3f5712, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.054] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0279.054] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a3cf42d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a3cf42d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a3cf42d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.054] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x847a2bfc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x34bb43c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34bb43c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 1 [0279.054] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.054] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.055] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.055] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.055] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.055] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0279.055] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0279.055] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.055] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.056] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0279.056] CryptDestroyHash (hHash=0x55e610) returned 1 [0279.056] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.056] GetLastError () returned 0x0 [0279.056] GetLastError () returned 0x0 [0279.056] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.057] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.057] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.058] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.060] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.061] SetEndOfFile (hFile=0x24c) returned 1 [0279.061] CloseHandle (hObject=0x24c) returned 1 [0279.061] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.062] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.062] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.062] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.062] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.062] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.062] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0279.063] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.063] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.063] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.063] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.063] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.063] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.063] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.063] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.063] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.063] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.063] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.063] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.064] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.064] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.064] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.064] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.064] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.064] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.064] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.064] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.064] CryptDestroyKey (hKey=0x55e650) returned 1 [0279.064] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0279.064] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\outlook\\roamcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x847a2bfc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x34bb43c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a3f5712, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0279.065] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x847a2bfc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x34bb43c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a3f5712, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.065] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a3f5712, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a3f5712, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a41c3b6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.065] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a10aff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34a10aff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34a36cd4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1a6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Stream_AvailabilityOptions_2_2C7AA04D2219194EA70292F5EBA3A280.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STREAM~1.CRY")) returned 1 [0279.065] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a36cd4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34a36cd4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34b42f44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Stream_Calendar_2_9CB11E4EC4310E4C8A521398899F6363.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STREAM~2.CRY")) returned 1 [0279.065] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b42f44, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34b42f44, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34b42f44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Stream_ConversationPrefs_2_CB6E3F7FAEA44A4FA14976E46D022840.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STREAM~3.CRY")) returned 1 [0279.065] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b42f44, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34b42f44, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34b7c688, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Stream_RssRule_2_89165BE322C99248809EDE195CDE0B87.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STREAM~4.CRY")) returned 1 [0279.065] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b8e198, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34b8e198, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34b8e198, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Stream_TableViewPreviewPrefs_2_A742548D6458CC4C8687C7E265CEB954.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ST78D0~1.CRY")) returned 1 [0279.065] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b8e198, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34b8e198, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34b8e198, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Stream_TCPrefs_2_D3E71568CFF98B44AA768B6125CC6184.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ST0DEF~1.CRY")) returned 1 [0279.065] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b8e198, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34b8e198, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34bb43c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ST5247~1.CRY")) returned 1 [0279.065] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b8e198, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34b8e198, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34bb43c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Stream_WorkHours_1_79CCE53C766C8E47879FEABFB445E1F9.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ST5247~1.CRY")) returned 0 [0279.065] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0279.065] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x847a2bfc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x34bb43c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34bb43c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 0 [0279.065] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0279.065] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e6568, dwReserved1=0x5f4f545f, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1 [0279.065] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.065] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.067] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.067] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.067] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.067] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0279.067] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570c98) returned 1 [0279.068] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0279.068] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.068] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0279.068] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.068] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0279.068] GetLastError () returned 0x0 [0279.068] GetLastError () returned 0x0 [0279.068] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.068] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\playready\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0279.070] WriteFile (in: hFile=0x248, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.071] SetEndOfFile (hFile=0x248) returned 1 [0279.071] CloseHandle (hObject=0x248) returned 1 [0279.071] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.072] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.072] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0279.072] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.073] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.073] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.073] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.073] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.073] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.074] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.074] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.074] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.074] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.074] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.074] CryptDestroyKey (hKey=0x55e610) returned 1 [0279.074] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0279.074] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\playready\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a41c3b6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.074] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a41c3b6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.075] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a41c3b6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a41c3b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a41c3b6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.075] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0279.075] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.075] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.075] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.075] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.075] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.075] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0279.075] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0279.076] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.076] CryptHashData (hHash=0x55e290, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.076] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0279.076] CryptDestroyHash (hHash=0x55e290) returned 1 [0279.076] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.076] GetLastError () returned 0x0 [0279.076] GetLastError () returned 0x0 [0279.076] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.077] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.077] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.078] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\playready\\internet explorer\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.079] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.080] SetEndOfFile (hFile=0x24c) returned 1 [0279.080] CloseHandle (hObject=0x24c) returned 1 [0279.080] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.081] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.081] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.081] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.081] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0279.082] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.082] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.082] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.082] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.082] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.082] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.082] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.082] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.082] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.082] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.082] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.082] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.083] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.083] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.083] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.083] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.083] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.083] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.083] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0279.083] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0279.083] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\playready\\internet explorer\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a441b0a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0279.084] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a441b0a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.084] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0279.084] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.084] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.084] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.084] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0279.084] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0279.085] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.085] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.085] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0279.085] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.085] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.085] GetLastError () returned 0x0 [0279.085] GetLastError () returned 0x0 [0279.085] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.086] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\playready\\internet explorer\\desktop\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.112] WriteFile (in: hFile=0x250, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.113] SetEndOfFile (hFile=0x250) returned 1 [0279.113] CloseHandle (hObject=0x250) returned 1 [0279.113] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.115] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.115] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0279.115] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.115] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.116] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.116] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.116] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.116] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.116] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.116] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.117] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.117] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0279.117] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0279.117] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\PlayReady\\Internet Explorer\\Desktop\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\playready\\internet explorer\\desktop\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a48dfee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0279.117] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a48dfee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.117] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a48dfee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a48dfee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a48dfee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.117] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a48dfee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a48dfee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a48dfee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.117] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0279.117] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a441b0a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a441b0a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a441b0a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.118] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a441b0a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a441b0a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a441b0a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.118] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0279.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0279.118] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.118] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb9574d8, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName="Vault", cAlternateFileName="")) returned 1 [0279.118] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.118] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.118] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.118] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.118] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.118] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0279.118] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570fc8) returned 1 [0279.119] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0279.119] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.119] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0279.119] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.119] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0279.119] GetLastError () returned 0x0 [0279.119] GetLastError () returned 0x0 [0279.119] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.120] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.121] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.123] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0279.125] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.127] SetEndOfFile (hFile=0x248) returned 1 [0279.127] CloseHandle (hObject=0x248) returned 1 [0279.127] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.128] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.128] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0279.131] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.131] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.131] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.132] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.132] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.132] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.132] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.133] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.133] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.133] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.133] CryptDestroyKey (hKey=0x55e650) returned 1 [0279.133] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0279.133] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a4b4296, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0279.133] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a4b4296, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.134] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8beb5c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb8beb5c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb8beb5c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4BF4C442-9B8A-41A0-B380-DD4A704DDB28", cAlternateFileName="4BF4C4~1")) returned 1 [0279.134] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.134] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.134] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.134] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0279.134] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0279.135] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.135] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.135] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0279.135] CryptDestroyHash (hHash=0x55e790) returned 1 [0279.135] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.135] GetLastError () returned 0x0 [0279.135] GetLastError () returned 0x0 [0279.135] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.136] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.138] WriteFile (in: hFile=0x24c, lpBuffer=0x23e5294*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e5294*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.139] SetEndOfFile (hFile=0x24c) returned 1 [0279.139] CloseHandle (hObject=0x24c) returned 1 [0279.139] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.140] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.140] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.140] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.140] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.140] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.140] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0279.141] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.141] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.141] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.141] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.141] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.141] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.141] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.141] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.141] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.142] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.142] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.142] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.142] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.142] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.142] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.142] CryptDestroyKey (hKey=0x55e610) returned 1 [0279.143] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0279.143] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8beb5c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb8beb5c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a4da360, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.143] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb8beb5c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb8beb5c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4a4da360, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.143] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a4b4296, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a4b4296, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a4da360, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.143] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8beb5c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb8beb5c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb8beb5c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1b4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Policy.vpol", cAlternateFileName="POLICY~1.VPO")) returned 1 [0279.143] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8beb5c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb8beb5c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb8beb5c, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1b4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Policy.vpol", cAlternateFileName="POLICY~1.VPO")) returned 0 [0279.143] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.143] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a4b4296, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a4b4296, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a4b4296, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6c6f7076, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.143] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb9574d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x34bda611, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34bda611, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6f7076, dwReserved1=0x5f4f545f, cFileName="UserProfileRoaming", cAlternateFileName="USERPR~1")) returned 1 [0279.143] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.143] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.144] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.144] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.144] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0279.144] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0279.144] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.144] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.144] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0279.144] CryptDestroyHash (hHash=0x55e610) returned 1 [0279.144] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.144] GetLastError () returned 0x0 [0279.144] GetLastError () returned 0x0 [0279.145] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.145] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.146] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.146] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\userprofileroaming\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.150] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.151] SetEndOfFile (hFile=0x24c) returned 1 [0279.151] CloseHandle (hObject=0x24c) returned 1 [0279.151] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.152] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.153] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0279.153] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.154] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.154] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.154] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.154] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.154] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.155] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.155] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.155] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.155] CryptDestroyKey (hKey=0x55e910) returned 1 [0279.155] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0279.155] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\vault\\userprofileroaming\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb9574d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x34bda611, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a4da360, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0279.155] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb9574d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x34bda611, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a4da360, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.155] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a4da360, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a4da360, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a4da360, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.155] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bb43c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34bb43c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34bda611, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Latest.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="LATEST~1.CRY")) returned 1 [0279.156] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bb43c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34bb43c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34bda611, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Latest.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="LATEST~1.CRY")) returned 0 [0279.156] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0279.156] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb9574d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x34bda611, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34bda611, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6f7076, dwReserved1=0x5f4f545f, cFileName="UserProfileRoaming", cAlternateFileName="USERPR~1")) returned 0 [0279.156] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0279.156] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39b6607d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39b6607d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656c6966, dwReserved1=0x6d616f52, cFileName="Windows", cAlternateFileName="")) returned 1 [0279.156] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.156] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.156] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.156] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.156] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.156] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0279.156] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570968) returned 1 [0279.157] CryptCreateHash (in: hProv=0x570968, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0279.157] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.157] CryptDeriveKey (in: hProv=0x570968, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e210) returned 1 [0279.157] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.157] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0279.157] GetLastError () returned 0x0 [0279.157] GetLastError () returned 0x0 [0279.157] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.158] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0279.161] WriteFile (in: hFile=0x248, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.162] SetEndOfFile (hFile=0x248) returned 1 [0279.162] CloseHandle (hObject=0x248) returned 1 [0279.162] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.163] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.163] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.163] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.163] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0279.163] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.164] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.164] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.164] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.164] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.164] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.165] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.165] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.165] CryptDestroyKey (hKey=0x55e210) returned 1 [0279.165] CryptReleaseContext (hProv=0x570968, dwFlags=0x0) returned 1 [0279.165] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39b6607d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a501280, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0279.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39b6607d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a501280, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2423f479, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2423f479, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2423f479, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0279.166] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.166] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.166] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.166] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0279.166] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5708e0) returned 1 [0279.167] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.167] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.167] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0279.167] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.167] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.167] GetLastError () returned 0x0 [0279.167] GetLastError () returned 0x0 [0279.167] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.168] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.168] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.169] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\0\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\0\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.170] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.171] SetEndOfFile (hFile=0x24c) returned 1 [0279.171] CloseHandle (hObject=0x24c) returned 1 [0279.171] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.172] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.172] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.173] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0279.173] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.173] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.173] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.173] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.174] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.174] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.174] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.174] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.174] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.174] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.174] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.174] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.174] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.175] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0279.175] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0279.175] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\0\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\0\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2423f479, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2423f479, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x4a52698d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0279.175] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2423f479, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2423f479, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x4a52698d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.175] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a52698d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a52698d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a52698d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.175] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a52698d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a52698d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a52698d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.175] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0279.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4d9a492, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x34d5cfc0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34d5cfc0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="1033", cAlternateFileName="")) returned 1 [0279.175] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.175] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.177] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.177] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.178] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0279.178] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0279.178] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.178] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.178] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0279.178] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.178] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.178] GetLastError () returned 0x0 [0279.178] GetLastError () returned 0x0 [0279.179] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.179] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\1033\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\1033\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.180] WriteFile (in: hFile=0x24c, lpBuffer=0x23e524c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e524c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.181] SetEndOfFile (hFile=0x24c) returned 1 [0279.181] CloseHandle (hObject=0x24c) returned 1 [0279.182] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.182] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.182] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.182] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.183] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0279.183] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.183] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.183] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.183] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.183] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.183] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.183] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.190] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.190] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.191] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.191] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.191] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.191] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.191] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.191] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.191] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.191] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.191] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.191] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.192] CryptDestroyKey (hKey=0x55e190) returned 1 [0279.192] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0279.192] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\1033\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\1033\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4d9a492, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x34d5cfc0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a52698d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0279.192] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4d9a492, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x34d5cfc0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a52698d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.192] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a52698d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a52698d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a52698d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.192] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bda611, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34bda611, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34d5cfc0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x62c20, dwReserved0=0x405534, dwReserved1=0x0, cFileName="StructuredQuerySchema.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STRUCT~1.CRY")) returned 1 [0279.192] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bda611, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34bda611, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34d5cfc0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x62c20, dwReserved0=0x405534, dwReserved1=0x0, cFileName="StructuredQuerySchema.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="STRUCT~1.CRY")) returned 0 [0279.193] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0279.193] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37d807a2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3535f50d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3535f50d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x51646572, dwReserved1=0x79726575, cFileName="ActionCenterCache", cAlternateFileName="ACTION~1")) returned 1 [0279.193] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.193] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0279.193] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c10) returned 1 [0279.194] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.194] CryptHashData (hHash=0x55e7d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.194] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0279.194] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0279.194] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.194] GetLastError () returned 0x0 [0279.194] GetLastError () returned 0x0 [0279.194] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.195] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.196] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.196] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.197] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.198] SetEndOfFile (hFile=0x24c) returned 1 [0279.198] CloseHandle (hObject=0x24c) returned 1 [0279.199] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.200] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.200] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.200] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.200] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0279.203] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.203] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.203] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.203] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.203] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.203] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.204] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.204] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.204] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.204] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.204] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.204] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.204] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.205] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.205] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.205] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.205] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.205] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0279.205] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0279.205] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\actioncentercache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37d807a2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3535f50d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a54cb9a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0279.205] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37d807a2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3535f50d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a54cb9a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.205] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a54cb9a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a54cb9a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a54cb9a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.205] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34d5cfc0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34d5cfc0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34e428a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{2309EC7E-231D-46A8-B772-3B87526093EF}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{2309E~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e428a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34e428a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34eaf3b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{360B3910-A8D3-4307-8D6E-6FF79565CF29}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{360B3~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34eaf3b4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34eaf3b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34ed55b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{3791FFDB-0F9B-43E7-B1BC-F83BE99BE18C}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{3791F~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ed55b4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34ed55b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34ed55b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{521F7180-642B-440A-838D-C4F3A7B3C2C0}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{521F7~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ed55b4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34ed55b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x34f47cf7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{58F0434E-3EF5-468F-AD7B-6D3DABD11658}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{58F04~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34f6dfd6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x34f6dfd6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3502cc37, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{6847B1C1-F55E-44F1-B047-A5D99CF50202}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{6847B~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3502cc37, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3502cc37, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3515dd4d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{7687CA7B-C212-4CA8-B96F-9F0A8EA68CDC}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{7687C~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35184003, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35184003, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x351f66e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{81F3A784-E8DB-4BDD-875C-92E763AED602}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{81F3A~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3521c953, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3521c953, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3521c953, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{8393D971-367B-44C2-B843-3C0BD7C487DF}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{8393D~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35242b9f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35242b9f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35242b9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{8D8B8AE5-2647-4ACA-B14D-B59359B4EC08}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{8D8B8~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35242b9f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35242b9f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3526b4e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{99CFFC93-F44B-4C78-9233-714D3D891D11}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{99CFF~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3526b4e0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3526b4e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3526b4e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{A5095727-B9ED-4A33-A19E-28AE8D170960}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{A5095~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3528efe9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3528efe9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3528efe9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{B835D466-3F3C-4FF0-90E5-D395AAB1594D}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{B835D~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3528efe9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3528efe9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x352b518f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{F147815D-A2FE-4D31-8C0C-760C1D1D0961}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{F1478~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35337a2b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35337a2b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3535f50d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{F7629~1.CRY")) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35337a2b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35337a2b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3535f50d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{F762917D-EDD6-4879-96EE-BD0A93A4E06E}.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{F7629~1.CRY")) returned 0 [0279.206] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0279.206] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f810a8a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x35384195, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35384195, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x452d4437, dwReserved1=0x2d364444, cFileName="Application Shortcuts", cAlternateFileName="APPLIC~1")) returned 1 [0279.206] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.207] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.207] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.207] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.207] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.207] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0279.207] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0279.207] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.208] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.208] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0279.208] CryptDestroyHash (hHash=0x55e290) returned 1 [0279.208] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.208] GetLastError () returned 0x0 [0279.208] GetLastError () returned 0x0 [0279.208] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.208] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\application shortcuts\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.211] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.212] SetEndOfFile (hFile=0x24c) returned 1 [0279.212] CloseHandle (hObject=0x24c) returned 1 [0279.212] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.213] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.213] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.213] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.213] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.213] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.214] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0279.214] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.214] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.214] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.214] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.214] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.214] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.214] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.214] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.215] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.215] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.215] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.215] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.215] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.215] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.215] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.215] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.215] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.215] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.215] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.216] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.216] CryptDestroyKey (hKey=0x55e910) returned 1 [0279.216] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0279.216] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\application shortcuts\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f810a8a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x35384195, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a573d5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0279.216] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f810a8a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x35384195, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a573d5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.216] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3535f50d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3535f50d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35384195, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0279.216] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a573d5a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a573d5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a573d5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.216] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a573d5a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a573d5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a573d5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.216] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0279.216] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xa2cd8e8d, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xa2cd8e8d, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Burn", cAlternateFileName="")) returned 1 [0279.216] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.216] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.217] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.217] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0279.217] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0279.217] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.217] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.217] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0279.217] CryptDestroyHash (hHash=0x55e210) returned 1 [0279.218] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.218] GetLastError () returned 0x0 [0279.218] GetLastError () returned 0x0 [0279.218] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.219] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.219] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.219] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.222] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.223] SetEndOfFile (hFile=0x24c) returned 1 [0279.223] CloseHandle (hObject=0x24c) returned 1 [0279.223] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.224] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.224] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.224] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.224] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.224] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.224] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0279.225] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.225] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.225] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.225] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.225] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.225] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.226] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.226] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.226] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.226] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.226] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.226] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.226] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.226] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.226] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.226] CryptDestroyKey (hKey=0x55e190) returned 1 [0279.226] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0279.226] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xa2cd8e8d, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0x4a59908c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0279.227] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xa2cd8e8d, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0x4a59908c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.227] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3541cb66, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3541cb66, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 1 [0279.227] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.227] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.229] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.229] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.230] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0279.230] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5712f8) returned 1 [0279.233] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.233] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.233] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0279.233] CryptDestroyHash (hHash=0x55e610) returned 1 [0279.233] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.233] GetLastError () returned 0x0 [0279.233] GetLastError () returned 0x0 [0279.233] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.234] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.235] WriteFile (in: hFile=0x250, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.236] SetEndOfFile (hFile=0x250) returned 1 [0279.236] CloseHandle (hObject=0x250) returned 1 [0279.236] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.237] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.237] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.237] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.238] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0279.238] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.238] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.238] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.239] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.239] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.239] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.239] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.240] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.240] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.240] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.240] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.240] CryptDestroyKey (hKey=0x55e650) returned 1 [0279.240] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0279.240] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3541cb66, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a5bf27b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0279.240] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x81988c19, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3541cb66, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a5bf27b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.241] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x353f68ca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x353f68ca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x353f68ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0279.241] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a5bf27b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a5bf27b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a5bf27b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.241] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a5bf27b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a5bf27b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a5bf27b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.241] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0279.282] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x821222b0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x35442d4e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35442d4e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Burn1", cAlternateFileName="")) returned 1 [0279.282] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.282] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.284] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.284] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.284] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.284] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0279.284] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570858) returned 1 [0279.285] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.285] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.285] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0279.285] CryptDestroyHash (hHash=0x55e210) returned 1 [0279.285] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.285] GetLastError () returned 0x0 [0279.285] GetLastError () returned 0x0 [0279.285] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.287] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.287] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.288] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn1\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.289] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.290] SetEndOfFile (hFile=0x250) returned 1 [0279.291] CloseHandle (hObject=0x250) returned 1 [0279.291] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.292] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.292] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.292] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.292] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.292] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.292] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0279.293] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.293] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.295] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.295] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.295] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.296] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.296] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.296] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.296] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.296] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.296] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.296] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.297] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.297] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.297] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.297] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.297] CryptDestroyKey (hKey=0x55e610) returned 1 [0279.297] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0279.297] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn1\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x821222b0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x35442d4e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a631a49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0279.298] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x821222b0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x35442d4e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a631a49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.298] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35442d4e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35442d4e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35442d4e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0279.298] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a631a49, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a631a49, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a631a49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.298] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a631a49, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a631a49, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a631a49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.298] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0279.302] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xa0eeabde, ftCreationTime.dwHighDateTime=0x1d7a941, ftLastAccessTime.dwLowDateTime=0x354690ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x354690ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Burn2", cAlternateFileName="")) returned 1 [0279.302] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.302] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.302] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.302] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.302] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.302] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0279.302] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0279.303] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.303] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.303] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0279.303] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.303] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.303] GetLastError () returned 0x0 [0279.303] GetLastError () returned 0x0 [0279.303] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.304] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn2\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.306] WriteFile (in: hFile=0x250, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.307] SetEndOfFile (hFile=0x250) returned 1 [0279.308] CloseHandle (hObject=0x250) returned 1 [0279.308] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.309] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.309] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.309] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.309] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.310] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0279.310] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.310] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.310] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.310] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.310] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.310] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.313] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.313] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.313] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.313] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.313] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.313] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.313] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.313] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.314] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.314] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.314] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.314] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0279.314] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0279.314] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn2\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn2\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xa0eeabde, ftCreationTime.dwHighDateTime=0x1d7a941, ftLastAccessTime.dwLowDateTime=0x354690ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a657cc7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0279.315] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xa0eeabde, ftCreationTime.dwHighDateTime=0x1d7a941, ftLastAccessTime.dwLowDateTime=0x354690ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a657cc7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.315] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x354690ff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x354690ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x354690ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0279.315] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a657cc7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a657cc7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a657cc7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.315] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a657cc7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a657cc7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a657cc7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.315] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0279.315] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xa2cd8e8d, ftCreationTime.dwHighDateTime=0x1d8a64b, ftLastAccessTime.dwLowDateTime=0x3548f20d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3548f20d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Burn3", cAlternateFileName="")) returned 1 [0279.315] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.315] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.316] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.316] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.316] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.316] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0279.316] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0279.317] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.317] CryptHashData (hHash=0x55e7d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.317] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0279.317] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0279.317] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.317] GetLastError () returned 0x0 [0279.317] GetLastError () returned 0x0 [0279.317] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.318] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.319] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.319] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn3\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn3\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.320] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.322] SetEndOfFile (hFile=0x250) returned 1 [0279.322] CloseHandle (hObject=0x250) returned 1 [0279.322] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.323] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.323] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.324] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.324] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.324] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.324] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0279.328] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.328] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.328] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.328] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.328] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.328] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.329] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.329] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.329] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.329] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.329] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.329] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.329] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.329] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.329] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.329] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.329] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.330] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.330] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.330] CryptDestroyKey (hKey=0x55e910) returned 1 [0279.330] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0279.330] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn3\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\burn\\burn3\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xa2cd8e8d, ftCreationTime.dwHighDateTime=0x1d8a64b, ftLastAccessTime.dwLowDateTime=0x3548f20d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a67de10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0279.330] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xa2cd8e8d, ftCreationTime.dwHighDateTime=0x1d8a64b, ftLastAccessTime.dwLowDateTime=0x3548f20d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a67de10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.330] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x354690ff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x354690ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3548f20d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0279.330] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a67de10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a67de10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a67de10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.331] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a67de10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a67de10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a67de10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.331] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0279.336] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a59908c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a59908c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a59908c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.336] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a59908c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a59908c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a59908c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.336] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0279.336] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f7a181e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x35763e8a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35763e8a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Caches", cAlternateFileName="")) returned 1 [0279.336] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.336] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.336] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.336] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0279.337] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5706c0) returned 1 [0279.337] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.337] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.337] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0279.337] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0279.337] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.337] GetLastError () returned 0x0 [0279.338] GetLastError () returned 0x0 [0279.338] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.338] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.341] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.342] SetEndOfFile (hFile=0x24c) returned 1 [0279.342] CloseHandle (hObject=0x24c) returned 1 [0279.342] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.343] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.343] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.345] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.345] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.345] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.345] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0279.345] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.346] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.346] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.346] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.346] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.346] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.347] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.347] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.347] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.347] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.347] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.348] CryptDestroyKey (hKey=0x55e910) returned 1 [0279.348] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0279.348] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f7a181e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x35763e8a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a6a4133, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0279.348] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f7a181e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x35763e8a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a6a4133, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.348] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4084eafc, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4084eafc, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4084eafc, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cversions.1.db", cAlternateFileName="CVERSI~1.DB")) returned 1 [0279.348] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3548f20d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3548f20d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x354b88e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cversions.1.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CVERSI~1.CRY")) returned 1 [0279.348] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x354b88e2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x354b88e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x354df840, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cversions.3.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CVERSI~2.CRY")) returned 1 [0279.348] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6a4133, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a6a4133, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a6ca1f8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.348] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x354df840, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x354df840, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x356a525f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x62c40, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{286DD990-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{286DD~1.CRY")) returned 1 [0279.348] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7598a98f, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7598a98f, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7598a98f, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x19010, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000018.db", cAlternateFileName="{3DA71~1.DB")) returned 1 [0279.348] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356cb545, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x356cb545, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x356f1905, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x19010, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{3DA71~1.CRY")) returned 1 [0279.348] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d8c54e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x33d8c54e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x33d8c54e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaa90, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000019.db", cAlternateFileName="{3DA71~2.DB")) returned 1 [0279.348] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356f1905, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x356f1905, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x357179b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaa90, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000019.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{3DA71~2.CRY")) returned 1 [0279.348] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x357179b7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x357179b7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35763e8a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1b218, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{AFBF9~1.CRY")) returned 1 [0279.349] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bae338, ftCreationTime.dwHighDateTime=0x1d8c107, ftLastAccessTime.dwLowDateTime=0x2bae338, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x2bae338, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x1ac28, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db", cAlternateFileName="{AFBF9~3.DB")) returned 1 [0279.349] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35763e8a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35763e8a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x357b0721, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1ac28, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{AFBF9~2.CRY")) returned 1 [0279.349] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35763e8a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35763e8a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x357b0721, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1ac28, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000018.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{AFBF9~2.CRY")) returned 0 [0279.349] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0279.349] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f6df80c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44fc5798, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44fc5798, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x382d4131, dwReserved1=0x2d384545, cFileName="Explorer", cAlternateFileName="")) returned 1 [0279.349] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.349] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.349] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0279.349] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570a78) returned 1 [0279.350] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.350] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.350] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0279.350] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0279.350] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.350] GetLastError () returned 0x0 [0279.350] GetLastError () returned 0x0 [0279.351] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.351] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.352] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.352] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.354] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.355] SetEndOfFile (hFile=0x24c) returned 1 [0279.355] CloseHandle (hObject=0x24c) returned 1 [0279.356] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.356] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.357] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0279.357] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.357] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.358] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.358] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.358] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.358] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.359] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.359] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.359] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.359] CryptDestroyKey (hKey=0x55e910) returned 1 [0279.359] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0279.359] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f6df80c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44fc5798, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a6ca1f8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f6df80c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44fc5798, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a6ca1f8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f6df80c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f6df80c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x630ed5c3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x46000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ExplorerStartupLog.etl", cAlternateFileName="EXPLOR~1.ETL")) returned 1 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x414f940e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x414f940e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42b8f150, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ExplorerStartupLog_RunOnce.etl", cAlternateFileName="EXPLOR~2.ETL")) returned 1 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4495cbee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4495cbee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4495cbee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_1280.db", cAlternateFileName="IC6701~1.DB")) returned 1 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x357d66d6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x357d66d6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x357d66d6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_1280.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ICONCA~1.CRY")) returned 1 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4495cbee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4495cbee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4495cbee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_16.db", cAlternateFileName="ICONCA~2.DB")) returned 1 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x357fc76a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x357fc76a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x357fc76a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_16.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ICONCA~2.CRY")) returned 1 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4495cbee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4495cbee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4495cbee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_1920.db", cAlternateFileName="IC5758~1.DB")) returned 1 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35822dd4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35822dd4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35822dd4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_1920.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ICONCA~3.CRY")) returned 1 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4495cbee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4495cbee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4495cbee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_256.db", cAlternateFileName="ICD45C~1.DB")) returned 1 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35848dbb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35848dbb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35848dbb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_256.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ICONCA~4.CRY")) returned 1 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4495cbee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4495cbee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4495cbee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_2560.db", cAlternateFileName="IC33E4~1.DB")) returned 1 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35895250, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35895250, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35895250, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_2560.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ICD9AE~1.CRY")) returned 1 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4495cbee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4495cbee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4495cbee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_32.db", cAlternateFileName="ICONCA~3.DB")) returned 1 [0279.360] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x358bb465, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x358bb465, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35b90287, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_32.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IC991B~1.CRY")) returned 1 [0279.361] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4495cbee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4495cbee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4495cbee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_48.db", cAlternateFileName="ICONCA~4.DB")) returned 1 [0279.361] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c289dd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35c289dd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35c289dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_48.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ICE20A~1.CRY")) returned 1 [0279.361] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4495cbee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4495cbee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4495cbee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_768.db", cAlternateFileName="ICAE5D~1.DB")) returned 1 [0279.361] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c289dd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35c289dd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35c4f4c3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_768.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IC459E~1.CRY")) returned 1 [0279.361] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4495cbee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4495cbee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4495cbee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_96.db", cAlternateFileName="IC1070~1.DB")) returned 1 [0279.361] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c757e7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35c757e7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35c757e7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_96.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IC731C~1.CRY")) returned 1 [0279.361] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44982dff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44982dff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44982dff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_custom_stream.db", cAlternateFileName="ICA148~1.DB")) returned 1 [0279.361] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c757e7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35c757e7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35c9b10e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_custom_stream.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ICD4B9~1.CRY")) returned 1 [0279.361] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44982dff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44982dff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44982dff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_exif.db", cAlternateFileName="IC8CEF~1.DB")) returned 1 [0279.361] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c9b10e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35c9b10e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35cc1328, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_exif.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ICE261~1.CRY")) returned 1 [0279.361] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4495cbee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4495cbee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4495cbee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_idx.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0279.361] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35cc1328, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35cc1328, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35cc1328, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_idx.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ICD5C2~1.CRY")) returned 1 [0279.361] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44982dff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44982dff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44982dff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_sr.db", cAlternateFileName="ICC3DF~1.DB")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35cc1328, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35cc1328, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35ce7583, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_sr.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IC022D~1.CRY")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44982dff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44982dff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44982dff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_wide.db", cAlternateFileName="IC1CB7~1.DB")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ce7583, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35ce7583, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35ce7583, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_wide.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IC5DF6~1.CRY")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44982dff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44982dff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44982dff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_wide_alternate.db", cAlternateFileName="IC8F8E~1.DB")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d0d833, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35d0d833, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35d0d833, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iconcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IC569A~1.CRY")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6ca1f8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a6ca1f8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a6ca1f8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f9ee3e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f9ee3e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f9ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_1280.db", cAlternateFileName="TH2C95~1.DB")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d0d833, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35d0d833, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35d0d833, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_1280.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="THUMBC~1.CRY")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f78d49, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f78d49, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f78d49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_16.db", cAlternateFileName="THUMBC~2.DB")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d33a64, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35d33a64, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35efd796, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_16.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="THUMBC~2.CRY")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f9ee3e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f9ee3e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f9ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_1920.db", cAlternateFileName="TH1CEC~1.DB")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35f23a9a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35f23a9a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x35f23a9a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_1920.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="THUMBC~3.CRY")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f9ee3e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f9ee3e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f9ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_256.db", cAlternateFileName="TH5A2B~1.DB")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35f49bf9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x35f49bf9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3607af63, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_256.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="THUMBC~4.CRY")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f9ee3e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f9ee3e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f9ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_2560.db", cAlternateFileName="THDF2D~1.DB")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360c7423, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x360c7423, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x360c7423, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_2560.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TH13DC~1.CRY")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f78d49, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f78d49, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f78d49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_32.db", cAlternateFileName="THUMBC~3.DB")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360c7423, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x360c7423, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36185ef0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_32.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="THC753~1.CRY")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f9ee3e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f9ee3e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f9ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_48.db", cAlternateFileName="THUMBC~4.DB")) returned 1 [0279.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x361ac289, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x361ac289, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36244d74, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_48.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TH7E64~1.CRY")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f9ee3e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f9ee3e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f9ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_768.db", cAlternateFileName="TH9AED~1.DB")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3626ba90, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3626ba90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36291010, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_768.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TH6908~1.CRY")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f9ee3e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f9ee3e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f9ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_96.db", cAlternateFileName="THB2F1~1.DB")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36291010, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x36291010, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36291010, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_96.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="THB101~1.CRY")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44fc5798, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44fc5798, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44fc5798, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_custom_stream.db", cAlternateFileName="THFBCB~1.DB")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36291010, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x36291010, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36291010, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_custom_stream.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TH550D~1.CRY")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f9ee3e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f9ee3e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f9ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_exif.db", cAlternateFileName="THD0E7~1.DB")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x362b7272, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x362b7272, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x362b7272, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_exif.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TH6FD9~1.CRY")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f78d49, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f78d49, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f78d49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_idx.db", cAlternateFileName="THUMBC~1.DB")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x362b7272, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x362b7272, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x362b7272, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_idx.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="THBA5D~1.CRY")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f9ee3e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f9ee3e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f9ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_sr.db", cAlternateFileName="TH0F82~1.DB")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x362dd4c3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x362dd4c3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x362dd4c3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_sr.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TH309A~1.CRY")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f9ee3e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f9ee3e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f9ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_wide.db", cAlternateFileName="THD793~1.DB")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x362dd4c3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x362dd4c3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x362dd4c3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_wide.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="THF444~1.CRY")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x44f9ee3e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x44f9ee3e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x44f9ee3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_wide_alternate.db", cAlternateFileName="TH4ADE~1.DB")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36303df9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x36303df9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36303df9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="THE259~1.CRY")) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36303df9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x36303df9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36303df9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="thumbcache_wide_alternate.db.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="THE259~1.CRY")) returned 0 [0279.363] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0279.363] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f656863, dwReserved1=0x65646977, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1 [0279.364] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.364] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.364] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.364] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.364] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.364] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.364] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0279.365] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.365] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.365] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0279.365] CryptDestroyHash (hHash=0x55e650) returned 1 [0279.365] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.365] GetLastError () returned 0x0 [0279.365] GetLastError () returned 0x0 [0279.365] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.366] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\gameexplorer\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.370] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.371] SetEndOfFile (hFile=0x24c) returned 1 [0279.371] CloseHandle (hObject=0x24c) returned 1 [0279.372] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.372] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.373] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.373] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.373] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.373] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.373] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.373] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.373] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.373] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.374] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.374] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.374] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.374] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.374] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.374] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.377] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.377] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.378] CryptDestroyKey (hKey=0x55e210) returned 1 [0279.378] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0279.378] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\GameExplorer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\gameexplorer\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a6f06d1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0279.378] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a6f06d1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.378] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6f06d1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a6f06d1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a7168c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.378] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a6f06d1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a6f06d1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a7168c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.378] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0279.378] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x36303df9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36303df9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="History", cAlternateFileName="")) returned 1 [0279.379] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.379] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.379] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.379] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0279.379] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0279.380] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.380] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.380] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0279.380] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.380] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.380] GetLastError () returned 0x0 [0279.380] GetLastError () returned 0x0 [0279.380] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.381] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.382] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.382] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.383] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.383] SetEndOfFile (hFile=0x24c) returned 1 [0279.384] CloseHandle (hObject=0x24c) returned 1 [0279.384] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.385] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.385] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.386] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.386] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.386] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.387] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.387] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.387] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.388] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.388] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.388] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.388] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.388] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.388] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.388] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0279.388] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0279.389] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x36303df9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48d191da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.389] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x36303df9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48d191da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.389] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36303df9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x36303df9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36303df9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x82, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0279.389] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x36329a06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36329a06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 1 [0279.389] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.389] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.389] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.389] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.390] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0279.390] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570d20) returned 1 [0279.390] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.390] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.390] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0279.390] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.391] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.391] GetLastError () returned 0x0 [0279.391] GetLastError () returned 0x0 [0279.391] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.391] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.393] WriteFile (in: hFile=0x250, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.394] SetEndOfFile (hFile=0x250) returned 1 [0279.394] CloseHandle (hObject=0x250) returned 1 [0279.394] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.395] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.395] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0279.396] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.396] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.396] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.396] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.396] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.396] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.396] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.397] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.397] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.397] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.397] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.397] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.397] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.397] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.397] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.397] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.397] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.397] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.397] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.398] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.398] CryptDestroyKey (hKey=0x55e190) returned 1 [0279.398] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0279.398] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x36329a06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a73cba5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0279.398] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x36329a06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a73cba5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.398] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36329a06, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x36329a06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36329a06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0279.398] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a73cba5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a73cba5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a73cba5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.398] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc54e71d8, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x36329a06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36329a06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MSHist012022090520220912", cAlternateFileName="MSHIST~1")) returned 1 [0279.399] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.399] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.399] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.399] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0279.399] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570b00) returned 1 [0279.400] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0279.400] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.400] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0279.400] CryptDestroyHash (hHash=0x55e190) returned 1 [0279.400] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ea58*=0x18) returned 1 [0279.400] GetLastError () returned 0x0 [0279.400] GetLastError () returned 0x0 [0279.400] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.401] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.402] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.426] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022090520220912\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022090520220912\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0279.427] WriteFile (in: hFile=0x254, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.428] SetEndOfFile (hFile=0x254) returned 1 [0279.429] CloseHandle (hObject=0x254) returned 1 [0279.429] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.430] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.430] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.430] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.430] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.430] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.430] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.431] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.431] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.431] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.431] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.431] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.432] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.432] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.432] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.432] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.433] CryptDestroyKey (hKey=0x55e210) returned 1 [0279.433] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0279.433] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022090520220912\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022090520220912\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc54e71d8, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x36329a06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a788fca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0279.433] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc54e71d8, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x36329a06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a788fca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.434] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36329a06, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x36329a06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36329a06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0279.434] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a788fca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a788fca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a788fca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.434] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a788fca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a788fca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a788fca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.434] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0279.434] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc54e71d8, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x36329a06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36329a06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="MSHist012022092020220921", cAlternateFileName="MSHIST~3")) returned 1 [0279.434] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.434] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.435] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.435] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.435] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570a78) returned 1 [0279.436] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0279.436] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.436] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0279.436] CryptDestroyHash (hHash=0x55e190) returned 1 [0279.436] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18) returned 1 [0279.436] GetLastError () returned 0x0 [0279.436] GetLastError () returned 0x0 [0279.436] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.437] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022092020220921\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022092020220921\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0279.438] WriteFile (in: hFile=0x254, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.440] SetEndOfFile (hFile=0x254) returned 1 [0279.440] CloseHandle (hObject=0x254) returned 1 [0279.440] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.441] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.441] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0279.444] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.444] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.444] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.444] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.444] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.445] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.445] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.445] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.445] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.445] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.445] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.445] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.445] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.446] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.446] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.446] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.446] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.446] CryptDestroyKey (hKey=0x55e210) returned 1 [0279.446] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0279.447] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012022092020220921\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012022092020220921\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc54e71d8, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x36329a06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a7af1e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0279.447] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc54e71d8, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x36329a06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a7af1e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.447] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36329a06, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x36329a06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36329a06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0279.447] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a7af1e2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a7af1e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a7af1e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.447] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a7af1e2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a7af1e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a7af1e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.447] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0279.447] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc54e71d8, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x36329a06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36329a06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="MSHist012022092020220921", cAlternateFileName="MSHIST~3")) returned 0 [0279.447] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0279.447] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48cccc1b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48cccc1b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a7168c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x32303231, dwReserved1=0x32393032, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.447] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x32303231, dwReserved1=0x32393032, cFileName="Low", cAlternateFileName="")) returned 1 [0279.448] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.448] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.448] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.448] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.448] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.448] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0279.448] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571380) returned 1 [0279.449] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.449] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.450] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0279.450] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.450] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.450] GetLastError () returned 0x0 [0279.450] GetLastError () returned 0x0 [0279.450] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.451] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.451] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.452] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\low\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.454] WriteFile (in: hFile=0x250, lpBuffer=0x23e3524*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3524*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.455] SetEndOfFile (hFile=0x250) returned 1 [0279.459] CloseHandle (hObject=0x250) returned 1 [0279.459] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.460] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.460] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.460] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.461] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.461] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.461] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.462] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.462] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.462] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.462] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.462] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.462] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.462] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.462] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.462] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.462] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.462] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.463] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.463] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.463] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.463] CryptDestroyKey (hKey=0x55e610) returned 1 [0279.463] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0279.463] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\history\\low\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a7d53a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0279.463] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a7d53a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.464] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a7d53a3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a7d53a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a7d53a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.464] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a7d53a3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a7d53a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a7d53a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.464] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0279.464] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x32303231, dwReserved1=0x32393032, cFileName="Low", cAlternateFileName="")) returned 0 [0279.464] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.464] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3634fb94, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3634fb94, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1 [0279.464] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.464] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.464] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.464] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.464] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.469] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0279.470] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.470] CryptHashData (hHash=0x55e390, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.470] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0279.470] CryptDestroyHash (hHash=0x55e390) returned 1 [0279.470] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.470] GetLastError () returned 0x0 [0279.470] GetLastError () returned 0x0 [0279.470] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.471] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.472] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.474] SetEndOfFile (hFile=0x24c) returned 1 [0279.474] CloseHandle (hObject=0x24c) returned 1 [0279.474] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.475] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.475] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.475] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.476] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.476] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.476] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.476] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.477] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.478] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.479] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.479] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.479] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0279.479] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0279.479] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3634fb94, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a7fb686, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0279.480] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3634fb94, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a7fb686, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.480] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3634fb94, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3634fb94, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3634fb94, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0279.480] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a7fb686, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a7fb686, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a7fb686, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.480] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0279.480] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.480] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.480] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.480] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.480] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.480] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.481] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571380) returned 1 [0279.481] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.481] CryptHashData (hHash=0x55e390, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.481] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e2d0) returned 1 [0279.481] CryptDestroyHash (hHash=0x55e390) returned 1 [0279.481] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.482] GetLastError () returned 0x0 [0279.482] GetLastError () returned 0x0 [0279.482] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.483] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.483] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.484] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.485] WriteFile (in: hFile=0x250, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.486] SetEndOfFile (hFile=0x250) returned 1 [0279.487] CloseHandle (hObject=0x250) returned 1 [0279.487] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.488] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.488] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.488] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.488] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0279.488] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.489] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.489] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.489] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.489] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.489] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.490] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.490] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.490] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0279.490] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0279.490] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a821876, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0279.491] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a821876, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.491] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a821876, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a821876, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a821876, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.491] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a821876, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a821876, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a821876, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.491] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0279.491] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0279.491] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0279.491] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3634fb94, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3634fb94, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IECompatUaCache", cAlternateFileName="IECOMP~2")) returned 1 [0279.491] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.491] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.491] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.492] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.492] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0279.492] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0279.492] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.492] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.492] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0279.493] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.493] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.493] GetLastError () returned 0x0 [0279.493] GetLastError () returned 0x0 [0279.493] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.493] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.494] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3584*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3584*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.498] SetEndOfFile (hFile=0x24c) returned 1 [0279.499] CloseHandle (hObject=0x24c) returned 1 [0279.499] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.499] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.500] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.500] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.500] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.500] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.500] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.500] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.500] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.501] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.501] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.501] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.501] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.502] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.502] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.502] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0279.502] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0279.502] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3634fb94, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a821876, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.503] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3634fb94, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a821876, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.503] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3634fb94, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3634fb94, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3634fb94, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0279.503] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a821876, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a821876, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a847aa1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.503] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0279.503] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.503] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.503] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.503] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.503] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.503] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.503] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0279.504] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.504] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.504] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0279.504] CryptDestroyHash (hHash=0x55e190) returned 1 [0279.504] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.504] GetLastError () returned 0x0 [0279.504] GetLastError () returned 0x0 [0279.504] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.505] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.506] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.506] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.510] WriteFile (in: hFile=0x250, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.511] SetEndOfFile (hFile=0x250) returned 1 [0279.511] CloseHandle (hObject=0x250) returned 1 [0279.511] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.513] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.513] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.514] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.514] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.514] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.515] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.515] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.515] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.515] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.515] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.515] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.516] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.516] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.516] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.516] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.516] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.516] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.516] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.517] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0279.517] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0279.517] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a847aa1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0279.517] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a847aa1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.517] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a847aa1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a847aa1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a847aa1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.517] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a847aa1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a847aa1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a847aa1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.517] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0279.517] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0279.517] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.517] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7421f977, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7421f977, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7421f977, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IEDownloadHistory", cAlternateFileName="IEDOWN~1")) returned 1 [0279.517] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.518] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.518] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.518] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.518] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0279.519] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.519] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.519] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0279.519] CryptDestroyHash (hHash=0x55e610) returned 1 [0279.519] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.519] GetLastError () returned 0x0 [0279.519] GetLastError () returned 0x0 [0279.519] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.519] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.521] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3584*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3584*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.523] SetEndOfFile (hFile=0x24c) returned 1 [0279.523] CloseHandle (hObject=0x24c) returned 1 [0279.523] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.524] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.524] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.524] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.524] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.524] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.524] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0279.524] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.525] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.525] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.525] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.525] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.525] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.526] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.526] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.526] CryptDestroyKey (hKey=0x55e910) returned 1 [0279.526] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0279.526] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7421f977, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7421f977, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4a86f1d2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0279.527] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7421f977, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7421f977, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4a86f1d2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.527] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a86f1d2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a86f1d2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a86f1d2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.527] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a86f1d2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a86f1d2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a86f1d2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.527] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0279.527] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a501280, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a501280, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a501280, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.527] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x36375c9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36375c9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0279.527] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.527] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.528] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.528] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0279.528] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0279.528] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.528] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.528] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0279.528] CryptDestroyHash (hHash=0x55e290) returned 1 [0279.529] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.529] GetLastError () returned 0x0 [0279.529] GetLastError () returned 0x0 [0279.529] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.530] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.530] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.530] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.531] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.533] SetEndOfFile (hFile=0x24c) returned 1 [0279.533] CloseHandle (hObject=0x24c) returned 1 [0279.533] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.534] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.534] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.535] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.535] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.535] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.535] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.535] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.536] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1e760d0, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1e760d0) returned 0x20 [0279.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.536] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.536] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.536] CryptDestroyKey (hKey=0x55e910) returned 1 [0279.536] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0279.537] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x36375c9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a893ff4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0279.537] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x36375c9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a893ff4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.537] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x430a0153, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x430a0153, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 1 [0279.537] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.537] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.537] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.537] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.537] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0279.538] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.538] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.538] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0279.538] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.538] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.538] GetLastError () returned 0x0 [0279.538] GetLastError () returned 0x0 [0279.538] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.539] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.IE5\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.ie5\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.540] WriteFile (in: hFile=0x250, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.541] SetEndOfFile (hFile=0x250) returned 1 [0279.541] CloseHandle (hObject=0x250) returned 1 [0279.541] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.542] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.542] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.542] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.542] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.544] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.544] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.544] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.544] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.544] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.544] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.544] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.545] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.545] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.545] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.545] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.545] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.546] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0279.546] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0279.546] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.IE5\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.ie5\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19ecec, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19eccc, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="ÐçU")) returned 0xffffffff [0279.546] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xa49dfe15, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa49dfe15, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa49dfe15, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="Content.MSO", cAlternateFileName="")) returned 1 [0279.546] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.546] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.546] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.546] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.546] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.547] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.547] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570858) returned 1 [0279.547] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.547] CryptHashData (hHash=0x55e390, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.547] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0279.547] CryptDestroyHash (hHash=0x55e390) returned 1 [0279.547] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.547] GetLastError () returned 0x0 [0279.547] GetLastError () returned 0x0 [0279.547] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.549] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.549] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.550] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.mso\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.553] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.554] SetEndOfFile (hFile=0x250) returned 1 [0279.554] CloseHandle (hObject=0x250) returned 1 [0279.555] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.556] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.556] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.556] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.556] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0279.556] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.556] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.557] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.557] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.557] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.557] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.558] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.558] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.558] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.558] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.558] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.558] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.559] CryptDestroyKey (hKey=0x55e650) returned 1 [0279.559] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0279.559] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.mso\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xa49dfe15, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa49dfe15, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4a8ba1e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.559] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xa49dfe15, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa49dfe15, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4a8ba1e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.559] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a8ba1e8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a8ba1e8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a8ba1e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.559] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a8ba1e8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a8ba1e8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a8ba1e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.560] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.560] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6660309e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6660309e, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6aa36426, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Content.Word", cAlternateFileName="CONTEN~1.WOR")) returned 1 [0279.560] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.560] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.560] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.560] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0279.560] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0279.561] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.561] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.561] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0279.561] CryptDestroyHash (hHash=0x55e290) returned 1 [0279.561] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.561] GetLastError () returned 0x0 [0279.561] GetLastError () returned 0x0 [0279.561] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.562] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.word\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.563] WriteFile (in: hFile=0x250, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.564] SetEndOfFile (hFile=0x250) returned 1 [0279.565] CloseHandle (hObject=0x250) returned 1 [0279.565] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.566] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.566] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.566] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.567] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.567] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.567] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.567] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.567] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.568] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.568] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.568] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.568] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.568] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.568] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.568] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.568] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.568] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.569] CryptDestroyKey (hKey=0x55e190) returned 1 [0279.569] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0279.569] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\content.word\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6660309e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6aa36426, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x4a8e0539, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.569] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6660309e, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x6aa36426, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x4a8e0539, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.569] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a8e0539, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a8e0539, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a8e0539, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.569] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a8e0539, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a8e0539, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a8e0539, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.569] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.569] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x430a0153, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x430a0153, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="counters.dat", cAlternateFileName="")) returned 1 [0279.569] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36375c9d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x36375c9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36375c9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="counters.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="COUNTE~1.CRY")) returned 1 [0279.569] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3639c0eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3639c0eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IE", cAlternateFileName="")) returned 1 [0279.570] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.570] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.570] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.570] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.570] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0279.571] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.571] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.571] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0279.571] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.571] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.571] GetLastError () returned 0x0 [0279.571] GetLastError () returned 0x0 [0279.571] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.572] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.573] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.574] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.574] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.575] SetEndOfFile (hFile=0x250) returned 1 [0279.575] CloseHandle (hObject=0x250) returned 1 [0279.575] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.576] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.576] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.577] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.577] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.577] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.578] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.578] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.579] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.579] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.579] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.579] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.579] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.579] CryptDestroyKey (hKey=0x55e190) returned 1 [0279.580] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0279.580] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3639c0eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a893ff4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.580] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430a0153, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3639c0eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a893ff4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.580] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x789936d6, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x789936d6, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="8L0123VP", cAlternateFileName="")) returned 1 [0279.580] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.580] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.580] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.580] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.581] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571408) returned 1 [0279.581] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0279.581] CryptHashData (hHash=0x55e390, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.581] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e290) returned 1 [0279.581] CryptDestroyHash (hHash=0x55e390) returned 1 [0279.581] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18) returned 1 [0279.582] GetLastError () returned 0x0 [0279.582] GetLastError () returned 0x0 [0279.582] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.582] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L0123VP\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l0123vp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0279.583] WriteFile (in: hFile=0x254, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.585] SetEndOfFile (hFile=0x254) returned 1 [0279.585] CloseHandle (hObject=0x254) returned 1 [0279.585] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.586] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.586] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.586] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.586] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.586] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.587] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0279.587] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.587] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.587] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.587] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.587] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.588] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.594] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.594] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.594] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.595] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.595] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.595] CryptDestroyKey (hKey=0x55e290) returned 1 [0279.595] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0279.595] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L0123VP\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l0123vp\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x789936d6, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4a9066e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0279.596] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x789936d6, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4a9066e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.596] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a9066e4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a9066e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a9066e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.596] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x789936d6, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x789936d6, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x789b992a, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x16196, dwReserved0=0x405534, dwReserved1=0x0, cFileName="known_providers_download_v1[1].xml", cAlternateFileName="KNOWN_~1.XML")) returned 1 [0279.596] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x789936d6, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x789936d6, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x789b992a, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x16196, dwReserved0=0x405534, dwReserved1=0x0, cFileName="known_providers_download_v1[1].xml", cAlternateFileName="KNOWN_~1.XML")) returned 0 [0279.596] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0279.596] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x36375c9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36375c9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69766f72, dwReserved1=0x73726564, cFileName="8L05D5LK", cAlternateFileName="")) returned 1 [0279.596] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.596] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.596] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.597] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.597] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0279.597] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x5707d0) returned 1 [0279.598] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0279.598] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.598] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0279.598] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.598] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ea58*=0x18) returned 1 [0279.598] GetLastError () returned 0x0 [0279.598] GetLastError () returned 0x0 [0279.598] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.599] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.600] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.600] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L05D5LK\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l05d5lk\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0279.601] WriteFile (in: hFile=0x254, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.603] SetEndOfFile (hFile=0x254) returned 1 [0279.603] CloseHandle (hObject=0x254) returned 1 [0279.603] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.604] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.604] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.605] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.605] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.605] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.605] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.605] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.606] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.606] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.606] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.606] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.606] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.606] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.606] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.606] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.606] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.606] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.607] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.607] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.607] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.607] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.607] CryptDestroyKey (hKey=0x55e210) returned 1 [0279.607] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0279.607] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\8L05D5LK\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\8l05d5lk\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x36375c9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a92dd5f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0279.608] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x36375c9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a92dd5f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.608] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36375c9d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x36375c9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36375c9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x405534, dwReserved1=0x0, cFileName="favicon[1].ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FAVICO~1.CRY")) returned 1 [0279.608] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a92dd5f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a92dd5f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a92dd5f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.608] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a92dd5f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a92dd5f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a92dd5f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.608] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0279.608] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="97UWYX7N", cAlternateFileName="")) returned 1 [0279.608] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.608] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.608] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.608] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.608] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.608] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.609] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x5709f0) returned 1 [0279.609] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0279.609] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.609] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e190) returned 1 [0279.609] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.609] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0279.610] GetLastError () returned 0x0 [0279.610] GetLastError () returned 0x0 [0279.610] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.610] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\97UWYX7N\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\97uwyx7n\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0279.612] WriteFile (in: hFile=0x254, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.614] SetEndOfFile (hFile=0x254) returned 1 [0279.614] CloseHandle (hObject=0x254) returned 1 [0279.614] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.615] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.615] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.616] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.616] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.616] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.617] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.617] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.617] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.618] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.618] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.618] CryptDestroyKey (hKey=0x55e190) returned 1 [0279.618] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0279.618] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\97UWYX7N\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\97uwyx7n\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x4a952b6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0279.619] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x4a952b6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.619] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a952b6b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a952b6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a952b6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.619] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31df21d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4700, dwReserved0=0x405534, dwReserved1=0x0, cFileName="suggestions[1].en-US", cAlternateFileName="SUGGES~1.EN-")) returned 1 [0279.619] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe31df21d, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xe31df21d, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xe31df21d, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4700, dwReserved0=0x405534, dwReserved1=0x0, cFileName="suggestions[1].en-US", cAlternateFileName="SUGGES~1.EN-")) returned 0 [0279.619] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0279.619] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3639c0eb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3639c0eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3639c0eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f69, dwReserved1=0x2e5d315b, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0279.619] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x20f90b56, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x20f90b56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f69, dwReserved1=0x2e5d315b, cFileName="EVKC1MC8", cAlternateFileName="")) returned 1 [0279.619] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.619] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.619] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.620] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.620] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571518) returned 1 [0279.620] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0279.620] CryptHashData (hHash=0x55e390, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.621] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e190) returned 1 [0279.621] CryptDestroyHash (hHash=0x55e390) returned 1 [0279.621] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18) returned 1 [0279.621] GetLastError () returned 0x0 [0279.621] GetLastError () returned 0x0 [0279.621] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.622] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.623] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.624] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\EVKC1MC8\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\evkc1mc8\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0279.625] WriteFile (in: hFile=0x254, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.627] SetEndOfFile (hFile=0x254) returned 1 [0279.627] CloseHandle (hObject=0x254) returned 1 [0279.627] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.628] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.628] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.629] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0279.629] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.629] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.630] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.630] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.630] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.630] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.631] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.631] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.631] CryptDestroyKey (hKey=0x55e190) returned 1 [0279.631] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0279.631] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\EVKC1MC8\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\evkc1mc8\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x20f90b56, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a97a9cf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0279.631] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x77fe3d01, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x20f90b56, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a97a9cf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.632] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a97a9cf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a97a9cf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a97a9cf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.632] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20f90b56, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x20f90b56, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2450b25a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12aeda, dwReserved0=0x405534, dwReserved1=0x0, cFileName="rules[1].xml", cAlternateFileName="RULES_~1.XML")) returned 1 [0279.632] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20f90b56, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x20f90b56, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2450b25a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12aeda, dwReserved0=0x405534, dwReserved1=0x0, cFileName="rules[1].xml", cAlternateFileName="RULES_~1.XML")) returned 0 [0279.632] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0279.632] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a893ff4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a893ff4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a9066e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6d782e5d, dwReserved1=0x5f4f546c, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.632] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a893ff4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a893ff4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a9066e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6d782e5d, dwReserved1=0x5f4f546c, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.632] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.632] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a893ff4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a893ff4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a893ff4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.632] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3639c0eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3639c0eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Low", cAlternateFileName="")) returned 1 [0279.632] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.632] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.632] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.633] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0279.633] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5708e0) returned 1 [0279.633] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.633] CryptHashData (hHash=0x55e290, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.633] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0279.634] CryptDestroyHash (hHash=0x55e290) returned 1 [0279.634] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.634] GetLastError () returned 0x0 [0279.634] GetLastError () returned 0x0 [0279.634] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.634] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\low\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.639] WriteFile (in: hFile=0x250, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.640] SetEndOfFile (hFile=0x250) returned 1 [0279.640] CloseHandle (hObject=0x250) returned 1 [0279.640] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.641] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.641] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.641] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.641] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.642] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.642] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.642] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.642] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.642] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.643] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.643] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.643] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.643] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0279.643] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0279.643] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\low\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3639c0eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a99eea0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0279.644] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3639c0eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a99eea0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.644] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a97a9cf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a97a9cf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a99eea0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.644] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d4dda3b, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d4dda3b, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d529fd3, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x500088, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SuggestedSites.dat", cAlternateFileName="SUGGES~1.DAT")) returned 1 [0279.644] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3639c0eb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3639c0eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36886eca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x500088, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SuggestedSites.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SUGGES~1.CRY")) returned 1 [0279.644] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3639c0eb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3639c0eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x36886eca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x500088, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SuggestedSites.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SUGGES~1.CRY")) returned 0 [0279.644] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0279.644] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69536465, dwReserved1=0x2e736574, cFileName="Virtualized", cAlternateFileName="VIRTUA~1")) returned 1 [0279.644] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.644] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.644] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.644] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.644] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5707d0) returned 1 [0279.645] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.645] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.645] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0279.645] CryptDestroyHash (hHash=0x55e310) returned 1 [0279.645] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.645] GetLastError () returned 0x0 [0279.645] GetLastError () returned 0x0 [0279.645] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.646] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.647] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.647] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\virtualized\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.648] WriteFile (in: hFile=0x250, lpBuffer=0x23e3534*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3534*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.649] SetEndOfFile (hFile=0x250) returned 1 [0279.649] CloseHandle (hObject=0x250) returned 1 [0279.649] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.650] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.650] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.651] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.651] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.651] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.651] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.651] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.651] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.652] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.652] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.652] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.652] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.652] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.652] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.652] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.653] CryptDestroyKey (hKey=0x55e910) returned 1 [0279.653] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0279.653] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\virtualized\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a99eea0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0279.653] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4a99eea0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.653] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a99eea0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a99eea0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a99eea0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.653] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a99eea0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a99eea0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a99eea0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.653] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0279.653] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69536465, dwReserved1=0x2e736574, cFileName="Virtualized", cAlternateFileName="VIRTUA~1")) returned 0 [0279.653] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0279.653] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x368ada36, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x368ada36, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64657a69, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0279.654] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.654] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.654] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.654] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.654] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.654] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.654] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0279.655] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.655] CryptHashData (hHash=0x55e390, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.655] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0279.655] CryptDestroyHash (hHash=0x55e390) returned 1 [0279.655] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.655] GetLastError () returned 0x0 [0279.655] GetLastError () returned 0x0 [0279.655] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.655] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.657] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.658] SetEndOfFile (hFile=0x24c) returned 1 [0279.658] CloseHandle (hObject=0x24c) returned 1 [0279.658] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.659] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.659] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.659] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.659] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0279.660] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.660] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.660] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.660] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.660] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.671] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.671] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.671] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.671] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.671] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.672] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.672] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.672] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.672] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.672] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.672] CryptDestroyKey (hKey=0x55e910) returned 1 [0279.672] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0279.673] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x368ada36, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a9c51e3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0279.673] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x368ada36, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a9c51e3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.673] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20f442c3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x20f442c3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x20f442c3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="3JXOIY6T.txt", cAlternateFileName="")) returned 1 [0279.673] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x20f1e06c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x20f1e06c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x20f442c3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="89K5FKXH.txt", cAlternateFileName="")) returned 1 [0279.673] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x368ada36, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x368ada36, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x368ada36, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0279.673] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x368d323a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x368d323a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DNTException", cAlternateFileName="DNTEXC~1")) returned 1 [0279.673] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.673] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.673] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.674] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.674] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.674] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0279.674] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571408) returned 1 [0279.674] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.675] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.675] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0279.675] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.675] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.675] GetLastError () returned 0x0 [0279.675] GetLastError () returned 0x0 [0279.675] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.676] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.676] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.677] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.678] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.679] SetEndOfFile (hFile=0x250) returned 1 [0279.680] CloseHandle (hObject=0x250) returned 1 [0279.680] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.681] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.681] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.681] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.681] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.681] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.682] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.682] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.682] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.682] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.683] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.683] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.683] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.683] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.683] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.684] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0279.684] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0279.684] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x368d323a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a9f14f3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0279.684] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x368d323a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a9f14f3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.684] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x368ada36, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x368ada36, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x368ada36, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0279.684] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a9f14f3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a9f14f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a9f14f3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.684] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0279.685] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.685] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.685] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.685] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.685] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.685] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.685] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571270) returned 1 [0279.686] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0279.686] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.686] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0279.686] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.686] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0279.686] GetLastError () returned 0x0 [0279.686] GetLastError () returned 0x0 [0279.686] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.687] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\low\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0279.688] WriteFile (in: hFile=0x254, lpBuffer=0x23e524c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e524c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.689] SetEndOfFile (hFile=0x254) returned 1 [0279.690] CloseHandle (hObject=0x254) returned 1 [0279.690] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.690] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.691] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.691] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.691] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.691] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.691] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.691] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.692] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.692] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.692] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.692] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.692] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.692] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.692] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.692] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.692] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.693] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.693] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.693] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.693] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.693] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.693] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.693] CryptDestroyKey (hKey=0x55e210) returned 1 [0279.693] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0279.693] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\low\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4aa116a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.694] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4aa116a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.694] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4aa116a0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aa116a0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aa116a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.694] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4aa116a0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aa116a0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aa116a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.694] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.694] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0279.694] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0279.694] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a9c51e3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4a9c51e3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4a9c51e3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.694] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Low", cAlternateFileName="")) returned 1 [0279.694] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.694] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.695] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.695] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.695] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.695] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.695] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5712f8) returned 1 [0279.696] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.696] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.696] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0279.696] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.696] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.696] GetLastError () returned 0x0 [0279.696] GetLastError () returned 0x0 [0279.696] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.697] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.697] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.698] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.699] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.702] SetEndOfFile (hFile=0x250) returned 1 [0279.702] CloseHandle (hObject=0x250) returned 1 [0279.702] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.703] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.703] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.703] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.703] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.703] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.703] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0279.704] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.704] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.704] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.704] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.704] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.704] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.704] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.704] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.704] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.705] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.705] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.705] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.705] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.706] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0279.706] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0279.706] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4aa116a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0279.706] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4aa116a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.706] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4aa116a0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aa116a0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aa37a8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.706] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4aa116a0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aa116a0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aa37a8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.706] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0279.706] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0279.707] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.707] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.707] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.707] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0279.707] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0279.708] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.708] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.708] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0279.708] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.708] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.708] GetLastError () returned 0x0 [0279.708] GetLastError () returned 0x0 [0279.708] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.709] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\privacie\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.713] WriteFile (in: hFile=0x250, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.715] SetEndOfFile (hFile=0x250) returned 1 [0279.715] CloseHandle (hObject=0x250) returned 1 [0279.715] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.716] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.716] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.717] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.717] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.717] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.717] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.717] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.717] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.718] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.718] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.718] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.718] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.718] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.718] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.718] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.718] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.718] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.718] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.718] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.719] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.719] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.719] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0279.719] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0279.719] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\privacie\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4aa37a8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0279.720] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4aa37a8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.720] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4aa37a8b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aa37a8b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aa5db24, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.720] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0279.720] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.720] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.720] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.720] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.720] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570b88) returned 1 [0279.721] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0279.721] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.721] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e650) returned 1 [0279.721] CryptDestroyHash (hHash=0x55e610) returned 1 [0279.721] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0279.721] GetLastError () returned 0x0 [0279.721] GetLastError () returned 0x0 [0279.721] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.722] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.723] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.723] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\privacie\\low\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0279.725] WriteFile (in: hFile=0x254, lpBuffer=0x23e3524*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3524*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.726] SetEndOfFile (hFile=0x254) returned 1 [0279.726] CloseHandle (hObject=0x254) returned 1 [0279.726] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.727] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.727] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.728] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.728] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.728] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.729] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.729] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.729] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.729] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.729] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.730] CryptDestroyKey (hKey=0x55e650) returned 1 [0279.730] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0279.730] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcookies\\privacie\\low\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4aa5db24, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0279.731] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4aa5db24, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.731] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4aa5db24, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aa5db24, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aa5db24, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.731] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4aa5db24, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aa5db24, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aa5db24, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.731] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0279.731] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0279.731] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0279.731] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="PrivacIE", cAlternateFileName="")) returned 0 [0279.731] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0279.731] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x368d323a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x368d323a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4145, dwReserved1=0x5f4f545f, cFileName="Notifications", cAlternateFileName="NOTIFI~1")) returned 1 [0279.732] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.732] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.732] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.732] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.732] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0279.733] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.733] CryptHashData (hHash=0x55e390, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.733] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0279.733] CryptDestroyHash (hHash=0x55e390) returned 1 [0279.733] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.733] GetLastError () returned 0x0 [0279.733] GetLastError () returned 0x0 [0279.733] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.734] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.735] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.736] SetEndOfFile (hFile=0x24c) returned 1 [0279.736] CloseHandle (hObject=0x24c) returned 1 [0279.736] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.737] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.738] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0279.738] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.738] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.739] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.739] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.739] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.739] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.740] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.740] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.740] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0279.740] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0279.740] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x368d323a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aa83ef9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.741] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x368d323a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aa83ef9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.741] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xafc9a821, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xafc9a821, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2381020, dwReserved0=0x405534, dwReserved1=0x0, cFileName="appdb.dat", cAlternateFileName="")) returned 1 [0279.741] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x368d323a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x368d323a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39190525, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2381020, dwReserved0=0x405534, dwReserved1=0x0, cFileName="appdb.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="APPDBD~1.CRY")) returned 1 [0279.741] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aa83ef9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aa83ef9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aa83ef9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.741] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3954a31e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3954a31e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="wpnidm", cAlternateFileName="")) returned 1 [0279.741] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.741] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.741] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.741] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0279.741] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0279.742] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.742] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.742] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0279.742] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0279.742] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.742] GetLastError () returned 0x0 [0279.742] GetLastError () returned 0x0 [0279.742] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.743] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.744] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.744] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.746] WriteFile (in: hFile=0x250, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.749] SetEndOfFile (hFile=0x250) returned 1 [0279.749] CloseHandle (hObject=0x250) returned 1 [0279.749] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.750] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.753] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.754] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.754] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.754] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.755] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.755] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.755] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.755] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.755] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.756] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.756] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.756] CryptDestroyKey (hKey=0x55e190) returned 1 [0279.756] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0279.756] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3954a31e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aa83ef9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0279.756] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3954a31e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aa83ef9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.756] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391b6930, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x391b6930, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x391b6930, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x10a9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="179e8db5.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="179E8D~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391dc895, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x391dc895, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x391dc895, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="17f70a61.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="17F70A~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391dc895, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x391dc895, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x391dc895, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2045, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1ba49cb8.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="1BA49C~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39202cfe, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39202cfe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39202cfe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x124c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1ced2593.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="1CED25~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39202cfe, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39202cfe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39228d16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x122f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1f83d5ef.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="1F83D5~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39228d16, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39228d16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39228d16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3597, dwReserved0=0x405534, dwReserved1=0x0, cFileName="27771a56.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="27771A~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3924efec, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3924efec, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3924efec, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2429, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4048cb51.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="4048CB~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3924efec, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3924efec, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3924efec, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xf5d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="48415de7.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="48415D~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x392755b4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x392755b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x392755b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1b85, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6bf71745.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="6BF717~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x392755b4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x392755b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3929b452, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3405, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6f79e4a.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="6F79E4~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3929b452, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3929b452, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3929b452, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="792d17d6.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="792D17~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x392c16bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x392c16bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x392c16bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x210b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7a67116a.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="7A6711~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x392c16bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x392c16bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x392c16bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7be0bc58.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="7BE0BC~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x392e8580, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x392e8580, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x392e8580, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="8722e2cf.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="8722E2~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x392e8580, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x392e8580, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x392e8580, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18f3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="8b8a3111.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="8B8A31~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x394650c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x394650c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x394650c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1fd0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="a5aa8076.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="A5AA80~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x394650c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x394650c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3948b33f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1c44, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ad152324.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AD1523~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3948b33f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3948b33f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x394b14ef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2682, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ad9a3041.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AD9A30~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x394b14ef, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x394b14ef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x394d7787, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1ef8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="b87b2414.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="B87B24~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x394d7787, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x394d7787, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x394ff8ec, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1b53, dwReserved0=0x405534, dwReserved1=0x0, cFileName="c6a29e3f.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="C6A29E~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x394ff8ec, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x394ff8ec, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39523cda, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xf0c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="d242e6bf.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="D242E6~1.CRY")) returned 1 [0279.757] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39523cda, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39523cda, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39523cda, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="dcd07dae.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DCD07D~1.CRY")) returned 1 [0279.758] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39523cda, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39523cda, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39523cda, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="e271f8d5.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="E271F8~1.CRY")) returned 1 [0279.758] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3954a31e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3954a31e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3954a31e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x33ce, dwReserved0=0x405534, dwReserved1=0x0, cFileName="eaaf57da.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EAAF57~1.CRY")) returned 1 [0279.758] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aa83ef9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aa83ef9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aaaa11e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.758] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aa83ef9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aa83ef9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aaaa11e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.758] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0279.758] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xafc9a821, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xda6712a, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="WPNPRMRY.tmp", cAlternateFileName="")) returned 1 [0279.758] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xafc9a821, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xafc9a821, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xda6712a, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="WPNPRMRY.tmp", cAlternateFileName="")) returned 0 [0279.758] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.758] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47cd6d9c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x47cd6d9c, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d742e59, dwReserved1=0x5f4f5470, cFileName="PowerShell", cAlternateFileName="POWERS~1")) returned 1 [0279.758] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.758] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.759] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.759] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.759] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0279.759] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.760] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.760] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0279.760] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0279.760] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.760] GetLastError () returned 0x0 [0279.760] GetLastError () returned 0x0 [0279.760] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.760] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\powershell\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.763] WriteFile (in: hFile=0x24c, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.764] SetEndOfFile (hFile=0x24c) returned 1 [0279.764] CloseHandle (hObject=0x24c) returned 1 [0279.764] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.772] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.772] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.773] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.773] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.773] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.774] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.774] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.774] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.774] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.774] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.774] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.775] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.775] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.775] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.775] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.775] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.776] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0279.776] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0279.776] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\powershell\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47cd6d9c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x4aaaa11e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0279.776] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47cd6d9c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x4aaaa11e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.777] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb9b6b93d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb9b6b93d, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CommandAnalysis", cAlternateFileName="COMMAN~1")) returned 1 [0279.777] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.777] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.777] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.777] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.778] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.778] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571490) returned 1 [0279.778] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.778] CryptHashData (hHash=0x55e2d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.778] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0279.778] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0279.778] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.779] GetLastError () returned 0x0 [0279.779] GetLastError () returned 0x0 [0279.779] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.779] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.780] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.780] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.782] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.783] SetEndOfFile (hFile=0x250) returned 1 [0279.783] CloseHandle (hObject=0x250) returned 1 [0279.783] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.784] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.784] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.784] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.784] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.784] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.784] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0279.784] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.784] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.785] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.785] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.785] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.785] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.785] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.785] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.785] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.785] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.785] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.785] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.785] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.785] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.785] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.785] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.786] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.786] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.786] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.786] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.786] CryptDestroyKey (hKey=0x55e610) returned 1 [0279.786] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0279.786] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb9b6b93d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x4aaf666f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0279.786] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb9b6b93d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x4aaf666f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.786] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aaf666f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aaf666f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aaf666f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.786] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e2e2ca, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47e2e2ca, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd3549127, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x25a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheEntry_01c28806-e5ae-41cc-b284-e627e1b02beb", cAlternateFileName="PODA56~1")) returned 1 [0279.786] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb93910e6, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb93910e6, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb9394c19, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheEntry_1cc363fc-fd33-403d-b8fa-964af616746c", cAlternateFileName="PO8435~1")) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92f9afe, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb92f9afe, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb92faecd, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheEntry_2fb762b4-d05f-41c9-800e-eb1b344a91c2", cAlternateFileName="PO4F91~1")) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9b6b93d, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb9b6b93d, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb9b6ccc5, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x774, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheEntry_460645de-0b19-4be1-bf3e-f69457b02cf0", cAlternateFileName="PO35F7~1")) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e545ef, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47e545ef, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd359552a, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x22ef, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheEntry_67a2505d-bf00-4e2f-b010-406d32caddc3", cAlternateFileName="PO4D8E~1")) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e0807c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47e0807c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd3522e66, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x662, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheEntry_6de40067-cd2a-4666-8cd9-870e0a588215", cAlternateFileName="POD9C8~1")) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47cd6d9c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47cd6d9c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd346453b, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheEntry_6fe77092-4798-42ae-bda5-e7f822b580e9", cAlternateFileName="POWERS~1")) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92b7c90, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb92b7c90, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb92b7c90, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheEntry_8bdd4f74-735f-4cbb-b944-fa23a05b2f05", cAlternateFileName="PO43BC~1")) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb925899c, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb925899c, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb9259cc3, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x2b2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheEntry_9fd22d45-e580-4e7f-ba2a-734dfe2d9a2c", cAlternateFileName="PO274D~1")) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9341bea, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xb9341bea, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb9341bea, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x5a1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheEntry_a2539131-4889-4bfa-9cd2-9c1d6af613cf", cAlternateFileName="PO71AD~1")) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47dbbb94, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47dbbb94, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd34b074a, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x717, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheEntry_cc38888a-7080-4220-9b7d-de7a9b2167ba", cAlternateFileName="POWERS~4")) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d49400, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47d49400, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd346453b, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x2b07, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheEntry_da21122d-ae44-4f93-ba1d-c9a978ca5b20", cAlternateFileName="POWERS~3")) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e2e2ca, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47e2e2ca, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd3549127, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x25a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheEntry_f9e52a2e-51b0-4ce6-9de0-3959d95ded6e", cAlternateFileName="POE0DC~1")) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d23230, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47d23230, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd359552a, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheIndex", cAlternateFileName="POWERS~2")) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d23230, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x47d23230, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0xd359552a, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PowerShell_AnalysisCacheIndex", cAlternateFileName="POWERS~2")) returned 0 [0279.787] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aaaa11e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aaaa11e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aad013c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x5f6c6c65, dwReserved1=0x6c616e41, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aaaa11e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aaaa11e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aad013c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x5f6c6c65, dwReserved1=0x6c616e41, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.787] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0279.787] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x400db452, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xab1ccb9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1ccb9c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="PRICache", cAlternateFileName="")) returned 1 [0279.787] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.787] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.787] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.788] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.788] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.788] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0279.788] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0279.788] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0279.788] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.788] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0279.788] CryptDestroyHash (hHash=0x55e210) returned 1 [0279.788] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0279.788] GetLastError () returned 0x0 [0279.788] GetLastError () returned 0x0 [0279.789] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.789] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0279.791] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.792] SetEndOfFile (hFile=0x24c) returned 1 [0279.792] CloseHandle (hObject=0x24c) returned 1 [0279.792] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.797] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.797] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.797] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.797] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.797] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.797] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.797] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.797] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.798] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.798] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.798] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.798] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.798] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.798] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.799] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0279.799] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0279.799] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x400db452, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xab1ccb9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4aaf666f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0279.799] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x400db452, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xab1ccb9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4aaf666f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.799] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab04f553, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab04f553, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab04f553, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="559726144", cAlternateFileName="559726~1")) returned 1 [0279.799] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.799] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.800] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.800] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.800] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0279.800] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.800] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.800] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0279.801] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.801] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.801] GetLastError () returned 0x0 [0279.801] GetLastError () returned 0x0 [0279.801] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.802] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.802] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.803] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\559726144\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\559726144\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.804] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.805] SetEndOfFile (hFile=0x250) returned 1 [0279.805] CloseHandle (hObject=0x250) returned 1 [0279.806] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.806] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.806] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.807] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.807] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.807] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.807] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.807] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.807] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.807] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.807] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.807] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.808] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.808] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.808] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.808] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.810] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.810] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.810] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.810] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.810] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.810] CryptDestroyKey (hKey=0x55e190) returned 1 [0279.810] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0279.811] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\559726144\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\559726144\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab04f553, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab04f553, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ab21467, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0279.811] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab04f553, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab04f553, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ab21467, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.811] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab04f553, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab04f553, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab04f553, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2503989003.pri", cAlternateFileName="250398~1.PRI")) returned 1 [0279.811] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab21467, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ab21467, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ab21467, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.811] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab21467, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ab21467, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ab21467, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.811] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0279.811] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aaf666f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aaf666f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aaf666f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.811] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544e4aa0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x544e4aa0, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x544e4aa0, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~2.0_N")) returned 1 [0279.811] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.811] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.812] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.812] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.812] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570a78) returned 1 [0279.812] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.812] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.812] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0279.813] CryptDestroyHash (hHash=0x55e290) returned 1 [0279.813] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.813] GetLastError () returned 0x0 [0279.813] GetLastError () returned 0x0 [0279.813] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.813] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.815] WriteFile (in: hFile=0x250, lpBuffer=0x23e52fc*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e52fc*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.817] SetEndOfFile (hFile=0x250) returned 1 [0279.817] CloseHandle (hObject=0x250) returned 1 [0279.817] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.818] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.818] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0279.818] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.818] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.819] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.819] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.819] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.819] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.819] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.820] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.820] CryptDestroyKey (hKey=0x55e910) returned 1 [0279.820] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0279.820] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544e4aa0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x544e4aa0, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ab42ab5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.820] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x544e4aa0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x544e4aa0, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ab42ab5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.820] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab42ab5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ab42ab5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ab42ab5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.820] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab42ab5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ab42ab5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ab42ab5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.821] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.821] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x610bda33, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x610bda33, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x610bda33, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MIEBA3~1.0_N")) returned 1 [0279.821] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.821] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.821] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.821] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0279.821] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0279.822] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.822] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.822] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0279.822] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.822] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.822] GetLastError () returned 0x0 [0279.822] GetLastError () returned 0x0 [0279.822] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.823] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.823] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.824] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.825] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.826] SetEndOfFile (hFile=0x250) returned 1 [0279.826] CloseHandle (hObject=0x250) returned 1 [0279.826] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.827] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.827] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.827] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.828] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.828] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.828] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.828] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.828] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.829] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.829] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.829] CryptDestroyKey (hKey=0x55e610) returned 1 [0279.829] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0279.829] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x610bda33, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x610bda33, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ab42ab5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.830] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x610bda33, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x610bda33, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ab42ab5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.830] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab42ab5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ab42ab5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ab68c08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.830] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab42ab5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ab42ab5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ab68c08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.830] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.830] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e53a45a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e53a45a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e53a45a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0279.830] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.830] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.830] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.830] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.830] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0279.831] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.831] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.831] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0279.831] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.831] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.831] GetLastError () returned 0x0 [0279.831] GetLastError () returned 0x0 [0279.831] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.832] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.833] WriteFile (in: hFile=0x250, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.834] SetEndOfFile (hFile=0x250) returned 1 [0279.834] CloseHandle (hObject=0x250) returned 1 [0279.834] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.835] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.835] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.835] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.835] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.835] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.836] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.836] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.836] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.836] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.836] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.837] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.837] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.839] CryptDestroyKey (hKey=0x55e610) returned 1 [0279.839] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0279.840] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e53a45a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e53a45a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ab68c08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.863] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e53a45a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e53a45a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ab68c08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.864] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab68c08, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ab68c08, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ab68c08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.864] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ab68c08, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ab68c08, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ab68c08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.864] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.864] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61e4d0c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61e4d0c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61e4d0c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI747C~1.0_N")) returned 1 [0279.864] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.864] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.865] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.865] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.865] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0279.866] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.866] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.866] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0279.867] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.867] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.867] GetLastError () returned 0x0 [0279.867] GetLastError () returned 0x0 [0279.867] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.868] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.868] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.869] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.870] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.872] SetEndOfFile (hFile=0x250) returned 1 [0279.872] CloseHandle (hObject=0x250) returned 1 [0279.873] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.873] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.874] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0279.875] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.875] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.875] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.875] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.875] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.875] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.875] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.875] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.875] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.876] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.876] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.876] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.876] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.876] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.876] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.876] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.877] CryptDestroyKey (hKey=0x55e190) returned 1 [0279.877] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0279.877] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61e4d0c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61e4d0c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4abb7ff1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.877] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61e4d0c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61e4d0c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4abb7ff1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.877] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abb7ff1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4abb7ff1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4abdb4db, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.877] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abb7ff1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4abb7ff1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4abdb4db, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.877] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.877] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x631f85cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x631f85cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x631f85cd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MI8763~1.0_N")) returned 1 [0279.877] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.877] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.878] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.878] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.878] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.878] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0279.878] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0279.878] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.878] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.878] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e390) returned 1 [0279.879] CryptDestroyHash (hHash=0x55e650) returned 1 [0279.879] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.879] GetLastError () returned 0x0 [0279.879] GetLastError () returned 0x0 [0279.879] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.879] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.881] WriteFile (in: hFile=0x250, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.882] SetEndOfFile (hFile=0x250) returned 1 [0279.882] CloseHandle (hObject=0x250) returned 1 [0279.883] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.883] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.883] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.885] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.885] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.886] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.886] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.886] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.886] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.887] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.887] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.887] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.887] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.888] CryptDestroyKey (hKey=0x55e390) returned 1 [0279.888] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0279.888] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x631f85cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x631f85cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4abdb4db, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.888] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x631f85cd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x631f85cd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4abdb4db, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.888] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abdb4db, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4abdb4db, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4abdb4db, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.888] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abdb4db, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4abdb4db, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4abdb4db, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.888] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.888] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x899a80a2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x899a80a2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x899a80a2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIACEB~1.0_N")) returned 1 [0279.888] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.888] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.889] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.889] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.889] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5712f8) returned 1 [0279.889] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.889] CryptHashData (hHash=0x55e310, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.889] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0279.889] CryptDestroyHash (hHash=0x55e310) returned 1 [0279.889] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.889] GetLastError () returned 0x0 [0279.890] GetLastError () returned 0x0 [0279.890] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.890] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.891] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.891] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.892] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.893] SetEndOfFile (hFile=0x250) returned 1 [0279.894] CloseHandle (hObject=0x250) returned 1 [0279.894] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.894] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.894] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.895] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.895] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.895] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.895] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.895] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.895] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.895] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.896] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.896] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.896] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.896] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.896] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.896] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.896] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.896] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.896] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.896] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.897] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0279.897] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0279.897] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x899a80a2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x899a80a2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ac01534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0279.897] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x899a80a2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x899a80a2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ac01534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.897] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac01534, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ac01534, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ac01534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.897] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac01534, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ac01534, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ac01534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.897] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0279.897] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5575ebd7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5575ebd7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5575ebd7, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~3.0_N")) returned 1 [0279.897] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.897] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.898] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.898] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.898] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.898] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.898] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5710d8) returned 1 [0279.898] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.898] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.898] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0279.898] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.898] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.899] GetLastError () returned 0x0 [0279.899] GetLastError () returned 0x0 [0279.899] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.899] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.901] WriteFile (in: hFile=0x250, lpBuffer=0x23e5308*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e5308*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.902] SetEndOfFile (hFile=0x250) returned 1 [0279.902] CloseHandle (hObject=0x250) returned 1 [0279.914] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.917] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.918] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.918] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0279.919] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.920] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.920] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.921] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.921] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.922] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.922] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.922] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.923] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.923] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0279.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.923] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.923] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.923] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.925] CryptDestroyKey (hKey=0x55e910) returned 1 [0279.925] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0279.925] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5575ebd7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5575ebd7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ac01534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.926] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5575ebd7, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5575ebd7, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ac01534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.926] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac01534, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ac01534, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ac01534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.926] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac01534, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ac01534, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ac01534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.926] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.926] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a71141d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a71141d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a71141d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIE27B~1.0_N")) returned 1 [0279.927] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.927] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.927] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.927] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0279.927] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570e30) returned 1 [0279.928] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.928] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.928] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e390) returned 1 [0279.928] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.928] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.928] GetLastError () returned 0x0 [0279.928] GetLastError () returned 0x0 [0279.928] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.929] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.930] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.930] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.932] WriteFile (in: hFile=0x250, lpBuffer=0x23e36e0*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e36e0*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.947] SetEndOfFile (hFile=0x250) returned 1 [0279.948] CloseHandle (hObject=0x250) returned 1 [0279.948] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.949] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.949] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.950] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.950] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.950] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.950] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.950] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.950] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.950] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.950] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.951] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.951] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.951] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.951] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.951] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.951] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.952] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.952] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.952] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.952] CryptDestroyKey (hKey=0x55e390) returned 1 [0279.952] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0279.952] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a71141d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a71141d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ac6c208, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.953] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a71141d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a71141d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ac6c208, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.953] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac6c208, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ac6c208, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ac7703c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.953] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac6c208, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ac6c208, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ac7703c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.953] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.953] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60164786, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60164786, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60164786, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.52_")) returned 1 [0279.953] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.953] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.954] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.954] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.954] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571380) returned 1 [0279.954] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.954] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.954] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0279.955] CryptDestroyHash (hHash=0x55e910) returned 1 [0279.955] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.955] GetLastError () returned 0x0 [0279.955] GetLastError () returned 0x0 [0279.955] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.955] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.957] WriteFile (in: hFile=0x250, lpBuffer=0x23e376c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e376c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.958] SetEndOfFile (hFile=0x250) returned 1 [0279.958] CloseHandle (hObject=0x250) returned 1 [0279.958] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.959] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.959] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.959] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.960] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.960] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.960] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.960] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.960] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0279.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.961] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.961] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.961] CryptDestroyKey (hKey=0x55e190) returned 1 [0279.961] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0279.961] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60164786, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60164786, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4aca391f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0279.961] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60164786, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60164786, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4aca391f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.961] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aca391f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aca391f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aca391f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.962] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aca391f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aca391f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aca391f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.962] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0279.962] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc86950, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bc86950, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bc86950, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI1B62~1.0_N")) returned 1 [0279.962] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.962] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.962] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.962] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.962] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0279.963] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.963] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.963] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0279.963] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.963] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.963] GetLastError () returned 0x0 [0279.963] GetLastError () returned 0x0 [0279.963] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.964] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.964] WriteFile (in: hFile=0x250, lpBuffer=0x23e5344*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e5344*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.965] SetEndOfFile (hFile=0x250) returned 1 [0279.966] CloseHandle (hObject=0x250) returned 1 [0279.966] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.966] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.966] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.967] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0279.967] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.967] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.967] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.968] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.968] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.968] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.968] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.968] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.971] CryptDestroyKey (hKey=0x55e910) returned 1 [0279.971] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0279.971] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc86950, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bc86950, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4aca391f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.972] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bc86950, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bc86950, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4aca391f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.972] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aca391f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aca391f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aca391f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.972] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aca391f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aca391f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aca391f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.972] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.972] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97aa9f6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97aa9f6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97aa9f6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI2456~1.0_N")) returned 1 [0279.972] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.972] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.972] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.972] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.972] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.972] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0279.972] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5712f8) returned 1 [0279.973] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.973] CryptHashData (hHash=0x55e310, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.973] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0279.973] CryptDestroyHash (hHash=0x55e310) returned 1 [0279.973] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.973] GetLastError () returned 0x0 [0279.973] GetLastError () returned 0x0 [0279.973] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.974] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0279.974] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.975] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.976] WriteFile (in: hFile=0x250, lpBuffer=0x23e3648*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3648*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.977] SetEndOfFile (hFile=0x250) returned 1 [0279.977] CloseHandle (hObject=0x250) returned 1 [0279.977] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.978] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.978] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0279.978] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.978] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.979] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.979] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.979] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.979] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0279.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.980] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.980] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.980] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.980] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0279.980] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0279.980] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97aa9f6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97aa9f6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4acc9dd2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0279.981] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97aa9f6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97aa9f6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4acc9dd2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.981] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4acc9dd2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4acc9dd2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4acc9dd2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.981] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4acc9dd2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4acc9dd2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4acc9dd2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.981] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0279.981] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f31afd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x59f31afd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x59f31afd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~4.0_N")) returned 1 [0279.981] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.981] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.981] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.981] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0279.981] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0279.982] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.982] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.982] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0279.982] CryptDestroyHash (hHash=0x55e210) returned 1 [0279.982] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.982] GetLastError () returned 0x0 [0279.982] GetLastError () returned 0x0 [0279.982] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.983] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.984] WriteFile (in: hFile=0x250, lpBuffer=0x23e3744*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3744*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.985] SetEndOfFile (hFile=0x250) returned 1 [0279.986] CloseHandle (hObject=0x250) returned 1 [0279.986] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0279.987] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0279.987] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0279.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0279.987] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.988] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0279.988] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0279.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.988] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.988] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0279.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0279.988] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0279.989] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0279.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0279.989] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0279.989] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.989] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0279.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0279.989] CryptDestroyKey (hKey=0x55e910) returned 1 [0279.989] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0279.990] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f31afd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x59f31afd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4acc9dd2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0279.990] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f31afd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x59f31afd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4acc9dd2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0279.990] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4acc9dd2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4acc9dd2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4acf00a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0279.990] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4acc9dd2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4acc9dd2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4acf00a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0279.990] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0279.990] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99804de5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99804de5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99804de5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIA2AD~1.0_N")) returned 1 [0279.990] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0279.990] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0279.991] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0279.991] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0279.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0279.991] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0279.991] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0279.991] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0279.991] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0279.992] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0279.992] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0279.992] GetLastError () returned 0x0 [0279.992] GetLastError () returned 0x0 [0279.992] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0279.992] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0279.994] WriteFile (in: hFile=0x250, lpBuffer=0x23e3824*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3824*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0279.999] SetEndOfFile (hFile=0x250) returned 1 [0279.999] CloseHandle (hObject=0x250) returned 1 [0279.999] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.000] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.000] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.000] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.001] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.001] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0280.001] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.001] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.001] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.002] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.002] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.002] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.002] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.003] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.003] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.003] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.003] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0280.003] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99804de5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99804de5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4acf00a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.003] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99804de5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99804de5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4acf00a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.004] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4acf00a6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4acf00a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4acf00a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.004] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4acf00a6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4acf00a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4acf00a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.004] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.006] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bbee502, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bbee502, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bbee502, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI038B~1.0_N")) returned 1 [0280.006] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.006] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.006] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.006] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0280.006] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0280.007] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.007] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.007] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0280.007] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.007] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.007] GetLastError () returned 0x0 [0280.007] GetLastError () returned 0x0 [0280.007] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.008] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.009] WriteFile (in: hFile=0x250, lpBuffer=0x23e3918*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3918*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.011] SetEndOfFile (hFile=0x250) returned 1 [0280.011] CloseHandle (hObject=0x250) returned 1 [0280.011] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.012] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.012] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0280.012] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.013] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.013] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.013] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.013] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.014] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.014] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.014] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.014] CryptDestroyKey (hKey=0x55e190) returned 1 [0280.014] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0280.015] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bbee502, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bbee502, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ad1635d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0280.015] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bbee502, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bbee502, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ad1635d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.015] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad1635d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ad1635d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ad1635d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.015] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad1635d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ad1635d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ad1635d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.015] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0280.015] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d39fc1d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d39fc1d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d39fc1d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI4F32~1.0_N")) returned 1 [0280.015] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.015] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.015] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.016] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.021] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0280.021] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0280.022] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.022] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.022] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0280.022] CryptDestroyHash (hHash=0x55e610) returned 1 [0280.022] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.022] GetLastError () returned 0x0 [0280.022] GetLastError () returned 0x0 [0280.022] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.023] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.024] WriteFile (in: hFile=0x250, lpBuffer=0x23e3a0c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a0c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.025] SetEndOfFile (hFile=0x250) returned 1 [0280.026] CloseHandle (hObject=0x250) returned 1 [0280.026] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.027] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.027] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.027] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.027] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.027] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.027] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0280.027] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.027] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.028] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.028] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.028] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.028] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.028] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.028] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.028] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.028] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.028] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.028] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.028] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.028] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.029] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.029] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.029] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.029] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.029] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.029] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.029] CryptDestroyKey (hKey=0x55e910) returned 1 [0280.029] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0280.029] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d39fc1d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d39fc1d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ad3c626, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.030] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d39fc1d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d39fc1d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ad3c626, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.030] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad3c626, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ad3c626, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ad3c626, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.030] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad3c626, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ad3c626, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ad3c626, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.030] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.030] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e42a123, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e42a123, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e42a123, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 1 [0280.030] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.030] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.030] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.030] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.031] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0280.031] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0280.032] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.032] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.032] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0280.032] CryptDestroyHash (hHash=0x55e210) returned 1 [0280.032] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.032] GetLastError () returned 0x0 [0280.032] GetLastError () returned 0x0 [0280.032] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.033] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.034] WriteFile (in: hFile=0x250, lpBuffer=0x23e3ae8*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ae8*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.035] SetEndOfFile (hFile=0x250) returned 1 [0280.035] CloseHandle (hObject=0x250) returned 1 [0280.035] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.036] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.036] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.036] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.036] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.037] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.037] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0280.037] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.037] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.037] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.037] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.037] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.037] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.038] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.038] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.038] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.038] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.038] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.038] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.038] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.038] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.039] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0280.039] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0280.039] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e42a123, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e42a123, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ad6286e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.039] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e42a123, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e42a123, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ad6286e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.039] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad6286e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ad6286e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ad6286e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.039] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad6286e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ad6286e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ad6286e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.040] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.040] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1ccb9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1ccb9c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~2.0_N")) returned 1 [0280.040] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.040] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.040] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.040] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0280.040] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0280.041] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.041] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.041] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0280.041] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.041] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.041] GetLastError () returned 0x0 [0280.041] GetLastError () returned 0x0 [0280.041] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.042] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.045] WriteFile (in: hFile=0x250, lpBuffer=0x23e3b08*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3b08*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.047] SetEndOfFile (hFile=0x250) returned 1 [0280.047] CloseHandle (hObject=0x250) returned 1 [0280.047] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.048] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.048] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0280.049] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.049] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.049] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.049] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.049] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.049] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.049] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.049] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.050] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.050] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.050] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.050] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.050] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.050] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.050] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.050] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.050] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.050] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.050] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.050] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.051] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.051] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0280.051] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1ccb9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ad6286e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.051] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1ccb9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ad6286e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.051] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1f30c2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1f30c2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="559726144", cAlternateFileName="559726~1")) returned 1 [0280.051] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.051] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.052] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.052] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0280.052] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570b88) returned 1 [0280.052] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0280.053] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.053] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e610) returned 1 [0280.053] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.053] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0280.053] GetLastError () returned 0x0 [0280.053] GetLastError () returned 0x0 [0280.053] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.053] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\559726144\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\559726144\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0280.055] WriteFile (in: hFile=0x254, lpBuffer=0x23e3764*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3764*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.056] SetEndOfFile (hFile=0x254) returned 1 [0280.056] CloseHandle (hObject=0x254) returned 1 [0280.056] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.057] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.057] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0280.058] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.058] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.058] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.058] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.059] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.059] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.059] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.059] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.060] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.060] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0280.060] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\559726144\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\559726144\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1f30c2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ad88b34, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.060] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1f30c2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ad88b34, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.060] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1f30c2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1f30c2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1f30c2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x7d0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2503989003.pri", cAlternateFileName="250398~1.PRI")) returned 1 [0280.060] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad88b34, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ad88b34, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ad88b34, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.060] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad88b34, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ad88b34, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ad88b34, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.060] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.060] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad6286e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ad6286e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ad6286e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.060] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ad6286e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ad6286e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ad6286e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.061] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.061] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab1ccb9c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab1ccb9c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab1ccb9c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~2.0_N")) returned 0 [0280.061] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0280.061] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435fd682, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1 [0280.061] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.061] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.061] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.061] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.061] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.061] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0280.061] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5707d0) returned 1 [0280.065] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.065] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.065] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0280.065] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.065] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.065] GetLastError () returned 0x0 [0280.065] GetLastError () returned 0x0 [0280.065] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.066] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.067] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.067] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\ringtones\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.068] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3694*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3694*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.070] SetEndOfFile (hFile=0x24c) returned 1 [0280.070] CloseHandle (hObject=0x24c) returned 1 [0280.070] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.071] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.071] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.071] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.071] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0280.071] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.072] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.072] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.072] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.072] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.073] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.073] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.073] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.073] CryptDestroyKey (hKey=0x55e910) returned 1 [0280.073] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0280.074] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Ringtones\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\ringtones\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4adaec10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.074] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435fd682, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4adaec10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.074] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4adaec10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4adaec10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4adaec10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.074] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4adaec10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4adaec10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4adaec10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.074] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.074] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436238c4, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingTiles", cAlternateFileName="ROAMIN~1")) returned 1 [0280.074] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.074] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.074] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.074] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.074] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.075] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0280.075] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0280.075] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.075] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.075] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0280.075] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.075] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.076] GetLastError () returned 0x0 [0280.076] GetLastError () returned 0x0 [0280.076] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.076] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\roamingtiles\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.077] WriteFile (in: hFile=0x24c, lpBuffer=0x23e36b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e36b4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.080] SetEndOfFile (hFile=0x24c) returned 1 [0280.080] CloseHandle (hObject=0x24c) returned 1 [0280.080] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.082] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.082] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.082] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.082] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.082] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.082] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0280.083] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.083] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.083] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.083] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.083] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.083] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.083] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.084] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.084] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.084] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.085] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.085] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.085] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.085] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.085] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.085] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0280.085] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0280.085] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\RoamingTiles\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\roamingtiles\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4adaec10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0280.086] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x436238c4, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436238c4, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4adaec10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.086] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4adaec10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4adaec10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4add9d1d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.086] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4adaec10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4adaec10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4add9d1d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.086] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0280.086] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9586b313, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95891577, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x95891577, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SettingSync", cAlternateFileName="SETTIN~1")) returned 1 [0280.087] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.087] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.087] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.087] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0280.087] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0280.088] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.088] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.088] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0280.088] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.088] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.088] GetLastError () returned 0x0 [0280.088] GetLastError () returned 0x0 [0280.088] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.090] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.091] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.091] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.094] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.096] SetEndOfFile (hFile=0x24c) returned 1 [0280.096] CloseHandle (hObject=0x24c) returned 1 [0280.097] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.097] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.098] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0280.098] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.099] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.099] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.099] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.099] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.099] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.099] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.099] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.101] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.101] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.101] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.101] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.101] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.101] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.101] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.101] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.101] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.101] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.101] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.102] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.102] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.102] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0280.102] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9586b313, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95891577, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4adf7f38, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.102] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x9586b313, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95891577, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4adf7f38, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.102] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4adf7f38, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4adf7f38, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ae00824, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.102] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95891577, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x399762f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x399762f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="metastore", cAlternateFileName="METAST~1")) returned 1 [0280.103] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.103] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.103] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.103] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.103] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.103] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0280.103] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0280.104] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.104] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.104] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0280.104] CryptDestroyHash (hHash=0x55e610) returned 1 [0280.104] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.104] GetLastError () returned 0x0 [0280.104] GetLastError () returned 0x0 [0280.104] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.105] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.106] WriteFile (in: hFile=0x250, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.108] SetEndOfFile (hFile=0x250) returned 1 [0280.108] CloseHandle (hObject=0x250) returned 1 [0280.108] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.109] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.109] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.109] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.109] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.109] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.109] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0280.110] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.110] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.110] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.110] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.110] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.110] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.110] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.110] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.110] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.110] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.111] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.111] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.111] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.111] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.111] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.111] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.111] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.111] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.111] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.111] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.112] CryptDestroyKey (hKey=0x55e210) returned 1 [0280.112] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0280.112] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\SettingSync\\metastore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\settingsync\\metastore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95891577, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x399762f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ae0a542, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0280.112] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95891577, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x399762f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ae0a542, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.112] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x395e291c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x395e291c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3961b94e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBCHK~1.CRY")) returned 1 [0280.112] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3962eef1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3962eef1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39896974, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBLOG~1.CRY")) returned 1 [0280.112] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e87635, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95e87635, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x95e87635, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0280.112] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e87635, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x95e87635, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x95f1fdf9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0280.112] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39896974, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39896974, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x399762f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBTMP~1.CRY")) returned 1 [0280.112] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ae0a542, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ae0a542, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ae0a542, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.112] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f11a4d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x96f11a4d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x982bd1ca, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="meta.edb", cAlternateFileName="")) returned 1 [0280.112] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f11a4d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x96f11a4d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x982bd1ca, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="meta.edb", cAlternateFileName="")) returned 0 [0280.113] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0280.113] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x95891577, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x399762f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x399762f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="metastore", cAlternateFileName="METAST~1")) returned 0 [0280.113] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.113] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1ab059, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3757c8c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e6572, dwReserved1=0x5f4f545f, cFileName="Shell", cAlternateFileName="")) returned 1 [0280.113] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.113] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.113] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.113] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0280.114] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5708e0) returned 1 [0280.114] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.114] CryptHashData (hHash=0x55e7d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.114] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0280.114] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0280.114] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.115] GetLastError () returned 0x0 [0280.115] GetLastError () returned 0x0 [0280.115] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.121] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.122] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.122] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Shell\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\shell\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.124] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.125] SetEndOfFile (hFile=0x24c) returned 1 [0280.125] CloseHandle (hObject=0x24c) returned 1 [0280.125] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.126] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.126] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.127] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.127] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.127] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.127] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0280.127] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.127] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.127] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.127] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.128] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.128] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.128] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.128] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.129] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.129] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.129] CryptDestroyKey (hKey=0x55e310) returned 1 [0280.129] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0280.129] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Shell\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\shell\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1ab059, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ae312e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0280.130] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d1ab059, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ae312e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.130] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d184e79, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d184e79, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x18778, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DefaultLayouts.xml", cAlternateFileName="DEFAUL~1.XML")) returned 1 [0280.130] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ae312e9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ae312e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ae312e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.130] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ae312e9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ae312e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ae312e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.130] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0280.130] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0280.130] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.130] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.130] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.130] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.130] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0280.131] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0280.132] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.132] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.132] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0280.132] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.132] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.132] GetLastError () returned 0x0 [0280.132] GetLastError () returned 0x0 [0280.132] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.133] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\temporary internet files\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.133] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.133] SetEndOfFile (hFile=0x24c) returned 1 [0280.134] CloseHandle (hObject=0x24c) returned 1 [0280.134] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.135] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.135] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.135] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.135] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.135] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0280.136] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.136] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.136] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.137] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.137] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.137] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.137] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.138] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.138] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0280.138] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0280.138] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\temporary internet files\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19ef54, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19ef34, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90çU")) returned 0xffffffff [0280.138] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5ae5bb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3999c506, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3999c506, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x1b, cFileName="UPPS", cAlternateFileName="")) returned 1 [0280.139] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.139] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.139] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.139] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0280.139] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0280.140] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.140] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.140] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0280.140] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.140] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.140] GetLastError () returned 0x0 [0280.140] GetLastError () returned 0x0 [0280.140] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.141] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.142] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.142] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\upps\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.143] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.145] SetEndOfFile (hFile=0x24c) returned 1 [0280.145] CloseHandle (hObject=0x24c) returned 1 [0280.145] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.146] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.146] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.146] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.146] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.146] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.146] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.146] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.146] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.147] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.147] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.147] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.147] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.148] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.148] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.148] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.149] CryptDestroyKey (hKey=0x55e910) returned 1 [0280.149] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0280.149] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\UPPS\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\upps\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5ae5bb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3999c506, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ae56d48, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.149] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f5ae5bb, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3999c506, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ae56d48, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.149] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ae56d48, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ae56d48, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ae56d48, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.149] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3999c506, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3999c506, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3999c506, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UPPS.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UPPSBI~1.CRY")) returned 1 [0280.149] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3999c506, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3999c506, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3999c506, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x405534, dwReserved1=0x0, cFileName="UPPS.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UPPSBI~1.CRY")) returned 0 [0280.149] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.149] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x3d51879a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60944a5, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x60944a5, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x240000, dwReserved0=0x72632e6e, dwReserved1=0x65747079, cFileName="UsrClass.dat", cAlternateFileName="")) returned 1 [0280.149] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x399c2e83, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x399c2e83, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x399c2e83, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72632e6e, dwReserved1=0x65747079, cFileName="UsrClass.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USRCLA~1.CRY")) returned 1 [0280.149] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d51879a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d51879a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d51879a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x70000, dwReserved0=0x72632e6e, dwReserved1=0x65747079, cFileName="UsrClass.dat.LOG1", cAlternateFileName="USRCLA~1.LOG")) returned 1 [0280.150] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d51879a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d51879a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d51879a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x72632e6e, dwReserved1=0x65747079, cFileName="UsrClass.dat.LOG2", cAlternateFileName="USRCLA~2.LOG")) returned 1 [0280.150] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d51879a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d51879a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6345aa97, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x72632e6e, dwReserved1=0x65747079, cFileName="UsrClass.dat{6c1df322-6c5b-11eb-b0a5-00053a318d5c}.TM.blf", cAlternateFileName="USRCLA~1.BLF")) returned 1 [0280.150] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d53e9ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d53e9ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63434853, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x72632e6e, dwReserved1=0x65747079, cFileName="UsrClass.dat{6c1df322-6c5b-11eb-b0a5-00053a318d5c}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="USRCLA~1.REG")) returned 1 [0280.150] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d564ab0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d564ab0, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6345aa97, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x72632e6e, dwReserved1=0x65747079, cFileName="UsrClass.dat{6c1df322-6c5b-11eb-b0a5-00053a318d5c}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="USRCLA~2.REG")) returned 1 [0280.150] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3f28d414, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39b6607d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39b6607d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72632e6e, dwReserved1=0x65747079, cFileName="WebCache", cAlternateFileName="")) returned 1 [0280.150] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.150] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.150] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.150] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.150] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.150] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0280.150] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0280.151] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.151] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.151] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0280.151] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.151] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.151] GetLastError () returned 0x0 [0280.151] GetLastError () returned 0x0 [0280.152] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.152] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.155] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.156] SetEndOfFile (hFile=0x24c) returned 1 [0280.157] CloseHandle (hObject=0x24c) returned 1 [0280.157] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.158] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.158] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.158] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.158] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0280.158] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.158] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.159] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.159] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.159] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.159] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.159] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.159] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.159] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.159] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.159] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.159] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.160] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.160] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.160] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.160] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.160] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.160] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.160] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0280.161] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WebCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\webcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3f28d414, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39b6607d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ae7cf10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.161] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3f28d414, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39b6607d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ae7cf10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.161] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ae7cf10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ae7cf10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ae7cf10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.161] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43a75b6d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3af37a5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x484e6eaf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="V01.chk", cAlternateFileName="")) returned 1 [0280.161] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x399c2e83, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x399c2e83, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x399ea183, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="V01.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="V01CHK~1.CRY")) returned 1 [0280.161] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x438f835d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xc847278b, ftLastWriteTime.dwHighDateTime=0x1d87c96, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="V01.log", cAlternateFileName="")) returned 1 [0280.161] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x399ea183, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x399ea183, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x399ea183, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="V01.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="V01LOG~1.CRY")) returned 1 [0280.161] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x399ea183, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x399ea183, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39b4167c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="V0100006.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="V01000~1.CRY")) returned 1 [0280.161] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43a0363d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43a0363d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43a75b6d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="V01res00001.jrs", cAlternateFileName="V01RES~1.JRS")) returned 1 [0280.161] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43a75b6d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43a75b6d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43a75b6d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="V01res00002.jrs", cAlternateFileName="V01RES~2.JRS")) returned 1 [0280.161] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x438f835d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x438f835d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x7a5fe247, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="V01tmp.log", cAlternateFileName="")) returned 1 [0280.161] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39b4167c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39b4167c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39b4167c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="V01tmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="V01TMP~1.CRY")) returned 1 [0280.161] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ae82a9, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43ae82a9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x12f45133, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1980000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WebCacheV01.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 1 [0280.161] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39b6607d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39b6607d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39b6607d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WebCacheV01.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WEBCAC~1.CRY")) returned 1 [0280.161] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39b6607d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39b6607d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39b6607d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="WebCacheV01.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WEBCAC~1.CRY")) returned 0 [0280.161] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.162] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3f28d414, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f28d414, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3f28d414, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31305665, dwReserved1=0x7461642e, cFileName="WebCacheLock.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 1 [0280.162] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b6607d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39b6607d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39b6607d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31305665, dwReserved1=0x7461642e, cFileName="WebCacheLock.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WEBCAC~1.CRY")) returned 1 [0280.162] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31305665, dwReserved1=0x7461642e, cFileName="WinX", cAlternateFileName="")) returned 1 [0280.162] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.162] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.162] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.162] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.162] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.162] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0280.162] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0280.164] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.164] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.164] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0280.164] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.164] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.164] GetLastError () returned 0x0 [0280.164] GetLastError () returned 0x0 [0280.164] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.165] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.165] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.166] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.168] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.169] SetEndOfFile (hFile=0x24c) returned 1 [0280.169] CloseHandle (hObject=0x24c) returned 1 [0280.169] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.170] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.170] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.170] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.170] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0280.171] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.171] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.171] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.171] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.171] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.171] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.172] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.172] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.172] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.173] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.173] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.173] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.173] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.173] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.173] CryptDestroyKey (hKey=0x55e290) returned 1 [0280.173] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0280.173] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4aea31b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0280.174] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4aea31b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.174] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39b8c10f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39b8c10f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Group1", cAlternateFileName="")) returned 1 [0280.174] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.174] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.174] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.174] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.174] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.174] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0280.175] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0280.175] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.175] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.175] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0280.175] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.175] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.175] GetLastError () returned 0x0 [0280.175] GetLastError () returned 0x0 [0280.176] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.176] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.177] WriteFile (in: hFile=0x250, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.179] SetEndOfFile (hFile=0x250) returned 1 [0280.179] CloseHandle (hObject=0x250) returned 1 [0280.179] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.180] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.180] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.180] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.180] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.180] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.180] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.181] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.181] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.181] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.181] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.181] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.181] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.181] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.182] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.182] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.182] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.182] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.182] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.182] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.182] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.182] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.183] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.183] CryptDestroyKey (hKey=0x55e210) returned 1 [0280.183] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0280.183] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group1\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39b8c10f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aea31b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0280.183] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39b8c10f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aea31b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.183] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b6607d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39b6607d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39b6607d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1 - Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="1-DESK~1.CRY")) returned 1 [0280.183] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b6607d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39b6607d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39b8c10f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0280.183] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aea31b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aea31b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aec94b0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.184] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aea31b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aea31b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aec94b0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.184] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0280.184] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39bfe8a0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39bfe8a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Group2", cAlternateFileName="")) returned 1 [0280.184] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.184] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.184] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.184] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.184] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.184] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0280.184] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571408) returned 1 [0280.185] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.185] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.185] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0280.185] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.185] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.185] GetLastError () returned 0x0 [0280.185] GetLastError () returned 0x0 [0280.185] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.186] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.187] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.187] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.188] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.190] SetEndOfFile (hFile=0x250) returned 1 [0280.190] CloseHandle (hObject=0x250) returned 1 [0280.190] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.191] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.191] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.191] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.191] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.191] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.191] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0280.192] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.192] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.192] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.192] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.193] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.193] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.193] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.193] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.196] CryptDestroyKey (hKey=0x55e210) returned 1 [0280.196] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0280.196] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group2\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39bfe8a0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aec94b0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.197] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39bfe8a0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aec94b0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.197] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b8c10f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39b8c10f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39bb2396, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1 - Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="1-RUNL~1.CRY")) returned 1 [0280.197] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bb2396, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39bb2396, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39bb2396, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2 - Search.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="2-SEAR~1.CRY")) returned 1 [0280.197] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bb2396, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39bb2396, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39bd864b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x405534, dwReserved1=0x0, cFileName="3 - Windows Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="3-WIND~1.CRY")) returned 1 [0280.197] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bd864b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39bd864b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39bd864b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4 - Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="4-CONT~1.CRY")) returned 1 [0280.197] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bd864b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39bd864b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39bfe8a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5 - Task Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="5-TASK~1.CRY")) returned 1 [0280.197] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39bfe8a0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39bfe8a0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39bfe8a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0280.197] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aec94b0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aec94b0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aec94b0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.197] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aec94b0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aec94b0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aec94b0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.197] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.197] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39d098cb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39d098cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Group3", cAlternateFileName="")) returned 1 [0280.197] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.197] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.198] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.198] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0280.198] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0280.199] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.199] CryptHashData (hHash=0x55e310, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.199] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0280.199] CryptDestroyHash (hHash=0x55e310) returned 1 [0280.199] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.199] GetLastError () returned 0x0 [0280.199] GetLastError () returned 0x0 [0280.199] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.200] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.202] WriteFile (in: hFile=0x250, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.204] SetEndOfFile (hFile=0x250) returned 1 [0280.204] CloseHandle (hObject=0x250) returned 1 [0280.204] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.205] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.205] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.205] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.205] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.205] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.206] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0280.206] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.206] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.206] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.206] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.206] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.206] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.207] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.207] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.207] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.207] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.207] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.207] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.207] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.207] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.207] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.207] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.207] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.208] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.208] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.208] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.208] CryptDestroyKey (hKey=0x55e210) returned 1 [0280.208] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0280.208] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\winx\\group3\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39d098cb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aeef608, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0280.208] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39d098cb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aeef608, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.208] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c24a10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39c24a10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39c24a10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="01 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="01-COM~1.CRY")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c24a10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39c24a10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39c24a10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x405534, dwReserved1=0x0, cFileName="01a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="01A-WI~1.CRY")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c24a10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39c24a10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39c4ad46, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x405534, dwReserved1=0x0, cFileName="02 - Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="02-COM~1.CRY")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c4ad46, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39c4ad46, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39c4ad46, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x405534, dwReserved1=0x0, cFileName="02a - Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="02A-WI~1.CRY")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c4ad46, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39c4ad46, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39c70f6c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="03 - Computer Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="03-COM~1.CRY")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c70f6c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39c70f6c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39c70f6c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="04 - Disk Management.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="04-DIS~1.CRY")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c971d5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39c971d5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39c971d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x405534, dwReserved1=0x0, cFileName="04-1 - Network Connections.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="04-1-N~1.CRY")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c971d5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39c971d5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39c971d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x405534, dwReserved1=0x0, cFileName="05 - Device Manager.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="05-DEV~1.CRY")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39cbd574, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39cbd574, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39cbd574, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x405534, dwReserved1=0x0, cFileName="06 - System.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="06-SYS~1.CRY")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39cbd574, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39cbd574, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39cbd574, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="07 - Event Viewer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="07-EVE~1.CRY")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ce3698, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39ce3698, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39ce3698, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x405534, dwReserved1=0x0, cFileName="08 - Power Options.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="08-POW~1.CRY")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ce3698, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39ce3698, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39ce3698, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="09 - Mobility Center.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="09-MOB~1.CRY")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ce3698, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39ce3698, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39d098cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="10 - Programs and Features.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="10-PRO~1.CRY")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d098cb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39d098cb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39d098cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aeef608, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aeef608, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aeef608, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aeef608, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aeef608, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aeef608, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.209] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0280.209] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aea31b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aea31b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aea31b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.210] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aea31b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4aea31b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4aea31b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.210] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0280.210] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x31305665, dwReserved1=0x7461642e, cFileName="WinX", cAlternateFileName="")) returned 0 [0280.210] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0280.210] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x87ca06a1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x636f4c65, dwReserved1=0x61642e6b, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1 [0280.210] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.210] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.210] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.210] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0280.211] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570a78) returned 1 [0280.211] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0280.211] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.211] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e290) returned 1 [0280.211] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.211] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0280.211] GetLastError () returned 0x0 [0280.211] GetLastError () returned 0x0 [0280.212] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.212] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.213] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.214] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows live\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0280.215] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.216] SetEndOfFile (hFile=0x248) returned 1 [0280.216] CloseHandle (hObject=0x248) returned 1 [0280.216] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.217] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.217] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.218] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.218] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.218] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.219] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.219] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.219] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.220] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.220] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.220] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.220] CryptDestroyKey (hKey=0x55e290) returned 1 [0280.220] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0280.220] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows live\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4af15910, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.221] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x87ca06a1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4af15910, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.221] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xb2f45c7f, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Bici", cAlternateFileName="")) returned 1 [0280.221] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.221] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.221] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.221] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.221] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.221] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0280.221] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0280.222] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.222] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.222] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0280.222] CryptDestroyHash (hHash=0x55e610) returned 1 [0280.222] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.222] GetLastError () returned 0x0 [0280.222] GetLastError () returned 0x0 [0280.222] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.223] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows live\\bici\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.224] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.227] SetEndOfFile (hFile=0x24c) returned 1 [0280.227] CloseHandle (hObject=0x24c) returned 1 [0280.227] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.228] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.228] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.228] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.229] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.229] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0280.229] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.229] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.229] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.229] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.229] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.230] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.230] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.230] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.230] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.230] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.230] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.230] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.230] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.230] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.230] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.230] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.231] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.231] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.231] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.231] CryptDestroyKey (hKey=0x55e790) returned 1 [0280.231] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0280.231] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows live\\bici\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x4af15910, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0280.231] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87ca06a1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xb2f45c7f, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x4af15910, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.232] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af15910, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4af15910, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4af3bc60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.232] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af15910, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4af15910, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4af3bc60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.232] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0280.232] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af15910, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4af15910, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4af15910, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.232] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af15910, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4af15910, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4af15910, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.232] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.232] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39d2fbed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39d2fbed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0280.232] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.232] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.232] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.232] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.233] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0280.233] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571270) returned 1 [0280.233] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0280.233] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.233] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0280.233] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.233] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f190*=0x18) returned 1 [0280.234] GetLastError () returned 0x0 [0280.234] GetLastError () returned 0x0 [0280.234] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.235] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.235] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.236] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0280.240] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.295] SetEndOfFile (hFile=0x248) returned 1 [0280.295] CloseHandle (hObject=0x248) returned 1 [0280.295] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.296] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.296] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.296] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.297] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0280.297] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.297] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.297] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.297] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.297] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.297] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.297] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.298] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.298] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.298] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.298] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.299] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.299] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.299] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.299] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0280.299] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39d2fbed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4af3bc60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.299] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39d2fbed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4af3bc60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.300] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0280.300] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.300] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.300] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.300] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0280.300] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570eb8) returned 1 [0280.301] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.301] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.301] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0280.301] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.301] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.301] GetLastError () returned 0x0 [0280.301] GetLastError () returned 0x0 [0280.301] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.302] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.305] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.306] SetEndOfFile (hFile=0x24c) returned 1 [0280.306] CloseHandle (hObject=0x24c) returned 1 [0280.306] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.307] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.307] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.308] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.308] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.308] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.309] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.309] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.309] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.309] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.309] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.309] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.309] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.309] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.310] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.310] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.310] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.310] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.310] CryptDestroyKey (hKey=0x55e190) returned 1 [0280.310] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0280.310] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows sidebar\\gadgets\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4affa642, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.311] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4affa642, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.311] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4affa642, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4affa642, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4affa642, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.311] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4affa642, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4affa642, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4affa642, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.311] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.311] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4af3bc60, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4af3bc60, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4afd4557, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.311] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d2fbed, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39d2fbed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39d2fbed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0280.311] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d2fbed, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39d2fbed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39d2fbed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="settings.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 0 [0280.311] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.311] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39d2fbed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39d2fbed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 0 [0280.311] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0280.311] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b344cd, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x50b344cd, ftLastWriteTime.dwHighDateTime=0x1d8a64c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64695320, dwReserved1=0x72616265, cFileName="Microsoft Help", cAlternateFileName="MICROS~3")) returned 1 [0280.312] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.312] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.312] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.312] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.312] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.312] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0280.312] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570c10) returned 1 [0280.313] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0280.313] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.313] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0280.313] CryptDestroyHash (hHash=0x55e650) returned 1 [0280.313] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0280.313] GetLastError () returned 0x0 [0280.313] GetLastError () returned 0x0 [0280.313] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.314] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.315] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.315] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft Help\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft help\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0280.316] WriteFile (in: hFile=0x244, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.318] SetEndOfFile (hFile=0x244) returned 1 [0280.318] CloseHandle (hObject=0x244) returned 1 [0280.318] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.319] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.319] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.319] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.319] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0280.320] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.320] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.320] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.320] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.320] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.320] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.320] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.320] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.320] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.320] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.321] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.321] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.321] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.321] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.321] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.321] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.322] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0280.322] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0280.322] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft Help\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft help\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b344cd, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x4affa642, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.322] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50b344cd, ftCreationTime.dwHighDateTime=0x1d8a64c, ftLastAccessTime.dwLowDateTime=0x50b344cd, ftLastAccessTime.dwHighDateTime=0x1d8a64c, ftLastWriteTime.dwLowDateTime=0x4affa642, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.322] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4affa642, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4affa642, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4affa642, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.322] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4affa642, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4affa642, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4affa642, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.322] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.322] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4278a87, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1 [0280.322] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.322] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.323] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.323] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.323] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.323] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0280.323] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5712f8) returned 1 [0280.324] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0280.324] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.324] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0280.324] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.324] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0280.324] GetLastError () returned 0x0 [0280.324] GetLastError () returned 0x0 [0280.324] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.325] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0280.326] WriteFile (in: hFile=0x244, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.327] SetEndOfFile (hFile=0x244) returned 1 [0280.327] CloseHandle (hObject=0x244) returned 1 [0280.327] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.328] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.328] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.328] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.328] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.328] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.329] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0280.329] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.329] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.329] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.329] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.329] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.329] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.330] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.330] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.330] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.330] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.330] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.330] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.330] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.330] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.331] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.331] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0280.331] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0280.331] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4b020a9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0280.331] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4252734, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4b020a9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.331] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b020a9f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b020a9f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b020a9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.331] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x435d739, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SharedCacheContainers", cAlternateFileName="SHARED~1")) returned 1 [0280.332] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.332] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.332] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.332] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0280.332] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570f40) returned 1 [0280.333] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0280.333] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.333] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0280.333] CryptDestroyHash (hHash=0x55e750) returned 1 [0280.333] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0280.333] GetLastError () returned 0x0 [0280.333] GetLastError () returned 0x0 [0280.333] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.334] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.347] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.347] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0280.353] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.355] SetEndOfFile (hFile=0x248) returned 1 [0280.355] CloseHandle (hObject=0x248) returned 1 [0280.355] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.356] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.356] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.357] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.357] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.357] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.357] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.357] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.358] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.358] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.358] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.359] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0280.359] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0280.359] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4b06cd08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.359] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4b06cd08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.359] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b055bf4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b055bf4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b06cd08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.359] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39d2fbed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39d2fbed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MicrosoftEdge_iecompat", cAlternateFileName="MICROS~1")) returned 1 [0280.359] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.359] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.360] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.360] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.360] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.360] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0280.360] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0280.361] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.361] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.361] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0280.361] CryptDestroyHash (hHash=0x55e610) returned 1 [0280.361] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.361] GetLastError () returned 0x0 [0280.361] GetLastError () returned 0x0 [0280.361] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.362] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.366] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.367] SetEndOfFile (hFile=0x24c) returned 1 [0280.367] CloseHandle (hObject=0x24c) returned 1 [0280.367] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.368] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.369] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.369] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.369] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0280.369] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.369] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.370] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.370] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.370] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.370] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.371] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.371] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.371] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.371] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.371] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.371] CryptDestroyKey (hKey=0x55e650) returned 1 [0280.371] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0280.371] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39d2fbed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b06cd08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0280.372] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39d2fbed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b06cd08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.372] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39d2fbed, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39d2fbed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39d2fbed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0280.372] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b06cd08, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b06cd08, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b09301e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.372] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b06cd08, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b06cd08, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b09301e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.372] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0280.372] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x435d739, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39d5600d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39d5600d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="MicrosoftEdge_iecompatua", cAlternateFileName="MICROS~2")) returned 1 [0280.372] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.372] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.372] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.372] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0280.373] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0280.373] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.373] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.373] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0280.373] CryptDestroyHash (hHash=0x55e750) returned 1 [0280.373] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.373] GetLastError () returned 0x0 [0280.373] GetLastError () returned 0x0 [0280.374] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.374] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.375] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.376] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.377] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.378] SetEndOfFile (hFile=0x24c) returned 1 [0280.378] CloseHandle (hObject=0x24c) returned 1 [0280.378] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.379] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.379] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.379] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.379] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.380] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.380] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.380] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.380] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.380] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.380] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.381] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.381] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.381] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.381] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.381] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.381] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.381] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.381] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.383] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.383] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.383] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.383] CryptDestroyKey (hKey=0x55e910) returned 1 [0280.383] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0280.384] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x435d739, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39d5600d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b09301e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0280.384] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x435d739, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39d5600d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b09301e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.384] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39d5600d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39d5600d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39d5600d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0280.384] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b09301e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b09301e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b09301e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.384] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b09301e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b09301e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b09301e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.384] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0280.384] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x435d739, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39d5600d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39d5600d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="MicrosoftEdge_iecompatua", cAlternateFileName="MICROS~2")) returned 0 [0280.384] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.384] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4278a87, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4278a87, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x435d739, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SharedCacheContainers", cAlternateFileName="SHARED~1")) returned 0 [0280.384] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0280.385] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xddb04c43, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xddb04c43, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x65686361, dwReserved1=0x746e6f43, cFileName="Packages", cAlternateFileName="")) returned 1 [0280.385] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.385] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.385] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.385] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0280.385] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5709f0) returned 1 [0280.386] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0280.386] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.386] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0280.386] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0280.386] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0280.386] GetLastError () returned 0x0 [0280.386] GetLastError () returned 0x0 [0280.386] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.387] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0280.388] WriteFile (in: hFile=0x244, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.390] SetEndOfFile (hFile=0x244) returned 1 [0280.390] CloseHandle (hObject=0x244) returned 1 [0280.390] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.391] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.391] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.391] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.391] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.391] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.391] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0280.392] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.392] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.392] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.392] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.393] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.393] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.393] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.393] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.394] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0280.394] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0280.394] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xdecc0441, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x4b0b93d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0280.394] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xdecc0441, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x4b0b93d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.395] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0b93d4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b0b93d4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b0b93d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.395] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy", cAlternateFileName="MICROS~1.BRO")) returned 1 [0280.395] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.395] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.395] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.395] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0280.395] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570a78) returned 1 [0280.396] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0280.396] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.396] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0280.396] CryptDestroyHash (hHash=0x55e650) returned 1 [0280.396] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18) returned 1 [0280.396] GetLastError () returned 0x0 [0280.396] GetLastError () returned 0x0 [0280.396] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.397] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.398] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.399] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0280.400] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.401] SetEndOfFile (hFile=0x248) returned 1 [0280.401] CloseHandle (hObject=0x248) returned 1 [0280.401] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.402] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.402] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0280.403] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.403] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.404] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.404] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.404] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.404] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.404] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.404] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.404] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.404] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.404] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.404] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.404] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.405] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0280.405] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0280.405] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b0df5a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0280.405] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b0df5a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.405] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0280.405] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.405] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.406] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.406] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.406] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.406] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0280.406] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0280.406] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.406] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.407] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0280.407] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.407] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.407] GetLastError () returned 0x0 [0280.407] GetLastError () returned 0x0 [0280.407] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.407] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.412] WriteFile (in: hFile=0x24c, lpBuffer=0x23e524c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e524c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.414] SetEndOfFile (hFile=0x24c) returned 1 [0280.414] CloseHandle (hObject=0x24c) returned 1 [0280.414] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.415] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.415] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.416] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.416] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.416] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.417] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.417] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.417] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.417] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.417] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.418] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.418] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.418] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0280.418] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b0df5a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0280.418] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b0df5a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.418] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b0df5a6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b0df5a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b10578c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.418] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0280.419] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.419] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.419] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.419] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0280.419] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0280.420] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.420] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.420] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0280.420] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.420] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.420] GetLastError () returned 0x0 [0280.420] GetLastError () returned 0x0 [0280.420] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.421] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.421] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.422] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.423] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.424] SetEndOfFile (hFile=0x250) returned 1 [0280.424] CloseHandle (hObject=0x250) returned 1 [0280.424] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.425] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.426] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0280.426] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.426] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.426] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.427] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.427] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.427] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.427] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.427] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.428] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0280.428] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0280.428] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b10578c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0280.431] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b10578c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.431] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b10578c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b10578c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b10578c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.431] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b10578c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b10578c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b10578c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.431] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0280.431] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0280.431] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.431] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.432] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.432] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0280.432] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0280.432] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.432] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.432] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0280.432] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0280.432] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.433] GetLastError () returned 0x0 [0280.433] GetLastError () returned 0x0 [0280.433] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.433] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.434] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.434] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.435] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.437] SetEndOfFile (hFile=0x250) returned 1 [0280.437] CloseHandle (hObject=0x250) returned 1 [0280.437] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.438] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.438] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.438] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.438] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0280.438] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.439] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.439] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.439] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.439] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.439] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.439] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.439] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.439] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.439] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.439] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.439] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.440] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.440] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.440] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.440] CryptDestroyKey (hKey=0x55e290) returned 1 [0280.440] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0280.440] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b12ba1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.441] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b12ba1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.441] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b12ba1c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b12ba1c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b12ba1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.441] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b12ba1c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b12ba1c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b12ba1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.441] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.441] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0280.441] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.441] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.441] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.441] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0280.442] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0280.442] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.442] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.442] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0280.442] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0280.442] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.442] GetLastError () returned 0x0 [0280.442] GetLastError () returned 0x0 [0280.443] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.443] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.446] WriteFile (in: hFile=0x250, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.447] SetEndOfFile (hFile=0x250) returned 1 [0280.448] CloseHandle (hObject=0x250) returned 1 [0280.448] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.448] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.448] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.449] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.449] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.449] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.449] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.449] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.449] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.450] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.450] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.450] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.450] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.450] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.450] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.450] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.450] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.450] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.451] CryptDestroyKey (hKey=0x55e910) returned 1 [0280.451] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0280.451] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b12ba1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0280.451] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b12ba1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.451] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b12ba1c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b12ba1c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b153410, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.451] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b12ba1c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b12ba1c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b153410, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.451] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0280.452] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0280.452] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.452] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.452] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.452] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0280.452] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0280.453] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.453] CryptHashData (hHash=0x55e7d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.453] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0280.453] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0280.453] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.453] GetLastError () returned 0x0 [0280.453] GetLastError () returned 0x0 [0280.453] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.454] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.455] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.455] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.457] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.458] SetEndOfFile (hFile=0x250) returned 1 [0280.458] CloseHandle (hObject=0x250) returned 1 [0280.458] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.459] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.459] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.460] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.460] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0280.460] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.460] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.460] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.460] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.460] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.461] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.461] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.461] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.461] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.461] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.462] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0280.462] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0280.462] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b153410, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.462] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b153410, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.462] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b153410, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b153410, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b153410, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.462] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b153410, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b153410, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b153410, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.462] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.462] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547df81c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547df81c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547df81c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0280.462] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0280.462] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547933c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0280.463] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.463] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.463] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.463] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.463] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.463] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0280.463] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5706c0) returned 1 [0280.464] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.464] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.464] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0280.464] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.464] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.464] GetLastError () returned 0x0 [0280.464] GetLastError () returned 0x0 [0280.464] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.465] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.465] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.465] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.466] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.467] SetEndOfFile (hFile=0x24c) returned 1 [0280.467] CloseHandle (hObject=0x24c) returned 1 [0280.468] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.468] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.468] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.469] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0280.469] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.469] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.469] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.469] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.469] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.470] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.470] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.470] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.470] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.470] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.471] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0280.471] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b177f2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0280.471] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b177f2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.471] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b177f2c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b177f2c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b177f2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.471] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b177f2c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b177f2c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b177f2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.471] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0280.471] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0df5a6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b0df5a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b0df5a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.471] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5476d1ac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0280.471] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.471] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.471] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.471] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.472] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0280.472] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0280.472] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.472] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.472] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0280.472] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.472] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.472] GetLastError () returned 0x0 [0280.472] GetLastError () returned 0x0 [0280.472] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.473] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.474] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.476] SetEndOfFile (hFile=0x24c) returned 1 [0280.476] CloseHandle (hObject=0x24c) returned 1 [0280.476] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.477] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.477] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.478] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.478] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.478] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.478] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.478] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.479] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.479] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.479] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.479] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.479] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.479] CryptDestroyKey (hKey=0x55e790) returned 1 [0280.479] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0280.479] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b177f2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.480] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b177f2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.480] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b177f2c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b177f2c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b19e14d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.480] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b177f2c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b177f2c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b19e14d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.480] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.480] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54746ebf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54746ebf, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0280.480] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.480] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.480] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.480] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.480] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.480] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0280.481] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0280.481] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.481] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.481] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0280.481] CryptDestroyHash (hHash=0x55e290) returned 1 [0280.481] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.481] GetLastError () returned 0x0 [0280.481] GetLastError () returned 0x0 [0280.481] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.482] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.483] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.483] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.484] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.485] SetEndOfFile (hFile=0x24c) returned 1 [0280.485] CloseHandle (hObject=0x24c) returned 1 [0280.485] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.486] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.486] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0280.486] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.487] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.487] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.487] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.487] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.487] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.488] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.488] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.488] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.488] CryptDestroyKey (hKey=0x55e910) returned 1 [0280.488] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0280.488] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54746ebf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b19e14d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0280.489] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54746ebf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b19e14d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.489] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b19e14d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b19e14d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b19e14d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.489] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b19e14d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b19e14d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b19e14d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.489] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0280.489] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0280.489] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.489] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.489] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.489] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0280.489] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0280.490] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.490] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.490] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0280.490] CryptDestroyHash (hHash=0x55e650) returned 1 [0280.490] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.490] GetLastError () returned 0x0 [0280.490] GetLastError () returned 0x0 [0280.490] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.491] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.495] WriteFile (in: hFile=0x24c, lpBuffer=0x23e53c0*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e53c0*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.496] SetEndOfFile (hFile=0x24c) returned 1 [0280.496] CloseHandle (hObject=0x24c) returned 1 [0280.496] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.497] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.497] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.497] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.497] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0280.498] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.498] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.498] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.498] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.498] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.498] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.498] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.499] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.499] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.499] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.499] CryptDestroyKey (hKey=0x55e210) returned 1 [0280.499] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0280.499] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b1c437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0280.500] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b1c437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.500] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39da224a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39da224a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0280.500] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.500] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.500] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.500] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0280.500] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0280.501] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.501] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.501] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0280.501] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.501] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.501] GetLastError () returned 0x0 [0280.501] GetLastError () returned 0x0 [0280.501] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.502] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.503] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.503] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.504] WriteFile (in: hFile=0x250, lpBuffer=0x23e361c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e361c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.505] SetEndOfFile (hFile=0x250) returned 1 [0280.505] CloseHandle (hObject=0x250) returned 1 [0280.505] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.506] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.506] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.506] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.506] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.507] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.507] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.507] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.507] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.507] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.507] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.507] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.507] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.507] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.507] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.508] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.508] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.508] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.508] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.508] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.508] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.508] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.508] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.508] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.508] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.509] CryptDestroyKey (hKey=0x55e650) returned 1 [0280.509] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0280.509] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39da224a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b1c437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.509] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39da224a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b1c437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.509] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39da224a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39da224a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39da224a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0280.509] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0280.509] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x548ea798, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x548ea798, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x548ea798, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0280.509] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b1c437d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b1c437d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b1c437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.509] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b1c437d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b1c437d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b1c437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.509] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.509] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b1c437d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b1c437d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b1c437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.509] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b1c437d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b1c437d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b1c437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.509] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0280.509] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54746ebf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x54746ebf, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0280.510] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.510] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.510] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.510] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0280.510] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0280.510] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.511] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.511] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0280.511] CryptDestroyHash (hHash=0x55e790) returned 1 [0280.511] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.511] GetLastError () returned 0x0 [0280.511] GetLastError () returned 0x0 [0280.511] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.511] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.512] WriteFile (in: hFile=0x24c, lpBuffer=0x23e362c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e362c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.513] SetEndOfFile (hFile=0x24c) returned 1 [0280.516] CloseHandle (hObject=0x24c) returned 1 [0280.517] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.517] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.517] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.517] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0280.518] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.518] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.518] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.518] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.519] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.519] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.519] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.519] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.519] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0280.520] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0280.520] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54746ebf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b1ea61b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0280.520] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54746ebf, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x54746ebf, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b1ea61b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.520] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b1ea61b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b1ea61b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b1ea61b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.520] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b1ea61b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b1ea61b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b1ea61b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.520] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0280.520] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39dc845d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39dc845d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0280.520] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.520] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.520] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.520] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.520] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.520] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0280.521] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570638) returned 1 [0280.521] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.521] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.521] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0280.521] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.521] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.521] GetLastError () returned 0x0 [0280.521] GetLastError () returned 0x0 [0280.521] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.524] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.525] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.525] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.526] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.527] SetEndOfFile (hFile=0x24c) returned 1 [0280.527] CloseHandle (hObject=0x24c) returned 1 [0280.527] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.528] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.528] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.528] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.528] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0280.529] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.529] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.529] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.529] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.529] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.530] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.530] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.530] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.530] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.530] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.530] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0280.530] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0280.530] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39dc845d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b210703, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.531] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39dc845d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b210703, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.531] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b210703, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b210703, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b210703, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.531] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547933c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0280.531] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39dc845d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39dc845d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39dc845d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0280.531] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9035563d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9035563d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9035563d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0280.531] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9037b75e, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9037b75e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9037b75e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0280.531] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9037b75e, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9037b75e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9037b75e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0280.531] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.531] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x547933c2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0280.531] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.531] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.531] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.531] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.531] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.531] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0280.532] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0280.532] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.532] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.532] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0280.532] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.532] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.532] GetLastError () returned 0x0 [0280.532] GetLastError () returned 0x0 [0280.532] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.533] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.534] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.536] SetEndOfFile (hFile=0x24c) returned 1 [0280.536] CloseHandle (hObject=0x24c) returned 1 [0280.536] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.536] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.537] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.537] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.537] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.537] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.537] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.537] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.537] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.538] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.538] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.538] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.538] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.538] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.538] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.538] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.538] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.538] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.538] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.538] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.538] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.538] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.539] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.539] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0280.539] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b210703, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.539] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x547933c2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x547933c2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b210703, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.539] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b210703, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b210703, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b210703, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.539] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b210703, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b210703, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b210703, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.539] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.539] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5476d1ac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0280.539] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.539] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.540] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.540] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.540] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.540] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0280.540] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0280.540] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.540] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.540] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0280.540] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.541] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.541] GetLastError () returned 0x0 [0280.541] GetLastError () returned 0x0 [0280.541] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.541] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.542] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.542] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.543] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.544] SetEndOfFile (hFile=0x24c) returned 1 [0280.544] CloseHandle (hObject=0x24c) returned 1 [0280.544] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.545] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.545] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0280.545] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.546] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.546] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.546] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.546] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.546] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.546] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.546] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.546] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.546] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.546] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.546] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.546] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.546] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.547] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.547] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.547] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.547] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.547] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.547] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.547] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0280.547] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0280.547] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b236a32, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0280.547] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b236a32, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.548] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b236a32, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b236a32, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b236a32, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.548] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b236a32, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b236a32, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b236a32, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.548] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0280.548] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5476d1ac, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5476d1ac, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5476d1ac, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0280.548] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0280.548] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x422e6174, cFileName="Microsoft.AccountsControl_cw5n1h2txyewy", cAlternateFileName="MICROS~1.ACC")) returned 1 [0280.548] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.548] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.548] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.548] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.548] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.548] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0280.548] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570d20) returned 1 [0280.549] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0280.549] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.549] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e750) returned 1 [0280.549] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.549] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f190*=0x18) returned 1 [0280.549] GetLastError () returned 0x0 [0280.549] GetLastError () returned 0x0 [0280.549] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.550] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0280.551] WriteFile (in: hFile=0x248, lpBuffer=0x23e35cc*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e35cc*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.552] SetEndOfFile (hFile=0x248) returned 1 [0280.552] CloseHandle (hObject=0x248) returned 1 [0280.552] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.553] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.553] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.553] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.553] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.553] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0280.554] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.554] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.554] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.554] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.554] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.554] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.554] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.554] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.555] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.555] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.555] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.555] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.555] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.555] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.555] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.555] CryptDestroyKey (hKey=0x55e750) returned 1 [0280.556] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0280.556] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b236a32, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.556] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b236a32, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.556] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0280.556] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.556] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.556] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.556] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.556] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.556] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0280.556] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571490) returned 1 [0280.557] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.557] CryptHashData (hHash=0x55e2d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.557] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0280.557] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0280.557] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.557] GetLastError () returned 0x0 [0280.557] GetLastError () returned 0x0 [0280.557] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.558] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0280.558] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.559] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.561] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.562] SetEndOfFile (hFile=0x24c) returned 1 [0280.562] CloseHandle (hObject=0x24c) returned 1 [0280.562] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.563] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.563] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.563] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.563] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.563] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.564] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.564] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.564] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.564] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.564] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.564] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.564] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.564] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.564] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.564] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.564] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.565] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.565] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.565] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.565] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.565] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0280.565] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b25cd85, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0280.565] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b25cd85, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.565] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b25cd85, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b25cd85, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b25cd85, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.565] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0280.566] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.566] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.566] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.566] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0280.566] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570638) returned 1 [0280.566] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.567] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.567] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0280.567] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.567] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.567] GetLastError () returned 0x0 [0280.567] GetLastError () returned 0x0 [0280.567] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.567] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.570] WriteFile (in: hFile=0x250, lpBuffer=0x23e3594*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3594*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.572] SetEndOfFile (hFile=0x250) returned 1 [0280.572] CloseHandle (hObject=0x250) returned 1 [0280.572] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.572] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.572] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.573] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0280.573] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.573] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.573] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.574] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.574] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.574] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.574] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.574] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.575] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.575] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0280.575] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b282e52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0280.575] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b282e52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.575] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b282e52, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b282e52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b282e52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.575] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b282e52, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b282e52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b282e52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.575] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0280.575] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0280.576] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.576] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.576] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.576] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0280.576] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5712f8) returned 1 [0280.577] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.577] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.577] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0280.577] CryptDestroyHash (hHash=0x55e610) returned 1 [0280.577] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.577] GetLastError () returned 0x0 [0280.577] GetLastError () returned 0x0 [0280.577] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.578] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.579] WriteFile (in: hFile=0x250, lpBuffer=0x23e527c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e527c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.580] SetEndOfFile (hFile=0x250) returned 1 [0280.580] CloseHandle (hObject=0x250) returned 1 [0280.581] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.581] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.581] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0280.582] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.582] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.582] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.582] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.583] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.583] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.583] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.583] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.583] CryptDestroyKey (hKey=0x55e650) returned 1 [0280.583] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0280.583] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b282e52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0280.584] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b282e52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.584] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b282e52, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b282e52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b282e52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.584] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b282e52, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b282e52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b282e52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.584] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0280.584] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0280.584] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.584] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.584] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.585] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.585] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0280.585] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0280.585] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.585] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.585] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e310) returned 1 [0280.585] CryptDestroyHash (hHash=0x55e610) returned 1 [0280.585] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.585] GetLastError () returned 0x0 [0280.585] GetLastError () returned 0x0 [0280.586] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.586] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.587] WriteFile (in: hFile=0x250, lpBuffer=0x23e35c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e35c4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.588] SetEndOfFile (hFile=0x250) returned 1 [0280.588] CloseHandle (hObject=0x250) returned 1 [0280.588] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.589] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.589] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.589] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.589] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.589] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.589] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.590] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.590] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.590] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.590] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.590] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.590] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.590] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.590] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.590] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.591] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.591] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.591] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.591] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.591] CryptDestroyKey (hKey=0x55e310) returned 1 [0280.591] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0280.591] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b2a9213, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.592] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b2a9213, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.592] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b2a9213, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b2a9213, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b2a9213, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.592] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b2a9213, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b2a9213, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b2a9213, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.592] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.592] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0280.592] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.592] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.592] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.592] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0280.592] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0280.593] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.593] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.593] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0280.593] CryptDestroyHash (hHash=0x55e610) returned 1 [0280.593] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.593] GetLastError () returned 0x0 [0280.593] GetLastError () returned 0x0 [0280.593] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.594] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.595] WriteFile (in: hFile=0x250, lpBuffer=0x23e35d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e35d4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.596] SetEndOfFile (hFile=0x250) returned 1 [0280.596] CloseHandle (hObject=0x250) returned 1 [0280.596] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.597] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.597] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.597] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.597] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0280.598] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.598] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.598] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.598] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.598] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.598] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.599] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.599] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.599] CryptDestroyKey (hKey=0x55e650) returned 1 [0280.599] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0280.599] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b2a9213, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.600] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b2a9213, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.600] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2a9213, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b2a9213, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b2a9213, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.600] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2a9213, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b2a9213, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b2a9213, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.600] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.600] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x611c8b13, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611c8b13, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611c8b13, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0280.600] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0280.600] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0280.600] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.600] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.601] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.601] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0280.601] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0280.601] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.601] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.601] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0280.602] CryptDestroyHash (hHash=0x55e610) returned 1 [0280.602] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.602] GetLastError () returned 0x0 [0280.602] GetLastError () returned 0x0 [0280.602] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.603] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.606] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3614*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3614*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.607] SetEndOfFile (hFile=0x24c) returned 1 [0280.607] CloseHandle (hObject=0x24c) returned 1 [0280.607] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.608] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.608] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.608] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.608] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.608] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.608] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0280.609] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.609] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.609] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.609] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.609] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.610] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.610] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.610] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.610] CryptDestroyKey (hKey=0x55e910) returned 1 [0280.610] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0280.610] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b2cf47e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.611] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b2cf47e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.611] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2cf47e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b2cf47e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b2cf47e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.611] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2cf47e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b2cf47e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b2cf47e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.611] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.611] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b236a32, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b236a32, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b236a32, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.611] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0280.611] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.611] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.611] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.611] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0280.611] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0280.612] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.612] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.612] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0280.612] CryptDestroyHash (hHash=0x55e610) returned 1 [0280.612] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.612] GetLastError () returned 0x0 [0280.612] GetLastError () returned 0x0 [0280.612] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.613] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.614] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3654*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3654*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.615] SetEndOfFile (hFile=0x24c) returned 1 [0280.615] CloseHandle (hObject=0x24c) returned 1 [0280.615] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.616] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.617] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.617] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.617] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.617] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.618] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.618] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.618] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.618] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.618] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.619] CryptDestroyKey (hKey=0x55e650) returned 1 [0280.619] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0280.619] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b2cf47e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0280.619] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b2cf47e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.619] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2cf47e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b2cf47e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b2cf47e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.619] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2cf47e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b2cf47e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b2cf47e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.619] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0280.619] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0280.619] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.619] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.619] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.619] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0280.620] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0280.620] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.620] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.620] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0280.620] CryptDestroyHash (hHash=0x55e610) returned 1 [0280.620] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.620] GetLastError () returned 0x0 [0280.620] GetLastError () returned 0x0 [0280.620] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.621] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.622] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3664*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3664*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.623] SetEndOfFile (hFile=0x24c) returned 1 [0280.623] CloseHandle (hObject=0x24c) returned 1 [0280.623] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.624] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.624] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0280.624] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.625] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.625] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.625] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.625] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.625] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.626] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.626] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.626] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.626] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.626] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.626] CryptDestroyKey (hKey=0x55e750) returned 1 [0280.626] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0280.626] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b2f63ef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0280.626] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b2f63ef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.626] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2f63ef, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b2f63ef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b2f63ef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.626] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2f63ef, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b2f63ef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b2f63ef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.627] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0280.627] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0280.627] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.627] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.627] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.627] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.627] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.627] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0280.627] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0280.628] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.628] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.628] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0280.628] CryptDestroyHash (hHash=0x55e610) returned 1 [0280.628] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.628] GetLastError () returned 0x0 [0280.628] GetLastError () returned 0x0 [0280.628] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.628] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.631] WriteFile (in: hFile=0x24c, lpBuffer=0x23e36a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e36a4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.632] SetEndOfFile (hFile=0x24c) returned 1 [0280.632] CloseHandle (hObject=0x24c) returned 1 [0280.632] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.633] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.633] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0280.634] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.634] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.635] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.635] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.635] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.635] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.635] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.635] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.636] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.636] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.636] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.636] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.636] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.637] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.637] CryptDestroyKey (hKey=0x55e750) returned 1 [0280.637] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0280.637] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b2f63ef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0280.638] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b2f63ef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.638] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39e1496e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39e1496e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0280.638] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.638] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.638] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.638] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.638] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.639] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0280.639] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0280.640] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.640] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.640] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e750) returned 1 [0280.640] CryptDestroyHash (hHash=0x55e210) returned 1 [0280.640] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.640] GetLastError () returned 0x0 [0280.640] GetLastError () returned 0x0 [0280.640] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.641] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.645] WriteFile (in: hFile=0x250, lpBuffer=0x23e53cc*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e53cc*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.646] SetEndOfFile (hFile=0x250) returned 1 [0280.646] CloseHandle (hObject=0x250) returned 1 [0280.646] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.648] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.648] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.648] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.648] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.649] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.649] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.649] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.649] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.649] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.650] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.650] CryptDestroyKey (hKey=0x55e750) returned 1 [0280.650] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0280.650] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39e1496e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b31b7e3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.650] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39e1496e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b31b7e3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.650] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39dee671, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39dee671, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39e1496e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0280.650] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0280.650] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x612ad819, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x612ad819, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x612ad819, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0280.650] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b31b7e3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b31b7e3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b31b7e3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.651] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b31b7e3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b31b7e3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b31b7e3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.651] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.651] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2f63ef, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b2f63ef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b31b7e3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.651] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2f63ef, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b2f63ef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b31b7e3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.651] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0280.651] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0280.651] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.651] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.651] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.651] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0280.651] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0280.652] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.652] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.652] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0280.652] CryptDestroyHash (hHash=0x55e610) returned 1 [0280.652] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.652] GetLastError () returned 0x0 [0280.652] GetLastError () returned 0x0 [0280.652] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.653] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.654] WriteFile (in: hFile=0x24c, lpBuffer=0x23e541c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e541c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.655] SetEndOfFile (hFile=0x24c) returned 1 [0280.655] CloseHandle (hObject=0x24c) returned 1 [0280.655] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.656] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.656] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0280.656] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.657] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.657] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.657] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.657] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.657] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.657] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.657] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.657] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.658] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.658] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.658] CryptDestroyKey (hKey=0x55e650) returned 1 [0280.658] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0280.658] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b342234, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0280.658] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b342234, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.658] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b342234, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b342234, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b342234, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.658] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b342234, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b342234, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b342234, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.658] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0280.659] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39e60e0f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39e60e0f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0280.659] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.659] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.659] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.659] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0280.659] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0280.660] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.660] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.660] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0280.660] CryptDestroyHash (hHash=0x55e750) returned 1 [0280.660] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.660] GetLastError () returned 0x0 [0280.660] GetLastError () returned 0x0 [0280.660] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.660] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.661] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3734*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3734*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.674] SetEndOfFile (hFile=0x24c) returned 1 [0280.675] CloseHandle (hObject=0x24c) returned 1 [0280.675] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.676] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.676] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.676] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.676] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0280.676] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.677] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.677] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.677] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.677] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.677] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.678] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.678] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.678] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.678] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.678] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.678] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.682] CryptDestroyKey (hKey=0x55e910) returned 1 [0280.682] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0280.682] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39e60e0f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b342234, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.682] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39e60e0f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b342234, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.682] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b342234, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b342234, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b367da1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.682] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x611a2928, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x611a2928, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x611a2928, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0280.682] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e60e0f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39e60e0f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39e60e0f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0280.683] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x90bada42, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x90bada42, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x90bada42, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0280.683] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x90bada42, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x90bada42, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x90bada42, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0280.683] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x90bada42, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x90bada42, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x90bada42, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0280.683] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.683] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6117c64c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0280.683] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.683] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.683] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.683] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0280.683] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0280.684] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.684] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.684] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0280.684] CryptDestroyHash (hHash=0x55e650) returned 1 [0280.684] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.684] GetLastError () returned 0x0 [0280.684] GetLastError () returned 0x0 [0280.684] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.685] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.686] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3774*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3774*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.687] SetEndOfFile (hFile=0x24c) returned 1 [0280.688] CloseHandle (hObject=0x24c) returned 1 [0280.688] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.689] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.689] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.689] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.689] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.689] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.689] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.689] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.689] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.690] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.690] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.690] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.690] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.690] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.690] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.690] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.690] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.690] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.690] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.690] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.690] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.691] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.691] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.691] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.691] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.691] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0280.691] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b38e080, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0280.692] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6117c64c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6117c64c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b38e080, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.692] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b38e080, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b38e080, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b38e080, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.692] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b38e080, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b38e080, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b38e080, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.692] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0280.692] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0280.692] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.692] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.692] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.692] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.693] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0280.693] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0280.693] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.693] CryptHashData (hHash=0x55e310, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.693] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0280.693] CryptDestroyHash (hHash=0x55e310) returned 1 [0280.693] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.693] GetLastError () returned 0x0 [0280.694] GetLastError () returned 0x0 [0280.694] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.694] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.696] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3784*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3784*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.698] SetEndOfFile (hFile=0x24c) returned 1 [0280.698] CloseHandle (hObject=0x24c) returned 1 [0280.698] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.699] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.699] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0280.699] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.700] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.700] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.700] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.700] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.700] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.700] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.700] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.700] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.700] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.700] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.700] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.700] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.701] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.701] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.701] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.701] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.701] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.701] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0280.701] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b3b437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0280.702] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b3b437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.702] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b3b437d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b3b437d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b3b437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.702] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b3b437d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b3b437d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b3b437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.702] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0280.702] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x61156378, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x61156378, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x61156378, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0280.702] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.702] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7503f8, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0d99c3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x756f6174, cFileName="Microsoft.BioEnrollment_cw5n1h2txyewy", cAlternateFileName="MICROS~1.BIO")) returned 1 [0280.702] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.702] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.702] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.702] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.702] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.703] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0280.703] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570da8) returned 1 [0280.703] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0280.703] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.703] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0280.703] CryptDestroyHash (hHash=0x55e750) returned 1 [0280.703] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f190*=0x18) returned 1 [0280.703] GetLastError () returned 0x0 [0280.703] GetLastError () returned 0x0 [0280.704] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.704] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0280.705] WriteFile (in: hFile=0x248, lpBuffer=0x23e37c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e37c4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.706] SetEndOfFile (hFile=0x248) returned 1 [0280.707] CloseHandle (hObject=0x248) returned 1 [0280.707] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.707] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.708] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.708] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0280.708] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.708] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.708] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.708] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.708] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.708] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.709] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.709] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.709] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.709] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.709] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.709] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.709] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.709] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.711] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.711] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0280.711] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0280.711] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7503f8, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b3b437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.711] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7503f8, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b3b437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.711] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0280.711] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.711] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.712] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.712] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0280.712] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0280.713] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.713] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.713] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0280.713] CryptDestroyHash (hHash=0x55e310) returned 1 [0280.713] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.713] GetLastError () returned 0x0 [0280.713] GetLastError () returned 0x0 [0280.713] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.713] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.716] WriteFile (in: hFile=0x24c, lpBuffer=0x23e37d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e37d4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.717] SetEndOfFile (hFile=0x24c) returned 1 [0280.717] CloseHandle (hObject=0x24c) returned 1 [0280.718] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.718] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.718] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.718] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.718] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.718] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.719] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.719] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.719] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.719] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.720] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.720] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.720] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.720] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.720] CryptDestroyKey (hKey=0x55e910) returned 1 [0280.720] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0280.721] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b3da4e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0280.721] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b3da4e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.721] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b3da4e4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b3da4e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b3da4e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.721] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0280.721] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.721] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.721] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.721] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0280.721] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5707d0) returned 1 [0280.722] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.722] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.722] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0280.722] CryptDestroyHash (hHash=0x55e650) returned 1 [0280.722] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.722] GetLastError () returned 0x0 [0280.722] GetLastError () returned 0x0 [0280.722] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.723] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.724] WriteFile (in: hFile=0x250, lpBuffer=0x23e3814*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3814*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.725] SetEndOfFile (hFile=0x250) returned 1 [0280.725] CloseHandle (hObject=0x250) returned 1 [0280.725] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.726] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.726] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.726] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.726] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.726] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.726] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0280.726] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.726] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.726] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.726] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.727] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.727] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.727] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.727] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.727] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.727] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.728] CryptDestroyKey (hKey=0x55e910) returned 1 [0280.728] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0280.728] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b3da4e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.728] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b3da4e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.728] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b3da4e4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b3da4e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b3da4e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.728] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b3da4e4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b3da4e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b3da4e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.728] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.728] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0280.728] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.728] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.729] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.729] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0280.729] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0280.729] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.729] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.729] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e750) returned 1 [0280.729] CryptDestroyHash (hHash=0x55e650) returned 1 [0280.729] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.730] GetLastError () returned 0x0 [0280.730] GetLastError () returned 0x0 [0280.730] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.730] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.732] WriteFile (in: hFile=0x250, lpBuffer=0x23e3824*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3824*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.733] SetEndOfFile (hFile=0x250) returned 1 [0280.733] CloseHandle (hObject=0x250) returned 1 [0280.733] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.734] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.734] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0280.734] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.734] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.735] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.735] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.735] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.735] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.735] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.735] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.736] CryptDestroyKey (hKey=0x55e750) returned 1 [0280.736] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0280.736] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b4013b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0280.736] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b4013b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.736] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b4013b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4013b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4013b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.736] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b4013b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4013b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4013b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.736] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0280.736] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0280.737] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.737] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.737] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.737] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0280.737] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5712f8) returned 1 [0280.738] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.738] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.738] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0280.738] CryptDestroyHash (hHash=0x55e310) returned 1 [0280.738] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.738] GetLastError () returned 0x0 [0280.738] GetLastError () returned 0x0 [0280.738] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.738] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.739] WriteFile (in: hFile=0x250, lpBuffer=0x23e3864*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3864*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.740] SetEndOfFile (hFile=0x250) returned 1 [0280.740] CloseHandle (hObject=0x250) returned 1 [0280.740] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.741] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.742] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.742] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.742] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.742] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.742] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.742] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.742] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.742] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.743] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.743] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.743] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.743] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.743] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.743] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.743] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.743] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.743] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.743] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.743] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.743] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.743] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.743] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.744] CryptDestroyKey (hKey=0x55e650) returned 1 [0280.744] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0280.744] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b4013b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0280.744] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b4013b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.744] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b4013b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4013b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4013b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.744] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b4013b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4013b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4013b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.744] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0280.744] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0280.744] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.744] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.745] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.745] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0280.745] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5710d8) returned 1 [0280.745] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.745] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.745] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0280.745] CryptDestroyHash (hHash=0x55e650) returned 1 [0280.745] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.745] GetLastError () returned 0x0 [0280.745] GetLastError () returned 0x0 [0280.746] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.746] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.747] WriteFile (in: hFile=0x250, lpBuffer=0x23e3874*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3874*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.748] SetEndOfFile (hFile=0x250) returned 1 [0280.748] CloseHandle (hObject=0x250) returned 1 [0280.748] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.749] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.749] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0280.749] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.750] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.750] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.750] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.750] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.750] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.751] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.751] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.751] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.751] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0280.751] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0280.751] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b4273d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.751] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b4273d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.751] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4273d7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4273d7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4273d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.752] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4273d7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4273d7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4273d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.752] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.752] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e9402ca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e9402ca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e9402ca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0280.752] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0280.752] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e8352ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e8352ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e8352ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0280.752] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.752] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.752] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.752] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.752] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.752] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0280.752] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0280.753] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.753] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.753] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0280.753] CryptDestroyHash (hHash=0x55e790) returned 1 [0280.753] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.753] GetLastError () returned 0x0 [0280.753] GetLastError () returned 0x0 [0280.753] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.754] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.756] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38b4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.757] SetEndOfFile (hFile=0x24c) returned 1 [0280.757] CloseHandle (hObject=0x24c) returned 1 [0280.757] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.758] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.758] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0280.759] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.759] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.759] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.759] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.759] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.760] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.760] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.760] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.760] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.760] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.760] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.760] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0280.760] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e8352ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e8352ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b4273d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.761] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e8352ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e8352ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b4273d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.761] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4273d7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4273d7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b44cb09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.761] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4273d7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4273d7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b44cb09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.761] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.761] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b3b437d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b3b437d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b3b437d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.761] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e79c89b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e79c89b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e79c89b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0280.761] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.761] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.761] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.761] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0280.762] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0280.762] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.762] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.762] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0280.762] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.762] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.762] GetLastError () returned 0x0 [0280.762] GetLastError () returned 0x0 [0280.762] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.763] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.764] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38c4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.765] SetEndOfFile (hFile=0x24c) returned 1 [0280.765] CloseHandle (hObject=0x24c) returned 1 [0280.765] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.766] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.766] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.766] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.766] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.767] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.767] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.767] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.767] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.767] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.768] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.768] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.768] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.768] CryptDestroyKey (hKey=0x55e750) returned 1 [0280.768] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0280.768] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e79c89b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e79c89b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b44cb09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.769] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e79c89b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e79c89b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b44cb09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.769] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b44cb09, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b44cb09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b44cb09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.769] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b44cb09, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b44cb09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b44cb09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.769] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.769] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7503f8, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e7503f8, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e7503f8, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0280.769] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.769] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.769] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.769] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0280.769] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570a78) returned 1 [0280.770] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.770] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.770] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0280.770] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.770] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.770] GetLastError () returned 0x0 [0280.770] GetLastError () returned 0x0 [0280.770] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.771] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.772] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3904*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3904*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.773] SetEndOfFile (hFile=0x24c) returned 1 [0280.773] CloseHandle (hObject=0x24c) returned 1 [0280.773] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.774] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.774] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.774] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.774] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0280.775] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.775] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.775] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.775] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.775] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.775] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.775] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.775] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.775] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.775] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.776] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.776] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.776] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.776] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.776] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.776] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.776] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.776] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.776] CryptDestroyKey (hKey=0x55e790) returned 1 [0280.776] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0280.776] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7503f8, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e7503f8, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b44cb09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0280.777] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7503f8, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e7503f8, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b44cb09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.777] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b44cb09, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b44cb09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b472daf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.777] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b44cb09, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b44cb09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b472daf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.777] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0280.777] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0d99c3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0d99c3, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0280.777] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.777] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.777] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.777] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0280.777] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0280.778] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.778] CryptHashData (hHash=0x55e310, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.778] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0280.778] CryptDestroyHash (hHash=0x55e310) returned 1 [0280.778] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.778] GetLastError () returned 0x0 [0280.778] GetLastError () returned 0x0 [0280.778] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.779] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.782] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3914*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3914*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.783] SetEndOfFile (hFile=0x24c) returned 1 [0280.783] CloseHandle (hObject=0x24c) returned 1 [0280.783] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.784] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.784] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.785] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.785] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.785] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.785] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0280.785] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.786] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.786] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.786] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.786] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.786] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.787] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.787] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.787] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.787] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.787] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.787] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.787] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.787] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.788] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.789] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.789] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.790] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.790] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0280.790] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0d99c3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b472daf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0280.790] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0d99c3, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b472daf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.790] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39ead399, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39ead399, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0280.790] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.790] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.791] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.791] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0280.791] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0280.792] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.792] CryptHashData (hHash=0x55e210, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.792] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e750) returned 1 [0280.792] CryptDestroyHash (hHash=0x55e210) returned 1 [0280.792] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.792] GetLastError () returned 0x0 [0280.792] GetLastError () returned 0x0 [0280.792] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.793] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.795] WriteFile (in: hFile=0x250, lpBuffer=0x23e3964*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3964*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.796] SetEndOfFile (hFile=0x250) returned 1 [0280.796] CloseHandle (hObject=0x250) returned 1 [0280.796] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.797] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.797] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.797] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.797] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.798] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.798] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.798] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.799] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.799] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.799] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.799] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.799] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.800] CryptDestroyKey (hKey=0x55e750) returned 1 [0280.800] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0280.800] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39ead399, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4990cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0280.800] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f0d99c3, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39ead399, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4990cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.800] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e87056, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39e87056, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39ead399, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0280.800] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4f0ffcee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0ffcee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0ffcee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0280.800] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4f0ffcee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f0ffcee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f0ffcee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0280.800] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4990cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4990cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4990cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.800] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4990cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4990cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4990cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.800] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0280.801] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b472daf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b472daf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b472daf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.801] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b472daf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b472daf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b472daf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.801] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0280.801] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e77658a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0280.801] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.801] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.801] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.801] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0280.801] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0280.802] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.802] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.802] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0280.802] CryptDestroyHash (hHash=0x55e310) returned 1 [0280.802] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.802] GetLastError () returned 0x0 [0280.802] GetLastError () returned 0x0 [0280.802] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.803] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.807] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3984*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3984*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.810] SetEndOfFile (hFile=0x24c) returned 1 [0280.810] CloseHandle (hObject=0x24c) returned 1 [0280.810] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.811] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.811] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0280.811] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.812] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.812] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.812] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.812] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.812] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.813] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.813] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.813] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.813] CryptDestroyKey (hKey=0x55e910) returned 1 [0280.813] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0280.813] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b4990cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.813] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b4990cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.813] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4990cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4990cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4bf1bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.813] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4990cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4990cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4bf1bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.814] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.814] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7c2b0c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39ed3817, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39ed3817, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0280.814] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.814] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.814] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.814] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.814] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.814] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0280.814] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0280.815] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.815] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.815] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0280.815] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.815] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.815] GetLastError () returned 0x0 [0280.815] GetLastError () returned 0x0 [0280.815] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.816] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.817] WriteFile (in: hFile=0x24c, lpBuffer=0x23e39c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e39c4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.818] SetEndOfFile (hFile=0x24c) returned 1 [0280.818] CloseHandle (hObject=0x24c) returned 1 [0280.818] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.819] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.819] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0280.820] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.820] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.820] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.820] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.820] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.820] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.821] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.821] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.821] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.821] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.821] CryptDestroyKey (hKey=0x55e750) returned 1 [0280.821] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0280.821] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7c2b0c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39ed3817, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4bf1bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0280.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e7c2b0c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39ed3817, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4bf1bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4bf1bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4bf1bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4bf1bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e8352ee, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e8352ee, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e8352ee, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0280.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ed3817, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39ed3817, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39ed3817, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0280.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x91131126, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x91131126, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x91131126, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0280.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9115737d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9115737d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9115737d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0280.822] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9115737d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9115737d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9115737d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0280.822] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0280.822] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e80efb1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e80efb1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e80efb1, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0280.822] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.822] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.822] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.822] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.822] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0280.823] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570a78) returned 1 [0280.823] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.823] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.823] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0280.823] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.823] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.823] GetLastError () returned 0x0 [0280.823] GetLastError () returned 0x0 [0280.823] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.824] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.825] WriteFile (in: hFile=0x24c, lpBuffer=0x23e39d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e39d4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.826] SetEndOfFile (hFile=0x24c) returned 1 [0280.826] CloseHandle (hObject=0x24c) returned 1 [0280.826] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.827] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.827] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.828] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.828] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.828] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.828] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.828] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.828] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.829] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.829] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.829] CryptDestroyKey (hKey=0x55e790) returned 1 [0280.829] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0280.829] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e80efb1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e80efb1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b4e56c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0280.830] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e80efb1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e80efb1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b4e56c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.830] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4e56c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4e56c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4e56c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.830] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4e56c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4e56c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4e56c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.830] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0280.830] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e77658a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0280.830] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.830] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.830] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.830] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0280.830] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0280.831] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.831] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.831] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0280.831] CryptDestroyHash (hHash=0x55e610) returned 1 [0280.831] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.831] GetLastError () returned 0x0 [0280.831] GetLastError () returned 0x0 [0280.831] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.832] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.833] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3a14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3a14*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.834] SetEndOfFile (hFile=0x24c) returned 1 [0280.834] CloseHandle (hObject=0x24c) returned 1 [0280.834] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.835] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.835] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.835] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.835] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0280.836] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.836] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.836] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.836] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.836] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.837] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.837] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.837] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.837] CryptDestroyKey (hKey=0x55e650) returned 1 [0280.837] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0280.837] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b4e56c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0280.838] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b4e56c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.838] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4e56c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4e56c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4e56c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.838] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4e56c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b4e56c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b4e56c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.838] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0280.838] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4e77658a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4e77658a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e77658a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0280.838] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.838] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6e456174, cFileName="Microsoft.LockApp_cw5n1h2txyewy", cAlternateFileName="MICROS~1.LOC")) returned 1 [0280.838] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.838] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.838] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.838] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0280.838] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5710d8) returned 1 [0280.839] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0280.839] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.839] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e7d0) returned 1 [0280.839] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.839] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0280.839] GetLastError () returned 0x0 [0280.839] GetLastError () returned 0x0 [0280.839] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.840] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0280.841] WriteFile (in: hFile=0x248, lpBuffer=0x23e3a54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a54*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.842] SetEndOfFile (hFile=0x248) returned 1 [0280.843] CloseHandle (hObject=0x248) returned 1 [0280.843] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.844] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.844] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.844] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.845] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0280.845] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.845] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.845] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.845] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.845] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.845] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.845] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.846] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.846] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.846] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.846] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.846] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.846] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.846] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0280.846] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.846] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.846] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.846] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.846] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.847] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0280.847] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0280.847] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b50b8a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0280.847] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b50b8a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.847] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0280.847] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.847] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.847] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.847] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.847] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.847] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0280.847] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0280.848] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.848] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.848] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0280.848] CryptDestroyHash (hHash=0x55e910) returned 1 [0280.848] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.848] GetLastError () returned 0x0 [0280.848] GetLastError () returned 0x0 [0280.848] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.849] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.851] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3a64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3a64*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.852] SetEndOfFile (hFile=0x24c) returned 1 [0280.852] CloseHandle (hObject=0x24c) returned 1 [0280.852] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.853] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.853] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.853] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.853] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.854] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.854] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.854] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.854] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.854] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.854] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.855] CryptDestroyKey (hKey=0x55e190) returned 1 [0280.855] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0280.855] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b50b8a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0280.855] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b50b8a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.855] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b50b8a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b50b8a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b532dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.855] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0280.855] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.855] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.855] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.855] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.856] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0280.856] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0280.856] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.856] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.856] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0280.856] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.856] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.856] GetLastError () returned 0x0 [0280.856] GetLastError () returned 0x0 [0280.857] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.857] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.858] WriteFile (in: hFile=0x250, lpBuffer=0x23e3aa4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3aa4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.859] SetEndOfFile (hFile=0x250) returned 1 [0280.860] CloseHandle (hObject=0x250) returned 1 [0280.860] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.860] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.860] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.860] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0280.861] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.861] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.861] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.861] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.862] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.862] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0280.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.862] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.862] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.863] CryptDestroyKey (hKey=0x55e290) returned 1 [0280.863] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0280.863] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b532dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.863] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b532dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.863] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b532dcc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b532dcc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b532dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.863] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b532dcc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b532dcc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b532dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.863] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.863] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0280.863] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.863] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.863] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.863] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0280.864] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0280.864] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.864] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.864] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e790) returned 1 [0280.864] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.864] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.864] GetLastError () returned 0x0 [0280.864] GetLastError () returned 0x0 [0280.864] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.865] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.866] WriteFile (in: hFile=0x250, lpBuffer=0x23e3ab4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ab4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.867] SetEndOfFile (hFile=0x250) returned 1 [0280.868] CloseHandle (hObject=0x250) returned 1 [0280.868] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.868] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.868] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0280.869] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.869] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.869] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.869] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.870] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.870] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.870] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.870] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.870] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.870] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.870] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.870] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.870] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.870] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.870] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.870] CryptDestroyKey (hKey=0x55e790) returned 1 [0280.870] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0280.871] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b532dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.871] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b532dcc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.871] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b532dcc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b532dcc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b557dc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.871] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b532dcc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b532dcc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b557dc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.871] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.871] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0280.871] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.871] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.871] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.871] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0280.871] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571380) returned 1 [0280.872] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.872] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.872] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0280.872] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.872] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.872] GetLastError () returned 0x0 [0280.872] GetLastError () returned 0x0 [0280.872] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.873] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.874] WriteFile (in: hFile=0x250, lpBuffer=0x23e3af4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3af4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.875] SetEndOfFile (hFile=0x250) returned 1 [0280.875] CloseHandle (hObject=0x250) returned 1 [0280.875] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.875] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.875] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.876] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.876] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0280.876] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.876] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.876] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.876] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.876] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.877] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.877] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.877] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0280.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.877] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.877] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.878] CryptDestroyKey (hKey=0x55e610) returned 1 [0280.878] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0280.878] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b557dc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.878] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b557dc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.878] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b557dc4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b557dc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b557dc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.878] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b557dc4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b557dc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b557dc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.878] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.878] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0280.878] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.878] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.878] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.878] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.879] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.879] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0280.879] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5710d8) returned 1 [0280.879] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0280.879] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.879] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0280.879] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.879] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0280.879] GetLastError () returned 0x0 [0280.879] GetLastError () returned 0x0 [0280.880] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.880] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0280.884] WriteFile (in: hFile=0x250, lpBuffer=0x23e3b04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3b04*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.888] SetEndOfFile (hFile=0x250) returned 1 [0280.888] CloseHandle (hObject=0x250) returned 1 [0280.888] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.889] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.889] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.890] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0280.890] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.890] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.890] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.890] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.890] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.890] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.890] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.890] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.890] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.891] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.891] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.891] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.891] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.891] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0280.892] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0280.892] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b557dc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.892] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b557dc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.892] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b557dc4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b557dc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b57deec, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.892] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b557dc4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b557dc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b57deec, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.892] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.892] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6278a182, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6278a182, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6278a182, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0280.892] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0280.892] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62717b51, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0280.892] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.892] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.893] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.893] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0280.893] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0280.893] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.893] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.893] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0280.893] CryptDestroyHash (hHash=0x55e310) returned 1 [0280.893] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.893] GetLastError () returned 0x0 [0280.893] GetLastError () returned 0x0 [0280.894] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.894] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0280.895] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b44*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0280.896] SetEndOfFile (hFile=0x24c) returned 1 [0280.896] CloseHandle (hObject=0x24c) returned 1 [0280.896] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0280.897] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.897] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0280.923] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0280.923] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0280.923] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.923] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.924] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.924] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0280.924] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0280.924] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.924] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.924] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.924] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0280.924] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0280.924] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0280.924] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0280.925] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0280.925] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0280.925] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0280.926] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0280.927] CryptDestroyKey (hKey=0x55e910) returned 1 [0280.927] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0280.927] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b57deec, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0280.927] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4b57deec, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0280.927] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b57deec, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b57deec, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b57deec, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.927] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b57deec, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b57deec, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b57deec, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0280.927] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0280.927] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b50b8a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4b50b8a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4b50b8a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0280.927] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6259a316, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6259a316, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6259a316, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0280.928] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0280.928] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0280.928] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0280.957] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0280.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0280.957] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5707d0) returned 1 [0280.958] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0280.958] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0280.958] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0280.958] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0280.958] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0280.958] GetLastError () returned 0x0 [0280.958] GetLastError () returned 0x0 [0280.958] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0280.960] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0281.401] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b54*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.403] SetEndOfFile (hFile=0x24c) returned 1 [0281.403] CloseHandle (hObject=0x24c) returned 1 [0281.403] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.404] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.404] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.405] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.405] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0281.405] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.405] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.405] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.405] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.406] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.406] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.406] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.406] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.406] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.406] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.406] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.406] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.406] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.406] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0281.406] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.407] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.407] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.407] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.407] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.407] CryptDestroyKey (hKey=0x55e910) returned 1 [0281.407] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0281.407] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6259a316, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6259a316, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ba68b68, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0281.408] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6259a316, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6259a316, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ba68b68, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.408] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba68b68, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ba68b68, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ba68b68, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.408] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba68b68, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ba68b68, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ba68b68, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.408] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0281.408] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62527d6a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62527d6a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0281.408] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.408] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.408] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.408] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.408] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.409] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0281.409] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0281.409] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0281.409] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.409] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0281.409] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0281.409] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0281.410] GetLastError () returned 0x0 [0281.410] GetLastError () returned 0x0 [0281.410] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.410] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0281.412] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b94*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.413] SetEndOfFile (hFile=0x24c) returned 1 [0281.413] CloseHandle (hObject=0x24c) returned 1 [0281.414] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.415] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.415] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0281.415] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.416] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.416] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.416] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.416] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.417] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0281.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.417] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.417] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.418] CryptDestroyKey (hKey=0x55e610) returned 1 [0281.418] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0281.418] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62527d6a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ba68b68, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0281.418] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62527d6a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ba68b68, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.418] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba68b68, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ba68b68, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ba8ee7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.418] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba68b68, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ba68b68, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ba8ee7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.418] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0281.418] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0281.418] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.418] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.419] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.419] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0281.419] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0281.420] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0281.420] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.420] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0281.420] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0281.420] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0281.420] GetLastError () returned 0x0 [0281.420] GetLastError () returned 0x0 [0281.420] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.421] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0281.552] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ba4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ba4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.553] SetEndOfFile (hFile=0x24c) returned 1 [0281.553] CloseHandle (hObject=0x24c) returned 1 [0281.554] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.555] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.555] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.555] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.555] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0281.555] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.556] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.556] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.556] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.556] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.556] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.557] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0281.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.557] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.557] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.557] CryptDestroyKey (hKey=0x55e310) returned 1 [0281.558] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0281.558] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4bbc0196, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0281.558] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4bbc0196, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.558] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39f1f8f2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39f1f8f2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0281.558] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.558] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.558] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.558] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.558] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.558] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0281.559] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571490) returned 1 [0281.559] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0281.559] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.559] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0281.559] CryptDestroyHash (hHash=0x55e910) returned 1 [0281.559] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0281.559] GetLastError () returned 0x0 [0281.559] GetLastError () returned 0x0 [0281.560] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.560] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0281.561] WriteFile (in: hFile=0x250, lpBuffer=0x23e3bf4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3bf4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.563] SetEndOfFile (hFile=0x250) returned 1 [0281.563] CloseHandle (hObject=0x250) returned 1 [0281.563] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.564] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.564] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.564] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.564] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0281.565] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.565] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.565] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.565] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.565] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.565] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.566] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.566] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.566] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0281.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.566] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.566] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.567] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.567] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0281.567] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0281.567] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10586.0_neutral__cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10586.0_neutral__cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39f1f8f2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bbe6331, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0281.567] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39f1f8f2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bbe6331, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.567] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39f1f8f2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39f1f8f2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39f1f8f2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0281.567] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0281.567] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62848d25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62848d25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62848d25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0281.567] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bbe6331, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bbe6331, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bbe6331, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.568] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bbe6331, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bbe6331, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bbe6331, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.568] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0281.568] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba8ee7b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ba8ee7b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bbe6331, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.568] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ba8ee7b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ba8ee7b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bbe6331, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.568] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0281.568] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62527d6a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62527d6a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0281.568] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.568] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.568] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.568] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.568] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.568] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0281.569] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0281.570] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0281.570] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.570] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0281.570] CryptDestroyHash (hHash=0x55e750) returned 1 [0281.570] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0281.570] GetLastError () returned 0x0 [0281.570] GetLastError () returned 0x0 [0281.570] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.571] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0281.572] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3c14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3c14*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.574] SetEndOfFile (hFile=0x24c) returned 1 [0281.574] CloseHandle (hObject=0x24c) returned 1 [0281.574] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.575] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.575] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.575] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.575] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0281.576] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.576] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.576] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.577] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.577] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.577] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0281.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.577] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.577] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.577] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.578] CryptDestroyKey (hKey=0x55e790) returned 1 [0281.578] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0281.578] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62527d6a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4bc0c662, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0281.578] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62527d6a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62527d6a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4bc0c662, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.578] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc0c662, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bc0c662, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bc0c662, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.578] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc0c662, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bc0c662, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bc0c662, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.578] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0281.579] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62658fa1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39f45d90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39f45d90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0281.580] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.580] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.580] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.580] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0281.580] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0281.581] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0281.581] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.581] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0281.581] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0281.581] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0281.581] GetLastError () returned 0x0 [0281.581] GetLastError () returned 0x0 [0281.581] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.582] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0281.583] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3c54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3c54*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.584] SetEndOfFile (hFile=0x24c) returned 1 [0281.584] CloseHandle (hObject=0x24c) returned 1 [0281.584] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.591] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.591] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0281.592] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.592] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.592] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.592] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.592] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.593] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0281.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.593] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.593] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.594] CryptDestroyKey (hKey=0x55e910) returned 1 [0281.594] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0281.594] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62658fa1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39f45d90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bc0c662, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0281.594] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62658fa1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x39f45d90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bc0c662, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.594] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc0c662, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bc0c662, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bc0c662, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.594] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6273dda0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6273dda0, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6273dda0, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0281.594] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39f45d90, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39f45d90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39f45d90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0281.594] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x91cf695a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x91cf695a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x91cf695a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0281.594] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x91cf695a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x91cf695a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x91cf695a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0281.594] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x91cf695a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x91cf695a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x91cf695a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0281.594] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0281.594] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62717b51, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0281.594] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.594] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.595] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.595] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0281.595] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0281.596] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0281.596] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.596] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0281.596] CryptDestroyHash (hHash=0x55e910) returned 1 [0281.596] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0281.596] GetLastError () returned 0x0 [0281.596] GetLastError () returned 0x0 [0281.596] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.597] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0281.598] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3c64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3c64*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.599] SetEndOfFile (hFile=0x24c) returned 1 [0281.599] CloseHandle (hObject=0x24c) returned 1 [0281.599] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.600] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.600] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.600] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.600] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0281.601] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.601] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.601] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.601] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.601] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.602] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.602] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.602] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.602] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.602] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.602] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.602] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.602] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.602] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0281.602] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.602] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.602] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.603] CryptDestroyKey (hKey=0x55e750) returned 1 [0281.603] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0281.603] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4bc3537b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0281.603] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62717b51, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62717b51, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4bc3537b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.603] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc3537b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bc3537b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bc3537b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.603] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc3537b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bc3537b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bc3537b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.604] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0281.604] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62574156, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62574156, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62574156, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0281.604] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.604] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.604] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.604] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0281.604] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0281.605] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0281.605] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.605] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0281.605] CryptDestroyHash (hHash=0x55e910) returned 1 [0281.605] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0281.605] GetLastError () returned 0x0 [0281.605] GetLastError () returned 0x0 [0281.605] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.606] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0281.607] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ca4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ca4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.608] SetEndOfFile (hFile=0x24c) returned 1 [0281.608] CloseHandle (hObject=0x24c) returned 1 [0281.609] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.609] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.610] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0281.610] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.610] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.611] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.611] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.611] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.611] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.612] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0281.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.612] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.612] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.612] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.612] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0281.613] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0281.613] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62574156, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62574156, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4bc58bc2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0281.613] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62574156, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62574156, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4bc58bc2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.613] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc58bc2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bc58bc2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bc58bc2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.613] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc58bc2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bc58bc2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bc58bc2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.613] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0281.613] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62574156, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x62574156, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x62574156, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0281.613] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0281.613] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x416b6174, cFileName="Microsoft.MicrosoftEdge_8wekyb3d8bbwe", cAlternateFileName="MICROS~1.MIC")) returned 1 [0281.613] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.614] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.614] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.614] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0281.614] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570b00) returned 1 [0281.615] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0281.615] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.615] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0281.615] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0281.615] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0281.615] GetLastError () returned 0x0 [0281.615] GetLastError () returned 0x0 [0281.615] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.616] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0281.619] WriteFile (in: hFile=0x248, lpBuffer=0x23e3cb4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3cb4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.620] SetEndOfFile (hFile=0x248) returned 1 [0281.621] CloseHandle (hObject=0x248) returned 1 [0281.621] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.622] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.622] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0281.622] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.623] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.623] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.623] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.623] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.624] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0281.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.624] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.624] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.624] CryptDestroyKey (hKey=0x55e610) returned 1 [0281.625] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0281.625] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888ab4e8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4bc7ed06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0281.625] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888ab4e8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4bc7ed06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.625] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x4da5bc3, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4da5bc3, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0281.625] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.625] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.625] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.625] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0281.625] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571490) returned 1 [0281.626] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0281.626] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.626] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0281.626] CryptDestroyHash (hHash=0x55e910) returned 1 [0281.626] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0281.626] GetLastError () returned 0x0 [0281.626] GetLastError () returned 0x0 [0281.627] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.627] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0281.628] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3cf4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3cf4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.629] SetEndOfFile (hFile=0x24c) returned 1 [0281.630] CloseHandle (hObject=0x24c) returned 1 [0281.630] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.631] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.631] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0281.640] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.640] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.641] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.641] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.641] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.641] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.641] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.641] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.641] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0281.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.642] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.642] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.642] CryptDestroyKey (hKey=0x55e610) returned 1 [0281.642] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0281.642] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x4da5bc3, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bc7ed06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0281.643] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x4da5bc3, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bc7ed06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.643] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4da5bc3, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="#!001", cAlternateFileName="")) returned 1 [0281.646] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.646] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.647] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.647] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0281.647] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570e30) returned 1 [0281.650] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0281.650] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.650] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0281.650] CryptDestroyHash (hHash=0x55e790) returned 1 [0281.650] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0281.650] GetLastError () returned 0x0 [0281.650] GetLastError () returned 0x0 [0281.650] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.651] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0281.653] WriteFile (in: hFile=0x250, lpBuffer=0x23e3d04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3d04*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.654] SetEndOfFile (hFile=0x250) returned 1 [0281.654] CloseHandle (hObject=0x250) returned 1 [0281.654] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.656] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.656] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0281.656] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.657] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.657] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.657] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.657] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.657] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.657] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.657] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0281.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.658] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.658] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.658] CryptDestroyKey (hKey=0x55e610) returned 1 [0281.658] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0281.659] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4da5bc3, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bccb408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0281.659] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4da5bc3, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bccb408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.659] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bccb408, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bccb408, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bccb408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.659] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0281.659] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.659] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.659] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.659] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0281.660] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570b88) returned 1 [0281.660] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.660] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.660] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e910) returned 1 [0281.660] CryptDestroyHash (hHash=0x55e290) returned 1 [0281.660] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.660] GetLastError () returned 0x0 [0281.660] GetLastError () returned 0x0 [0281.661] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.661] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.674] WriteFile (in: hFile=0x254, lpBuffer=0x23e3d44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3d44*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.675] SetEndOfFile (hFile=0x254) returned 1 [0281.676] CloseHandle (hObject=0x254) returned 1 [0281.676] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.677] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.677] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.678] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.678] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0281.678] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.678] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.678] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.679] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.679] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.679] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.679] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.679] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.679] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.679] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.679] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.679] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.679] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.679] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0281.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.680] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.680] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.680] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.680] CryptDestroyKey (hKey=0x55e910) returned 1 [0281.680] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0281.680] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\inetcache\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bccb408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0281.681] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bccb408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.681] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bccb408, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bccb408, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bcf19e1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.681] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bccb408, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bccb408, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bcf19e1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.681] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0281.681] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0281.681] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.681] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.682] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.682] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0281.682] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570748) returned 1 [0281.683] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.683] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.683] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e290) returned 1 [0281.683] CryptDestroyHash (hHash=0x55e790) returned 1 [0281.683] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.683] GetLastError () returned 0x0 [0281.683] GetLastError () returned 0x0 [0281.683] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.684] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.686] WriteFile (in: hFile=0x254, lpBuffer=0x23e3d54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3d54*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.687] SetEndOfFile (hFile=0x254) returned 1 [0281.687] CloseHandle (hObject=0x254) returned 1 [0281.687] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.688] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.689] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.689] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.689] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.689] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0281.689] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.689] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.689] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.689] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.690] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.690] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.690] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.690] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.690] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.690] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.690] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.690] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.690] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.690] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0281.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.691] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.691] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.691] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.691] CryptDestroyKey (hKey=0x55e290) returned 1 [0281.691] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0281.692] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\inetcookies\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bd17784, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0281.692] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bd17784, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.692] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd17784, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bd17784, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bd17784, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.692] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd17784, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bd17784, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bd17784, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.692] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0281.692] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0281.692] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.692] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.693] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.693] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.693] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.693] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0281.693] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571518) returned 1 [0281.694] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.694] CryptHashData (hHash=0x55e310, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.694] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0281.696] CryptDestroyHash (hHash=0x55e310) returned 1 [0281.696] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.696] GetLastError () returned 0x0 [0281.696] GetLastError () returned 0x0 [0281.696] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.697] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.698] WriteFile (in: hFile=0x254, lpBuffer=0x23e3d94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3d94*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.699] SetEndOfFile (hFile=0x254) returned 1 [0281.699] CloseHandle (hObject=0x254) returned 1 [0281.700] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.701] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.701] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.701] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.701] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0281.701] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.702] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.702] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.702] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.702] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.702] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.702] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.702] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.702] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.702] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.702] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.703] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.703] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.703] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.703] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0281.703] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.703] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.703] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.703] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.703] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.704] CryptDestroyKey (hKey=0x55e210) returned 1 [0281.704] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0281.704] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\inethistory\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bd3d9e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0281.704] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bd3d9e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.704] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd3d9e9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bd3d9e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bd3d9e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.704] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd3d9e9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bd3d9e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bd3d9e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.704] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0281.704] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0281.705] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.705] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.705] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.705] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0281.705] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570638) returned 1 [0281.706] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.706] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.706] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e310) returned 1 [0281.706] CryptDestroyHash (hHash=0x55e650) returned 1 [0281.706] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.706] GetLastError () returned 0x0 [0281.706] GetLastError () returned 0x0 [0281.706] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.707] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.708] WriteFile (in: hFile=0x254, lpBuffer=0x23e3da4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3da4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.709] SetEndOfFile (hFile=0x254) returned 1 [0281.709] CloseHandle (hObject=0x254) returned 1 [0281.709] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.711] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.711] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.711] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.711] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.711] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.711] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0281.711] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.712] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.712] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.712] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.712] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.713] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.713] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0281.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.713] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.713] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.713] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.714] CryptDestroyKey (hKey=0x55e310) returned 1 [0281.714] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0281.714] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\localstate\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bd3d9e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0281.714] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bd3d9e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.714] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd3d9e9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bd3d9e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bd3d9e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.714] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd3d9e9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bd3d9e9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bd3d9e9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.714] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0281.714] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0281.714] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.714] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.715] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.715] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0281.715] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571408) returned 1 [0281.716] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.716] CryptHashData (hHash=0x55e650, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.716] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e790) returned 1 [0281.716] CryptDestroyHash (hHash=0x55e650) returned 1 [0281.716] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.716] GetLastError () returned 0x0 [0281.716] GetLastError () returned 0x0 [0281.716] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.716] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.718] WriteFile (in: hFile=0x254, lpBuffer=0x23e3de4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3de4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.719] SetEndOfFile (hFile=0x254) returned 1 [0281.719] CloseHandle (hObject=0x254) returned 1 [0281.719] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.721] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.721] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.721] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.721] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0281.721] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.721] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.722] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.722] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.722] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.722] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.722] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.722] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.722] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.722] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.722] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.722] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.723] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0281.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.723] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.723] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.723] CryptDestroyKey (hKey=0x55e790) returned 1 [0281.723] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0281.724] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\temp\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bd65714, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0281.724] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bd65714, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.724] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bd65714, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bd65714, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bd65714, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.724] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bd65714, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bd65714, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bd65714, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.724] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0281.724] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0281.724] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.724] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.724] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.724] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0281.725] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570b00) returned 1 [0281.725] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.725] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.725] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e790) returned 1 [0281.726] CryptDestroyHash (hHash=0x55e650) returned 1 [0281.726] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.726] GetLastError () returned 0x0 [0281.726] GetLastError () returned 0x0 [0281.726] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.726] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.729] WriteFile (in: hFile=0x254, lpBuffer=0x23e3df4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3df4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.731] SetEndOfFile (hFile=0x254) returned 1 [0281.731] CloseHandle (hObject=0x254) returned 1 [0281.731] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.732] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.732] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.732] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.732] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0281.733] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.733] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.733] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.733] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.733] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.734] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0281.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.734] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.734] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.735] CryptDestroyKey (hKey=0x55e790) returned 1 [0281.735] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0281.735] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\tempstate\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bd89d73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0281.735] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bd89d73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.735] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd89d73, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bd89d73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bd89d73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.735] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd89d73, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bd89d73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bd89d73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.735] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0281.735] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f4954c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4f4954c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4f4954c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0281.735] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0281.735] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bc7ed06, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bc7ed06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bc7ed06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x79656574, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.735] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79656574, dwReserved1=0x5f4f545f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0281.736] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.736] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.736] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.736] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0281.736] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5712f8) returned 1 [0281.737] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0281.737] CryptHashData (hHash=0x55e310, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.737] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0281.737] CryptDestroyHash (hHash=0x55e310) returned 1 [0281.737] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0281.737] GetLastError () returned 0x0 [0281.737] GetLastError () returned 0x0 [0281.737] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.738] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0281.739] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e34*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.740] SetEndOfFile (hFile=0x250) returned 1 [0281.740] CloseHandle (hObject=0x250) returned 1 [0281.740] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.747] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.747] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0281.748] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.748] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.748] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.749] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.749] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.749] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0281.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.749] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.749] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.750] CryptDestroyKey (hKey=0x55e610) returned 1 [0281.750] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0281.750] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4bd89d73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0281.750] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4bd89d73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.750] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd89d73, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bd89d73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bd89d73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.750] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd89d73, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bd89d73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bd89d73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.750] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0281.751] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0281.751] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.751] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.751] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.751] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0281.751] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5710d8) returned 1 [0281.752] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0281.752] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.752] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0281.752] CryptDestroyHash (hHash=0x55e610) returned 1 [0281.752] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0281.752] GetLastError () returned 0x0 [0281.752] GetLastError () returned 0x0 [0281.752] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.753] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0281.754] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e44*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.756] SetEndOfFile (hFile=0x250) returned 1 [0281.756] CloseHandle (hObject=0x250) returned 1 [0281.756] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.757] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.757] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.757] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.757] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.757] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.757] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0281.758] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.758] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.758] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.758] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.759] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.759] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0281.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.759] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.759] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.760] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0281.760] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0281.760] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4bdb1b99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0281.760] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4bdb1b99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.760] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bdb1b99, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bdb1b99, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bdb1b99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.760] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bdb1b99, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bdb1b99, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bdb1b99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.760] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0281.760] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88079316, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0281.760] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.761] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.761] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.761] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0281.761] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0281.762] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0281.762] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.762] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0281.762] CryptDestroyHash (hHash=0x55e910) returned 1 [0281.762] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0281.762] GetLastError () returned 0x0 [0281.762] GetLastError () returned 0x0 [0281.762] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.763] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0281.764] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e84*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.765] SetEndOfFile (hFile=0x250) returned 1 [0281.765] CloseHandle (hObject=0x250) returned 1 [0281.766] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.766] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.767] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0281.767] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.767] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.768] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.768] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.768] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.768] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0281.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.769] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.769] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.769] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.769] CryptDestroyKey (hKey=0x55e190) returned 1 [0281.769] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0281.769] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4bdd6834, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0281.770] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88079316, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4bdd6834, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.770] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bdd6834, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bdd6834, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bdd6834, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.770] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bdd6834, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bdd6834, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bdd6834, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.770] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0281.770] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3ff025b, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0281.770] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.770] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.770] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.770] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.770] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.770] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0281.770] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0281.771] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0281.771] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.771] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e790) returned 1 [0281.771] CryptDestroyHash (hHash=0x55e910) returned 1 [0281.771] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0281.771] GetLastError () returned 0x0 [0281.771] GetLastError () returned 0x0 [0281.772] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.772] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0281.774] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e94*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.776] SetEndOfFile (hFile=0x250) returned 1 [0281.776] CloseHandle (hObject=0x250) returned 1 [0281.776] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.777] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.777] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0281.777] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.778] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.778] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.778] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.778] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.778] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.778] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.778] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.778] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.778] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.778] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.779] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.779] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.779] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0281.779] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.779] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.779] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.779] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.779] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.780] CryptDestroyKey (hKey=0x55e790) returned 1 [0281.780] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0281.780] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bdfc4e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0281.780] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bdfc4e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.780] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bdfc4e4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bdfc4e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bdfc4e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.780] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3ff025b, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0281.780] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.780] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.780] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.780] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0281.781] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x5712f8) returned 1 [0281.781] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.781] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.781] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e310) returned 1 [0281.781] CryptDestroyHash (hHash=0x55e650) returned 1 [0281.782] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.782] GetLastError () returned 0x0 [0281.782] GetLastError () returned 0x0 [0281.782] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.782] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\windows\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.783] WriteFile (in: hFile=0x254, lpBuffer=0x23e3ed4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3ed4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.785] SetEndOfFile (hFile=0x254) returned 1 [0281.785] CloseHandle (hObject=0x254) returned 1 [0281.785] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.786] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.786] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.786] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.786] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.786] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.786] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0281.787] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.787] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.787] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.787] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.787] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.787] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.787] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.787] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.787] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.787] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.789] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0281.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.789] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.790] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.790] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.790] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.790] CryptDestroyKey (hKey=0x55e310) returned 1 [0281.790] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0281.790] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\windows\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bdfc4e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0281.790] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bdfc4e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.790] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bdfc4e4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bdfc4e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bdfc4e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.791] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bdfc4e4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bdfc4e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bdfc4e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.791] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0281.791] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ff025b, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3ff025b, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3ff025b, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0281.791] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0281.791] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x473d6c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x473d6c9, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1 [0281.791] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.791] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.791] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.791] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0281.791] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570e30) returned 1 [0281.792] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0281.792] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.792] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0281.792] CryptDestroyHash (hHash=0x55e610) returned 1 [0281.792] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0281.792] GetLastError () returned 0x0 [0281.792] GetLastError () returned 0x0 [0281.793] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.793] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0281.794] WriteFile (in: hFile=0x250, lpBuffer=0x23e3ee4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ee4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.796] SetEndOfFile (hFile=0x250) returned 1 [0281.796] CloseHandle (hObject=0x250) returned 1 [0281.796] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.797] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.797] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.797] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.797] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.797] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0281.798] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.798] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.798] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.798] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.799] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.799] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0281.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.799] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.799] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.800] CryptDestroyKey (hKey=0x55e650) returned 1 [0281.800] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0281.800] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x473d6c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4be227cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0281.800] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x473d6c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4be227cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.800] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39f920f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39f920f0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0281.800] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.800] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.801] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.801] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0281.801] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570c98) returned 1 [0281.801] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.801] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.802] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e910) returned 1 [0281.802] CryptDestroyHash (hHash=0x55e610) returned 1 [0281.802] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.802] GetLastError () returned 0x0 [0281.802] GetLastError () returned 0x0 [0281.802] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.802] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.837] WriteFile (in: hFile=0x254, lpBuffer=0x23e3f24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3f24*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.839] SetEndOfFile (hFile=0x254) returned 1 [0281.839] CloseHandle (hObject=0x254) returned 1 [0281.839] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.840] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.840] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.840] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.841] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.841] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0281.841] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.841] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.841] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.841] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.842] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.842] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.842] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.842] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.842] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.842] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.842] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.842] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0281.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.843] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.843] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.843] CryptDestroyKey (hKey=0x55e910) returned 1 [0281.843] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0281.843] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39f920f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4be6ea52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0281.844] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39f920f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4be6ea52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.844] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39f920f0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39f920f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39f920f0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0281.844] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4be48800, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4be48800, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4be9693e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.844] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4be48800, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4be48800, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4be9693e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.844] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0281.844] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x422c7d8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x422c7d8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Cookies", cAlternateFileName="")) returned 1 [0281.844] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.844] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.844] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.844] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0281.845] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571380) returned 1 [0281.845] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.845] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.845] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e2d0) returned 1 [0281.845] CryptDestroyHash (hHash=0x55e610) returned 1 [0281.845] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.845] GetLastError () returned 0x0 [0281.845] GetLastError () returned 0x0 [0281.846] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.846] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.847] WriteFile (in: hFile=0x254, lpBuffer=0x23e3f34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3f34*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.849] SetEndOfFile (hFile=0x254) returned 1 [0281.849] CloseHandle (hObject=0x254) returned 1 [0281.849] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.850] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.850] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.851] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.851] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0281.851] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.851] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.851] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.851] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.852] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.852] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.852] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.852] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0281.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.853] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.853] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.853] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0281.853] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0281.853] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x422c7d8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4be9693e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0281.854] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x422c7d8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4be9693e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.854] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4be9693e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4be9693e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4be9693e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.854] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4be9693e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4be9693e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4be9693e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.854] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0281.854] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x422c7d8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x422c7d8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="History", cAlternateFileName="")) returned 1 [0281.854] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.854] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.854] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.854] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0281.855] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x5712f8) returned 1 [0281.855] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.855] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.855] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e610) returned 1 [0281.855] CryptDestroyHash (hHash=0x55e790) returned 1 [0281.855] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.855] GetLastError () returned 0x0 [0281.855] GetLastError () returned 0x0 [0281.856] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.856] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.857] WriteFile (in: hFile=0x254, lpBuffer=0x23e3f74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3f74*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.859] SetEndOfFile (hFile=0x254) returned 1 [0281.859] CloseHandle (hObject=0x254) returned 1 [0281.859] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.860] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.860] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.860] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.860] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0281.861] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.861] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.861] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.862] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.862] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.862] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0281.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.862] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.862] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.863] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.863] CryptDestroyKey (hKey=0x55e610) returned 1 [0281.863] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0281.863] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x422c7d8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bebb008, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0281.863] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x422c7d8, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x422c7d8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bebb008, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.863] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bebb008, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bebb008, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bebb008, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.863] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bebb008, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bebb008, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bebb008, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.863] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0281.864] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39f920f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39f920f0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1 [0281.864] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.864] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.864] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.864] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.864] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.864] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0281.864] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x5709f0) returned 1 [0281.865] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.865] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.865] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e910) returned 1 [0281.865] CryptDestroyHash (hHash=0x55e610) returned 1 [0281.865] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.865] GetLastError () returned 0x0 [0281.865] GetLastError () returned 0x0 [0281.865] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.866] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.869] WriteFile (in: hFile=0x254, lpBuffer=0x23e3f84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3f84*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.870] SetEndOfFile (hFile=0x254) returned 1 [0281.870] CloseHandle (hObject=0x254) returned 1 [0281.870] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.871] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.871] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.871] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0281.872] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.872] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.872] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.873] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.873] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.873] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0281.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.873] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.874] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.874] CryptDestroyKey (hKey=0x55e910) returned 1 [0281.874] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0281.874] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39f920f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bee13f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0281.874] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4252734, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39f920f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bee13f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.874] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39f920f0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39f920f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39f920f0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0281.875] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bee13f1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bee13f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bee13f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.875] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bee13f1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bee13f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bee13f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.875] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0281.875] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39f920f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39f920f0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IECompatUaCache", cAlternateFileName="IECOMP~2")) returned 1 [0281.875] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.875] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.875] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.875] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.875] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.875] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0281.875] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570fc8) returned 1 [0281.876] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.876] CryptHashData (hHash=0x55e610, pbData=0x23dfb70, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.876] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e650) returned 1 [0281.876] CryptDestroyHash (hHash=0x55e610) returned 1 [0281.876] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.876] GetLastError () returned 0x0 [0281.876] GetLastError () returned 0x0 [0281.876] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.877] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.884] WriteFile (in: hFile=0x254, lpBuffer=0x23e3fc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3fc4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.885] SetEndOfFile (hFile=0x254) returned 1 [0281.885] CloseHandle (hObject=0x254) returned 1 [0281.886] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.887] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.887] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.888] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0281.888] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.888] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.888] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.888] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.888] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.888] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.889] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.889] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.889] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0281.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.889] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.889] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.890] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.890] CryptDestroyKey (hKey=0x55e650) returned 1 [0281.890] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0281.890] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39f920f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bf07408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0281.890] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39f920f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bf07408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.890] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39f920f0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39f920f0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39f920f0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0281.890] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bee13f1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bee13f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bf07408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.891] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bee13f1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bee13f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bf07408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.891] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0281.891] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4be227cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4be227cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4be227cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.891] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473d6c9, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x473d6c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x473d6c9, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1 [0281.891] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.891] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.891] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.891] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0281.891] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570c98) returned 1 [0281.892] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.892] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.892] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e910) returned 1 [0281.892] CryptDestroyHash (hHash=0x55e610) returned 1 [0281.892] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.892] GetLastError () returned 0x0 [0281.892] GetLastError () returned 0x0 [0281.892] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.893] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\playready\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.894] WriteFile (in: hFile=0x254, lpBuffer=0x23e3fd4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3fd4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.895] SetEndOfFile (hFile=0x254) returned 1 [0281.896] CloseHandle (hObject=0x254) returned 1 [0281.896] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.897] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.897] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.897] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.897] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0281.898] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.898] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.898] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.898] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.898] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.898] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.898] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.898] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.898] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.899] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.899] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0281.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.899] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.899] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.900] CryptDestroyKey (hKey=0x55e910) returned 1 [0281.900] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0281.900] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\playready\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473d6c9, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x473d6c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bf07408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0281.900] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x473d6c9, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x473d6c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bf07408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.900] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bf07408, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bf07408, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bf07408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.900] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bf07408, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bf07408, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bf07408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.900] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0281.900] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x46a4cef, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x46a4cef, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x46a4cef, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="UrlBlock", cAlternateFileName="")) returned 1 [0281.900] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.901] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.901] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.901] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0281.901] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571380) returned 1 [0281.902] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.902] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.902] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e2d0) returned 1 [0281.902] CryptDestroyHash (hHash=0x55e610) returned 1 [0281.902] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.902] GetLastError () returned 0x0 [0281.902] GetLastError () returned 0x0 [0281.902] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.903] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\UrlBlock\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\urlblock\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.904] WriteFile (in: hFile=0x254, lpBuffer=0x23e5d1c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e5d1c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.905] SetEndOfFile (hFile=0x254) returned 1 [0281.905] CloseHandle (hObject=0x254) returned 1 [0281.905] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.905] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.905] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.906] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.906] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.906] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0281.906] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.906] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.906] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.906] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.906] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.907] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.907] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.907] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.907] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0281.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.908] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.908] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.908] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.908] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0281.908] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0281.908] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\UrlBlock\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\urlblock\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x46a4cef, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x46a4cef, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bf2d72e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0281.908] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x46a4cef, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x46a4cef, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bf2d72e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.908] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bf2d72e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bf2d72e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bf2d72e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.909] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bf2d72e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bf2d72e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bf2d72e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0281.909] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0281.909] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x429ee5c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="User", cAlternateFileName="")) returned 1 [0281.909] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.909] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.909] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.909] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0281.909] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570748) returned 1 [0281.910] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0281.910] CryptHashData (hHash=0x55e2d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.910] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e610) returned 1 [0281.910] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0281.910] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0281.910] GetLastError () returned 0x0 [0281.910] GetLastError () returned 0x0 [0281.910] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.912] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.912] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0281.914] WriteFile (in: hFile=0x254, lpBuffer=0x23e3ff4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3ff4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.918] SetEndOfFile (hFile=0x254) returned 1 [0281.918] CloseHandle (hObject=0x254) returned 1 [0281.918] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.919] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.919] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.919] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0281.920] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.920] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.920] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.921] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.921] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.921] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.921] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.921] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.921] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.921] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.921] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.921] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0281.921] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.921] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.921] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.921] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.922] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.922] CryptDestroyKey (hKey=0x55e610) returned 1 [0281.922] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0281.922] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bf2d72e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0281.922] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bf2d72e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.922] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4cc0d69, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4cc0d69, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0281.923] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.923] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.923] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.923] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.923] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0281.923] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571380) returned 1 [0281.924] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0281.924] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.924] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e190) returned 1 [0281.924] CryptDestroyHash (hHash=0x55e610) returned 1 [0281.924] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0281.924] GetLastError () returned 0x0 [0281.924] GetLastError () returned 0x0 [0281.924] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.925] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0281.926] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.926] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0281.929] WriteFile (in: hFile=0x258, lpBuffer=0x23e3588*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3588*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.930] SetEndOfFile (hFile=0x258) returned 1 [0281.930] CloseHandle (hObject=0x258) returned 1 [0281.930] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.931] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.931] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0281.932] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.932] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.932] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.933] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.933] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.933] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.933] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.933] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.933] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.933] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0281.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.934] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.934] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.934] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.934] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.934] CryptDestroyKey (hKey=0x55e190) returned 1 [0281.934] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0281.934] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4cc0d69, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bf5510a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0281.934] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4cc0d69, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bf5510a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.934] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DataStore", cAlternateFileName="DATAST~1")) returned 1 [0281.935] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.935] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.935] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.935] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.935] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.935] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0281.935] CryptAcquireContextA (in: phProv=0x19e57c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e57c*=0x571490) returned 1 [0281.936] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e534 | out: phHash=0x19e534) returned 1 [0281.936] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.936] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19e578 | out: phKey=0x19e578*=0x55e210) returned 1 [0281.936] CryptDestroyHash (hHash=0x55e650) returned 1 [0281.936] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19e588*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19e588*=0x18) returned 1 [0281.936] GetLastError () returned 0x0 [0281.936] GetLastError () returned 0x0 [0281.936] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.937] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0281.938] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.938] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c [0281.939] WriteFile (in: hFile=0x25c, lpBuffer=0x23e3578*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e2b0, lpOverlapped=0x0 | out: lpBuffer=0x23e3578*, lpNumberOfBytesWritten=0x19e2b0*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.941] SetEndOfFile (hFile=0x25c) returned 1 [0281.941] CloseHandle (hObject=0x25c) returned 1 [0281.941] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.941] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.942] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0281.942] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.942] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.943] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.943] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.943] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.943] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.943] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.943] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.943] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.943] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.943] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.943] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.943] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.944] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0281.944] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.945] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.945] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.945] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.946] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.946] CryptDestroyKey (hKey=0x55e210) returned 1 [0281.946] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0281.946] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bf7b376, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0281.946] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bf7b376, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.946] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0281.946] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.947] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.947] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.947] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0281.947] CryptAcquireContextA (in: phProv=0x19e314, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e314*=0x570c98) returned 1 [0281.948] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e2cc | out: phHash=0x19e2cc) returned 1 [0281.948] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.948] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19e310 | out: phKey=0x19e310*=0x55e790) returned 1 [0281.948] CryptDestroyHash (hHash=0x55e650) returned 1 [0281.948] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e320*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e320*=0x18) returned 1 [0281.948] GetLastError () returned 0x0 [0281.948] GetLastError () returned 0x0 [0281.948] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.949] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x260 [0281.950] WriteFile (in: hFile=0x260, lpBuffer=0x23e534c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e048, lpOverlapped=0x0 | out: lpBuffer=0x23e534c*, lpNumberOfBytesWritten=0x19e048*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.952] SetEndOfFile (hFile=0x260) returned 1 [0281.952] CloseHandle (hObject=0x260) returned 1 [0281.952] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.953] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.953] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.953] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.953] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0281.953] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.954] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.954] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.954] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.954] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.955] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0281.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.955] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.955] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.955] CryptDestroyKey (hKey=0x55e790) returned 1 [0281.955] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0281.956] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\*.*"), lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bf9fe1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0281.956] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bf9fe1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.956] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bf9fe1e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bf9fe1e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bf9fe1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.956] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="nouser1", cAlternateFileName="")) returned 1 [0281.956] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.956] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.956] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.956] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.956] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.956] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0281.957] CryptAcquireContextA (in: phProv=0x19e0ac, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e0ac*=0x571050) returned 1 [0281.957] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e064 | out: phHash=0x19e064) returned 1 [0281.957] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.957] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19e0a8 | out: phKey=0x19e0a8*=0x55e790) returned 1 [0281.957] CryptDestroyHash (hHash=0x55e310) returned 1 [0281.957] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19e0b8*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19e0b8*=0x18) returned 1 [0281.957] GetLastError () returned 0x0 [0281.957] GetLastError () returned 0x0 [0281.957] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.958] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0281.959] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.961] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x264 [0281.963] WriteFile (in: hFile=0x264, lpBuffer=0x23e365c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19dde0, lpOverlapped=0x0 | out: lpBuffer=0x23e365c*, lpNumberOfBytesWritten=0x19dde0*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.964] SetEndOfFile (hFile=0x264) returned 1 [0281.964] CloseHandle (hObject=0x264) returned 1 [0281.964] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.965] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.965] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.965] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.965] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0281.965] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.966] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.966] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.966] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.966] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.966] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.966] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.966] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.966] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.966] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.966] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.967] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0281.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.967] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.967] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.968] CryptDestroyKey (hKey=0x55e790) returned 1 [0281.968] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0281.968] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\*.*"), lpFindFileData=0x19e060 | out: lpFindFileData=0x19e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bfc60c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0281.968] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e060 | out: lpFindFileData=0x19e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bfc60c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.968] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e060 | out: lpFindFileData=0x19e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4311257, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="120712-0049", cAlternateFileName="120712~1")) returned 1 [0281.968] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.968] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.969] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.969] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0281.969] CryptAcquireContextA (in: phProv=0x19de44, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19de44*=0x5709f0) returned 1 [0281.970] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ddfc | out: phHash=0x19ddfc) returned 1 [0281.970] CryptHashData (hHash=0x55e190, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.970] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19de40 | out: phKey=0x19de40*=0x55e790) returned 1 [0281.970] CryptDestroyHash (hHash=0x55e190) returned 1 [0281.970] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19de50*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19de50*=0x18) returned 1 [0281.970] GetLastError () returned 0x0 [0281.970] GetLastError () returned 0x0 [0281.970] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.971] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x268 [0281.972] WriteFile (in: hFile=0x268, lpBuffer=0x23e374c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19db78, lpOverlapped=0x0 | out: lpBuffer=0x23e374c*, lpNumberOfBytesWritten=0x19db78*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.974] SetEndOfFile (hFile=0x268) returned 1 [0281.974] CloseHandle (hObject=0x268) returned 1 [0281.974] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.975] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.975] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0281.976] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.976] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.976] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.976] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.976] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.976] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.976] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.976] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.977] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.977] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0281.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.977] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.977] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.978] CryptDestroyKey (hKey=0x55e790) returned 1 [0281.978] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0281.978] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\*.*"), lpFindFileData=0x19ddf8 | out: lpFindFileData=0x19ddf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bfc60c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0281.978] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ddf8 | out: lpFindFileData=0x19ddf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4bfc60c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.978] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ddf8 | out: lpFindFileData=0x19ddf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39fde927, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39fde927, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DBStore", cAlternateFileName="")) returned 1 [0281.978] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.978] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.979] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.979] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0281.979] CryptAcquireContextA (in: phProv=0x19dbdc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19dbdc*=0x570c98) returned 1 [0281.979] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19db94 | out: phHash=0x19db94) returned 1 [0281.979] CryptHashData (hHash=0x55e190, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.979] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19dbd8 | out: phKey=0x19dbd8*=0x55e7d0) returned 1 [0281.980] CryptDestroyHash (hHash=0x55e190) returned 1 [0281.980] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19dbe8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19dbe8*=0x18) returned 1 [0281.980] GetLastError () returned 0x0 [0281.980] GetLastError () returned 0x0 [0281.980] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.980] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x26c [0281.983] WriteFile (in: hFile=0x26c, lpBuffer=0x23e5398*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19d910, lpOverlapped=0x0 | out: lpBuffer=0x23e5398*, lpNumberOfBytesWritten=0x19d910*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.984] SetEndOfFile (hFile=0x26c) returned 1 [0281.985] CloseHandle (hObject=0x26c) returned 1 [0281.985] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.986] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.986] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0281.986] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.987] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.987] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.987] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.987] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.987] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0281.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.988] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.988] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.988] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0281.988] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0281.988] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\*.*"), lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39fde927, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bfec361, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0281.989] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x39fde927, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bfec361, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0281.989] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39fb8607, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39fb8607, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x39fde927, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBCHK~1.CRY")) returned 1 [0281.989] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bfec361, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bfec361, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bfec361, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0281.989] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3a266fa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a266fa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="LogFiles", cAlternateFileName="")) returned 1 [0281.989] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0281.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0281.989] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0281.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0281.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0281.989] CryptAcquireContextA (in: phProv=0x19d974, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19d974*=0x570748) returned 1 [0281.990] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19d92c | out: phHash=0x19d92c) returned 1 [0281.990] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0281.990] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19d970 | out: phKey=0x19d970*=0x55e310) returned 1 [0281.990] CryptDestroyHash (hHash=0x55e190) returned 1 [0281.990] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19d980*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19d980*=0x18) returned 1 [0281.990] GetLastError () returned 0x0 [0281.990] GetLastError () returned 0x0 [0281.990] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.992] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0281.992] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0281.993] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x270 [0281.994] WriteFile (in: hFile=0x270, lpBuffer=0x23e36a8*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19d6a8, lpOverlapped=0x0 | out: lpBuffer=0x23e36a8*, lpNumberOfBytesWritten=0x19d6a8*=0x1cf9, lpOverlapped=0x0) returned 1 [0281.995] SetEndOfFile (hFile=0x270) returned 1 [0281.995] CloseHandle (hObject=0x270) returned 1 [0281.995] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0281.996] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.996] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0281.997] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0281.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0281.997] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.997] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0281.998] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0281.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.998] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.998] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0281.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0281.998] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0281.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0281.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0281.999] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0281.999] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.999] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0281.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0281.999] CryptDestroyKey (hKey=0x55e310) returned 1 [0281.999] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0281.999] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\*.*"), lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3a266fa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0131c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0281.999] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3a266fa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0131c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.002] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x39fde927, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x39fde927, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a1ce534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBLOG~1.CRY")) returned 1 [0282.002] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4311257, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4311257, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4311257, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0282.002] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43374eb, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43374eb, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x43374eb, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0282.002] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a1f4872, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a1f4872, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a266fa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBTMP~1.CRY")) returned 1 [0282.002] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c0131c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c0131c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0131c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.003] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19d928 | out: lpFindFileData=0x19d928*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c0131c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c0131c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0131c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.003] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0282.003] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43374eb, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43374eb, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x48e101d, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="spartan.edb", cAlternateFileName="")) returned 1 [0282.003] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43374eb, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x43374eb, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x48e101d, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="spartan.edb", cAlternateFileName="")) returned 0 [0282.003] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0282.003] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ddf8 | out: lpFindFileData=0x19ddf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bfc60c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bfc60c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bfc60c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6264652e, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.003] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ddf8 | out: lpFindFileData=0x19ddf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bfc60c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bfc60c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bfc60c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6264652e, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.003] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0282.003] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e060 | out: lpFindFileData=0x19e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bfc60c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bfc60c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bfc60c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.003] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e060 | out: lpFindFileData=0x19e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bfc60c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bfc60c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bfc60c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.003] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0282.003] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="nouser1", cAlternateFileName="")) returned 0 [0282.003] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0282.004] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bf7b376, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bf7b376, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bf7b376, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.004] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Indexed", cAlternateFileName="")) returned 1 [0282.004] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.004] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.004] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.004] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0282.004] CryptAcquireContextA (in: phProv=0x19e314, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e314*=0x570eb8) returned 1 [0282.005] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e2cc | out: phHash=0x19e2cc) returned 1 [0282.005] CryptHashData (hHash=0x55e2d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.005] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19e310 | out: phKey=0x19e310*=0x55e650) returned 1 [0282.005] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0282.005] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19e320*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19e320*=0x18) returned 1 [0282.005] GetLastError () returned 0x0 [0282.005] GetLastError () returned 0x0 [0282.005] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.006] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x260 [0282.009] WriteFile (in: hFile=0x260, lpBuffer=0x23e3774*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e048, lpOverlapped=0x0 | out: lpBuffer=0x23e3774*, lpNumberOfBytesWritten=0x19e048*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.010] SetEndOfFile (hFile=0x260) returned 1 [0282.010] CloseHandle (hObject=0x260) returned 1 [0282.011] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.011] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.012] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0282.012] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.012] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.013] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.013] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.013] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.013] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.014] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.014] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.014] CryptDestroyKey (hKey=0x55e650) returned 1 [0282.014] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0282.014] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\*.*"), lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c0389f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0282.015] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c0389f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.015] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0282.015] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.015] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.015] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.015] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0282.015] CryptAcquireContextA (in: phProv=0x19e0ac, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e0ac*=0x570e30) returned 1 [0282.016] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e064 | out: phHash=0x19e064) returned 1 [0282.016] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.016] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19e0a8 | out: phKey=0x19e0a8*=0x55e790) returned 1 [0282.016] CryptDestroyHash (hHash=0x55e650) returned 1 [0282.016] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e0b8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e0b8*=0x18) returned 1 [0282.016] GetLastError () returned 0x0 [0282.016] GetLastError () returned 0x0 [0282.016] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.017] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x264 [0282.018] WriteFile (in: hFile=0x264, lpBuffer=0x23e5384*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19dde0, lpOverlapped=0x0 | out: lpBuffer=0x23e5384*, lpNumberOfBytesWritten=0x19dde0*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.019] SetEndOfFile (hFile=0x264) returned 1 [0282.020] CloseHandle (hObject=0x264) returned 1 [0282.020] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.021] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.021] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.021] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.021] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.021] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.021] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.021] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.022] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.022] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.022] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.023] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.023] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.023] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.023] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.024] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.024] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.024] CryptDestroyKey (hKey=0x55e790) returned 1 [0282.024] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0282.024] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\*.*"), lpFindFileData=0x19e060 | out: lpFindFileData=0x19e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c0389f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0282.025] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e060 | out: lpFindFileData=0x19e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c0389f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.025] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e060 | out: lpFindFileData=0x19e060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c0389f1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c0389f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0389f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.025] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e060 | out: lpFindFileData=0x19e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="nouser1", cAlternateFileName="")) returned 1 [0282.025] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.025] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.025] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.025] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0282.025] CryptAcquireContextA (in: phProv=0x19de44, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19de44*=0x570b00) returned 1 [0282.026] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ddfc | out: phHash=0x19ddfc) returned 1 [0282.026] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.026] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19de40 | out: phKey=0x19de40*=0x55e790) returned 1 [0282.026] CryptDestroyHash (hHash=0x55e650) returned 1 [0282.026] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19de50*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19de50*=0x18) returned 1 [0282.026] GetLastError () returned 0x0 [0282.026] GetLastError () returned 0x0 [0282.026] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.028] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0282.028] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.029] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\nouser1\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x268 [0282.030] WriteFile (in: hFile=0x268, lpBuffer=0x23e3694*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19db78, lpOverlapped=0x0 | out: lpBuffer=0x23e3694*, lpNumberOfBytesWritten=0x19db78*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.032] SetEndOfFile (hFile=0x268) returned 1 [0282.032] CloseHandle (hObject=0x268) returned 1 [0282.032] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.033] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.033] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0282.034] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.034] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.034] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.035] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.035] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.035] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.035] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.035] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.035] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.035] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.035] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.035] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.035] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.035] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.035] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.036] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.036] CryptDestroyKey (hKey=0x55e790) returned 1 [0282.036] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0282.036] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\nouser1\\*.*"), lpFindFileData=0x19ddf8 | out: lpFindFileData=0x19ddf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c05eacf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0282.036] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ddf8 | out: lpFindFileData=0x19ddf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c05eacf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.036] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ddf8 | out: lpFindFileData=0x19ddf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="120712-0049", cAlternateFileName="120712~1")) returned 1 [0282.036] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.036] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.037] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.037] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.037] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.037] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0282.037] CryptAcquireContextA (in: phProv=0x19dbdc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19dbdc*=0x570eb8) returned 1 [0282.038] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19db94 | out: phHash=0x19db94) returned 1 [0282.038] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.038] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19dbd8 | out: phKey=0x19dbd8*=0x55e790) returned 1 [0282.038] CryptDestroyHash (hHash=0x55e650) returned 1 [0282.038] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19dbe8*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19dbe8*=0x18) returned 1 [0282.038] GetLastError () returned 0x0 [0282.038] GetLastError () returned 0x0 [0282.038] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.039] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\nouser1\\120712-0049\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x26c [0282.040] WriteFile (in: hFile=0x26c, lpBuffer=0x23e377c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19d910, lpOverlapped=0x0 | out: lpBuffer=0x23e377c*, lpNumberOfBytesWritten=0x19d910*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.041] SetEndOfFile (hFile=0x26c) returned 1 [0282.041] CloseHandle (hObject=0x26c) returned 1 [0282.041] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.042] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.042] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0282.043] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.043] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.043] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.043] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.043] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.043] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.043] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.043] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.043] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.044] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.044] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.044] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.044] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.044] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.044] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.044] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.044] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.044] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.044] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.044] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.045] CryptDestroyKey (hKey=0x55e790) returned 1 [0282.045] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0282.045] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\indexed\\data\\nouser1\\120712-0049\\*.*"), lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c084c9c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0282.045] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c084c9c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.045] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c084c9c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c084c9c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c084c9c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.045] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19db90 | out: lpFindFileData=0x19db90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c084c9c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c084c9c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c084c9c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.045] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0282.045] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ddf8 | out: lpFindFileData=0x19ddf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c05eacf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c05eacf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c05eacf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.045] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ddf8 | out: lpFindFileData=0x19ddf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c05eacf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c05eacf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c05eacf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.045] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0282.046] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19e060 | out: lpFindFileData=0x19e060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="nouser1", cAlternateFileName="")) returned 0 [0282.046] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0282.046] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c0389f1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c0389f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0389f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.046] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c0389f1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c0389f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0389f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.046] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0282.046] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42eb1a2, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x42eb1a2, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x42eb1a2, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Indexed", cAlternateFileName="")) returned 0 [0282.046] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0282.046] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4c9ab4f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4c9ab4f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c9ab4f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="DownloadHistory", cAlternateFileName="DOWNLO~1")) returned 1 [0282.046] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.046] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.046] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.047] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0282.047] CryptAcquireContextA (in: phProv=0x19e57c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e57c*=0x570858) returned 1 [0282.047] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e534 | out: phHash=0x19e534) returned 1 [0282.047] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.047] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19e578 | out: phKey=0x19e578*=0x55e790) returned 1 [0282.048] CryptDestroyHash (hHash=0x55e650) returned 1 [0282.048] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e588*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e588*=0x18) returned 1 [0282.048] GetLastError () returned 0x0 [0282.048] GetLastError () returned 0x0 [0282.048] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.048] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c [0282.054] WriteFile (in: hFile=0x25c, lpBuffer=0x23e537c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e2b0, lpOverlapped=0x0 | out: lpBuffer=0x23e537c*, lpNumberOfBytesWritten=0x19e2b0*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.056] SetEndOfFile (hFile=0x25c) returned 1 [0282.056] CloseHandle (hObject=0x25c) returned 1 [0282.056] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.057] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.057] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.057] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.058] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.058] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.058] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.058] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.058] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.059] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.059] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.059] CryptDestroyKey (hKey=0x55e790) returned 1 [0282.059] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0282.060] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4c9ab4f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4c9ab4f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c084c9c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0282.060] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4c9ab4f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4c9ab4f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c084c9c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.060] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c084c9c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c084c9c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0aae19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.060] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c084c9c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c084c9c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0aae19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.060] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0282.060] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x471725d, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x471725d, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x471725d, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0282.060] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.060] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.060] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.060] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.061] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0282.061] CryptAcquireContextA (in: phProv=0x19e57c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e57c*=0x570748) returned 1 [0282.061] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e534 | out: phHash=0x19e534) returned 1 [0282.061] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.061] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19e578 | out: phKey=0x19e578*=0x55e2d0) returned 1 [0282.061] CryptDestroyHash (hHash=0x55e650) returned 1 [0282.062] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19e588*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19e588*=0x18) returned 1 [0282.062] GetLastError () returned 0x0 [0282.062] GetLastError () returned 0x0 [0282.062] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.062] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0282.063] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.063] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\favorites\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c [0282.065] WriteFile (in: hFile=0x25c, lpBuffer=0x23e3568*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e2b0, lpOverlapped=0x0 | out: lpBuffer=0x23e3568*, lpNumberOfBytesWritten=0x19e2b0*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.066] SetEndOfFile (hFile=0x25c) returned 1 [0282.066] CloseHandle (hObject=0x25c) returned 1 [0282.066] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.067] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.067] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.067] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.067] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0282.068] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.068] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.068] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.068] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.068] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.069] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.069] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.069] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.069] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.070] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.070] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0282.070] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0282.070] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\favorites\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x471725d, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x471725d, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c0aae19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0282.070] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x471725d, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x471725d, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c0aae19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.070] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c0aae19, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c0aae19, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0aae19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.070] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c0aae19, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c0aae19, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0aae19, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.070] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0282.071] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bf5510a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bf5510a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bf7b376, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.071] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x47fc06f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x47fc06f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x47fc06f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Recovery", cAlternateFileName="")) returned 1 [0282.071] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.071] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.071] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.071] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0282.071] CryptAcquireContextA (in: phProv=0x19e57c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e57c*=0x5708e0) returned 1 [0282.072] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e534 | out: phHash=0x19e534) returned 1 [0282.072] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.072] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e578 | out: phKey=0x19e578*=0x55e2d0) returned 1 [0282.072] CryptDestroyHash (hHash=0x55e790) returned 1 [0282.072] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19e588*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19e588*=0x18) returned 1 [0282.072] GetLastError () returned 0x0 [0282.072] GetLastError () returned 0x0 [0282.072] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.073] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0282.074] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.074] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c [0282.075] WriteFile (in: hFile=0x25c, lpBuffer=0x23e3568*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e2b0, lpOverlapped=0x0 | out: lpBuffer=0x23e3568*, lpNumberOfBytesWritten=0x19e2b0*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.076] SetEndOfFile (hFile=0x25c) returned 1 [0282.077] CloseHandle (hObject=0x25c) returned 1 [0282.077] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.077] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.078] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.078] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0282.078] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.078] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.078] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.078] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.079] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.079] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.079] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.079] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.079] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.079] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.079] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.080] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.080] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.080] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.080] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0282.080] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0282.080] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x47fc06f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x47fc06f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c0d1210, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0282.080] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x47fc06f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x47fc06f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c0d1210, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.081] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x47fc06f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3a2b3515, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a2b3515, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1 [0282.081] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.081] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.081] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.081] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0282.081] CryptAcquireContextA (in: phProv=0x19e314, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e314*=0x5712f8) returned 1 [0282.082] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e2cc | out: phHash=0x19e2cc) returned 1 [0282.082] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.082] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19e310 | out: phKey=0x19e310*=0x55e790) returned 1 [0282.082] CryptDestroyHash (hHash=0x55e650) returned 1 [0282.082] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e320*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e320*=0x18) returned 1 [0282.082] GetLastError () returned 0x0 [0282.082] GetLastError () returned 0x0 [0282.082] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.083] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x260 [0282.084] WriteFile (in: hFile=0x260, lpBuffer=0x23e534c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e048, lpOverlapped=0x0 | out: lpBuffer=0x23e534c*, lpNumberOfBytesWritten=0x19e048*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.085] SetEndOfFile (hFile=0x260) returned 1 [0282.086] CloseHandle (hObject=0x260) returned 1 [0282.086] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.086] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.087] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.087] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.087] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.088] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.088] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.088] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.088] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.089] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.089] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.089] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.089] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.089] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.089] CryptDestroyKey (hKey=0x55e790) returned 1 [0282.089] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0282.089] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\*.*"), lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x47fc06f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3a2b3515, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0d1210, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0282.089] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x47fc06f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3a2b3515, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0d1210, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.090] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c0d1210, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c0d1210, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0f73df, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.090] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a28d222, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a28d222, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a2b3515, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RecoveryStore.{44F17EF9-7053-11EB-B0AC-0050F0B0FFDB}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RECOVE~1.CRY")) returned 1 [0282.090] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a2b3515, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a2b3515, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a2b3515, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{44F17~1.CRY")) returned 1 [0282.090] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19e2c8 | out: lpFindFileData=0x19e2c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a2b3515, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a2b3515, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a2b3515, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x405534, dwReserved1=0x0, cFileName="{44F17EFB-7053-11EB-B0AC-0050F0B0FFDB}.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{44F17~1.CRY")) returned 0 [0282.090] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0282.090] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c0d1210, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c0d1210, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0d1210, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x372d4246, dwReserved1=0x2d333530, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.090] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c0d1210, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c0d1210, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c0d1210, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x372d4246, dwReserved1=0x2d333530, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.090] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0282.090] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x47fc06f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x47fc06f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x47fc06f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Recovery", cAlternateFileName="")) returned 0 [0282.090] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0282.090] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bf2d72e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bf2d72e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bf5510a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4179, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.090] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bf2d72e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bf2d72e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bf5510a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4179, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.090] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0282.090] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x429ee5c, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x429ee5c, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x429ee5c, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="User", cAlternateFileName="")) returned 0 [0282.091] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0282.091] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x934dcb8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x934dcb8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e796b, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0282.091] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.091] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.091] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.091] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.091] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.091] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0282.091] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0282.092] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.092] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.092] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0282.092] CryptDestroyHash (hHash=0x55e310) returned 1 [0282.092] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.092] GetLastError () returned 0x0 [0282.092] GetLastError () returned 0x0 [0282.092] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.093] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0282.093] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.094] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.099] WriteFile (in: hFile=0x250, lpBuffer=0x23e3568*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3568*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.101] SetEndOfFile (hFile=0x250) returned 1 [0282.101] CloseHandle (hObject=0x250) returned 1 [0282.101] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.102] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.102] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.102] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.102] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.102] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.102] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0282.102] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.102] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.103] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.103] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.103] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.103] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.103] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.103] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.103] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.104] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.104] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.104] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.104] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0282.104] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x934dcb8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c0f73df, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0282.105] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x934dcb8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4c0f73df, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.105] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c0f73df, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c0f73df, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c11d54b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.105] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c0f73df, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c0f73df, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c11d54b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.105] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0282.105] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88079316, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x934dcb8, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x934dcb8, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e796b, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0282.105] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0282.105] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8802cde8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8802cde8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8802cde8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x64457466, dwReserved1=0x5f4f6567, cFileName="AppData", cAlternateFileName="")) returned 1 [0282.105] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.105] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.105] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.106] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.106] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0282.106] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0282.107] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.107] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.107] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0282.107] CryptDestroyHash (hHash=0x55e610) returned 1 [0282.107] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.107] GetLastError () returned 0x0 [0282.107] GetLastError () returned 0x0 [0282.107] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.108] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0282.108] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.109] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.110] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3568*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3568*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.111] SetEndOfFile (hFile=0x24c) returned 1 [0282.111] CloseHandle (hObject=0x24c) returned 1 [0282.111] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.112] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.112] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.112] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.112] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0282.113] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.113] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.113] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.113] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.113] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.113] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.114] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.114] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.114] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.114] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.114] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.114] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.114] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.114] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.114] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.114] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.114] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.114] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.115] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.115] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0282.115] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8802cde8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8802cde8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c11d54b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0282.115] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8802cde8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8802cde8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c11d54b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.115] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c11d54b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c11d54b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c11d54b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.115] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c11d54b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c11d54b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c11d54b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.115] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0282.115] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bc7ed06, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4bc7ed06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4bc7ed06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.116] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88006be9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88006be9, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0282.116] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.116] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.116] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.116] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0282.116] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0282.117] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.117] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.117] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0282.117] CryptDestroyHash (hHash=0x55e610) returned 1 [0282.117] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.117] GetLastError () returned 0x0 [0282.117] GetLastError () returned 0x0 [0282.118] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.118] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.119] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3588*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3588*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.121] SetEndOfFile (hFile=0x24c) returned 1 [0282.121] CloseHandle (hObject=0x24c) returned 1 [0282.121] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.122] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.122] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.122] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.123] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.123] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.123] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.123] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.124] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.124] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.124] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.124] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.124] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.124] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.124] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.124] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.124] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.124] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0282.125] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88006be9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c14394e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0282.125] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88006be9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c14394e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.125] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c14394e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c14394e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c14394e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.125] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c14394e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c14394e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c14394e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.125] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0282.125] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87fe09a0, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x87fe09a0, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0282.125] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.125] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.125] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.125] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0282.126] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0282.126] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.126] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.126] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0282.126] CryptDestroyHash (hHash=0x55e790) returned 1 [0282.127] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.127] GetLastError () returned 0x0 [0282.127] GetLastError () returned 0x0 [0282.127] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.127] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0282.128] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.128] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.130] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3548*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3548*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.134] SetEndOfFile (hFile=0x24c) returned 1 [0282.134] CloseHandle (hObject=0x24c) returned 1 [0282.134] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.135] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.135] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.135] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.135] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.135] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.135] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0282.135] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.135] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.136] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.136] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.136] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.136] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.136] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.137] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.137] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.137] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.137] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0282.137] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87fe09a0, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c14394e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0282.138] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87fe09a0, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c14394e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.138] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c14394e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c14394e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c169ab4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.138] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c14394e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c14394e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c169ab4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.138] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0282.138] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888ab4e8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x888ab4e8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_N")) returned 1 [0282.138] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.138] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.138] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.138] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0282.139] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0282.139] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.139] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.139] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0282.139] CryptDestroyHash (hHash=0x55e610) returned 1 [0282.139] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.139] GetLastError () returned 0x0 [0282.139] GetLastError () returned 0x0 [0282.140] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.140] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.143] WriteFile (in: hFile=0x24c, lpBuffer=0x23e5338*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e5338*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.145] SetEndOfFile (hFile=0x24c) returned 1 [0282.145] CloseHandle (hObject=0x24c) returned 1 [0282.145] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.146] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.146] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.146] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.146] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.146] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.146] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0282.146] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.147] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.147] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.148] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.148] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.148] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.148] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.148] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.149] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.149] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.149] CryptDestroyKey (hKey=0x55e650) returned 1 [0282.149] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0282.149] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888ab4e8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c169ab4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0282.149] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888ab4e8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c169ab4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.149] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a2ff705, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a2ff705, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0282.150] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.150] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.150] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.150] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.150] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.150] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0282.150] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0282.151] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.151] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.151] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e750) returned 1 [0282.151] CryptDestroyHash (hHash=0x55e190) returned 1 [0282.151] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.151] GetLastError () returned 0x0 [0282.151] GetLastError () returned 0x0 [0282.151] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.152] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0282.152] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.153] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.154] WriteFile (in: hFile=0x250, lpBuffer=0x23e3640*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3640*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.155] SetEndOfFile (hFile=0x250) returned 1 [0282.155] CloseHandle (hObject=0x250) returned 1 [0282.155] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.156] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.156] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.172] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.172] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.173] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.173] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.173] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.174] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.174] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.174] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.174] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.174] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.174] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.175] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.175] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.175] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.176] CryptDestroyKey (hKey=0x55e750) returned 1 [0282.176] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0282.176] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_25.10586.0.0_neutral__8wekyb3d8bbwe\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_25.10586.0.0_neutral__8wekyb3d8bbwe\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a2ff705, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c18fcde, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0282.178] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x888ab4e8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a2ff705, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c18fcde, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.178] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a2d95cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a2d95cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a2ff705, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0282.178] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x888d1750, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888d1750, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x888d1750, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0282.178] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x888d1750, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x888d1750, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x888d1750, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0282.178] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c18fcde, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c18fcde, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c18fcde, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.178] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c18fcde, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c18fcde, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c18fcde, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.178] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0282.179] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c169ab4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c169ab4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c169ab4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.179] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c169ab4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c169ab4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c169ab4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.179] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0282.180] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87fe09a0, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x87fe09a0, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0282.180] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.180] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.180] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.180] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.180] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.180] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.180] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5708e0) returned 1 [0282.183] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.183] CryptHashData (hHash=0x55e2d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.183] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0282.183] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0282.183] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.183] GetLastError () returned 0x0 [0282.183] GetLastError () returned 0x0 [0282.183] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.184] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.187] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3650*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3650*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.188] SetEndOfFile (hFile=0x24c) returned 1 [0282.189] CloseHandle (hObject=0x24c) returned 1 [0282.189] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.190] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.190] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.190] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.190] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.190] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.190] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.190] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.191] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.191] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.191] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.191] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.191] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.191] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.191] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.191] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.191] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.191] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.191] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.192] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.192] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.192] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.192] CryptDestroyKey (hKey=0x55e790) returned 1 [0282.192] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0282.193] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87fe09a0, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c1dc1bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0282.193] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87fe09a0, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x87fe09a0, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c1dc1bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.193] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c1dc1bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c1dc1bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c1dc1bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.193] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c1dc1bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c1dc1bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c1dc1bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.193] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0282.193] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a325988, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a325988, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0282.193] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.193] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.194] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.194] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.194] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0282.195] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.195] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.195] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0282.195] CryptDestroyHash (hHash=0x55e610) returned 1 [0282.195] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.195] GetLastError () returned 0x0 [0282.195] GetLastError () returned 0x0 [0282.195] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.196] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0282.196] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.197] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.198] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3598*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3598*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.199] SetEndOfFile (hFile=0x24c) returned 1 [0282.199] CloseHandle (hObject=0x24c) returned 1 [0282.199] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.200] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.200] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.200] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.200] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.201] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.201] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.201] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.201] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.201] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.201] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.202] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.202] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.202] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.203] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.203] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.203] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.203] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.203] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.203] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.203] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.203] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0282.203] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a325988, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c20256d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0282.204] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a325988, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c20256d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.204] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c20256d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c20256d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c20256d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.204] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8802cde8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8802cde8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8802cde8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0282.204] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a325988, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a325988, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a325988, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0282.204] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9259b185, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9259b185, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9259b185, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0282.204] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9259b185, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9259b185, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9259b185, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0282.204] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9259b185, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9259b185, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9259b185, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0282.204] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0282.204] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88006be9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88006be9, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0282.204] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.204] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.205] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.205] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.205] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.205] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0282.205] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.205] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.206] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0282.206] CryptDestroyHash (hHash=0x55e790) returned 1 [0282.206] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.206] GetLastError () returned 0x0 [0282.206] GetLastError () returned 0x0 [0282.206] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.206] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.213] WriteFile (in: hFile=0x24c, lpBuffer=0x23e35a8*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e35a8*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.214] SetEndOfFile (hFile=0x24c) returned 1 [0282.214] CloseHandle (hObject=0x24c) returned 1 [0282.214] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.215] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.215] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.215] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.215] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.215] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.216] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.216] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.216] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.216] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.216] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.216] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.216] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.217] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.217] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.217] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.217] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.217] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.218] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.218] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0282.218] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88006be9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c2285ae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0282.218] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88006be9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c2285ae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.219] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c2285ae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c2285ae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c2285ae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.219] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c2285ae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c2285ae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c2285ae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.219] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0282.219] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88006be9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88006be9, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0282.219] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.219] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.219] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.219] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.219] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0282.220] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.220] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.220] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0282.220] CryptDestroyHash (hHash=0x55e610) returned 1 [0282.220] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.220] GetLastError () returned 0x0 [0282.220] GetLastError () returned 0x0 [0282.220] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.222] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0282.223] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.224] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.226] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3588*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3588*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.229] SetEndOfFile (hFile=0x24c) returned 1 [0282.230] CloseHandle (hObject=0x24c) returned 1 [0282.230] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.231] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.231] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.231] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.231] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.231] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.231] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.232] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.232] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.232] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.232] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.232] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.233] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.233] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.233] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.233] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.233] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.233] CryptDestroyKey (hKey=0x55e650) returned 1 [0282.233] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0282.233] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88006be9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c2285ae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0282.233] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88006be9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c2285ae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.233] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c2285ae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c2285ae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c250974, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.234] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c2285ae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c2285ae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c250974, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.234] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0282.234] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88006be9, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x88006be9, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x88006be9, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0282.234] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0282.234] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5b9fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5ccdf89, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f726174, cFileName="Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe", cAlternateFileName="MICROS~2.1_8")) returned 1 [0282.234] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.234] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.234] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.234] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.234] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570b00) returned 1 [0282.235] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0282.235] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.235] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0282.235] CryptDestroyHash (hHash=0x55e310) returned 1 [0282.235] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0282.235] GetLastError () returned 0x0 [0282.235] GetLastError () returned 0x0 [0282.235] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.236] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0282.237] WriteFile (in: hFile=0x248, lpBuffer=0x23e3598*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3598*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.238] SetEndOfFile (hFile=0x248) returned 1 [0282.238] CloseHandle (hObject=0x248) returned 1 [0282.238] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.239] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.239] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.239] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.240] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.240] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.240] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.240] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.240] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.240] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.240] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.240] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.240] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.240] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.240] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.241] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.241] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.241] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.241] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.241] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.241] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.242] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.242] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.242] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.242] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0282.242] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5b9fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c250974, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0282.242] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5b9fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c250974, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.242] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5ccdf89, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0282.242] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.243] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.243] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.243] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.243] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.243] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.243] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0282.244] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.244] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.244] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0282.244] CryptDestroyHash (hHash=0x55e610) returned 1 [0282.244] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.244] GetLastError () returned 0x0 [0282.244] GetLastError () returned 0x0 [0282.244] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.245] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0282.246] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.246] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.249] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.250] SetEndOfFile (hFile=0x24c) returned 1 [0282.251] CloseHandle (hObject=0x24c) returned 1 [0282.251] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.252] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.252] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.253] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.253] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.253] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.253] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.253] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.253] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.254] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.254] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.254] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.254] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.254] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.254] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.254] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.254] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.254] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.254] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.254] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.255] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.255] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.255] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.255] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.255] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.255] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0282.255] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c274b35, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0282.256] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c274b35, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.256] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c274b35, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c274b35, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c274b35, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.256] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5ccdf89, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0282.256] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.256] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.256] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.256] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.256] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.256] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.260] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0282.260] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.260] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.260] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0282.260] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.260] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.260] GetLastError () returned 0x0 [0282.261] GetLastError () returned 0x0 [0282.261] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.261] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.263] WriteFile (in: hFile=0x250, lpBuffer=0x23e524c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e524c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.264] SetEndOfFile (hFile=0x250) returned 1 [0282.264] CloseHandle (hObject=0x250) returned 1 [0282.264] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.265] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.265] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.266] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.266] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.266] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.266] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.266] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.266] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.266] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.266] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.266] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.266] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.267] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.267] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.267] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.267] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.267] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.267] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.267] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.267] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.267] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.267] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.267] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.267] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.267] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.268] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.268] CryptDestroyKey (hKey=0x55e190) returned 1 [0282.268] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0282.268] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c29ad6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0282.268] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c29ad6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.268] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c29ad6b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c29ad6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c29ad6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.268] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c29ad6b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c29ad6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c29ad6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.268] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0282.268] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5ccdf89, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0282.269] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.269] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.269] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.269] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.269] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.269] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.269] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c10) returned 1 [0282.270] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.270] CryptHashData (hHash=0x55e2d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.270] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e750) returned 1 [0282.270] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0282.270] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.270] GetLastError () returned 0x0 [0282.270] GetLastError () returned 0x0 [0282.270] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.270] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.271] WriteFile (in: hFile=0x250, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.296] SetEndOfFile (hFile=0x250) returned 1 [0282.296] CloseHandle (hObject=0x250) returned 1 [0282.296] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.297] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.297] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.297] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.297] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.297] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.298] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.298] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.298] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.299] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.299] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.299] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.299] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.299] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.299] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.299] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.299] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.299] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.300] CryptDestroyKey (hKey=0x55e750) returned 1 [0282.300] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0282.300] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c29ad6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0282.300] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c29ad6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.300] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c29ad6b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c29ad6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c2e7230, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.300] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c29ad6b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c29ad6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c2e7230, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.300] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0282.300] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5ccdf89, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0282.300] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.300] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.301] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.301] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.301] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.301] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.301] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571408) returned 1 [0282.301] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.301] CryptHashData (hHash=0x55e7d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.301] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0282.302] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0282.302] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.302] GetLastError () returned 0x0 [0282.302] GetLastError () returned 0x0 [0282.302] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.302] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.304] WriteFile (in: hFile=0x250, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.305] SetEndOfFile (hFile=0x250) returned 1 [0282.305] CloseHandle (hObject=0x250) returned 1 [0282.305] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.306] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.306] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.306] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.306] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.306] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.306] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.307] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.307] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.307] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.307] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.307] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.307] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.307] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.308] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.308] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.308] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.308] CryptDestroyKey (hKey=0x55e190) returned 1 [0282.308] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0282.308] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c2e7230, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0282.309] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c2e7230, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.309] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c2e7230, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c2e7230, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c30da20, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.309] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c2e7230, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c2e7230, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c30da20, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.309] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0282.309] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5ccdf89, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0282.309] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.309] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.309] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.309] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.309] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0282.310] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.310] CryptHashData (hHash=0x55e190, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.310] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0282.310] CryptDestroyHash (hHash=0x55e190) returned 1 [0282.310] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.310] GetLastError () returned 0x0 [0282.310] GetLastError () returned 0x0 [0282.310] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.311] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.315] WriteFile (in: hFile=0x250, lpBuffer=0x23e35c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e35c4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.316] SetEndOfFile (hFile=0x250) returned 1 [0282.316] CloseHandle (hObject=0x250) returned 1 [0282.316] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.318] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.318] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.318] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.318] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.318] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.318] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.318] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.318] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.318] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.318] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.319] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.367] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.367] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.367] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.368] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.368] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.368] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.368] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0282.368] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c30da20, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0282.369] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c30da20, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.369] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c30da20, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c30da20, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c30da20, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.369] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c30da20, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c30da20, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c30da20, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.369] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0282.369] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5ccdf89, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ccdf89, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5ccdf89, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0282.369] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0282.369] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c81ad3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5c81ad3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0282.369] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.369] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.369] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.369] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.369] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.370] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570a78) returned 1 [0282.370] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.370] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.370] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0282.370] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.370] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.370] GetLastError () returned 0x0 [0282.370] GetLastError () returned 0x0 [0282.371] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.371] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.374] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3604*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3604*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.375] SetEndOfFile (hFile=0x24c) returned 1 [0282.375] CloseHandle (hObject=0x24c) returned 1 [0282.375] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.376] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.376] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.377] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.377] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.377] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.377] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.377] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.378] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.378] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.378] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.378] CryptDestroyKey (hKey=0x55e750) returned 1 [0282.378] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0282.378] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c81ad3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c3a5e6c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0282.379] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c81ad3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c3a5e6c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.379] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c3a5e6c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c3a5e6c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c3a5e6c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.379] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c3a5e6c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c3a5e6c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c3a5e6c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.379] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0282.379] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c250974, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c250974, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c250974, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.379] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c81ad3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5c81ad3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0282.379] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.379] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.379] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.379] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.380] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0282.380] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.380] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.380] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0282.380] CryptDestroyHash (hHash=0x55e910) returned 1 [0282.380] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.380] GetLastError () returned 0x0 [0282.380] GetLastError () returned 0x0 [0282.380] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.381] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.382] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3614*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3614*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.383] SetEndOfFile (hFile=0x24c) returned 1 [0282.383] CloseHandle (hObject=0x24c) returned 1 [0282.383] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.384] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.384] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.384] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.384] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.385] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.385] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.385] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.385] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.385] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.386] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.386] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.386] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.386] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.386] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0282.387] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c81ad3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c3cbfd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0282.387] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c81ad3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c3cbfd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.387] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c3cbfd1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c3cbfd1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c3cbfd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.387] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c3cbfd1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c3cbfd1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c3cbfd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.387] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0282.387] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5b9fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c5b9fe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5c5b9fe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0282.387] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.387] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.387] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.387] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.388] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570638) returned 1 [0282.388] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.388] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.388] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0282.388] CryptDestroyHash (hHash=0x55e210) returned 1 [0282.388] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.388] GetLastError () returned 0x0 [0282.388] GetLastError () returned 0x0 [0282.388] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.389] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.390] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3654*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3654*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.391] SetEndOfFile (hFile=0x24c) returned 1 [0282.391] CloseHandle (hObject=0x24c) returned 1 [0282.391] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.392] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.392] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.392] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.393] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.393] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.393] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.393] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.393] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.394] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.394] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.394] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.394] CryptDestroyKey (hKey=0x55e750) returned 1 [0282.394] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0282.394] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5b9fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c5b9fe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c3cbfd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0282.395] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5b9fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c5b9fe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c3cbfd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.395] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c3cbfd1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c3cbfd1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c3cbfd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.395] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c3cbfd1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c3cbfd1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c3cbfd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.395] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0282.395] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5b9fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c5b9fe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5c5b9fe, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0282.395] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.395] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.395] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.395] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.395] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571490) returned 1 [0282.396] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.396] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.396] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0282.396] CryptDestroyHash (hHash=0x55e750) returned 1 [0282.396] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.396] GetLastError () returned 0x0 [0282.396] GetLastError () returned 0x0 [0282.396] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.397] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.399] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3664*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3664*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.400] SetEndOfFile (hFile=0x24c) returned 1 [0282.400] CloseHandle (hObject=0x24c) returned 1 [0282.400] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.401] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.401] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.401] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.401] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.402] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.402] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.402] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.402] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.403] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.403] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.403] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.403] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.403] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.404] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0282.404] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5b9fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c5b9fe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c3f22a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0282.404] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5b9fe, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c5b9fe, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c3f22a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.404] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c3f22a7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c3f22a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c3f22a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.404] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c3f22a7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c3f22a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c3f22a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.404] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0282.404] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3a371e46, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a371e46, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0282.404] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.404] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.404] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.404] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.405] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571490) returned 1 [0282.405] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.405] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.405] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0282.405] CryptDestroyHash (hHash=0x55e190) returned 1 [0282.405] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.405] GetLastError () returned 0x0 [0282.405] GetLastError () returned 0x0 [0282.406] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.406] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.409] WriteFile (in: hFile=0x24c, lpBuffer=0x23e36a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e36a4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.411] SetEndOfFile (hFile=0x24c) returned 1 [0282.411] CloseHandle (hObject=0x24c) returned 1 [0282.411] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.412] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.412] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.412] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.412] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.412] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.412] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.412] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.412] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.413] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.413] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.413] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.413] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.413] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.413] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.414] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.414] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.414] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.414] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.414] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.414] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.414] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0282.414] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3a371e46, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c3f22a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0282.414] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3a371e46, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c3f22a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.414] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c3f22a7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c3f22a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c3f22a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.415] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c81ad3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5c81ad3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0282.415] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a34bb1d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a34bb1d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a371e46, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0282.415] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5d8cca0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d8cca0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d8cca0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0282.415] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5d8cca0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d8cca0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d8cca0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0282.415] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5d8cca0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d8cca0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5d8cca0, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0282.415] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0282.415] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c81ad3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5c81ad3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0282.415] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.415] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.415] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.415] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.415] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5706c0) returned 1 [0282.416] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.416] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.416] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0282.416] CryptDestroyHash (hHash=0x55e290) returned 1 [0282.416] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.416] GetLastError () returned 0x0 [0282.416] GetLastError () returned 0x0 [0282.416] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.417] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.418] WriteFile (in: hFile=0x24c, lpBuffer=0x23e36b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e36b4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.419] SetEndOfFile (hFile=0x24c) returned 1 [0282.419] CloseHandle (hObject=0x24c) returned 1 [0282.419] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.419] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.419] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.420] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.420] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.420] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.420] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.420] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.420] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.420] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.421] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.421] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.421] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.421] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.421] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.422] CryptDestroyKey (hKey=0x55e210) returned 1 [0282.422] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0282.422] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c81ad3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c4184ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0282.422] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c81ad3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c4184ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.422] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4184ca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c4184ca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c4184ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.422] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4184ca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c4184ca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c4184ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.422] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0282.422] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c81ad3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5c81ad3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0282.422] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.423] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.423] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.423] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.423] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570eb8) returned 1 [0282.423] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.424] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.424] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0282.424] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.424] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.424] GetLastError () returned 0x0 [0282.424] GetLastError () returned 0x0 [0282.424] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.424] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.425] WriteFile (in: hFile=0x24c, lpBuffer=0x23e36f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e36f4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.426] SetEndOfFile (hFile=0x24c) returned 1 [0282.426] CloseHandle (hObject=0x24c) returned 1 [0282.426] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.427] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.428] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.428] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.429] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.430] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.430] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.430] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.430] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.430] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.430] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.431] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.431] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.431] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.431] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.431] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.431] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.431] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.431] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.432] CryptDestroyKey (hKey=0x55e310) returned 1 [0282.432] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0282.432] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.1_8wekyb3d8bbwe\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.framework.1.1_8wekyb3d8bbwe\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c81ad3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c4184ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0282.432] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c81ad3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c4184ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.432] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4184ca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c4184ca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c4184ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.432] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4184ca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c4184ca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c4184ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.433] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0282.433] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c81ad3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5c81ad3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5c81ad3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0282.433] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0282.433] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d3082, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a457e3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x5f4f6174, cFileName="Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe", cAlternateFileName="MICROS~1.1_8")) returned 1 [0282.433] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.433] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.433] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.433] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.433] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571050) returned 1 [0282.434] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0282.434] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.434] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0282.434] CryptDestroyHash (hHash=0x55e750) returned 1 [0282.434] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0282.434] GetLastError () returned 0x0 [0282.434] GetLastError () returned 0x0 [0282.434] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.435] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0282.436] WriteFile (in: hFile=0x248, lpBuffer=0x23e3704*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3704*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.438] SetEndOfFile (hFile=0x248) returned 1 [0282.438] CloseHandle (hObject=0x248) returned 1 [0282.438] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.439] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.439] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.439] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.439] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.439] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.439] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.440] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.440] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.440] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.440] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.441] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.441] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.441] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.441] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.442] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.442] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0282.442] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d3082, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c43e92e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0282.442] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d3082, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c43e92e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.442] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a457e3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0282.442] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.442] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.442] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.442] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.443] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0282.443] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.443] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.443] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0282.443] CryptDestroyHash (hHash=0x55e910) returned 1 [0282.443] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.443] GetLastError () returned 0x0 [0282.443] GetLastError () returned 0x0 [0282.443] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.445] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.448] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3744*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3744*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.449] SetEndOfFile (hFile=0x24c) returned 1 [0282.449] CloseHandle (hObject=0x24c) returned 1 [0282.449] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.450] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.450] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.450] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.450] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.450] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.450] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.451] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.451] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.451] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.451] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.451] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.451] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.452] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.452] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0282.452] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c464b6e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0282.452] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c464b6e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.452] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c464b6e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c464b6e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c464b6e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.452] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a457e3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0282.452] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.452] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.452] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.453] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.453] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.453] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571518) returned 1 [0282.453] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.453] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.453] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0282.453] CryptDestroyHash (hHash=0x55e610) returned 1 [0282.453] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.453] GetLastError () returned 0x0 [0282.453] GetLastError () returned 0x0 [0282.454] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.454] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.455] WriteFile (in: hFile=0x250, lpBuffer=0x23e3754*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3754*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.456] SetEndOfFile (hFile=0x250) returned 1 [0282.456] CloseHandle (hObject=0x250) returned 1 [0282.456] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.457] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.457] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.457] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.458] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.458] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.458] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.458] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.458] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.459] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.459] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.459] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.459] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.459] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.459] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.459] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0282.459] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0282.459] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c464b6e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0282.460] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c464b6e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.460] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c464b6e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c464b6e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c464b6e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.460] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c464b6e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c464b6e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c464b6e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.460] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0282.460] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a457e3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0282.460] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.460] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.460] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.460] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.461] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5708e0) returned 1 [0282.461] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.461] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.461] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e750) returned 1 [0282.461] CryptDestroyHash (hHash=0x55e290) returned 1 [0282.461] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.461] GetLastError () returned 0x0 [0282.461] GetLastError () returned 0x0 [0282.461] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.462] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.463] WriteFile (in: hFile=0x250, lpBuffer=0x23e3794*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3794*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.464] SetEndOfFile (hFile=0x250) returned 1 [0282.464] CloseHandle (hObject=0x250) returned 1 [0282.464] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.464] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.464] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.465] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.465] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.465] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.465] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.466] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.466] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.466] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.466] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.466] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.467] CryptDestroyKey (hKey=0x55e750) returned 1 [0282.467] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0282.467] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c48acdc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0282.467] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c48acdc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.467] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c48acdc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c48acdc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c48acdc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.467] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c48acdc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c48acdc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c48acdc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.467] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0282.467] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a457e3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0282.467] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.467] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.468] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.468] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.468] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570d20) returned 1 [0282.468] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.468] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.468] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0282.468] CryptDestroyHash (hHash=0x55e290) returned 1 [0282.468] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.468] GetLastError () returned 0x0 [0282.469] GetLastError () returned 0x0 [0282.469] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.469] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.470] WriteFile (in: hFile=0x250, lpBuffer=0x23e37a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e37a4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.471] SetEndOfFile (hFile=0x250) returned 1 [0282.471] CloseHandle (hObject=0x250) returned 1 [0282.471] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.472] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.472] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.473] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.473] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.473] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.473] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.474] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.474] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.474] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.474] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.474] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.474] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.475] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.475] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.476] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.476] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.476] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.477] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.477] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0282.477] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c48acdc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0282.478] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c48acdc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.478] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c48acdc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c48acdc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c48acdc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.478] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c48acdc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c48acdc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c48acdc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.478] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0282.478] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a457e3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0282.478] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.478] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.479] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.479] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.479] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0282.479] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.480] CryptHashData (hHash=0x55e290, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.480] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0282.480] CryptDestroyHash (hHash=0x55e290) returned 1 [0282.480] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.480] GetLastError () returned 0x0 [0282.480] GetLastError () returned 0x0 [0282.480] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.480] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.484] WriteFile (in: hFile=0x250, lpBuffer=0x23e37e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e37e4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.486] SetEndOfFile (hFile=0x250) returned 1 [0282.486] CloseHandle (hObject=0x250) returned 1 [0282.486] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.487] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.487] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.487] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.488] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.488] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.488] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.488] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.488] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.488] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.488] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.488] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.488] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.489] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.489] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.489] CryptDestroyKey (hKey=0x55e190) returned 1 [0282.489] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0282.489] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c4b1050, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0282.490] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c4b1050, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.490] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4b1050, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c4b1050, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c4b1050, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.490] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4b1050, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c4b1050, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c4b1050, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.490] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0282.490] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a457e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a457e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a457e3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0282.490] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0282.490] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59f918e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x59f918e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0282.490] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.490] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.490] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.490] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.491] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0282.492] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.492] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.492] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0282.492] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.492] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.492] GetLastError () returned 0x0 [0282.492] GetLastError () returned 0x0 [0282.492] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.492] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.493] WriteFile (in: hFile=0x24c, lpBuffer=0x23e37f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e37f4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.494] SetEndOfFile (hFile=0x24c) returned 1 [0282.494] CloseHandle (hObject=0x24c) returned 1 [0282.495] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.495] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.495] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.495] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.495] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.495] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.496] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.496] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.496] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.496] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.496] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.496] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.497] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.497] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.497] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.497] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.497] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.497] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.497] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.497] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.498] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.498] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0282.498] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59f918e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c4d7026, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0282.498] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59f918e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c4d7026, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.498] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4d7026, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c4d7026, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c4d7026, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.498] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4d7026, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c4d7026, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c4d7026, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.498] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0282.498] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c43e92e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c43e92e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c43e92e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.498] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59f918e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x59f918e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0282.498] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.498] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.499] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.499] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.499] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c10) returned 1 [0282.499] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.499] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.499] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0282.500] CryptDestroyHash (hHash=0x55e650) returned 1 [0282.500] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.500] GetLastError () returned 0x0 [0282.500] GetLastError () returned 0x0 [0282.500] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.500] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.501] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3834*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3834*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.502] SetEndOfFile (hFile=0x24c) returned 1 [0282.503] CloseHandle (hObject=0x24c) returned 1 [0282.503] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.504] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.504] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.504] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.504] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.504] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.504] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.504] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.504] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.505] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.505] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.505] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.505] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.505] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.505] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.505] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.505] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.505] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.505] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.505] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.505] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.505] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.506] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.506] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.506] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.506] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.506] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.506] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0282.506] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59f918e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c4d7026, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0282.507] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59f918e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c4d7026, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.507] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4d7026, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c4d7026, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c4d7026, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.507] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4d7026, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c4d7026, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c4d7026, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.507] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0282.509] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d3082, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59d3082, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x59d3082, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0282.509] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.509] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.509] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.509] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.509] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0282.510] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.510] CryptHashData (hHash=0x55e190, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.510] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0282.510] CryptDestroyHash (hHash=0x55e190) returned 1 [0282.510] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.510] GetLastError () returned 0x0 [0282.510] GetLastError () returned 0x0 [0282.510] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.511] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.512] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3844*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3844*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.513] SetEndOfFile (hFile=0x24c) returned 1 [0282.513] CloseHandle (hObject=0x24c) returned 1 [0282.513] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.514] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.514] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.514] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.514] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.514] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.514] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.515] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.515] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.515] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.515] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.515] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.515] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.515] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.516] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.516] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.516] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.516] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.516] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.516] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.516] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.516] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0282.516] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d3082, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59d3082, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c4fd29b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0282.517] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d3082, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59d3082, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c4fd29b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.517] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4fd29b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c4fd29b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c4fd29b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.517] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c4fd29b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c4fd29b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c4fd29b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.517] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0282.517] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d3082, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59d3082, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x59d3082, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0282.517] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.517] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.517] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.517] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.517] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.517] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.517] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570f40) returned 1 [0282.518] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.518] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.518] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0282.518] CryptDestroyHash (hHash=0x55e750) returned 1 [0282.518] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.518] GetLastError () returned 0x0 [0282.518] GetLastError () returned 0x0 [0282.518] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.519] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.523] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3884*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3884*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.524] SetEndOfFile (hFile=0x24c) returned 1 [0282.524] CloseHandle (hObject=0x24c) returned 1 [0282.524] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.525] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.525] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.525] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.525] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.526] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.526] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.526] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.526] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.526] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.526] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.527] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.527] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.527] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.527] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.527] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0282.528] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d3082, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59d3082, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c523465, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0282.528] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d3082, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59d3082, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c523465, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.528] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c523465, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c523465, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c523465, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.528] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c523465, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c523465, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c523465, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.528] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0282.528] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3a39810d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a39810d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0282.528] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.528] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.528] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.528] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.529] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0282.529] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.529] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.529] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0282.529] CryptDestroyHash (hHash=0x55e910) returned 1 [0282.529] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.529] GetLastError () returned 0x0 [0282.529] GetLastError () returned 0x0 [0282.530] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.530] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.531] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3894*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3894*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.532] SetEndOfFile (hFile=0x24c) returned 1 [0282.532] CloseHandle (hObject=0x24c) returned 1 [0282.532] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.533] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.533] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.534] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.534] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.534] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.535] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.535] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.535] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.535] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.535] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.536] CryptDestroyKey (hKey=0x55e750) returned 1 [0282.536] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0282.536] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3a39810d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c523465, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0282.536] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3a39810d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c523465, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.536] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c523465, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c523465, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c523465, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.536] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59f918e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x59f918e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0282.536] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a39810d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a39810d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a39810d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0282.536] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5ade105, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ade105, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5ade105, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0282.536] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5ade105, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ade105, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5ade105, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0282.536] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5ade105, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5ade105, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5ade105, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0282.536] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0282.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59f918e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x59f918e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0282.537] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.537] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.537] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.537] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.537] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0282.538] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.538] CryptHashData (hHash=0x55e750, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.538] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0282.538] CryptDestroyHash (hHash=0x55e750) returned 1 [0282.538] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.538] GetLastError () returned 0x0 [0282.538] GetLastError () returned 0x0 [0282.538] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.539] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.540] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38d4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.541] SetEndOfFile (hFile=0x24c) returned 1 [0282.541] CloseHandle (hObject=0x24c) returned 1 [0282.541] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.542] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.542] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.542] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.542] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.542] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.542] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.543] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.543] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.543] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.543] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.543] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.543] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.543] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.543] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.543] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.543] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.544] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.544] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.544] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.544] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.544] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.544] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0282.544] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59f918e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c549779, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0282.544] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59f918e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59f918e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c549779, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.544] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c549779, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c549779, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c549779, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.544] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c549779, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c549779, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c549779, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.545] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0282.545] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d3082, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59d3082, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x59d3082, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0282.545] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.545] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.545] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.545] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.545] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0282.546] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.546] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.546] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0282.546] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0282.546] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.546] GetLastError () returned 0x0 [0282.546] GetLastError () returned 0x0 [0282.546] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.547] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.547] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38e4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.548] SetEndOfFile (hFile=0x24c) returned 1 [0282.549] CloseHandle (hObject=0x24c) returned 1 [0282.549] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.550] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.550] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.550] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.550] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.550] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.551] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.551] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.551] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.551] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.551] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.552] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.552] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.552] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.552] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.552] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.552] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.552] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.552] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0282.552] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.1_8wekyb3d8bbwe\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.net.native.runtime.1.1_8wekyb3d8bbwe\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d3082, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59d3082, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c549779, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0282.552] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d3082, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59d3082, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4c549779, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.553] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c549779, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c549779, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c549779, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.553] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c549779, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c549779, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c549779, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.553] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0282.553] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59d3082, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x59d3082, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x59d3082, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0282.553] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0282.553] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc9dcff, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbc9dcff, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x5f4f6174, cFileName="Microsoft.VCLibs.140.00_8wekyb3d8bbwe", cAlternateFileName="MICROS~1.00_")) returned 1 [0282.553] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.553] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.553] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.554] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.554] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.554] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.554] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570a78) returned 1 [0282.554] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0282.554] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.554] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0282.554] CryptDestroyHash (hHash=0x55e650) returned 1 [0282.555] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0282.555] GetLastError () returned 0x0 [0282.555] GetLastError () returned 0x0 [0282.555] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.555] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0282.558] WriteFile (in: hFile=0x248, lpBuffer=0x23e3924*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3924*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.559] SetEndOfFile (hFile=0x248) returned 1 [0282.560] CloseHandle (hObject=0x248) returned 1 [0282.560] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.560] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.561] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.561] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.561] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.562] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.562] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.562] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.562] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.562] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.562] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.562] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.562] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.562] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.562] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.563] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.563] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.563] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0282.563] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc9dcff, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c56fa9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0282.563] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc9dcff, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c56fa9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.563] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdbc9dcff, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbcc3f61, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbcc3f61, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0282.563] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.563] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.564] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.564] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.564] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0282.564] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.564] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.564] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0282.564] CryptDestroyHash (hHash=0x55e750) returned 1 [0282.564] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.564] GetLastError () returned 0x0 [0282.565] GetLastError () returned 0x0 [0282.565] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.565] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.567] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3934*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3934*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.568] SetEndOfFile (hFile=0x24c) returned 1 [0282.568] CloseHandle (hObject=0x24c) returned 1 [0282.568] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.569] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.569] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.569] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.569] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.569] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.570] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.570] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.571] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.571] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.571] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.571] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.572] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.572] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.572] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.572] CryptDestroyKey (hKey=0x55e790) returned 1 [0282.572] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0282.572] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdbc9dcff, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbcc3f61, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c56fa9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0282.572] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdbc9dcff, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbcc3f61, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c56fa9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.572] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c56fa9d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c56fa9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c56fa9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.572] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdbc9dcff, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc9dcff, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbc9dcff, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0282.573] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.573] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.573] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.573] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.573] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0282.574] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.574] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.574] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0282.574] CryptDestroyHash (hHash=0x55e910) returned 1 [0282.574] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.574] GetLastError () returned 0x0 [0282.574] GetLastError () returned 0x0 [0282.574] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.574] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.575] WriteFile (in: hFile=0x250, lpBuffer=0x23e3974*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3974*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.577] SetEndOfFile (hFile=0x250) returned 1 [0282.577] CloseHandle (hObject=0x250) returned 1 [0282.577] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.578] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.578] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.578] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.578] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.579] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.579] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.579] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.579] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.579] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.579] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.579] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.579] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.579] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.580] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.580] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.580] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.580] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.580] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.581] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.581] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0282.581] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdbc9dcff, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc9dcff, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c595d7d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0282.581] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdbc9dcff, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc9dcff, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c595d7d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.581] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c595d7d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c595d7d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c595d7d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.581] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c595d7d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c595d7d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c595d7d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.581] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0282.581] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdbcc3f61, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbcc3f61, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbcc3f61, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0282.581] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.581] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.582] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.582] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.582] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0282.582] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.582] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.582] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0282.583] CryptDestroyHash (hHash=0x55e790) returned 1 [0282.583] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.583] GetLastError () returned 0x0 [0282.583] GetLastError () returned 0x0 [0282.583] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.583] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.584] WriteFile (in: hFile=0x250, lpBuffer=0x23e3984*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3984*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.586] SetEndOfFile (hFile=0x250) returned 1 [0282.587] CloseHandle (hObject=0x250) returned 1 [0282.587] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.587] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.587] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.588] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.588] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.588] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.588] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.588] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.588] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.588] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.588] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.588] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.589] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.589] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.589] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.589] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.589] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.589] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.589] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.589] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.589] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.589] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.589] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.589] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.590] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.590] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.590] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.590] CryptDestroyKey (hKey=0x55e290) returned 1 [0282.590] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0282.590] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdbcc3f61, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbcc3f61, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c595d7d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0282.590] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdbcc3f61, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbcc3f61, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c595d7d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.590] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c595d7d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c595d7d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c5bbe98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.590] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c595d7d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c595d7d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c5bbe98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.591] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0282.591] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdbc9dcff, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc9dcff, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbc9dcff, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0282.591] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.591] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.591] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.591] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.591] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0282.592] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.592] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.592] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0282.592] CryptDestroyHash (hHash=0x55e910) returned 1 [0282.592] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.592] GetLastError () returned 0x0 [0282.592] GetLastError () returned 0x0 [0282.592] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.593] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.595] WriteFile (in: hFile=0x250, lpBuffer=0x23e39c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e39c4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.596] SetEndOfFile (hFile=0x250) returned 1 [0282.596] CloseHandle (hObject=0x250) returned 1 [0282.596] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.597] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.597] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.597] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.597] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.598] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.598] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.598] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.598] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.598] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.599] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.599] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.599] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.599] CryptDestroyKey (hKey=0x55e650) returned 1 [0282.599] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0282.599] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdbc9dcff, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc9dcff, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c5bbe98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0282.600] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdbc9dcff, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc9dcff, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c5bbe98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.600] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c5bbe98, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c5bbe98, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c5bbe98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.600] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c5bbe98, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c5bbe98, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c5bbe98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.600] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0282.600] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc9dcff, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc9dcff, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbc9dcff, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0282.600] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.600] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.601] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.601] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.601] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570e30) returned 1 [0282.601] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.601] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.601] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0282.601] CryptDestroyHash (hHash=0x55e790) returned 1 [0282.601] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.602] GetLastError () returned 0x0 [0282.602] GetLastError () returned 0x0 [0282.602] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.602] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.603] WriteFile (in: hFile=0x250, lpBuffer=0x23e39d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e39d4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.604] SetEndOfFile (hFile=0x250) returned 1 [0282.604] CloseHandle (hObject=0x250) returned 1 [0282.604] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.605] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.605] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.605] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.605] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.605] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.606] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.606] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.606] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.606] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.606] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.606] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.606] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.606] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.606] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.606] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.606] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.607] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.607] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.607] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.607] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.607] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.607] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.607] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.607] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.607] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.607] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0282.607] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc9dcff, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc9dcff, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c5e213f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0282.608] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc9dcff, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc9dcff, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c5e213f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.608] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c5e213f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c5e213f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c5e213f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.608] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c5e213f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c5e213f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c5e213f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.608] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0282.608] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc9dcff, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc9dcff, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbc9dcff, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0282.608] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0282.608] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc77a0e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc77a0e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbc77a0e, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0282.608] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.608] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.608] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.608] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.608] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.608] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.608] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0282.609] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.609] CryptHashData (hHash=0x55e310, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.609] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0282.609] CryptDestroyHash (hHash=0x55e310) returned 1 [0282.609] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.609] GetLastError () returned 0x0 [0282.609] GetLastError () returned 0x0 [0282.609] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.610] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.611] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3a14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3a14*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.612] SetEndOfFile (hFile=0x24c) returned 1 [0282.613] CloseHandle (hObject=0x24c) returned 1 [0282.613] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.614] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.614] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.614] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.614] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.615] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.615] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.615] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.615] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.616] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.616] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.616] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.616] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0282.616] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc77a0e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc77a0e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c5e213f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0282.617] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc77a0e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc77a0e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c5e213f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.617] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c5e213f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c5e213f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c5e213f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.617] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c5e213f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c5e213f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c5e213f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.617] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0282.617] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c56fa9d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c56fa9d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c56fa9d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.617] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc51817, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbc51817, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0282.617] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.617] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.617] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.617] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.617] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5706c0) returned 1 [0282.618] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.618] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.618] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0282.618] CryptDestroyHash (hHash=0x55e750) returned 1 [0282.618] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.618] GetLastError () returned 0x0 [0282.618] GetLastError () returned 0x0 [0282.618] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.619] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.620] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3a24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3a24*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.621] SetEndOfFile (hFile=0x24c) returned 1 [0282.621] CloseHandle (hObject=0x24c) returned 1 [0282.621] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.621] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.622] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.622] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.622] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.623] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.623] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.623] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.623] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.623] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.623] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.624] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.624] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0282.624] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc51817, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c60840f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0282.624] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc51817, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c60840f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.624] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c60840f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c60840f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c60840f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.624] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c60840f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c60840f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c60840f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.624] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0282.624] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc51817, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbc51817, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0282.625] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.625] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.625] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.625] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.625] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0282.626] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.626] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.626] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0282.626] CryptDestroyHash (hHash=0x55e750) returned 1 [0282.626] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.626] GetLastError () returned 0x0 [0282.626] GetLastError () returned 0x0 [0282.626] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.626] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.631] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3a64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3a64*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.632] SetEndOfFile (hFile=0x24c) returned 1 [0282.632] CloseHandle (hObject=0x24c) returned 1 [0282.632] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.633] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.633] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.634] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.634] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.634] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.634] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.634] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.635] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.635] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.635] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.635] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.635] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.635] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.635] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0282.635] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc51817, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c60840f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0282.636] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc51817, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c60840f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.636] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c60840f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c60840f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c62e51c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.636] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c60840f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c60840f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c62e51c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.636] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0282.636] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc51817, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbc51817, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0282.636] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.636] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.636] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.636] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.636] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.636] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0282.637] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.637] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.637] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0282.637] CryptDestroyHash (hHash=0x55e910) returned 1 [0282.637] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.637] GetLastError () returned 0x0 [0282.637] GetLastError () returned 0x0 [0282.637] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.638] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.639] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3a74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3a74*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.640] SetEndOfFile (hFile=0x24c) returned 1 [0282.640] CloseHandle (hObject=0x24c) returned 1 [0282.640] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.641] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.641] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.642] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.642] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.642] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.642] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.643] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.643] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.643] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.643] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.643] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.644] CryptDestroyKey (hKey=0x55e650) returned 1 [0282.644] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0282.644] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc51817, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c62e51c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0282.644] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc51817, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c62e51c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.644] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c62e51c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c62e51c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c62e51c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.644] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c62e51c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c62e51c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c62e51c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.644] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0282.644] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x3a3e47b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a3e47b4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0282.644] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.644] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.645] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.645] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.645] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0282.645] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.645] CryptHashData (hHash=0x55e750, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.645] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0282.645] CryptDestroyHash (hHash=0x55e750) returned 1 [0282.646] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.646] GetLastError () returned 0x0 [0282.646] GetLastError () returned 0x0 [0282.646] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.646] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.647] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ab4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ab4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.648] SetEndOfFile (hFile=0x24c) returned 1 [0282.648] CloseHandle (hObject=0x24c) returned 1 [0282.648] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.649] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.649] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.650] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.650] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.650] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.651] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.651] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.651] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.651] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.651] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.652] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.652] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0282.652] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x3a3e47b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c62e51c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0282.652] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x3a3e47b4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c62e51c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.652] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c62e51c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c62e51c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c654911, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.652] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbc77a0e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc77a0e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbc77a0e, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0282.652] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a3be263, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a3be263, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a3be263, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0282.652] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdbd82a85, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbd82a85, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbd82a85, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0282.652] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdbd82a85, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbd82a85, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbd82a85, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0282.652] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdbd82a85, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbd82a85, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbd82a85, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0282.652] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0282.652] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc77a0e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc77a0e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbc77a0e, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0282.652] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.652] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.653] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.653] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.653] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.653] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.653] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0282.653] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.653] CryptHashData (hHash=0x55e310, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.653] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0282.653] CryptDestroyHash (hHash=0x55e310) returned 1 [0282.654] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.654] GetLastError () returned 0x0 [0282.654] GetLastError () returned 0x0 [0282.654] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.654] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.655] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ac4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ac4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.656] SetEndOfFile (hFile=0x24c) returned 1 [0282.657] CloseHandle (hObject=0x24c) returned 1 [0282.657] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.658] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.658] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.658] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.659] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.659] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.659] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.659] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.659] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.659] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.659] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.659] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.659] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.659] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.660] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.660] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.660] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.660] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.660] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0282.660] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc77a0e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc77a0e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c654911, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0282.660] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc77a0e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc77a0e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c654911, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.660] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c654911, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c654911, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c654911, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.661] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c654911, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c654911, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c654911, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.661] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0282.661] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc51817, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbc51817, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0282.661] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.661] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.661] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.661] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.661] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.661] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.661] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0282.662] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.662] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.662] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0282.662] CryptDestroyHash (hHash=0x55e610) returned 1 [0282.662] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.662] GetLastError () returned 0x0 [0282.662] GetLastError () returned 0x0 [0282.662] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.673] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.675] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b04*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.676] SetEndOfFile (hFile=0x24c) returned 1 [0282.676] CloseHandle (hObject=0x24c) returned 1 [0282.676] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.678] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.678] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.678] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.678] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.678] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.678] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.679] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.679] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.679] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.679] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.679] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.679] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.679] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.679] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.679] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.679] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.679] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.680] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.680] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.680] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.680] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.680] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.680] CryptDestroyKey (hKey=0x55e210) returned 1 [0282.680] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0282.680] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc51817, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c67aac6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0282.681] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc51817, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4c67aac6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.681] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c67aac6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c67aac6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c67aac6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.681] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c67aac6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c67aac6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c67aac6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.681] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0282.681] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc51817, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdbc51817, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdbc51817, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0282.681] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0282.681] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89c56a54, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89c56a54, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x5f4f6174, cFileName="Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy", cAlternateFileName="MICROS~1.ASS")) returned 1 [0282.681] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.681] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.681] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.682] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.682] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.682] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571408) returned 1 [0282.682] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0282.682] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.682] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0282.682] CryptDestroyHash (hHash=0x55e910) returned 1 [0282.682] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0282.683] GetLastError () returned 0x0 [0282.683] GetLastError () returned 0x0 [0282.683] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.683] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0282.684] WriteFile (in: hFile=0x248, lpBuffer=0x23e3b14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3b14*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.685] SetEndOfFile (hFile=0x248) returned 1 [0282.685] CloseHandle (hObject=0x248) returned 1 [0282.685] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.686] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.686] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.686] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.686] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.686] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.687] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.687] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.687] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.687] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.687] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.688] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.688] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.688] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.688] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.688] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.689] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.689] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0282.689] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89c56a54, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c6a0ce9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0282.689] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89c56a54, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c6a0ce9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.689] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a66c47, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0282.689] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.689] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.689] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.689] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.689] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.689] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.690] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0282.690] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.690] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.690] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0282.690] CryptDestroyHash (hHash=0x55e610) returned 1 [0282.690] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.690] GetLastError () returned 0x0 [0282.690] GetLastError () returned 0x0 [0282.691] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.691] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.693] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b54*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.694] SetEndOfFile (hFile=0x24c) returned 1 [0282.694] CloseHandle (hObject=0x24c) returned 1 [0282.694] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.695] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.696] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.697] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.697] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.697] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.698] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.698] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.698] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.699] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.699] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.699] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.700] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.700] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0282.700] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c6a0ce9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0282.700] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c6a0ce9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.700] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c6a0ce9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c6a0ce9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c6c7245, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.701] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a66c47, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0282.701] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.701] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.701] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0282.703] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.703] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.703] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0282.703] CryptDestroyHash (hHash=0x55e610) returned 1 [0282.703] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.703] GetLastError () returned 0x0 [0282.703] GetLastError () returned 0x0 [0282.703] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.704] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.706] WriteFile (in: hFile=0x250, lpBuffer=0x23e3b64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3b64*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.707] SetEndOfFile (hFile=0x250) returned 1 [0282.707] CloseHandle (hObject=0x250) returned 1 [0282.707] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.708] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.708] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.708] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.708] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.709] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.709] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.709] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.709] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.709] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.709] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.711] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.712] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.712] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.712] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.712] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.712] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0282.712] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c6c7245, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0282.713] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c6c7245, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.713] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c6c7245, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c6c7245, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c6c7245, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.713] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c6c7245, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c6c7245, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c6c7245, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.713] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0282.713] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a66c47, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0282.713] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.713] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.713] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.713] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.713] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571490) returned 1 [0282.714] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.714] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.714] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0282.714] CryptDestroyHash (hHash=0x55e910) returned 1 [0282.714] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.714] GetLastError () returned 0x0 [0282.714] GetLastError () returned 0x0 [0282.714] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.715] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.716] WriteFile (in: hFile=0x250, lpBuffer=0x23e3ba4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ba4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.718] SetEndOfFile (hFile=0x250) returned 1 [0282.718] CloseHandle (hObject=0x250) returned 1 [0282.718] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.718] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.718] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.719] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.719] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.719] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.719] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.720] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.720] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.720] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.720] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.720] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.721] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.721] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0282.721] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c6ed1a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0282.721] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c6ed1a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.721] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c6ed1a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c6ed1a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c6ed1a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.721] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c6ed1a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c6ed1a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c6ed1a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.721] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0282.721] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a66c47, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0282.721] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.721] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.721] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.721] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.722] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.722] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570638) returned 1 [0282.722] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.722] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.722] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0282.722] CryptDestroyHash (hHash=0x55e910) returned 1 [0282.722] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.722] GetLastError () returned 0x0 [0282.722] GetLastError () returned 0x0 [0282.722] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.723] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.724] WriteFile (in: hFile=0x250, lpBuffer=0x23e3bb4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3bb4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.725] SetEndOfFile (hFile=0x250) returned 1 [0282.725] CloseHandle (hObject=0x250) returned 1 [0282.725] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.726] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.726] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.726] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.726] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.726] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.726] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.727] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.727] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.727] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.727] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.727] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.727] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.727] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.728] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.728] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.728] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.728] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.728] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0282.728] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c6ed1a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0282.729] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c6ed1a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.729] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c6ed1a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c6ed1a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c71333a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.729] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c6ed1a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c6ed1a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c71333a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.729] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0282.729] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a66c47, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0282.729] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.729] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.729] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.729] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.729] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0282.730] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.730] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.730] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0282.730] CryptDestroyHash (hHash=0x55e610) returned 1 [0282.730] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.730] GetLastError () returned 0x0 [0282.730] GetLastError () returned 0x0 [0282.730] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.731] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.731] WriteFile (in: hFile=0x250, lpBuffer=0x23e3bf4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3bf4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.732] SetEndOfFile (hFile=0x250) returned 1 [0282.735] CloseHandle (hObject=0x250) returned 1 [0282.736] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.736] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.736] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.737] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.737] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.737] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.737] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.738] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.738] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.738] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.738] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.738] CryptDestroyKey (hKey=0x55e650) returned 1 [0282.738] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0282.739] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c71333a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0282.739] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c71333a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.739] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c71333a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c71333a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c71333a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.739] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c71333a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c71333a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c71333a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.739] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0282.739] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a66c47, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a66c47, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a66c47, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0282.739] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0282.739] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a40a93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0282.739] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.739] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.739] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.739] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.740] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0282.740] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.740] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.740] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0282.740] CryptDestroyHash (hHash=0x55e790) returned 1 [0282.740] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.740] GetLastError () returned 0x0 [0282.740] GetLastError () returned 0x0 [0282.740] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.741] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.742] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3c04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3c04*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.743] SetEndOfFile (hFile=0x24c) returned 1 [0282.743] CloseHandle (hObject=0x24c) returned 1 [0282.743] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.744] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.744] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.744] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.744] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.744] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.744] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.744] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.744] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.745] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.745] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.745] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.745] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.745] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.746] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.746] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.746] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.746] CryptDestroyKey (hKey=0x55e290) returned 1 [0282.746] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0282.746] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c739656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0282.746] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c739656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.746] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c739656, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c739656, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c739656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.746] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c739656, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c739656, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c739656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.746] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0282.746] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6a0ce9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c6a0ce9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c6a0ce9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.747] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a1a852, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0282.747] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.747] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.747] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.747] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.747] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570638) returned 1 [0282.748] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.748] CryptHashData (hHash=0x55e310, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.748] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0282.748] CryptDestroyHash (hHash=0x55e310) returned 1 [0282.748] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.748] GetLastError () returned 0x0 [0282.748] GetLastError () returned 0x0 [0282.748] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.748] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.752] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3c44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3c44*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.753] SetEndOfFile (hFile=0x24c) returned 1 [0282.753] CloseHandle (hObject=0x24c) returned 1 [0282.753] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.753] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.754] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.754] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.754] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.754] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.755] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.755] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.755] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.755] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.755] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.756] CryptDestroyKey (hKey=0x55e210) returned 1 [0282.756] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0282.756] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c739656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0282.756] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c739656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.756] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c739656, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c739656, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c739656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.756] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c739656, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c739656, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c739656, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.756] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0282.756] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a1a852, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0282.756] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.756] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.756] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.757] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.757] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.757] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0282.757] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570638) returned 1 [0282.757] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.757] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.757] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0282.757] CryptDestroyHash (hHash=0x55e610) returned 1 [0282.757] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.757] GetLastError () returned 0x0 [0282.757] GetLastError () returned 0x0 [0282.758] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.758] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.759] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3c54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3c54*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.760] SetEndOfFile (hFile=0x24c) returned 1 [0282.760] CloseHandle (hObject=0x24c) returned 1 [0282.760] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.761] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.761] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0282.761] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.761] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.762] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.762] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.762] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.762] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.763] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.763] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.763] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.763] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.763] CryptDestroyKey (hKey=0x55e310) returned 1 [0282.763] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0282.763] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c75f85d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0282.763] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c75f85d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.763] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c75f85d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c75f85d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c75f85d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.763] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c75f85d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c75f85d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c75f85d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.763] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0282.764] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89c56a54, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89c56a54, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89c56a54, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0282.764] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.764] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.764] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.764] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.764] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.764] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.764] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0282.765] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.765] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.765] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0282.765] CryptDestroyHash (hHash=0x55e610) returned 1 [0282.765] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.765] GetLastError () returned 0x0 [0282.765] GetLastError () returned 0x0 [0282.765] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.765] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.768] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3c94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3c94*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.769] SetEndOfFile (hFile=0x24c) returned 1 [0282.769] CloseHandle (hObject=0x24c) returned 1 [0282.769] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.770] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.770] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.770] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.770] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.770] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.770] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.770] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.771] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.771] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.771] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.771] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.771] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.772] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.772] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.772] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.773] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0282.773] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89c56a54, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89c56a54, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c75f85d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0282.773] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89c56a54, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89c56a54, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c75f85d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.773] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89c56a54, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a40abf0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a40abf0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0282.773] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.773] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.773] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.773] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.773] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.773] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.773] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570e30) returned 1 [0282.774] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.774] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.774] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0282.774] CryptDestroyHash (hHash=0x55e910) returned 1 [0282.774] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.774] GetLastError () returned 0x0 [0282.774] GetLastError () returned 0x0 [0282.774] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.775] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0282.775] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e3cb4, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0) returned 0 [0282.775] SetEndOfFile (hFile=0xffffffff) returned 0 [0282.775] CloseHandle (hObject=0xffffffff) returned 1 [0282.775] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.776] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.776] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.776] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.776] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.776] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.776] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.776] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.777] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.777] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.777] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.777] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.778] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.778] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.778] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.778] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.778] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.778] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.778] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.778] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.778] CryptDestroyKey (hKey=0x55e650) returned 1 [0282.778] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0282.778] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89c56a54, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a40abf0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a40abf0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0282.779] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89c56a54, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a40abf0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a40abf0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.779] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a40abf0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a40abf0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a40abf0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0282.779] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x89ca2f32, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89ca2f32, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89ca2f32, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0282.779] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x89ca2f32, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89ca2f32, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89ca2f32, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0282.779] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x89ca2f32, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89ca2f32, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89ca2f32, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0282.779] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0282.779] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c75f85d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c75f85d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c75f85d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.779] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c75f85d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c75f85d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c75f85d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.779] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0282.779] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a1a852, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0282.779] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.779] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.779] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.779] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.779] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0282.780] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0282.780] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.780] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.780] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0282.780] CryptDestroyHash (hHash=0x55e790) returned 1 [0282.780] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.780] GetLastError () returned 0x0 [0282.780] GetLastError () returned 0x0 [0282.781] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.781] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.782] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3d04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3d04*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.783] SetEndOfFile (hFile=0x24c) returned 1 [0282.783] CloseHandle (hObject=0x24c) returned 1 [0282.783] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.784] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.784] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.784] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.784] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.784] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.784] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0282.785] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.785] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.785] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.785] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.785] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.785] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.785] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.786] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.786] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.786] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.786] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.786] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.786] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.786] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.786] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.786] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.786] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.786] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.786] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.786] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.787] CryptDestroyKey (hKey=0x55e290) returned 1 [0282.787] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0282.787] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c785a9c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0282.787] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c785a9c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.787] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c785a9c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c785a9c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c785a9c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.787] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c785a9c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c785a9c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c785a9c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.787] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0282.787] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a47d044, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a47d044, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0282.792] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.792] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.792] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.792] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0282.792] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570638) returned 1 [0282.793] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.793] CryptHashData (hHash=0x55e310, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.793] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0282.793] CryptDestroyHash (hHash=0x55e310) returned 1 [0282.793] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.793] GetLastError () returned 0x0 [0282.793] GetLastError () returned 0x0 [0282.793] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.794] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.796] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3d24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3d24*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.797] SetEndOfFile (hFile=0x24c) returned 1 [0282.797] CloseHandle (hObject=0x24c) returned 1 [0282.797] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.798] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.798] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.798] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0282.799] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.799] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.799] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.799] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.799] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.800] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.800] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.800] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.800] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.800] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.800] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.801] CryptDestroyKey (hKey=0x55e210) returned 1 [0282.801] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0282.801] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a47d044, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c7abe65, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0282.801] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a47d044, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c7abe65, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.801] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c7abe65, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c7abe65, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c7abe65, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.801] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a40a93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0282.801] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a430ae9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a430ae9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a430ae9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0282.801] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92849c84, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92849c84, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92849c84, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0282.801] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92849c84, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92849c84, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92849c84, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0282.801] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92849c84, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92849c84, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92849c84, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0282.801] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0282.801] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a40a93, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0282.801] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.802] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.802] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.802] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0282.802] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571490) returned 1 [0282.803] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.803] CryptHashData (hHash=0x55e2d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.803] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0282.803] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0282.803] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.803] GetLastError () returned 0x0 [0282.803] GetLastError () returned 0x0 [0282.803] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.804] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.805] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3d64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3d64*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.806] SetEndOfFile (hFile=0x24c) returned 1 [0282.806] CloseHandle (hObject=0x24c) returned 1 [0282.807] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.807] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.807] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.808] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.808] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.808] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.808] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.808] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.808] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.809] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.809] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.809] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.809] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.809] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.809] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.809] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.809] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.809] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.809] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.809] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.810] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.810] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.810] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.810] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.810] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0282.810] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c7d1f14, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0282.810] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a40a93, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a40a93, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c7d1f14, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.810] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c7d1f14, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c7d1f14, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c7d1f14, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.810] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c7d1f14, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c7d1f14, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c7d1f14, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.810] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0282.811] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a1a852, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0282.811] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.811] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.811] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.811] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0282.811] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0282.812] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.812] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.812] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0282.812] CryptDestroyHash (hHash=0x55e210) returned 1 [0282.812] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.812] GetLastError () returned 0x0 [0282.812] GetLastError () returned 0x0 [0282.812] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.812] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.813] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3d74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3d74*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.815] SetEndOfFile (hFile=0x24c) returned 1 [0282.815] CloseHandle (hObject=0x24c) returned 1 [0282.815] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.816] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.816] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.816] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.816] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.816] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.816] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0282.817] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.817] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.817] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.817] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.817] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.817] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.817] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.817] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.817] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.817] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.818] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.818] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.818] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.819] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.819] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0282.819] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c7d1f14, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0282.819] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c7d1f14, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.819] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c7d1f14, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c7d1f14, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c7d1f14, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.819] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c7d1f14, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c7d1f14, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c7d1f14, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.819] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0282.819] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x89a1a852, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x89a1a852, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x89a1a852, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0282.819] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0282.820] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557f750e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy", cAlternateFileName="MICROS~1.CLO")) returned 1 [0282.820] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.820] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.820] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.820] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0282.820] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570e30) returned 1 [0282.821] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0282.821] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.821] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0282.821] CryptDestroyHash (hHash=0x55e910) returned 1 [0282.821] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0282.821] GetLastError () returned 0x0 [0282.821] GetLastError () returned 0x0 [0282.821] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.822] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0282.823] WriteFile (in: hFile=0x248, lpBuffer=0x23e3db4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3db4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.824] SetEndOfFile (hFile=0x248) returned 1 [0282.824] CloseHandle (hObject=0x248) returned 1 [0282.824] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.825] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.825] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.825] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.825] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.825] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.825] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0282.826] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.826] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.826] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.826] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.826] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.826] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.826] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.826] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.826] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.827] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.827] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.827] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.827] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.828] CryptDestroyKey (hKey=0x55e650) returned 1 [0282.828] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0282.828] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557f750e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c7f8220, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0282.828] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557f750e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c7f8220, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.828] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0282.828] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.828] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.828] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.828] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0282.829] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0282.829] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.829] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.829] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0282.829] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.829] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.829] GetLastError () returned 0x0 [0282.829] GetLastError () returned 0x0 [0282.830] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.830] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.835] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3dc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3dc4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.837] SetEndOfFile (hFile=0x24c) returned 1 [0282.837] CloseHandle (hObject=0x24c) returned 1 [0282.837] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.838] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.838] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.838] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.839] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.839] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.839] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.839] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.839] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.839] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.839] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.840] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.840] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.840] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.840] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.840] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.840] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.840] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.840] CryptDestroyKey (hKey=0x55e310) returned 1 [0282.840] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0282.840] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c7f8220, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0282.841] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c7f8220, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.841] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c7f8220, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c7f8220, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c81fe0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.841] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0282.841] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.841] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.841] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.841] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0282.841] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571408) returned 1 [0282.842] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.842] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.842] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0282.842] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.842] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.842] GetLastError () returned 0x0 [0282.842] GetLastError () returned 0x0 [0282.842] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.843] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.844] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e04*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.846] SetEndOfFile (hFile=0x250) returned 1 [0282.846] CloseHandle (hObject=0x250) returned 1 [0282.846] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.847] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.847] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.847] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.847] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.847] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.847] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0282.848] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.848] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.848] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.848] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.848] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.848] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.848] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.849] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.849] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.849] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.849] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.849] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.849] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.849] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0282.850] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c81fe0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0282.850] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c81fe0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.850] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c81fe0d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c81fe0d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c81fe0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.850] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c81fe0d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c81fe0d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c81fe0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.850] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0282.850] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0282.850] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.850] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.851] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.851] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0282.851] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0282.851] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.851] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.851] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0282.851] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.852] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.852] GetLastError () returned 0x0 [0282.852] GetLastError () returned 0x0 [0282.852] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.852] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.853] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e14*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.854] SetEndOfFile (hFile=0x250) returned 1 [0282.854] CloseHandle (hObject=0x250) returned 1 [0282.854] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.855] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.855] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.856] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.856] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.856] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.856] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0282.856] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.856] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.856] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.856] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.856] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.857] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.857] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.857] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.857] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.857] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.857] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.857] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.857] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.857] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.857] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.857] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.857] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.857] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.857] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.858] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.858] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.858] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0282.858] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c8446c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0282.858] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c8446c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.858] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c8446c4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c8446c4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c8446c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.858] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c8446c4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c8446c4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c8446c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.858] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0282.859] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0282.859] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.859] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.859] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.859] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0282.859] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0282.860] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.860] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.860] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0282.860] CryptDestroyHash (hHash=0x55e750) returned 1 [0282.860] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.860] GetLastError () returned 0x0 [0282.860] GetLastError () returned 0x0 [0282.861] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.861] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.862] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e54*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.863] SetEndOfFile (hFile=0x250) returned 1 [0282.863] CloseHandle (hObject=0x250) returned 1 [0282.864] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.865] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.865] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.865] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.865] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.865] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.865] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.866] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.866] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.866] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.866] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.866] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.867] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.867] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.867] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.867] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.867] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.867] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.867] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.867] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.868] CryptDestroyKey (hKey=0x55e190) returned 1 [0282.868] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0282.868] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c8446c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0282.868] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c8446c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.868] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c8446c4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c8446c4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c8446c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.868] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c8446c4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c8446c4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c8446c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.868] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0282.868] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0282.869] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.869] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.869] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.869] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0282.869] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570a78) returned 1 [0282.870] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.870] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.870] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0282.870] CryptDestroyHash (hHash=0x55e190) returned 1 [0282.870] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.870] GetLastError () returned 0x0 [0282.870] GetLastError () returned 0x0 [0282.870] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.871] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.873] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e64*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.874] SetEndOfFile (hFile=0x250) returned 1 [0282.875] CloseHandle (hObject=0x250) returned 1 [0282.875] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.876] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.876] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.876] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.876] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0282.876] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.876] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.876] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.876] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.877] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.877] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.877] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.877] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.877] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.877] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.878] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.878] CryptDestroyKey (hKey=0x55e210) returned 1 [0282.878] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0282.878] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c86aabd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0282.878] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c86aabd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.878] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c86aabd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c86aabd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c86aabd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.878] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c86aabd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c86aabd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c86aabd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.878] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0282.878] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558b61ad, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558b61ad, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558b61ad, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0282.878] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0282.879] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0282.879] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.879] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.879] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.879] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.879] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.879] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0282.879] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0282.880] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.880] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.880] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0282.880] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.880] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.880] GetLastError () returned 0x0 [0282.880] GetLastError () returned 0x0 [0282.880] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.881] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.882] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ea4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ea4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.883] SetEndOfFile (hFile=0x24c) returned 1 [0282.883] CloseHandle (hObject=0x24c) returned 1 [0282.883] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.884] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.884] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.884] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.884] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0282.885] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.885] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.885] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.885] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.885] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.885] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.886] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.886] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.886] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.886] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.886] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0282.886] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c86aabd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0282.887] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c86aabd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.887] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c86aabd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c86aabd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c891d50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.887] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c86aabd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c86aabd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c891d50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.887] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0282.887] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c7f8220, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c7f8220, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c7f8220, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.887] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0282.887] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.887] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.887] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.887] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0282.887] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0282.888] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.888] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.888] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0282.888] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.888] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.888] GetLastError () returned 0x0 [0282.888] GetLastError () returned 0x0 [0282.888] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.889] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.889] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3eb4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3eb4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.890] SetEndOfFile (hFile=0x24c) returned 1 [0282.891] CloseHandle (hObject=0x24c) returned 1 [0282.891] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.891] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.892] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.892] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.892] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.893] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.893] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.893] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.893] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.893] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.893] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.894] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.894] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.894] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0282.894] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c891d50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0282.894] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c891d50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.894] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c891d50, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c891d50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c891d50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.894] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c891d50, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c891d50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c891d50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.894] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0282.894] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557f750e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x557f750e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x557f750e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0282.894] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.894] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.895] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.895] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0282.895] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0282.895] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.895] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.895] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0282.895] CryptDestroyHash (hHash=0x55e910) returned 1 [0282.895] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.895] GetLastError () returned 0x0 [0282.895] GetLastError () returned 0x0 [0282.896] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.896] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.897] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ef4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ef4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.898] SetEndOfFile (hFile=0x24c) returned 1 [0282.898] CloseHandle (hObject=0x24c) returned 1 [0282.898] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.899] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.899] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.899] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.899] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.900] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0282.900] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.900] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.900] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.900] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.900] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.900] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.900] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.900] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.900] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.900] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.901] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.901] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.901] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.901] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.901] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.901] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.901] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.901] CryptDestroyKey (hKey=0x55e190) returned 1 [0282.901] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0282.901] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557f750e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x557f750e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c891d50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0282.902] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x557f750e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x557f750e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c891d50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.902] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c891d50, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c891d50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c8b6db0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.902] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c891d50, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c891d50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c8b6db0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.902] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0282.902] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0282.902] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.902] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.902] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.902] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.902] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.902] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0282.902] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0282.903] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.903] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.903] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0282.903] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.903] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.903] GetLastError () returned 0x0 [0282.903] GetLastError () returned 0x0 [0282.903] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.904] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.909] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3f04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3f04*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.910] SetEndOfFile (hFile=0x24c) returned 1 [0282.910] CloseHandle (hObject=0x24c) returned 1 [0282.910] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.911] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.911] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0282.911] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.912] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.912] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.912] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.912] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.912] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.913] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.913] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.913] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.913] CryptDestroyKey (hKey=0x55e290) returned 1 [0282.913] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0282.913] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c8b6db0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0282.913] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c8b6db0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.914] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a4c94e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a4c94e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0282.914] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.914] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.914] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.914] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.914] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.914] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0282.914] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570a78) returned 1 [0282.915] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.915] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.915] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0282.915] CryptDestroyHash (hHash=0x55e190) returned 1 [0282.915] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.915] GetLastError () returned 0x0 [0282.915] GetLastError () returned 0x0 [0282.915] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.915] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.916] WriteFile (in: hFile=0x250, lpBuffer=0x23e3f44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f44*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.917] SetEndOfFile (hFile=0x250) returned 1 [0282.917] CloseHandle (hObject=0x250) returned 1 [0282.917] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.918] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.918] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.918] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.918] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.919] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.919] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.919] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.919] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.919] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.919] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.920] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.920] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.920] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.920] CryptDestroyKey (hKey=0x55e210) returned 1 [0282.920] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0282.920] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a4c94e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c8dcf72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0282.921] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a4c94e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c8dcf72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.921] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a4c94e2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a4c94e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a4c94e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0282.921] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0282.921] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x559e7456, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x559e7456, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x559e7456, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0282.921] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8dcf72, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c8dcf72, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c8dcf72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.921] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8dcf72, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c8dcf72, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c8dcf72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.921] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0282.921] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8b6db0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c8b6db0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c8b6db0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.921] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8b6db0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c8b6db0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c8b6db0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.921] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0282.921] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5581d776, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0282.921] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.921] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.921] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.921] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.921] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.922] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.922] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0282.922] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.922] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.922] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0282.922] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.922] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.922] GetLastError () returned 0x0 [0282.922] GetLastError () returned 0x0 [0282.922] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.923] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.924] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3f64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3f64*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.925] SetEndOfFile (hFile=0x24c) returned 1 [0282.925] CloseHandle (hObject=0x24c) returned 1 [0282.925] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.926] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.926] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.926] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.926] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.927] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.927] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.927] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.927] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.927] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.927] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.927] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.928] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.928] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.928] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.928] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.928] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.928] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.929] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.929] CryptDestroyKey (hKey=0x55e750) returned 1 [0282.929] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0282.929] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c8dcf72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0282.929] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c8dcf72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.929] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8dcf72, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c8dcf72, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c8dcf72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.929] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8dcf72, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c8dcf72, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c8dcf72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.929] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0282.930] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a561d47, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a561d47, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0282.930] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.930] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.930] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.930] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.930] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0282.931] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.931] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.931] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0282.931] CryptDestroyHash (hHash=0x55e750) returned 1 [0282.931] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.931] GetLastError () returned 0x0 [0282.931] GetLastError () returned 0x0 [0282.931] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.931] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.932] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3fa4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3fa4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.933] SetEndOfFile (hFile=0x24c) returned 1 [0282.934] CloseHandle (hObject=0x24c) returned 1 [0282.934] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.934] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.934] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.935] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.935] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.935] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.935] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0282.935] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.935] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.935] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.935] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.935] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.936] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.936] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.936] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.936] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.936] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.936] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.936] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.936] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.936] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.936] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0282.936] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.937] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.937] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.937] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.937] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.937] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.937] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0282.937] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a561d47, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c903304, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0282.937] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3a561d47, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c903304, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.937] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c903304, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c903304, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c903304, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.937] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0282.938] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a561d47, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a561d47, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a561d47, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0282.938] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92c4fc93, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92c4fc93, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92c4fc93, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0282.938] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92c4fc93, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92c4fc93, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92c4fc93, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0282.938] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x92c4fc93, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x92c4fc93, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x92c4fc93, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0282.938] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0282.938] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x558439bd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0282.938] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.938] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.938] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.938] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0282.938] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0282.939] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.939] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.939] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0282.939] CryptDestroyHash (hHash=0x55e790) returned 1 [0282.939] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.939] GetLastError () returned 0x0 [0282.939] GetLastError () returned 0x0 [0282.939] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.940] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.944] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3fb4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3fb4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.945] SetEndOfFile (hFile=0x24c) returned 1 [0282.945] CloseHandle (hObject=0x24c) returned 1 [0282.945] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.946] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.946] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.947] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.947] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.947] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.947] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.947] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.947] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.948] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.948] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.948] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.948] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.948] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.948] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.948] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.948] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.948] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.949] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.949] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.949] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0282.949] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c903304, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0282.949] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x558439bd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x558439bd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c903304, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.949] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c903304, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c903304, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c929474, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.949] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c903304, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c903304, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c929474, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.949] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0282.950] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5581d776, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0282.950] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.950] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.950] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.950] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.950] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.950] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.950] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0282.951] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.951] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.951] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0282.951] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.951] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.951] GetLastError () returned 0x0 [0282.951] GetLastError () returned 0x0 [0282.951] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.952] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.953] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ff4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ff4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.954] SetEndOfFile (hFile=0x24c) returned 1 [0282.954] CloseHandle (hObject=0x24c) returned 1 [0282.954] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.955] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.955] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.956] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.956] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.956] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.956] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.956] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.956] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.956] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.956] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.956] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.956] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.956] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.957] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.957] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0282.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.957] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.957] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.957] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.957] CryptDestroyKey (hKey=0x55e290) returned 1 [0282.957] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0282.957] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c929474, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0282.958] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4c929474, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.958] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c929474, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c929474, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c929474, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.958] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c929474, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c929474, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c929474, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.958] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0282.958] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5581d776, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5581d776, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5581d776, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0282.958] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0282.958] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9bfe3d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy", cAlternateFileName="MICROS~1.CON")) returned 1 [0282.958] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.958] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.958] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.959] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.959] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.959] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571050) returned 1 [0282.960] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0282.960] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.960] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0282.960] CryptDestroyHash (hHash=0x55e750) returned 1 [0282.960] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f190*=0x18) returned 1 [0282.960] GetLastError () returned 0x0 [0282.960] GetLastError () returned 0x0 [0282.960] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.961] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0282.962] WriteFile (in: hFile=0x248, lpBuffer=0x23e5d0c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e5d0c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.963] SetEndOfFile (hFile=0x248) returned 1 [0282.963] CloseHandle (hObject=0x248) returned 1 [0282.964] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.964] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0282.964] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.965] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.965] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.965] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.965] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.965] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.965] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.965] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.965] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.965] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.965] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.966] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.966] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.966] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.966] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.966] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.966] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.966] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0282.966] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0282.966] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c94f777, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0282.967] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4c94f777, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.967] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0282.967] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.967] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.967] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.967] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0282.967] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0282.968] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0282.968] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.968] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0282.968] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.968] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0282.968] GetLastError () returned 0x0 [0282.968] GetLastError () returned 0x0 [0282.968] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.969] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.970] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0282.971] WriteFile (in: hFile=0x24c, lpBuffer=0x23e4014*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e4014*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.973] SetEndOfFile (hFile=0x24c) returned 1 [0282.973] CloseHandle (hObject=0x24c) returned 1 [0282.973] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.974] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.974] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.974] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.974] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0282.974] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.974] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.975] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.975] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.977] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.977] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.977] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.978] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.978] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.978] CryptDestroyKey (hKey=0x55e610) returned 1 [0282.978] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0282.978] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4c94f777, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0282.979] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4c94f777, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.979] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9ef3472c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9ef3472c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="BackgroundTransferApi", cAlternateFileName="BACKGR~1")) returned 1 [0282.979] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.979] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.979] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.979] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0282.979] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0282.980] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.980] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.980] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0282.980] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.980] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.980] GetLastError () returned 0x0 [0282.980] GetLastError () returned 0x0 [0282.980] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.981] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\backgroundtransferapi\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.983] WriteFile (in: hFile=0x250, lpBuffer=0x23e4044*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e4044*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.985] SetEndOfFile (hFile=0x250) returned 1 [0282.985] CloseHandle (hObject=0x250) returned 1 [0282.985] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.986] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.986] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0282.987] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.987] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.987] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.987] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.988] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.988] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0282.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.988] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.988] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.989] CryptDestroyKey (hKey=0x55e910) returned 1 [0282.989] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0282.989] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\BackgroundTransferApi\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\backgroundtransferapi\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9ef3472c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4c975a47, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0282.989] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9ef3472c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4c975a47, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.989] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16097cd3, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x16097cd3, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x16097cd3, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="09d16dcf-26b1-4e4c-b45c-f1d5b865d3a2.up_meta_body", cAlternateFileName="09D16D~2.UP_")) returned 1 [0282.989] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x479f5585, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x479f5585, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x479f5585, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="35ee283b-d7b2-4171-b8a7-0ffb7cca7d28.up_meta_body", cAlternateFileName="35EE28~2.UP_")) returned 1 [0282.989] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c975a47, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c975a47, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c975a47, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.989] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c975a47, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c975a47, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c975a47, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0282.989] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0282.989] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c94f777, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c94f777, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c94f777, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0282.989] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a5ae136, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a5ae136, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0282.990] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.990] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.990] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.990] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0282.990] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571380) returned 1 [0282.991] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0282.991] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0282.991] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e2d0) returned 1 [0282.991] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0282.991] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0282.991] GetLastError () returned 0x0 [0282.991] GetLastError () returned 0x0 [0282.991] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0282.992] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0282.993] WriteFile (in: hFile=0x250, lpBuffer=0x23e4044*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e4044*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0282.994] SetEndOfFile (hFile=0x250) returned 1 [0282.995] CloseHandle (hObject=0x250) returned 1 [0282.995] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0282.996] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.996] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0282.996] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0282.996] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0282.996] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.997] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0282.997] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0282.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.997] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.997] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0282.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0282.998] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0282.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0282.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0282.998] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0282.998] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0282.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0282.998] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0282.998] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0282.999] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a5ae136, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c99bbcd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0282.999] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a5ae136, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c99bbcd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0282.999] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a5880e2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a5880e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a5880e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0282.999] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9fb3c83b, ftCreationTime.dwHighDateTime=0x1d8596d, ftLastAccessTime.dwLowDateTime=0x9e0ebd59, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9e1f26b8, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="EJNCOSRA", cAlternateFileName="")) returned 1 [0282.999] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0282.999] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0282.999] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0282.999] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0282.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0282.999] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x5712f8) returned 1 [0283.000] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0283.000] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.000] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e610) returned 1 [0283.000] CryptDestroyHash (hHash=0x55e750) returned 1 [0283.000] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0283.000] GetLastError () returned 0x0 [0283.000] GetLastError () returned 0x0 [0283.000] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.001] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\EJNCOSRA\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\ejncosra\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0283.002] WriteFile (in: hFile=0x254, lpBuffer=0x23e4034*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e4034*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.003] SetEndOfFile (hFile=0x254) returned 1 [0283.003] CloseHandle (hObject=0x254) returned 1 [0283.003] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.005] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.005] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0283.005] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.005] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.006] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.006] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.006] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.006] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.006] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.006] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.006] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.006] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.006] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.007] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.007] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.007] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.007] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.007] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0283.007] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\EJNCOSRA\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\ejncosra\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9fb3c83b, ftCreationTime.dwHighDateTime=0x1d8596d, ftLastAccessTime.dwLowDateTime=0x9e1f26b8, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4c99bbcd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0283.007] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9fb3c83b, ftCreationTime.dwHighDateTime=0x1d8596d, ftLastAccessTime.dwLowDateTime=0x9e1f26b8, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4c99bbcd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.008] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c99bbcd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c99bbcd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c99bbcd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.008] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c99bbcd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c99bbcd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c99bbcd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.008] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0283.008] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c99bbcd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c99bbcd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c99bbcd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.008] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c99bbcd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c99bbcd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c99bbcd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.008] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.008] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a5ae136, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a5ae136, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0283.008] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.008] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.008] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.008] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.008] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.008] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.009] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0283.009] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.009] CryptHashData (hHash=0x55e310, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.009] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0283.009] CryptDestroyHash (hHash=0x55e310) returned 1 [0283.009] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.009] GetLastError () returned 0x0 [0283.009] GetLastError () returned 0x0 [0283.009] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.010] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.014] WriteFile (in: hFile=0x250, lpBuffer=0x23e4044*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e4044*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.015] SetEndOfFile (hFile=0x250) returned 1 [0283.015] CloseHandle (hObject=0x250) returned 1 [0283.015] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.016] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.016] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.017] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.017] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0283.017] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.017] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.017] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.017] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.018] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.018] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.018] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.018] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.018] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.018] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.018] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.018] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.018] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.018] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.018] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.018] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.019] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.019] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.019] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.019] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0283.019] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0283.019] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a5ae136, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c9c1f66, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.019] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a5ae136, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c9c1f66, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.019] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a5ae136, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a5ae136, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a5ae136, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0283.019] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c9c1f66, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c9c1f66, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c9c1f66, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.020] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c9c1f66, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c9c1f66, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c9c1f66, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.020] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.020] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0283.020] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.020] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.020] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.020] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.020] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.020] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0283.020] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0283.021] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.021] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.021] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0283.021] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.021] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.021] GetLastError () returned 0x0 [0283.021] GetLastError () returned 0x0 [0283.021] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.022] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.028] WriteFile (in: hFile=0x250, lpBuffer=0x23e4044*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e4044*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.029] SetEndOfFile (hFile=0x250) returned 1 [0283.029] CloseHandle (hObject=0x250) returned 1 [0283.029] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.030] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.030] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.030] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.030] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.030] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0283.031] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.031] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.031] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.032] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.032] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.032] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.032] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.032] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.033] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.033] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0283.033] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4c9e8146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.033] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4c9e8146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.033] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x75bd797b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a5ae136, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a5ae136, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="BackgroundTransferApi", cAlternateFileName="BACKGR~1")) returned 1 [0283.033] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.033] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.033] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.033] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0283.034] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570b00) returned 1 [0283.034] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0283.034] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.034] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0283.034] CryptDestroyHash (hHash=0x55e610) returned 1 [0283.034] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ea58*=0x18) returned 1 [0283.034] GetLastError () returned 0x0 [0283.034] GetLastError () returned 0x0 [0283.035] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.035] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0283.039] WriteFile (in: hFile=0x254, lpBuffer=0x23e4118*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e4118*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.040] SetEndOfFile (hFile=0x254) returned 1 [0283.040] CloseHandle (hObject=0x254) returned 1 [0283.040] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.041] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.041] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.042] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0283.042] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.042] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.043] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.043] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.043] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.043] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.043] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.043] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.043] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.043] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.043] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.043] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.043] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.044] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.044] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.044] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.044] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.044] CryptDestroyKey (hKey=0x55e210) returned 1 [0283.044] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0283.044] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x75bd797b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a5ae136, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c9e8146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0283.045] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x75bd797b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a5ae136, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c9e8146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.045] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a5ae136, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a5ae136, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a5ae136, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0283.045] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c9e8146, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c9e8146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ca0fc51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.045] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c9e8146, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c9e8146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ca0fc51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.045] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0283.045] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x75bfdd8d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="BackgroundTransferApiGroup", cAlternateFileName="BACKGR~2")) returned 1 [0283.045] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.045] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.045] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.045] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.045] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.045] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0283.045] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571050) returned 1 [0283.046] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0283.046] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.046] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e2d0) returned 1 [0283.046] CryptDestroyHash (hHash=0x55e910) returned 1 [0283.046] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ea58*=0x18) returned 1 [0283.046] GetLastError () returned 0x0 [0283.046] GetLastError () returned 0x0 [0283.047] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.047] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0283.048] WriteFile (in: hFile=0x254, lpBuffer=0x23e4210*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e4210*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.049] SetEndOfFile (hFile=0x254) returned 1 [0283.050] CloseHandle (hObject=0x254) returned 1 [0283.050] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.051] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.051] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.051] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.051] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.051] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.051] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0283.052] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.052] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.052] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.052] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.052] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.052] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.052] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.053] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.053] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.053] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.053] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.053] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.053] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.053] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.057] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.058] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.058] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0283.058] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0283.058] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ca0fc51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0283.059] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x75bfdd8d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x75bfdd8d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ca0fc51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.059] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ca0fc51, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ca0fc51, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ca0fc51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.059] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ca0fc51, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ca0fc51, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ca0fc51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.059] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0283.059] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c9e8146, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c9e8146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c9e8146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.059] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4c9e8146, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c9e8146, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c9e8146, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.059] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.059] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7396bab9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0283.059] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.060] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.060] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.060] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.060] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0283.061] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.061] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.061] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0283.061] CryptDestroyHash (hHash=0x55e750) returned 1 [0283.061] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.061] GetLastError () returned 0x0 [0283.061] GetLastError () returned 0x0 [0283.061] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.062] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.063] WriteFile (in: hFile=0x250, lpBuffer=0x23e4230*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e4230*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.064] SetEndOfFile (hFile=0x250) returned 1 [0283.064] CloseHandle (hObject=0x250) returned 1 [0283.064] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.066] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.066] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.066] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.066] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.066] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.066] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.066] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.067] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.067] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.067] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.067] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.067] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.067] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.067] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.068] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.068] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.068] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.068] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.068] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.068] CryptDestroyKey (hKey=0x55e210) returned 1 [0283.068] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0283.068] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ca345c2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.069] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ca345c2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.069] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ca345c2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ca345c2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ca345c2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.069] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7396bab9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0283.069] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.069] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.069] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.069] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0283.069] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571270) returned 1 [0283.070] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0283.070] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.070] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e610) returned 1 [0283.070] CryptDestroyHash (hHash=0x55e790) returned 1 [0283.070] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ea58*=0x18) returned 1 [0283.070] GetLastError () returned 0x0 [0283.070] GetLastError () returned 0x0 [0283.070] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.071] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\windows\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0283.073] WriteFile (in: hFile=0x254, lpBuffer=0x23e4034*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e4034*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.074] SetEndOfFile (hFile=0x254) returned 1 [0283.074] CloseHandle (hObject=0x254) returned 1 [0283.074] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.076] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.076] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.076] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.076] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0283.076] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.077] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.077] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.077] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.077] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.077] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.077] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.078] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.078] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.078] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.078] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.078] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.078] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.078] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0283.078] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\windows\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ca5a912, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0283.079] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ca5a912, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.079] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ca5a912, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ca5a912, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ca5a912, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.079] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ca5a912, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ca5a912, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ca5a912, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.079] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0283.079] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7396bab9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7396bab9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7396bab9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0283.079] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.079] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7f62ab, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0283.079] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.079] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.079] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.079] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.080] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0283.080] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570858) returned 1 [0283.080] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.080] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.080] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0283.080] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.081] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.081] GetLastError () returned 0x0 [0283.081] GetLastError () returned 0x0 [0283.081] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.081] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.082] WriteFile (in: hFile=0x250, lpBuffer=0x23e4044*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e4044*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.083] SetEndOfFile (hFile=0x250) returned 1 [0283.083] CloseHandle (hObject=0x250) returned 1 [0283.084] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.085] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.085] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.085] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.085] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.085] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.085] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0283.085] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.085] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.085] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.085] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.086] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.086] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.086] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.086] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.087] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.087] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.087] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.087] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0283.087] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ca5a912, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0283.088] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ca5a912, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.088] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca5a912, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ca5a912, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ca5a912, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.088] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca5a912, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ca5a912, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ca5a912, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.088] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0283.088] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7f62ab, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7f62ab, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7f62ab, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0283.088] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0283.088] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7d0053, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79727466, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0283.088] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.088] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.088] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.088] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.088] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0283.089] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.089] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.089] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0283.089] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0283.089] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.089] GetLastError () returned 0x0 [0283.089] GetLastError () returned 0x0 [0283.089] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.090] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.091] WriteFile (in: hFile=0x24c, lpBuffer=0x23e4044*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e4044*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.092] SetEndOfFile (hFile=0x24c) returned 1 [0283.092] CloseHandle (hObject=0x24c) returned 1 [0283.092] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.093] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.093] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.093] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.094] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.094] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.094] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.094] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.094] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.094] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.094] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.094] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.094] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.095] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.095] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.095] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.095] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.095] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.095] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.095] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.095] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.095] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.095] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.095] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.095] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.096] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.096] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.096] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0283.096] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0283.096] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ca80a1b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.096] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ca80a1b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.096] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca80a1b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ca80a1b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ca80a1b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.097] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca80a1b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ca80a1b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ca80a1b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.097] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.097] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c94f777, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4c94f777, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4c94f777, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.097] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0283.097] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.097] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.097] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.097] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.097] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.097] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0283.097] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0283.098] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.098] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.098] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0283.098] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.098] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.098] GetLastError () returned 0x0 [0283.098] GetLastError () returned 0x0 [0283.098] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.099] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.101] WriteFile (in: hFile=0x24c, lpBuffer=0x23e544c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e544c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.103] SetEndOfFile (hFile=0x24c) returned 1 [0283.103] CloseHandle (hObject=0x24c) returned 1 [0283.103] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.104] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.104] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0283.105] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.105] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.105] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.105] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.105] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.105] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.106] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.106] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.106] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.106] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.107] CryptDestroyKey (hKey=0x55e190) returned 1 [0283.107] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0283.107] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ca80a1b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0283.107] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ca80a1b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.107] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca80a1b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ca80a1b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4caa722e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.107] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ca80a1b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ca80a1b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4caa722e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.107] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0283.107] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x1205e7f4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1205e7f4, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0283.107] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.107] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.107] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.107] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.107] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.108] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0283.108] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0283.108] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.108] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.108] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0283.108] CryptDestroyHash (hHash=0x55e290) returned 1 [0283.108] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.108] GetLastError () returned 0x0 [0283.109] GetLastError () returned 0x0 [0283.109] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.109] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0283.110] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.110] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.112] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3754*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3754*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.114] SetEndOfFile (hFile=0x24c) returned 1 [0283.114] CloseHandle (hObject=0x24c) returned 1 [0283.114] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.115] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.115] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0283.115] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.116] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.116] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.116] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.116] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.117] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.117] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.117] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.117] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.117] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.117] CryptDestroyKey (hKey=0x55e910) returned 1 [0283.117] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0283.118] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x1205e7f4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4caa722e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.118] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x1205e7f4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4caa722e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.118] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72848ccf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9f1bcfcd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9f1bcfcd, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1 [0283.118] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.118] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.118] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.118] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.118] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.118] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.118] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0283.119] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.119] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.119] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0283.119] CryptDestroyHash (hHash=0x55e610) returned 1 [0283.119] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.119] GetLastError () returned 0x0 [0283.119] GetLastError () returned 0x0 [0283.119] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.120] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.125] WriteFile (in: hFile=0x250, lpBuffer=0x23e3764*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3764*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.126] SetEndOfFile (hFile=0x250) returned 1 [0283.126] CloseHandle (hObject=0x250) returned 1 [0283.126] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.127] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.127] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.127] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.127] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.127] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.127] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.127] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.128] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.128] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.128] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.128] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.129] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.129] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.129] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.129] CryptDestroyKey (hKey=0x55e910) returned 1 [0283.129] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0283.130] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72848ccf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9f1bcfcd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4caccf0e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72848ccf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9f1bcfcd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4caccf0e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9155d1de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9155d1de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9259b185, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xd5d0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="17babfd54fdf4809aa9630faf6e0bb5e2ed3436ae4e34b458c9754cc06c14aea", cAlternateFileName="17BABF~1")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9161bed5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9161bed5, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9259b185, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x9cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="24c2b0732aff4f44b3c61ce6b30608d9c4122c719d4bd400e1a9516f85cd10ed", cAlternateFileName="24C2B0~1")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9da31bbd, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x9da31bbd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9e394f8b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x86ef6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5a3c0019c63fce8b1e335b2bf9a2488d6cbcde2482f680e4d4cae384284dfdf1", cAlternateFileName="5A3C00~1")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f36cad, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f36cad, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7afe28de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x5b9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6b7dd9dad158021e2c664e8b60be0b1711e94c497879b603276f90f91602c813", cAlternateFileName="6B7DD9~1")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16d42383, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x16d42383, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x189de896, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x45abc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7eba64f56aad18c10e357973056c3caf6ef35fb7f7100d252c77f5fd6e020b0b", cAlternateFileName="7EBA64~1")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16e999f7, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x16e999f7, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x189de896, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5c2b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="a1326e26a9c75c2fad448d7456cf554d9d5972e95ca085fc3b1758b94f8b3c3a", cAlternateFileName="A1326E~1")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76eea7aa, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76eea7aa, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7af9631d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x405534, dwReserved1=0x0, cFileName="b71dabef83821ac1436c6e54eed36510be63ff7e106437b4f3d5fa2b5880d0ea", cAlternateFileName="B71DAB~1")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f36cad, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x76f36cad, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7af9631d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x1736, dwReserved0=0x405534, dwReserved1=0x0, cFileName="be98ffca3056276ead4f2650d3e81096031e3b87ef1da0c6573ae133cd6e9c90", cAlternateFileName="BE98FF~1")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b587918, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b587918, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1bd6d6ca, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x8af46, dwReserved0=0x405534, dwReserved1=0x0, cFileName="c20a563add1da520b325d5e8931c544186b28de2119ed5fc89f1574be77a3785", cAlternateFileName="C20A56~1")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ddacdb, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x16ddacdb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x189de896, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4293, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ce014256b9924bf1ec3c8dfb7fcbf7d586f9e2f90f6b8a92bd78b31eb8125a7c", cAlternateFileName="CE0142~1")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916682d6, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x916682d6, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9259b185, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x40a1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="d027c5cef9dc76de02d35ff5ba3b53e776c0c260af04c923ad7204ea18aeb0b8", cAlternateFileName="D027C5~1")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16c5d686, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x16c5d686, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x189de896, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="d6fd9626a9f1a7203e5570760d3b44b59cf06b72d33599f7dee7974ef60354b7", cAlternateFileName="D6FD96~1")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b561887, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b561887, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1bd6d6ca, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x8b755, dwReserved0=0x405534, dwReserved1=0x0, cFileName="d9b1cc42d6555e7d87dc3f3c82bbffb16ebccd3e1f7f0e4c61d277939b3b2bdd", cAlternateFileName="D9B1CC~1")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9da31bbd, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x9da31bbd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9e394f8b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x70fa2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="e15fc565de1c80d66442b842e697ef31627957ef7d2e44997799f242b375c789", cAlternateFileName="E15FC5~1")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4caccf0e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4caccf0e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4caccf0e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.130] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4caccf0e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4caccf0e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4caccf0e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.131] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0283.131] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x728bb373, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x728bb373, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ContentManagementSDK", cAlternateFileName="CONTEN~1")) returned 1 [0283.131] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.131] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.131] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.131] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0283.132] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0283.132] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.132] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.132] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e750) returned 1 [0283.133] CryptDestroyHash (hHash=0x55e610) returned 1 [0283.133] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.133] GetLastError () returned 0x0 [0283.133] GetLastError () returned 0x0 [0283.133] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.133] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0283.134] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.135] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.136] WriteFile (in: hFile=0x250, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.137] SetEndOfFile (hFile=0x250) returned 1 [0283.142] CloseHandle (hObject=0x250) returned 1 [0283.142] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.144] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.144] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.144] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0283.145] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.146] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.146] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.146] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.147] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.148] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.148] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.149] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.149] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.149] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.149] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.149] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.150] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.150] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.150] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.150] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.150] CryptDestroyKey (hKey=0x55e750) returned 1 [0283.150] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0283.150] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x728bb373, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4caf3170, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0283.151] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x728bb373, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4caf3170, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.151] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x773af2d3, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x773af2d3, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Creatives", cAlternateFileName="CREATI~1")) returned 1 [0283.151] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.151] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.151] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.151] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0283.151] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570b00) returned 1 [0283.152] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0283.152] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.152] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0283.152] CryptDestroyHash (hHash=0x55e750) returned 1 [0283.152] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ea58*=0x18) returned 1 [0283.152] GetLastError () returned 0x0 [0283.152] GetLastError () returned 0x0 [0283.152] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.153] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0283.154] WriteFile (in: hFile=0x254, lpBuffer=0x23e363c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e363c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.155] SetEndOfFile (hFile=0x254) returned 1 [0283.155] CloseHandle (hObject=0x254) returned 1 [0283.155] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.156] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.156] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.156] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.156] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.156] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.156] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0283.157] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.157] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.157] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.157] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.157] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.157] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.157] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.158] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.158] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.158] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.158] CryptDestroyKey (hKey=0x55e210) returned 1 [0283.158] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0283.158] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x773af2d3, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4cb194bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0283.158] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x773af2d3, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4cb194bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.159] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77126bb1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a620a50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a620a50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="202911", cAlternateFileName="")) returned 1 [0283.159] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.159] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.159] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.159] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.159] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.159] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.159] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571050) returned 1 [0283.160] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0283.160] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.160] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e290) returned 1 [0283.160] CryptDestroyHash (hHash=0x55e910) returned 1 [0283.160] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0283.160] GetLastError () returned 0x0 [0283.160] GetLastError () returned 0x0 [0283.160] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.161] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0283.161] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.161] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0283.164] WriteFile (in: hFile=0x258, lpBuffer=0x23e3614*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3614*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.165] SetEndOfFile (hFile=0x258) returned 1 [0283.165] CloseHandle (hObject=0x258) returned 1 [0283.166] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.166] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.167] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.167] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.167] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.167] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.167] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.167] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.167] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.167] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.168] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.168] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.168] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.168] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.168] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.168] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.168] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.168] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.168] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.169] CryptDestroyKey (hKey=0x55e290) returned 1 [0283.169] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0283.169] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202911\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202911\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77126bb1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a620a50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb3fd90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0283.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77126bb1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a620a50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb3fd90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a620a50, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a620a50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a620a50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EVENTB~1.CRY")) returned 1 [0283.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cb3fd90, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cb3fd90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb3fd90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a620a50, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a620a50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a620a50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 1 [0283.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a620a50, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a620a50, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a620a50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 0 [0283.169] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0283.169] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77231c7c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a66cd73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a66cd73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="202914", cAlternateFileName="")) returned 1 [0283.169] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.169] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.169] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.169] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.170] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0283.170] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5712f8) returned 1 [0283.170] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0283.170] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.170] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e7d0) returned 1 [0283.170] CryptDestroyHash (hHash=0x55e790) returned 1 [0283.170] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0283.170] GetLastError () returned 0x0 [0283.170] GetLastError () returned 0x0 [0283.171] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.171] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0283.172] WriteFile (in: hFile=0x258, lpBuffer=0x23e3704*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3704*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.173] SetEndOfFile (hFile=0x258) returned 1 [0283.174] CloseHandle (hObject=0x258) returned 1 [0283.174] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.174] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.174] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.175] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.175] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0283.175] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.175] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.175] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.175] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.175] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.176] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.176] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.176] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.176] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.176] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.176] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.176] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.176] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.176] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.176] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.176] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.176] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.176] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.176] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.177] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0283.177] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0283.177] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\202914\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\202914\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77231c7c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a66cd73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb3fd90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0283.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77231c7c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a66cd73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb3fd90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1bc0725, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xf1bc0725, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xf1c7f1c3, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0xc80, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1613478815", cAlternateFileName="161347~1")) returned 1 [0283.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a66cd73, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a66cd73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a66cd73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EVENTB~1.CRY")) returned 1 [0283.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cb3fd90, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cb3fd90, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb3fd90, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a66cd73, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a66cd73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a66cd73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 1 [0283.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a66cd73, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a66cd73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a66cd73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 0 [0283.177] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0283.177] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771bf51a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a69309e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a69309e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="209562", cAlternateFileName="")) returned 1 [0283.177] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.177] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.178] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.178] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.178] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.178] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0283.178] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5709f0) returned 1 [0283.180] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0283.180] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.180] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0283.180] CryptDestroyHash (hHash=0x55e310) returned 1 [0283.180] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0283.180] GetLastError () returned 0x0 [0283.180] GetLastError () returned 0x0 [0283.180] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.181] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0283.182] WriteFile (in: hFile=0x258, lpBuffer=0x23e533c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e533c*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.183] SetEndOfFile (hFile=0x258) returned 1 [0283.183] CloseHandle (hObject=0x258) returned 1 [0283.183] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.184] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.184] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.184] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.184] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.184] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.184] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0283.185] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.185] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.185] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.185] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.185] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.185] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.185] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.185] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.185] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.186] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.186] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.186] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.186] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.186] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.186] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.186] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.186] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.186] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0283.187] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771bf51a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a69309e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb657cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0283.187] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771bf51a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a69309e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb657cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.187] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1826b35f, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1826b35f, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x18624c83, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4640, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1613045947", cAlternateFileName="161304~1")) returned 1 [0283.187] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c36536e, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x9c3d7a51, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9c47044e, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x484c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1662368714", cAlternateFileName="166236~1")) returned 1 [0283.187] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a69309e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a69309e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a69309e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EVENTB~1.CRY")) returned 1 [0283.187] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cb657cb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cb657cb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb657cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.187] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a69309e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a69309e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a69309e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 1 [0283.187] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a69309e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a69309e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a69309e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 0 [0283.187] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0283.187] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771e56f1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a6b92d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a6b92d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="209776", cAlternateFileName="")) returned 1 [0283.187] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.187] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.187] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.187] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.187] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.188] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.188] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571490) returned 1 [0283.188] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0283.188] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.188] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e210) returned 1 [0283.188] CryptDestroyHash (hHash=0x55e790) returned 1 [0283.188] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0283.188] GetLastError () returned 0x0 [0283.188] GetLastError () returned 0x0 [0283.188] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.189] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0283.190] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.190] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0283.191] WriteFile (in: hFile=0x258, lpBuffer=0x23e3644*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3644*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.192] SetEndOfFile (hFile=0x258) returned 1 [0283.192] CloseHandle (hObject=0x258) returned 1 [0283.193] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.193] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.194] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.194] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.194] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.194] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.195] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.195] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.195] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.195] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.195] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.195] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.195] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.195] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.195] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.195] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.196] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.196] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.196] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.196] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.196] CryptDestroyKey (hKey=0x55e210) returned 1 [0283.196] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0283.196] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771e56f1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a6b92d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb657cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0283.196] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x771e56f1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a6b92d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb657cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.196] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a69309e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a69309e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a69309e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EVENTB~1.CRY")) returned 1 [0283.196] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cb657cb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cb657cb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb657cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.196] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a6b92d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a6b92d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a6b92d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 1 [0283.197] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a6b92d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a6b92d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a6b92d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 0 [0283.197] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0283.197] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773af2d3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a7057f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a7057f3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="209809", cAlternateFileName="")) returned 1 [0283.197] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.197] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.197] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.197] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0283.197] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570c98) returned 1 [0283.198] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0283.198] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.198] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e7d0) returned 1 [0283.198] CryptDestroyHash (hHash=0x55e790) returned 1 [0283.198] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0283.198] GetLastError () returned 0x0 [0283.198] GetLastError () returned 0x0 [0283.198] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.199] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0283.200] WriteFile (in: hFile=0x258, lpBuffer=0x23e3744*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3744*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.201] SetEndOfFile (hFile=0x258) returned 1 [0283.201] CloseHandle (hObject=0x258) returned 1 [0283.201] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.202] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.202] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.203] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0283.203] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.203] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.203] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.203] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.203] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.203] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.203] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.204] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.204] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.204] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.204] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.204] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.204] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.204] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.204] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.204] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.205] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0283.205] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0283.205] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773af2d3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a7057f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb8bc31, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0283.205] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773af2d3, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a7057f3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb8bc31, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.205] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31be3083, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0x31bef467, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x31cc45c2, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1659532139", cAlternateFileName="165953~1")) returned 1 [0283.205] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x997ade47, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x997ade47, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x998467f6, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1662368709", cAlternateFileName="166236~1")) returned 1 [0283.205] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a6b92d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a6b92d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a6b92d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EVENTB~1.CRY")) returned 1 [0283.205] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cb8bc31, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cb8bc31, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb8bc31, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.205] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a6df42b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a6df42b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a6df42b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 1 [0283.205] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a6df42b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a6df42b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a6df42b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 0 [0283.205] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0283.205] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x772f065b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a72b9a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a72b9a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="209857", cAlternateFileName="")) returned 1 [0283.205] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.205] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.206] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.206] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.206] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.206] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0283.206] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571050) returned 1 [0283.206] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0283.206] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.206] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0283.207] CryptDestroyHash (hHash=0x55e290) returned 1 [0283.207] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0283.207] GetLastError () returned 0x0 [0283.207] GetLastError () returned 0x0 [0283.207] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.207] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0283.208] WriteFile (in: hFile=0x258, lpBuffer=0x23e534c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e534c*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.209] SetEndOfFile (hFile=0x258) returned 1 [0283.209] CloseHandle (hObject=0x258) returned 1 [0283.210] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.211] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.211] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0283.211] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.211] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.211] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.212] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.212] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.212] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.212] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.212] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.212] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.212] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.212] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.212] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.212] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.212] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.212] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.212] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.213] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.213] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.213] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.213] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.213] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0283.213] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x772f065b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a72b9a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb8bc31, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0283.213] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x772f065b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a72b9a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb8bc31, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.213] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x151d75c6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x151d75c6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x153086e5, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x2d0a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1613045942", cAlternateFileName="161304~1")) returned 1 [0283.213] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a72b9a6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a72b9a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a72b9a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EVENTB~1.CRY")) returned 1 [0283.213] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cb8bc31, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cb8bc31, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cbb1cf0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.213] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a72b9a6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a72b9a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a72b9a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 1 [0283.213] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a72b9a6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a72b9a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a72b9a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 0 [0283.213] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0283.214] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a777edd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a777edd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="210469", cAlternateFileName="")) returned 1 [0283.214] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.214] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.214] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.214] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.214] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.214] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.214] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570eb8) returned 1 [0283.215] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0283.215] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.215] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e7d0) returned 1 [0283.215] CryptDestroyHash (hHash=0x55e790) returned 1 [0283.215] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0283.215] GetLastError () returned 0x0 [0283.215] GetLastError () returned 0x0 [0283.215] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.216] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0283.216] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.217] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0283.218] WriteFile (in: hFile=0x258, lpBuffer=0x23e3654*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3654*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.219] SetEndOfFile (hFile=0x258) returned 1 [0283.219] CloseHandle (hObject=0x258) returned 1 [0283.219] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.220] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.220] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.231] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.231] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.231] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.231] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.231] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.231] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.231] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.232] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.232] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.232] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.232] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.232] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.233] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0283.233] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0283.233] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a777edd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cbb1cf0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0283.233] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728bb373, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a777edd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cbb1cf0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.233] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d3122, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x738d3122, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x738d3122, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0xd4b4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1613044382", cAlternateFileName="161304~1")) returned 1 [0283.233] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a72b9a6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a72b9a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a72b9a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EVENTB~1.CRY")) returned 1 [0283.233] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cbb1cf0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cbb1cf0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cbb1cf0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.233] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a751bc6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a751bc6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a751bc6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 1 [0283.233] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a751bc6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a751bc6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a751bc6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 0 [0283.233] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0283.234] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770da6a8, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a8cf43a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a8cf43a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="210509", cAlternateFileName="")) returned 1 [0283.234] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.234] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.234] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.234] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0283.234] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570eb8) returned 1 [0283.235] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0283.235] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.235] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e910) returned 1 [0283.235] CryptDestroyHash (hHash=0x55e790) returned 1 [0283.235] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0283.235] GetLastError () returned 0x0 [0283.235] GetLastError () returned 0x0 [0283.235] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.236] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0283.237] WriteFile (in: hFile=0x258, lpBuffer=0x23e3754*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3754*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.238] SetEndOfFile (hFile=0x258) returned 1 [0283.238] CloseHandle (hObject=0x258) returned 1 [0283.238] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.239] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.239] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0283.240] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.240] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.240] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.240] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.240] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.240] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.240] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.240] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.240] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.240] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.240] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.241] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.241] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.241] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.241] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.241] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.241] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.241] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.241] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.241] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.242] CryptDestroyKey (hKey=0x55e910) returned 1 [0283.242] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0283.242] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770da6a8, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a8cf43a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cbda19e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0283.242] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x770da6a8, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a8cf43a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cbda19e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.242] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7af4a068, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7af4a068, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7af70297, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x7702, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1613044395", cAlternateFileName="161304~1")) returned 1 [0283.242] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a777edd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a777edd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a777edd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EVENTB~1.CRY")) returned 1 [0283.242] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cbda19e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cbda19e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cbda19e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.242] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a777edd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a777edd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a777edd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 1 [0283.242] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a777edd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a777edd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a777edd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 0 [0283.242] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0283.242] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f36cad, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a8cf43a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a8cf43a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="214513", cAlternateFileName="")) returned 1 [0283.242] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.242] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.242] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.243] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.243] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.243] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0283.243] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570da8) returned 1 [0283.243] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0283.243] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.243] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0283.243] CryptDestroyHash (hHash=0x55e210) returned 1 [0283.243] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0283.243] GetLastError () returned 0x0 [0283.243] GetLastError () returned 0x0 [0283.244] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.244] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0283.246] WriteFile (in: hFile=0x258, lpBuffer=0x23e534c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e534c*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.247] SetEndOfFile (hFile=0x258) returned 1 [0283.247] CloseHandle (hObject=0x258) returned 1 [0283.247] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.248] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.248] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.248] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.248] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.248] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.249] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0283.249] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.249] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.249] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.249] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.249] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.249] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.249] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.249] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.249] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.250] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.250] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.250] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.250] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.250] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.250] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.250] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.250] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.250] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0283.250] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f36cad, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a8cf43a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cbfe22c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0283.251] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76f36cad, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a8cf43a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cbfe22c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.251] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a8cf43a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a8cf43a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a8cf43a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="eventbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EVENTB~1.CRY")) returned 1 [0283.251] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cbfe22c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cbfe22c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cbfe22c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.251] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a8cf43a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a8cf43a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a8cf43a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 1 [0283.251] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a8cf43a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a8cf43a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a8cf43a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="imprbeacons.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IMPRBE~1.CRY")) returned 0 [0283.251] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0283.251] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cb194bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cb194bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb194bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.251] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cb194bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cb194bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cb194bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x736e6f63, dwReserved1=0x7461642e, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.251] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0283.251] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4caf3170, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4caf3170, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4caf3170, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.251] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4caf3170, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4caf3170, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4caf3170, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.251] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0283.251] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4caa722e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4caa722e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4caa722e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.251] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7480620a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9f1bcfcd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9f1bcfcd, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="StagedAssets", cAlternateFileName="STAGED~1")) returned 1 [0283.252] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.252] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.252] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.252] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.252] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.252] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.252] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0283.252] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.252] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.253] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0283.253] CryptDestroyHash (hHash=0x55e610) returned 1 [0283.253] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.253] GetLastError () returned 0x0 [0283.253] GetLastError () returned 0x0 [0283.253] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.254] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0283.254] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.255] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\StagedAssets\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\stagedassets\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.256] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.257] SetEndOfFile (hFile=0x250) returned 1 [0283.257] CloseHandle (hObject=0x250) returned 1 [0283.257] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.258] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.258] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.258] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.258] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.259] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.259] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.259] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.259] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.259] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.259] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.259] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.259] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.259] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.259] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.259] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.260] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.260] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.260] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.260] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.260] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.260] CryptDestroyKey (hKey=0x55e290) returned 1 [0283.260] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0283.260] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\StagedAssets\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\stagedassets\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7480620a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9f1bcfcd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4cbfe22c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0283.261] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7480620a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9f1bcfcd, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4cbfe22c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.261] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cbfe22c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cbfe22c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cc2436b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.261] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cbfe22c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cbfe22c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cc2436b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.261] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0283.261] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11fc5e23, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13c38283, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x13c38283, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Tips", cAlternateFileName="")) returned 1 [0283.261] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.261] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.261] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.261] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.261] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.261] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0283.261] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0283.262] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.262] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.262] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0283.262] CryptDestroyHash (hHash=0x55e790) returned 1 [0283.262] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.262] GetLastError () returned 0x0 [0283.262] GetLastError () returned 0x0 [0283.262] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.263] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Tips\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\tips\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.268] WriteFile (in: hFile=0x250, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.269] SetEndOfFile (hFile=0x250) returned 1 [0283.269] CloseHandle (hObject=0x250) returned 1 [0283.269] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.270] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.270] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.270] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.270] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.270] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.270] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0283.270] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.271] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.271] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.271] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.271] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.271] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.271] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.271] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.271] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.271] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.271] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.271] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.272] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.272] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.272] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.272] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.295] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.295] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.295] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.295] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.296] CryptDestroyKey (hKey=0x55e910) returned 1 [0283.296] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0283.296] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Tips\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\tips\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11fc5e23, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13c38283, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x4cc2436b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.296] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11fc5e23, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13c38283, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x4cc2436b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.296] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b2d0b9, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x13b2d0b9, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x189de896, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x5c2b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", cAlternateFileName="E9D217~1.XML")) returned 1 [0283.296] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13c38283, ftCreationTime.dwHighDateTime=0x1d7046d, ftLastAccessTime.dwLowDateTime=0x13c38283, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x189de896, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x4293, dwReserved0=0x405534, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", cAlternateFileName="E9D217~2.XML")) returned 1 [0283.296] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cc2436b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cc2436b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cc2436b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.296] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cc2436b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cc2436b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cc2436b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.296] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.297] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11fc5e23, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x13c38283, ftLastAccessTime.dwHighDateTime=0x1d7046d, ftLastWriteTime.dwLowDateTime=0x13c38283, ftLastWriteTime.dwHighDateTime=0x1d7046d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Tips", cAlternateFileName="")) returned 0 [0283.297] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.297] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9bfe3d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9bfe3d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74657373, dwReserved1=0x5f4f5473, cFileName="Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0283.297] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.297] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.297] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.297] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.297] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.297] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0283.297] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0283.298] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.298] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.298] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0283.298] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.298] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.298] GetLastError () returned 0x0 [0283.298] GetLastError () returned 0x0 [0283.298] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.299] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0283.300] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.300] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.304] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.305] SetEndOfFile (hFile=0x24c) returned 1 [0283.305] CloseHandle (hObject=0x24c) returned 1 [0283.305] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.306] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.306] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.306] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.306] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.306] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.306] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0283.307] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.307] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.307] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.307] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.307] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.308] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.308] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.308] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.308] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.309] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.309] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0283.309] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9bfe3d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4cc708f4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.309] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9bfe3d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4cc708f4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.309] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a8f57c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a8f57c0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0283.309] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.309] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.309] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.309] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.310] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.310] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0283.310] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.310] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.310] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e750) returned 1 [0283.310] CryptDestroyHash (hHash=0x55e190) returned 1 [0283.311] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.311] GetLastError () returned 0x0 [0283.311] GetLastError () returned 0x0 [0283.311] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.311] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0283.311] WriteFile (in: hFile=0xffffffff, lpBuffer=0x23e5300, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0) returned 0 [0283.311] SetEndOfFile (hFile=0xffffffff) returned 0 [0283.311] CloseHandle (hObject=0xffffffff) returned 1 [0283.312] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.313] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.313] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.313] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.313] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.313] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.313] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.313] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.313] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.313] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.313] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.314] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.314] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.314] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.314] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.314] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.314] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.314] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.314] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.315] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.315] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.315] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.315] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.315] CryptDestroyKey (hKey=0x55e750) returned 1 [0283.315] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0283.315] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a8f57c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a8f57c0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0283.315] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a8f57c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a8f57c0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.315] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a9bfe3d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x69ef5b53, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x8ab89962, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0283.315] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a8f57c0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a8f57c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a8f57c0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0283.315] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8a9e6062, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9e6062, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9e6062, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0283.315] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8a9e6062, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9e6062, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9e6062, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0283.315] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8a9e6062, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a9e6062, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a9e6062, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 0 [0283.316] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0283.316] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cc708f4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cc708f4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cc96b14, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.316] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cc708f4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cc708f4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cc96b14, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x536e6f69, dwReserved1=0x65726f74, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.316] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.316] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0283.316] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.316] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.316] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.316] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.316] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.316] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.316] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0283.317] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.317] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.317] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0283.317] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.317] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.317] GetLastError () returned 0x0 [0283.317] GetLastError () returned 0x0 [0283.317] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.319] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0283.320] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.321] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.328] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.329] SetEndOfFile (hFile=0x24c) returned 1 [0283.329] CloseHandle (hObject=0x24c) returned 1 [0283.329] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.330] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.331] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.331] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.331] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.331] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0283.331] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.331] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.331] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.332] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.332] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.332] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.332] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.333] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.333] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.333] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.333] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.333] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0283.334] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ccbd1d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0283.334] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ccbd1d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.334] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccbd1d4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ccbd1d4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ccbd1d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.334] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ccbd1d4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ccbd1d4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ccbd1d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.334] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0283.334] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a8f57c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a8f57c0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0283.334] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.335] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.335] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.335] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.335] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570eb8) returned 1 [0283.336] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.336] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.336] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0283.336] CryptDestroyHash (hHash=0x55e210) returned 1 [0283.336] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.336] GetLastError () returned 0x0 [0283.336] GetLastError () returned 0x0 [0283.336] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.337] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.338] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.339] SetEndOfFile (hFile=0x24c) returned 1 [0283.340] CloseHandle (hObject=0x24c) returned 1 [0283.340] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.341] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.341] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.341] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.341] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.341] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.341] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0283.341] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.342] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.342] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.342] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.342] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.342] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.342] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.342] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.342] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.342] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.342] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.342] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.342] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.343] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.343] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.343] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.343] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.343] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.343] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.343] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.343] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0283.343] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0283.343] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a8f57c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cce3082, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.344] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3a8f57c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cce3082, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.344] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cce3082, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cce3082, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cce3082, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.344] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7d0053, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0283.344] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa0fdae76, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xa0fdae76, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0283.344] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a8f57c0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a8f57c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a8f57c0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0283.344] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9b1cc602, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9b1cc602, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9b1cc602, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0283.344] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9b1cc602, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9b1cc602, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9b1cc602, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0283.344] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9b1cc602, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9b1cc602, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9b1cc602, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x12000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0283.344] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.344] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7d0053, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0283.344] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.344] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.345] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.345] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.345] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.345] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0283.345] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0283.345] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.346] CryptHashData (hHash=0x55e310, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.346] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e2d0) returned 1 [0283.346] CryptDestroyHash (hHash=0x55e310) returned 1 [0283.346] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.346] GetLastError () returned 0x0 [0283.346] GetLastError () returned 0x0 [0283.346] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.347] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0283.347] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.348] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.349] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.351] SetEndOfFile (hFile=0x24c) returned 1 [0283.351] CloseHandle (hObject=0x24c) returned 1 [0283.351] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.352] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.352] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.352] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.352] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.352] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.352] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.352] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.353] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.353] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.353] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.353] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.353] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.353] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.353] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.353] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.353] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.353] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.354] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.354] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.354] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.354] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.354] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.354] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.354] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.354] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.354] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.355] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0283.355] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0283.355] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4cce3082, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0283.355] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7d0053, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7d0053, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4cce3082, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.355] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cce3082, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cce3082, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd091bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.355] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cce3082, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cce3082, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd091bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.355] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0283.355] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0283.355] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.355] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.355] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.355] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.356] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.356] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0283.356] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.356] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.356] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0283.357] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.357] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.357] GetLastError () returned 0x0 [0283.357] GetLastError () returned 0x0 [0283.357] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.357] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.358] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.360] SetEndOfFile (hFile=0x24c) returned 1 [0283.360] CloseHandle (hObject=0x24c) returned 1 [0283.360] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.361] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.361] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.361] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.361] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0283.361] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.361] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.362] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.362] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.362] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.362] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.362] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.362] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.362] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.362] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.362] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.362] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.362] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.362] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.362] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.363] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.363] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.363] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.363] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.363] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0283.363] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4cd091bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.363] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4cd091bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.363] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cd091bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cd091bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd091bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.363] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cd091bc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cd091bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd091bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.363] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.364] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7a9d6d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8a7a9d6d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8a7a9d6d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0283.364] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0283.364] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60629330, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60629330, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.Windows.Cortana_cw5n1h2txyewy", cAlternateFileName="MICROS~1.COR")) returned 1 [0283.364] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.364] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.364] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.364] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.364] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.364] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.364] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570fc8) returned 1 [0283.365] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0283.365] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.365] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0283.365] CryptDestroyHash (hHash=0x55e910) returned 1 [0283.365] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f190*=0x18) returned 1 [0283.365] GetLastError () returned 0x0 [0283.365] GetLastError () returned 0x0 [0283.365] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.368] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0283.369] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.369] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0283.371] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.372] SetEndOfFile (hFile=0x248) returned 1 [0283.372] CloseHandle (hObject=0x248) returned 1 [0283.372] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.373] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.373] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.373] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.373] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.373] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.373] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0283.374] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.374] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.374] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.374] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.374] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.374] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.375] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.375] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.375] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.375] CryptDestroyKey (hKey=0x55e650) returned 1 [0283.375] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0283.375] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x607a6a92, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4cd2f7a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0283.376] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x607a6a92, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4cd2f7a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.376] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6e10e7a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e10e7a9, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0283.376] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.376] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.376] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.376] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0283.376] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0283.377] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.377] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.377] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0283.377] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.377] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.377] GetLastError () returned 0x0 [0283.377] GetLastError () returned 0x0 [0283.377] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.378] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.379] WriteFile (in: hFile=0x24c, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.380] SetEndOfFile (hFile=0x24c) returned 1 [0283.380] CloseHandle (hObject=0x24c) returned 1 [0283.380] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.380] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.380] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.381] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.381] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.381] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.381] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.381] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.381] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.381] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.381] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.381] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.382] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.382] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.382] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.382] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.382] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.382] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.382] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.382] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.382] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.382] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.382] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.382] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.382] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.382] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.383] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.383] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0283.383] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6e10e7a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4cd2f7a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0283.383] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6e10e7a9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4cd2f7a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.383] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e10e7a9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3aa98fa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3aa98fa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache", cAlternateFileName="")) returned 1 [0283.383] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.383] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.383] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.383] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.384] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571518) returned 1 [0283.384] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.384] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.384] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0283.384] CryptDestroyHash (hHash=0x55e910) returned 1 [0283.384] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.384] GetLastError () returned 0x0 [0283.384] GetLastError () returned 0x0 [0283.384] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.385] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0283.386] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.386] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.388] WriteFile (in: hFile=0x250, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.389] SetEndOfFile (hFile=0x250) returned 1 [0283.389] CloseHandle (hObject=0x250) returned 1 [0283.390] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.390] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.390] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.390] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.390] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.390] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.391] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0283.391] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.391] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.391] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.391] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.391] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.391] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.391] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.391] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.391] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.392] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.392] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.392] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.392] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.393] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0283.393] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0283.393] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e10e7a9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3aa98fa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd55684, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.393] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e10e7a9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3aa98fa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd55684, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.393] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e134a22, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3aa98fa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3aa98fa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C1J92J4X", cAlternateFileName="")) returned 1 [0283.393] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.393] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.393] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.393] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.393] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570da8) returned 1 [0283.394] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0283.394] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.394] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e5d0) returned 1 [0283.394] CryptDestroyHash (hHash=0x55e290) returned 1 [0283.394] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0283.394] GetLastError () returned 0x0 [0283.394] GetLastError () returned 0x0 [0283.394] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.395] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0283.396] WriteFile (in: hFile=0x254, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.397] SetEndOfFile (hFile=0x254) returned 1 [0283.397] CloseHandle (hObject=0x254) returned 1 [0283.397] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.398] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.398] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.398] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.398] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.398] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.398] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0283.399] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.399] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.399] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.399] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.399] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.399] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.399] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.399] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.399] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.399] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.400] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.400] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.400] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.400] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.400] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.400] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.400] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.400] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.400] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0283.400] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0283.400] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e134a22, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3aa98fa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd55684, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0283.401] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e134a22, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3aa98fa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd55684, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.401] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e180f7d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x989e4279, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x989e4279, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1 [0283.401] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.401] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.401] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.401] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.401] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.401] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0283.401] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570b00) returned 1 [0283.402] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0283.402] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.402] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0283.402] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.402] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0283.402] GetLastError () returned 0x0 [0283.402] GetLastError () returned 0x0 [0283.402] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.403] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0283.403] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.404] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\1\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\1\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0283.407] WriteFile (in: hFile=0x258, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.408] SetEndOfFile (hFile=0x258) returned 1 [0283.408] CloseHandle (hObject=0x258) returned 1 [0283.408] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.409] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.409] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.410] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.410] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.410] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.410] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.410] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.410] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.410] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.410] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.411] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.411] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.411] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.411] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.411] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.411] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.411] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.411] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.411] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.411] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.411] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.411] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.411] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.412] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.412] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0283.412] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\1\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\1\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e180f7d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x989e4279, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4cd7b8b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0283.412] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6e180f7d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x989e4279, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4cd7b8b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.412] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e180f7d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e180f7d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x59ebb0a5, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x42840, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_2[1].txt", cAlternateFileName="C__WIN~1.TXT")) returned 1 [0283.412] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cd7b8b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cd7b8b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd7b8b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.412] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cd7b8b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cd7b8b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd7b8b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.412] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0283.412] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e28c015, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a9b633b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a9b633b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="2", cAlternateFileName="")) returned 1 [0283.412] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.412] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.414] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.414] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.414] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.414] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.414] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570eb8) returned 1 [0283.415] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0283.415] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.415] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e210) returned 1 [0283.415] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.415] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0283.415] GetLastError () returned 0x0 [0283.415] GetLastError () returned 0x0 [0283.415] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.415] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0283.416] WriteFile (in: hFile=0x258, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.417] SetEndOfFile (hFile=0x258) returned 1 [0283.418] CloseHandle (hObject=0x258) returned 1 [0283.418] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.418] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.418] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.419] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.419] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0283.419] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.419] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.419] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.419] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.419] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.419] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.419] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.420] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.420] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.420] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.420] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.420] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.420] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.420] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.420] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.420] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.420] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.421] CryptDestroyKey (hKey=0x55e210) returned 1 [0283.421] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0283.421] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\2\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\2\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e28c015, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a9b633b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cda1aa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0283.421] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e28c015, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3a9b633b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cda1aa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.421] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e28c015, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6e28c015, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6e28c015, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x405534, dwReserved1=0x0, cFileName="appcache[1].man", cAlternateFileName="APPCAC~1.MAN")) returned 1 [0283.421] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a941a55, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a941a55, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a941a55, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0283.421] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a967dc9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a967dc9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a967dc9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4760, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_COOBE[1].html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="C__WIN~1.CRY")) returned 1 [0283.421] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a98e060, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a98e060, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a9b633b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x19c2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_COOBE_CortanaIcon[1].png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="C__WIN~2.CRY")) returned 1 [0283.421] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cda1aa4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cda1aa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cda1aa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.421] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cda1aa4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cda1aa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cda1aa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.421] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0283.421] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebd9357f, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0x3a9b633b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a9b633b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="6", cAlternateFileName="")) returned 1 [0283.421] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.421] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.422] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.422] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.422] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570858) returned 1 [0283.422] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0283.422] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.422] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e210) returned 1 [0283.422] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.422] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0283.422] GetLastError () returned 0x0 [0283.422] GetLastError () returned 0x0 [0283.423] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.423] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\6\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\6\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0283.424] WriteFile (in: hFile=0x258, lpBuffer=0x23e35a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e35a4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.425] SetEndOfFile (hFile=0x258) returned 1 [0283.425] CloseHandle (hObject=0x258) returned 1 [0283.426] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.426] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.427] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0283.427] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.427] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.427] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.428] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.428] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.428] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.428] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.428] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.428] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.429] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.429] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.429] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.429] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.429] CryptDestroyKey (hKey=0x55e210) returned 1 [0283.429] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0283.429] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\6\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\6\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebd9357f, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0x3a9b633b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cda1aa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0283.429] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebd9357f, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0x3a9b633b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cda1aa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.429] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebd9357f, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebd9357f, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0xebd9357f, ftLastWriteTime.dwHighDateTime=0x1d7045f, nFileSizeHigh=0x0, nFileSizeLow=0x1046, dwReserved0=0x405534, dwReserved1=0x0, cFileName="appcache[1].man", cAlternateFileName="APPCAC~1.MAN")) returned 1 [0283.429] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a9b633b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3a9b633b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3a9b633b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebf36f47, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebf36f47, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f07586, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x38ed, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_10[1].txt", cAlternateFileName="C_D0E0~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebf5d218, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebf5d218, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f07586, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x12639, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_11[1].txt", cAlternateFileName="C_647E~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec041f56, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec041f56, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f2d924, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x135cb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_12[1].txt", cAlternateFileName="C_EAA3~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec041f56, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec041f56, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f2d924, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x3826, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_13[1].txt", cAlternateFileName="C_F04C~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0681fa, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0681fa, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f2d924, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x6a1a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_14[1].txt", cAlternateFileName="C_988E~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec08e559, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec08e559, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f53a34, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x382fa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_15[1].txt", cAlternateFileName="C_82F5~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec08e559, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec08e559, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f79c92, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x19226, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_16[1].txt", cAlternateFileName="C_2306~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec08e559, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec08e559, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59f79c92, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x31194, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_17[1].txt", cAlternateFileName="C_399E~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0b4810, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0b4810, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x397bcfe8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_18[1].txt", cAlternateFileName="C_503C~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0b4810, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0b4810, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x397bcfe8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x381, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_19[1].txt", cAlternateFileName="C_4A93~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0b4810, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0b4810, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_20[1].txt", cAlternateFileName="C_1F20~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0b4810, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0b4810, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x651, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_21[1].txt", cAlternateFileName="C_EA37~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0da981, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0da981, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_22[1].txt", cAlternateFileName="C_6402~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0da981, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0da981, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_23[1].txt", cAlternateFileName="C_EDCC~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec0da981, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec0da981, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_24[1].txt", cAlternateFileName="C_5782~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec100dd1, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec100dd1, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xae8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_25[1].txt", cAlternateFileName="C_6D1B~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec100dd1, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec100dd1, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xfaa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_26[1].txt", cAlternateFileName="C_2CAF~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec173241, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec173241, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x67d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_27[1].txt", cAlternateFileName="C_1617~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec173241, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xec173241, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59ee1314, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x1eabf, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_28[1].txt", cAlternateFileName="C_2F38~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebd9357f, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebd9357f, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59ebb0a5, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x42840, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_2[1].txt", cAlternateFileName="C__WIN~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdbc8f6, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebdbc8f6, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59e94e30, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x3e1eb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_3[1].txt", cAlternateFileName="C__WIN~2.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdbc8f6, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebdbc8f6, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59e94e30, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x1d94, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_4[1].txt", cAlternateFileName="C__WIN~3.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebdbc8f6, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebdbc8f6, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59e6ebec, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x581f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_5[1].txt", cAlternateFileName="C__WIN~4.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebf36f47, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebf36f47, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59e6ebec, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x4bc7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_6[1].txt", cAlternateFileName="C_345C~1.TXT")) returned 1 [0283.430] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebf36f47, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebf36f47, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x39796d8e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x740, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_7[1].txt", cAlternateFileName="C_BD17~1.TXT")) returned 1 [0283.431] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebf36f47, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebf36f47, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59e48999, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0xc20d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_8[1].txt", cAlternateFileName="C_37E1~1.TXT")) returned 1 [0283.431] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xebf36f47, ftCreationTime.dwHighDateTime=0x1d7045f, ftLastAccessTime.dwLowDateTime=0xebf36f47, ftLastAccessTime.dwHighDateTime=0x1d7045f, ftLastWriteTime.dwLowDateTime=0x59e48999, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x59e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C__Windows_SystemApps_Microsoft.Windows.Cortana_cw5n1h2txyewy_cache_Desktop_9[1].txt", cAlternateFileName="C_0E6D~1.TXT")) returned 1 [0283.431] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cda1aa4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cda1aa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cda1aa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.431] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cda1aa4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cda1aa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cda1aa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.431] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0283.431] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74be545, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x3aa72cff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3aa72cff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="8", cAlternateFileName="")) returned 1 [0283.431] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.431] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.431] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.431] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.431] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.431] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0283.431] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570eb8) returned 1 [0283.432] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0283.432] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.432] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e610) returned 1 [0283.432] CryptDestroyHash (hHash=0x55e290) returned 1 [0283.432] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0283.432] GetLastError () returned 0x0 [0283.432] GetLastError () returned 0x0 [0283.432] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.433] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0283.434] WriteFile (in: hFile=0x258, lpBuffer=0x23e35b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e35b4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.435] SetEndOfFile (hFile=0x258) returned 1 [0283.435] CloseHandle (hObject=0x258) returned 1 [0283.435] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.436] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.436] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.436] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.436] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.437] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.437] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.437] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.437] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.437] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.437] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.437] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.437] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.437] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.437] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.437] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.438] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.438] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.438] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.438] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.438] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.438] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.438] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0283.439] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\C1J92J4X\\8\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\c1j92j4x\\8\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74be545, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x3aa72cff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cdc7e69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0283.439] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74be545, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x3aa72cff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cdc7e69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.439] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74e4667, ftCreationTime.dwHighDateTime=0x1d70503, ftLastAccessTime.dwLowDateTime=0x74e4667, ftLastAccessTime.dwHighDateTime=0x1d70503, ftLastWriteTime.dwLowDateTime=0x74e4667, ftLastWriteTime.dwHighDateTime=0x1d70503, nFileSizeHigh=0x0, nFileSizeLow=0x3c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="appcache[1].man", cAlternateFileName="APPCAC~1.MAN")) returned 1 [0283.439] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3aa26958, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3aa26958, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3aa26958, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0283.439] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cdc7e69, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cdc7e69, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cdc7e69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.439] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3aa26958, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3aa26958, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3aa72cff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1fcb6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="zinc[1].htm.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZINC_1~1.CRY")) returned 1 [0283.439] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3aa26958, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3aa26958, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3aa72cff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1fcb6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="zinc[1].htm.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZINC_1~1.CRY")) returned 0 [0283.439] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0283.439] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3aa98fa4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3aa98fa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3aa98fa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d74682e, dwReserved1=0x7972632e, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0283.439] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cd55684, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cd55684, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd7b8b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6d74682e, dwReserved1=0x7972632e, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.439] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cd55684, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cd55684, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd7b8b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6d74682e, dwReserved1=0x7972632e, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.439] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0283.439] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3aa98fa4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3aa98fa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3aa98fa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0283.439] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cd55684, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cd55684, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd55684, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.439] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cd55684, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cd55684, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd55684, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.439] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.439] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cd2f7a8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cd2f7a8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd2f7a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.440] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3aabf1e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3aabf1e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0283.440] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.440] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.440] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.440] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.440] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0283.441] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.441] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.441] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0283.441] CryptDestroyHash (hHash=0x55e290) returned 1 [0283.441] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.441] GetLastError () returned 0x0 [0283.441] GetLastError () returned 0x0 [0283.441] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.441] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.445] WriteFile (in: hFile=0x250, lpBuffer=0x23e35f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e35f4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.446] SetEndOfFile (hFile=0x250) returned 1 [0283.446] CloseHandle (hObject=0x250) returned 1 [0283.446] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.447] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.447] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0283.448] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.448] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.448] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.448] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.448] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.448] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.448] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.448] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.448] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.448] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.449] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.449] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.449] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.449] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.449] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.449] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.449] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0283.449] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0283.449] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3aabf1e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cdedf5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0283.450] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3aabf1e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cdedf5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.450] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3aa98fa4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3aa98fa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3aa98fa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0283.450] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cdedf5a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cdedf5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cdedf5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.450] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cdedf5a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cdedf5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cdedf5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.450] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0283.450] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3aabf1e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3aabf1e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0283.450] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.450] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.450] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.450] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.450] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.450] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.450] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0283.451] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.451] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.451] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0283.451] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.451] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.451] GetLastError () returned 0x0 [0283.451] GetLastError () returned 0x0 [0283.451] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.452] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.453] WriteFile (in: hFile=0x250, lpBuffer=0x23e3604*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3604*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.454] SetEndOfFile (hFile=0x250) returned 1 [0283.454] CloseHandle (hObject=0x250) returned 1 [0283.454] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.455] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.455] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.455] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.456] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.456] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0283.456] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.456] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.456] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.456] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.456] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.457] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.457] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.457] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.457] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.457] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.458] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.458] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0283.458] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3aabf1e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cdedf5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.458] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3aabf1e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cdedf5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.458] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3aabf1e4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3aabf1e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3aabf1e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0283.458] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4cdedf5a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cdedf5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cdedf5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.458] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13c62218, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x13c62218, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x13c62218, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x23b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MF12VF9D.txt", cAlternateFileName="")) returned 1 [0283.458] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13c62218, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x13c62218, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x13c62218, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x64, dwReserved0=0x405534, dwReserved1=0x0, cFileName="OB349RDS.txt", cAlternateFileName="")) returned 1 [0283.458] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13c62218, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x13c62218, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x13c62218, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x64, dwReserved0=0x405534, dwReserved1=0x0, cFileName="OB349RDS.txt", cAlternateFileName="")) returned 0 [0283.458] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.458] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6064f492, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6064f492, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78742e53, dwReserved1=0x5f4f5474, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0283.458] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.458] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.458] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.459] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.459] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0283.459] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571518) returned 1 [0283.459] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.459] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.459] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0283.460] CryptDestroyHash (hHash=0x55e790) returned 1 [0283.460] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.460] GetLastError () returned 0x0 [0283.460] GetLastError () returned 0x0 [0283.460] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.460] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.461] WriteFile (in: hFile=0x250, lpBuffer=0x23e3644*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3644*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.463] SetEndOfFile (hFile=0x250) returned 1 [0283.463] CloseHandle (hObject=0x250) returned 1 [0283.463] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.464] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.464] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.464] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.464] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.464] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.464] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.464] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.464] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.465] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.465] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.465] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.465] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.465] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.465] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.466] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.466] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.466] CryptDestroyKey (hKey=0x55e910) returned 1 [0283.466] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0283.466] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6064f492, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ce14313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.466] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6064f492, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6064f492, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ce14313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.467] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ce14313, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ce14313, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ce14313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.467] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ce14313, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ce14313, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ce14313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.467] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.467] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa3d60b, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0283.467] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.467] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.467] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.467] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.467] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571408) returned 1 [0283.468] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.468] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.468] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0283.468] CryptDestroyHash (hHash=0x55e790) returned 1 [0283.468] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.468] GetLastError () returned 0x0 [0283.468] GetLastError () returned 0x0 [0283.468] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.469] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.472] WriteFile (in: hFile=0x250, lpBuffer=0x23e3654*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3654*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.473] SetEndOfFile (hFile=0x250) returned 1 [0283.473] CloseHandle (hObject=0x250) returned 1 [0283.473] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.474] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.474] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.474] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.474] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.474] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.474] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0283.475] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.475] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.475] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.475] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.475] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.476] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.476] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.476] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.476] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0283.476] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0283.476] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ce14313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.477] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ce14313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.477] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ce14313, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ce14313, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ce14313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.477] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa3d60b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa3d60b, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0283.477] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.477] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.477] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.477] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.477] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571050) returned 1 [0283.478] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0283.478] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.478] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e5d0) returned 1 [0283.478] CryptDestroyHash (hHash=0x55e290) returned 1 [0283.478] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0283.478] GetLastError () returned 0x0 [0283.478] GetLastError () returned 0x0 [0283.478] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.479] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0283.483] WriteFile (in: hFile=0x254, lpBuffer=0x23e3694*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3694*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.484] SetEndOfFile (hFile=0x254) returned 1 [0283.484] CloseHandle (hObject=0x254) returned 1 [0283.484] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.485] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.485] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0283.485] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.486] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.486] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.486] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.486] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.486] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.487] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.487] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.487] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0283.487] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0283.487] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa3d60b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ce3a4d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.487] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa3d60b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ce3a4d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.487] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3aae53a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3aae53a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0283.487] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.487] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.488] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.488] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0283.488] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570c10) returned 1 [0283.488] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0283.488] CryptHashData (hHash=0x55e2d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.488] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0283.488] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0283.488] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0283.488] GetLastError () returned 0x0 [0283.488] GetLastError () returned 0x0 [0283.489] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.489] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0283.490] WriteFile (in: hFile=0x258, lpBuffer=0x23e36a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e36a4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.492] SetEndOfFile (hFile=0x258) returned 1 [0283.492] CloseHandle (hObject=0x258) returned 1 [0283.492] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.493] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.493] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.493] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.493] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.493] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.493] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.493] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.493] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.494] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.494] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.494] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.494] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.494] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.494] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.494] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.494] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.494] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.494] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.494] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.494] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.494] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.494] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.495] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.495] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.495] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.495] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.495] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.495] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0283.495] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3aae53a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ce3a4d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0283.495] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa3d60b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3aae53a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ce3a4d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.495] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3aabf1e4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3aabf1e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3aabf1e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="container.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTAI~1.CRY")) returned 1 [0283.495] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="G04B9NC8", cAlternateFileName="")) returned 1 [0283.495] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.495] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.496] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.496] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.496] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.496] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.496] CryptAcquireContextA (in: phProv=0x19e57c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e57c*=0x571408) returned 1 [0283.496] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e534 | out: phHash=0x19e534) returned 1 [0283.496] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.496] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19e578 | out: phKey=0x19e578*=0x55e190) returned 1 [0283.496] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0283.496] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19e588*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19e588*=0x18) returned 1 [0283.496] GetLastError () returned 0x0 [0283.497] GetLastError () returned 0x0 [0283.497] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.497] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\G04B9NC8\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\g04b9nc8\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c [0283.498] WriteFile (in: hFile=0x25c, lpBuffer=0x23e36e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e2b0, lpOverlapped=0x0 | out: lpBuffer=0x23e36e4*, lpNumberOfBytesWritten=0x19e2b0*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.499] SetEndOfFile (hFile=0x25c) returned 1 [0283.499] CloseHandle (hObject=0x25c) returned 1 [0283.499] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.500] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.500] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.501] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0283.501] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.501] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.501] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.501] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.502] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.502] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.502] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.502] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.502] CryptDestroyKey (hKey=0x55e190) returned 1 [0283.503] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0283.503] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\G04B9NC8\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\g04b9nc8\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ce606a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0283.503] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ce606a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.503] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ce606a6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ce606a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ce606a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.503] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ce606a6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ce606a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ce606a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.503] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0283.503] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ce3a4d8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ce3a4d8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ce606a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.503] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="KPTCCOJ4", cAlternateFileName="")) returned 1 [0283.503] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.503] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.503] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.503] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.503] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.504] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.504] CryptAcquireContextA (in: phProv=0x19e57c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e57c*=0x570a78) returned 1 [0283.504] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e534 | out: phHash=0x19e534) returned 1 [0283.504] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.504] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e578 | out: phKey=0x19e578*=0x55e7d0) returned 1 [0283.504] CryptDestroyHash (hHash=0x55e790) returned 1 [0283.504] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19e588*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19e588*=0x18) returned 1 [0283.504] GetLastError () returned 0x0 [0283.504] GetLastError () returned 0x0 [0283.504] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.505] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\KPTCCOJ4\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\kptccoj4\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c [0283.506] WriteFile (in: hFile=0x25c, lpBuffer=0x23e53fc*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e2b0, lpOverlapped=0x0 | out: lpBuffer=0x23e53fc*, lpNumberOfBytesWritten=0x19e2b0*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.507] SetEndOfFile (hFile=0x25c) returned 1 [0283.508] CloseHandle (hObject=0x25c) returned 1 [0283.508] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.509] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.509] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0283.509] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.509] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.510] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.510] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.510] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.510] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.510] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.511] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.511] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.511] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0283.511] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0283.511] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\KPTCCOJ4\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\kptccoj4\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ce606a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0283.511] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ce606a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.511] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ce606a6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ce606a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ce8695d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.511] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ce606a6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ce606a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ce8695d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.511] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0283.512] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="V1VIG64D", cAlternateFileName="")) returned 1 [0283.512] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.512] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.512] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.512] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.512] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.512] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0283.512] CryptAcquireContextA (in: phProv=0x19e57c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e57c*=0x571050) returned 1 [0283.513] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e534 | out: phHash=0x19e534) returned 1 [0283.513] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.513] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e578 | out: phKey=0x19e578*=0x55e7d0) returned 1 [0283.513] CryptDestroyHash (hHash=0x55e790) returned 1 [0283.513] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19e588*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19e588*=0x18) returned 1 [0283.513] GetLastError () returned 0x0 [0283.513] GetLastError () returned 0x0 [0283.513] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.513] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\V1VIG64D\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\v1vig64d\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c [0283.516] WriteFile (in: hFile=0x25c, lpBuffer=0x23e543c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e2b0, lpOverlapped=0x0 | out: lpBuffer=0x23e543c*, lpNumberOfBytesWritten=0x19e2b0*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.517] SetEndOfFile (hFile=0x25c) returned 1 [0283.518] CloseHandle (hObject=0x25c) returned 1 [0283.518] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.519] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.519] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.519] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.520] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.520] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.520] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.520] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.520] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.520] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.520] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.520] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.520] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.520] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.520] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.520] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.520] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.520] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.520] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.521] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.521] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.521] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.521] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0283.521] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0283.521] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\V1VIG64D\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\v1vig64d\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ce8695d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0283.521] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ce8695d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.521] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ce8695d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ce8695d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ce8695d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.521] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x70ea6faa, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0xe25, dwReserved0=0x405534, dwReserved1=0x0, cFileName="www.bing[1].xml", cAlternateFileName="WWWBIN~1.XML")) returned 1 [0283.521] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x70ea6faa, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0xe25, dwReserved0=0x405534, dwReserved1=0x0, cFileName="www.bing[1].xml", cAlternateFileName="WWWBIN~1.XML")) returned 0 [0283.521] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0283.522] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5d315b67, dwReserved1=0x6c6d782e, cFileName="WTR48WZB", cAlternateFileName="")) returned 1 [0283.522] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.522] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.522] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.522] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.522] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.522] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.522] CryptAcquireContextA (in: phProv=0x19e57c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e57c*=0x571050) returned 1 [0283.523] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e534 | out: phHash=0x19e534) returned 1 [0283.523] CryptHashData (hHash=0x55e2d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.523] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19e578 | out: phKey=0x19e578*=0x55e610) returned 1 [0283.523] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0283.523] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19e588*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19e588*=0x18) returned 1 [0283.523] GetLastError () returned 0x0 [0283.523] GetLastError () returned 0x0 [0283.523] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.524] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\WTR48WZB\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\wtr48wzb\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c [0283.525] WriteFile (in: hFile=0x25c, lpBuffer=0x23e544c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e2b0, lpOverlapped=0x0 | out: lpBuffer=0x23e544c*, lpNumberOfBytesWritten=0x19e2b0*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.526] SetEndOfFile (hFile=0x25c) returned 1 [0283.526] CloseHandle (hObject=0x25c) returned 1 [0283.526] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.527] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.527] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.527] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.527] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0283.528] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.528] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.528] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.528] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.528] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.528] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.528] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.528] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.528] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.528] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.528] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.529] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.529] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.529] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.529] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.529] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.529] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.529] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0283.529] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\WTR48WZB\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\wtr48wzb\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ceacb7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0283.530] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ceacb7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.530] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ceacb7e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ceacb7e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ceacb7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.530] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ceacb7e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ceacb7e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ceacb7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.530] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0283.530] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6fa637de, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6fa637de, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6fa637de, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5d315b67, dwReserved1=0x6c6d782e, cFileName="WTR48WZB", cAlternateFileName="")) returned 0 [0283.530] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0283.530] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ce3a4d8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ce3a4d8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ce3a4d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4142, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.530] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ce3a4d8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ce3a4d8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ce3a4d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4142, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.530] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.530] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6da0d9db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Windows", cAlternateFileName="")) returned 1 [0283.530] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.530] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.530] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.530] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.531] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.531] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570c10) returned 1 [0283.531] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0283.531] CryptHashData (hHash=0x55e2d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.531] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e790) returned 1 [0283.531] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0283.531] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0283.531] GetLastError () returned 0x0 [0283.531] GetLastError () returned 0x0 [0283.532] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.532] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0283.533] WriteFile (in: hFile=0x254, lpBuffer=0x23e549c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e549c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.534] SetEndOfFile (hFile=0x254) returned 1 [0283.534] CloseHandle (hObject=0x254) returned 1 [0283.534] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.536] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.536] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0283.536] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.536] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.537] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.537] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.537] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.537] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.537] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.537] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.537] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.537] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.537] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.538] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.538] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.538] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.538] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.538] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.538] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0283.538] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ceacb7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0283.538] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4ceacb7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.538] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ceacb7e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ceacb7e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ceacb7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.539] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ceacb7e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ceacb7e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ceacb7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.539] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0283.539] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6da0d9db, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6da0d9db, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6da0d9db, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Windows", cAlternateFileName="")) returned 0 [0283.539] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.539] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60629330, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60629330, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName="Temp", cAlternateFileName="")) returned 1 [0283.539] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.539] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.539] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.539] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0283.539] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571408) returned 1 [0283.540] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.540] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.540] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0283.540] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0283.540] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.540] GetLastError () returned 0x0 [0283.540] GetLastError () returned 0x0 [0283.540] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.541] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.542] WriteFile (in: hFile=0x250, lpBuffer=0x23e37b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e37b4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.543] SetEndOfFile (hFile=0x250) returned 1 [0283.543] CloseHandle (hObject=0x250) returned 1 [0283.543] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.544] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.544] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.544] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.544] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.544] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.544] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.544] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.544] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.545] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.545] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.545] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.545] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.545] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.546] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.546] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.546] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.546] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.546] CryptDestroyKey (hKey=0x55e910) returned 1 [0283.546] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0283.546] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60629330, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ced2e98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.547] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60629330, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ced2e98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.547] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ced2e98, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ced2e98, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ced2e98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.547] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ced2e98, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ced2e98, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ced2e98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.547] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.548] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60629330, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x60629330, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x60629330, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName="Temp", cAlternateFileName="")) returned 0 [0283.548] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0283.548] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xcb208e81, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xcb208e81, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79727466, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0283.548] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.548] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.548] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.548] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.548] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.548] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.549] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570a78) returned 1 [0283.549] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.549] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.549] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0283.549] CryptDestroyHash (hHash=0x55e750) returned 1 [0283.549] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.549] GetLastError () returned 0x0 [0283.549] GetLastError () returned 0x0 [0283.549] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.550] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.552] WriteFile (in: hFile=0x24c, lpBuffer=0x23e37f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e37f4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.554] SetEndOfFile (hFile=0x24c) returned 1 [0283.554] CloseHandle (hObject=0x24c) returned 1 [0283.554] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.555] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.555] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.555] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.555] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.555] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0283.555] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.555] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.556] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.556] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.556] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.556] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.556] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.556] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.556] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.556] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.557] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.557] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.557] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0283.557] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0283.557] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xcb208e81, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4ced2e98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.557] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xcb208e81, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4ced2e98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.557] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ced2e98, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ced2e98, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cef8f81, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.557] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb208e81, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x3bd567c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3bd567c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Indexed DB", cAlternateFileName="INDEXE~1")) returned 1 [0283.558] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.558] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.558] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.558] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.558] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.558] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.558] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0283.558] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.558] CryptHashData (hHash=0x55e750, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.559] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0283.559] CryptDestroyHash (hHash=0x55e750) returned 1 [0283.559] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.559] GetLastError () returned 0x0 [0283.559] GetLastError () returned 0x0 [0283.559] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.559] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.563] WriteFile (in: hFile=0x250, lpBuffer=0x23e3804*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3804*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.565] SetEndOfFile (hFile=0x250) returned 1 [0283.565] CloseHandle (hObject=0x250) returned 1 [0283.565] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.566] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.566] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0283.566] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.567] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.567] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.567] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.567] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.567] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.567] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.567] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.567] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.568] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.568] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.568] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.568] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.568] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.568] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.568] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0283.568] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0283.568] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb208e81, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x3bd567c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cef8f81, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0283.568] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb208e81, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x3bd567c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cef8f81, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aae53a7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3aae53a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3ab0b741, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBCHK~1.CRY")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab0b741, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3ab0b741, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3acaf01d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBLOG~1.CRY")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd51c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3acd51c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3ae9ee57, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb0003C.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDB000~1.CRY")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aecbebf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3aecbebf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3b173a09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb0003D.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDB000~2.CRY")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b199f38, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3b199f38, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3b286e5f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb0003E.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDB000~3.CRY")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b29ba9e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3b29ba9e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3b3cd100, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb0003F.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDB000~4.CRY")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3f330d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3b3f330d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3b67baa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb00040.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ED6F1A~1.CRY")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b6a1cb3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3b6a1cb3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3b92a53a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb00041.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ED5234~1.CRY")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b950896, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3b950896, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3b9c2e2a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb00042.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ED0482~1.CRY")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9c2e2a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3b9c2e2a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3baa7c42, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb00043.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDB5D0~1.CRY")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bacded1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3bacded1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3bb40659, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb00044.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ED672F~1.CRY")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb668d9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3bb668d9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3bbff158, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb00045.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDA8D0~1.CRY")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bc2555a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3bc2555a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3bcbde1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edb00046.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ED5A2F~1.CRY")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb25521c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xcb25521c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xcb25521c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb25521c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xcb25521c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xcb27b58d, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bcbde1e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3bcbde1e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3bd567c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="edbtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBTMP~1.CRY")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cef8f81, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cef8f81, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cef8f81, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb27b58d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xcb27b58d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x6895a622, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1680000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IndexedDB.edb", cAlternateFileName="INDEXE~1.EDB")) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb27b58d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xcb27b58d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x6895a622, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x1680000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IndexedDB.edb", cAlternateFileName="INDEXE~1.EDB")) returned 0 [0283.569] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0283.569] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb208e81, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x3bd567c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3bd567c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Indexed DB", cAlternateFileName="INDEXE~1")) returned 0 [0283.569] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.570] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cd2f7a8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cd2f7a8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cd2f7a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x54424420, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.570] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605908ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x605908ab, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x605908ab, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x54424420, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0283.570] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.570] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.570] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.570] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0283.570] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0283.571] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.571] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.571] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0283.571] CryptDestroyHash (hHash=0x55e290) returned 1 [0283.571] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.571] GetLastError () returned 0x0 [0283.571] GetLastError () returned 0x0 [0283.571] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.572] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.573] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3844*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3844*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.574] SetEndOfFile (hFile=0x24c) returned 1 [0283.574] CloseHandle (hObject=0x24c) returned 1 [0283.574] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.575] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.575] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.575] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.575] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.575] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.575] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.575] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.575] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.576] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.576] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.576] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.576] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.576] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.576] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.576] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.577] CryptDestroyKey (hKey=0x55e910) returned 1 [0283.577] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0283.577] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605908ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x605908ab, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4cf1f3c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0283.577] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605908ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x605908ab, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4cf1f3c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.577] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf1f3c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cf1f3c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cf1f3c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.577] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf1f3c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cf1f3c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cf1f3c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.577] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0283.577] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3bdc8d32, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3bdc8d32, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0283.577] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.577] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.578] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.578] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.578] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.578] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570968) returned 1 [0283.579] CryptCreateHash (in: hProv=0x570968, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.579] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.579] CryptDeriveKey (in: hProv=0x570968, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0283.579] CryptDestroyHash (hHash=0x55e910) returned 1 [0283.579] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.579] GetLastError () returned 0x0 [0283.579] GetLastError () returned 0x0 [0283.579] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.580] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.581] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3854*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3854*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.582] SetEndOfFile (hFile=0x24c) returned 1 [0283.582] CloseHandle (hObject=0x24c) returned 1 [0283.582] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.583] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.584] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.584] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0283.591] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.591] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.591] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.592] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.592] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.592] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.593] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.593] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.594] CryptDestroyKey (hKey=0x55e210) returned 1 [0283.594] CryptReleaseContext (hProv=0x570968, dwFlags=0x0) returned 1 [0283.594] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3bdc8d32, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cf1f3c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.594] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3bdc8d32, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cf1f3c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.595] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7196220b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xf6689dd5, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xf6689dd5, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DeviceSearchCache", cAlternateFileName="DEVICE~1")) returned 1 [0283.595] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.595] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.595] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.595] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.595] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570858) returned 1 [0283.596] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.596] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.596] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e750) returned 1 [0283.596] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.596] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.596] GetLastError () returned 0x0 [0283.596] GetLastError () returned 0x0 [0283.597] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.597] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\DeviceSearchCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\devicesearchcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.599] WriteFile (in: hFile=0x250, lpBuffer=0x23e3894*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3894*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.600] SetEndOfFile (hFile=0x250) returned 1 [0283.601] CloseHandle (hObject=0x250) returned 1 [0283.601] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.602] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.602] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.602] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.602] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.602] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.602] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0283.602] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.603] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.603] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.603] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.603] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.603] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.604] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.604] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.604] CryptDestroyKey (hKey=0x55e750) returned 1 [0283.604] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0283.604] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\DeviceSearchCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\devicesearchcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7196220b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xf6689dd5, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4cf45680, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.604] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7196220b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0xf6689dd5, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4cf45680, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457e39d9, ftCreationTime.dwHighDateTime=0x1d8a64d, ftLastAccessTime.dwLowDateTime=0x4580ebe6, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x459077c2, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x1a5cd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133039039768590531.txt", cAlternateFileName="APFBBC~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa60387d3, ftCreationTime.dwHighDateTime=0x1d8a64e, ftLastAccessTime.dwLowDateTime=0xa60bb0fb, ftLastAccessTime.dwHighDateTime=0x1d8a64e, ftLastWriteTime.dwLowDateTime=0xa60bd81e, ftLastWriteTime.dwHighDateTime=0x1d8a64e, nFileSizeHigh=0x0, nFileSizeLow=0x1a5cd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133039045711359287.txt", cAlternateFileName="APPCAC~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd07b8749, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0xd4a53e37, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd5403790, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x1a468, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040059623021567.txt", cAlternateFileName="APPCAC~2.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x312e465, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x31547fa, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x36b1f32, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x173ae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040059811944077.txt", cAlternateFileName="APPCAC~3.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1362803d, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x1362803d, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x1373312c, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040061123266563.txt", cAlternateFileName="APPCAC~4.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15e63aa5, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x15e63aa5, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x15fe153d, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040061185555619.txt", cAlternateFileName="APE0E5~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1af276ea, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x1af276ea, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x1b8d6eb2, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040061240405128.txt", cAlternateFileName="APC0B4~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee55abd, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x1ee55abd, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x1f0b7fa1, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040061328914220.txt", cAlternateFileName="APD271~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x219d88ac, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x219d88ac, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x21b09d86, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040061379430897.txt", cAlternateFileName="AP3E50~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d73d647, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x2d73d647, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x2d7d5fed, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040061436795643.txt", cAlternateFileName="APD532~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e7c79e4, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x2e7c79e4, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x2e860811, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040061618385022.txt", cAlternateFileName="AP0489~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30f90f44, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x30f90f44, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x312b1e5b, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040061644202390.txt", cAlternateFileName="AP7B6E~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334d1a3d, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x334d1a3d, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x335b6a6b, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040061686012466.txt", cAlternateFileName="AP1432~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3573d815, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x35763e3b, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x357fc781, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040061719366060.txt", cAlternateFileName="APFE46~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x396922ca, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x396922ca, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x39c3ba79, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040061752733174.txt", cAlternateFileName="AP1F98~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x558bc2fd, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x55f70e6f, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x56861966, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040061824877292.txt", cAlternateFileName="APAFC6~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e96d638, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x6e96d638, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x6ecdaaa2, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040062413099320.txt", cAlternateFileName="AP22E8~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x810785e8, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x810785e8, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x814a4545, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040062725169468.txt", cAlternateFileName="APAE89~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8632bfbd, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x8632bfbd, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x8670bae8, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040063027496025.txt", cAlternateFileName="APA778~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ec1d047, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x8ec1d047, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x8f2ab7f8, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040063121055077.txt", cAlternateFileName="AP5773~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98efb927, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x98efb927, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x9915e056, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040063302069291.txt", cAlternateFileName="AP9BC7~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce9c518, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0x9ce9c518, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0x9cfa7490, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040063443722670.txt", cAlternateFileName="APB57A~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d2dd32, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0xb3d2dd32, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0xb43bc90a, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040063497777084.txt", cAlternateFileName="AP58DB~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef3fa5a, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0xbef3fa5a, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0xbefd838d, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040063880239562.txt", cAlternateFileName="AP451A~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc12dca87, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0xc140dba6, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0xc14a69d5, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040064058720540.txt", cAlternateFileName="AP5388~1.TXT")) returned 1 [0283.605] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55522c4, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0xc55522c4, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0xc56835da, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040064101395546.txt", cAlternateFileName="APBD82~1.TXT")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab995ec, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0xcab995ec, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0xcad3ce1c, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040064185280887.txt", cAlternateFileName="APE16B~1.TXT")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd324e0b2, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0xd329a579, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0xd33332f5, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040064267125564.txt", cAlternateFileName="AP2C54~1.TXT")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd62e22e3, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0xd62e22e3, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0xd637afe7, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040064436119377.txt", cAlternateFileName="APB5C4~1.TXT")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6c91b81, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0xd6cb7e1d, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0xd6d508b0, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040064447647259.txt", cAlternateFileName="AP8DE5~1.TXT")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd76ffe0a, ftCreationTime.dwHighDateTime=0x1d8a73b, ftLastAccessTime.dwLowDateTime=0xd7725f98, ftLastAccessTime.dwHighDateTime=0x1d8a73b, ftLastWriteTime.dwLowDateTime=0xd77bee50, ftLastWriteTime.dwHighDateTime=0x1d8a73b, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133040064457995652.txt", cAlternateFileName="APD1E0~1.TXT")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bc09dfd, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0x9bc2ff5d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x9bd3b014, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x1357f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133068423092418241.txt", cAlternateFileName="AP857F~1.TXT")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb94b9cf6, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb957886d, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb963748d, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x14946, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133068423586542957.txt", cAlternateFileName="AP874A~1.TXT")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbafb42f4, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xbafb42f4, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xbafb42f4, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x14946, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133068423639653858.txt", cAlternateFileName="AP8A19~1.TXT")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf64c002f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xf65f1413, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xf6689dd5, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x14946, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppCache133068424639574833.txt", cAlternateFileName="AP653B~1.TXT")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf45680, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cf45680, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cf6b643, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fc5c0d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x91eac711, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x91f45223, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x36a28, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SettingsCache.txt", cAlternateFileName="SETTIN~1.TXT")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fc5c0d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x91eac711, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x91f45223, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x36a28, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SettingsCache.txt", cAlternateFileName="SETTIN~1.TXT")) returned 0 [0283.606] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf1f3c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cf1f3c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cf1f3c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x63614373, dwReserved1=0x742e6568, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bda2c0a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3bda2c0a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3bdc8d32, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x63614373, dwReserved1=0x742e6568, cFileName="speech_onecorereg.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SPEECH~1.CRY")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x98b617a5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x98b617a5, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x98b617a5, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x63614373, dwReserved1=0x742e6568, cFileName="speech_onecorereg.bin.LOG1", cAlternateFileName="SPEECH~1.LOG")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x98b617a5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x98b617a5, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x98b617a5, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x63614373, dwReserved1=0x742e6568, cFileName="speech_onecorereg.bin.LOG2", cAlternateFileName="SPEECH~2.LOG")) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x98b617a5, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x98b617a5, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x98b617a5, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x63614373, dwReserved1=0x742e6568, cFileName="speech_onecorereg.bin.LOG2", cAlternateFileName="SPEECH~2.LOG")) returned 0 [0283.606] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.606] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x607a6a92, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x607a6a92, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x607a6a92, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x63656e6f, dwReserved1=0x7265726f, cFileName="Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.52_")) returned 1 [0283.607] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.607] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.607] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.607] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.607] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.607] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.607] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0283.607] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.607] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.608] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0283.608] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.608] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.608] GetLastError () returned 0x0 [0283.608] GetLastError () returned 0x0 [0283.608] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.608] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.611] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38a4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.612] SetEndOfFile (hFile=0x24c) returned 1 [0283.612] CloseHandle (hObject=0x24c) returned 1 [0283.612] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.613] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.613] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.613] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.613] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.613] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.613] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0283.613] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.613] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.614] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.614] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.614] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.614] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.614] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.615] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.615] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.615] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.615] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0283.615] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x607a6a92, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x607a6a92, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4cf6b643, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.615] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x607a6a92, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x607a6a92, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4cf6b643, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.615] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x607a6a92, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3bdc8d32, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3bdc8d32, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0283.615] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.615] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.616] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.616] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0283.616] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570a78) returned 1 [0283.617] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.617] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.617] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e750) returned 1 [0283.617] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.617] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.617] GetLastError () returned 0x0 [0283.617] GetLastError () returned 0x0 [0283.617] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.617] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.618] WriteFile (in: hFile=0x250, lpBuffer=0x23e38e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e38e4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.619] SetEndOfFile (hFile=0x250) returned 1 [0283.619] CloseHandle (hObject=0x250) returned 1 [0283.620] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.621] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.621] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0283.621] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.621] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.622] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.622] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.622] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.622] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.622] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.623] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.623] CryptDestroyKey (hKey=0x55e750) returned 1 [0283.623] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0283.623] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x607a6a92, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3bdc8d32, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cf919c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.623] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x607a6a92, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3bdc8d32, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cf919c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.623] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x607a6a92, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x1138dbe9, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6092423b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0283.623] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bdc8d32, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3bdc8d32, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3bdef095, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0283.623] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x607ccd2e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x607ccd2e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x607ccd2e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0283.623] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x607ccd2e, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x607ccd2e, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x607ccd2e, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0283.623] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf919c4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cf919c4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cf919c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.623] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf919c4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cf919c4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cf919c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.624] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.624] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf6b643, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cf6b643, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cf6b643, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.624] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf6b643, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cf6b643, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cf6b643, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.624] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.624] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6056a7b2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6056a7b2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0283.624] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.624] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.624] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.624] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.624] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0283.625] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.625] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.625] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0283.625] CryptDestroyHash (hHash=0x55e910) returned 1 [0283.625] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.625] GetLastError () returned 0x0 [0283.625] GetLastError () returned 0x0 [0283.625] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.626] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.627] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38f4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.629] SetEndOfFile (hFile=0x24c) returned 1 [0283.629] CloseHandle (hObject=0x24c) returned 1 [0283.629] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.630] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.630] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.630] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.630] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.631] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.631] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.631] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.631] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.633] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.633] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.634] CryptDestroyKey (hKey=0x55e750) returned 1 [0283.634] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0283.634] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6056a7b2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4cf919c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.634] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6056a7b2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4cf919c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.634] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf919c4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cf919c4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cf919c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.634] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cf919c4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cf919c4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cf919c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.634] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.634] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605908ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3be153a8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3be153a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0283.634] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.634] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.635] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.635] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.635] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0283.635] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.635] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.635] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0283.635] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.635] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.636] GetLastError () returned 0x0 [0283.636] GetLastError () returned 0x0 [0283.636] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.636] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.638] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3934*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3934*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.639] SetEndOfFile (hFile=0x24c) returned 1 [0283.639] CloseHandle (hObject=0x24c) returned 1 [0283.639] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.640] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.640] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.640] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.640] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.640] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.640] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0283.640] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.641] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.641] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.641] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.641] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.641] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.641] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.641] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.642] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.642] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.642] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.642] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0283.642] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605908ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3be153a8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cfb7c8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.643] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605908ab, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3be153a8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cfb7c8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.643] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cfb7c8f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cfb7c8f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cfb7c8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.643] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x605b6c25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x605b6c25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0283.643] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x321682d, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x321682d, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0283.643] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3be153a8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3be153a8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3be153a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0283.643] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6d738e58, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6d738e58, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6d738e58, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0283.643] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6d738e58, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6d738e58, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6d738e58, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0283.643] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6d738e58, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6d738e58, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6d738e58, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0283.643] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.643] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x605b6c25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x605b6c25, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0283.643] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.643] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.643] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.643] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0283.644] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0283.644] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.644] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.644] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0283.644] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.644] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.644] GetLastError () returned 0x0 [0283.644] GetLastError () returned 0x0 [0283.644] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.645] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.646] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3944*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3944*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.647] SetEndOfFile (hFile=0x24c) returned 1 [0283.648] CloseHandle (hObject=0x24c) returned 1 [0283.648] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.648] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.649] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0283.649] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.649] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.649] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.650] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.650] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.650] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.650] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.650] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.651] CryptDestroyKey (hKey=0x55e750) returned 1 [0283.651] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0283.651] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x605b6c25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4cfb7c8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0283.651] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x605b6c25, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x605b6c25, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4cfb7c8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.651] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cfb7c8f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cfb7c8f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cfdde1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.651] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cfb7c8f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cfb7c8f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cfdde1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.651] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0283.651] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6056a7b2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6056a7b2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0283.651] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.651] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.652] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.652] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.652] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.652] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.652] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0283.652] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.652] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.652] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0283.652] CryptDestroyHash (hHash=0x55e290) returned 1 [0283.652] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.653] GetLastError () returned 0x0 [0283.653] GetLastError () returned 0x0 [0283.653] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.653] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.654] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3984*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3984*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.655] SetEndOfFile (hFile=0x24c) returned 1 [0283.655] CloseHandle (hObject=0x24c) returned 1 [0283.656] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.656] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.656] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.657] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.657] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.657] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.657] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.657] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.657] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.658] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.658] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.658] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.658] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.658] CryptDestroyKey (hKey=0x55e190) returned 1 [0283.658] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0283.659] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6056a7b2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4cfdde1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.659] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6056a7b2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4cfdde1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.659] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cfdde1c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cfdde1c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cfdde1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.659] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cfdde1c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cfdde1c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4cfdde1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.659] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.659] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6056a7b2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6056a7b2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6056a7b2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0283.659] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0283.659] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9420a0c8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.Windows.ParentalControls_cw5n1h2txyewy", cAlternateFileName="MICROS~1.PAR")) returned 1 [0283.659] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.659] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.659] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.659] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.660] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570a78) returned 1 [0283.660] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0283.660] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.660] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e750) returned 1 [0283.660] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.660] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0283.660] GetLastError () returned 0x0 [0283.660] GetLastError () returned 0x0 [0283.660] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.661] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0283.662] WriteFile (in: hFile=0x248, lpBuffer=0x23e3994*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3994*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.671] SetEndOfFile (hFile=0x248) returned 1 [0283.671] CloseHandle (hObject=0x248) returned 1 [0283.671] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.672] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.672] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.672] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.672] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.672] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0283.673] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.673] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.673] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.673] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.673] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.673] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.673] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.673] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.673] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.673] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.673] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.674] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.674] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.674] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.674] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.674] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.674] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.674] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.674] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.674] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.675] CryptDestroyKey (hKey=0x55e750) returned 1 [0283.675] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0283.675] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4cfdde1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0283.675] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4cfdde1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.675] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd6b4d3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0283.675] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.675] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.675] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.675] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.676] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0283.676] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0283.676] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.676] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.676] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0283.676] CryptDestroyHash (hHash=0x55e910) returned 1 [0283.676] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.676] GetLastError () returned 0x0 [0283.676] GetLastError () returned 0x0 [0283.676] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.677] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.680] WriteFile (in: hFile=0x24c, lpBuffer=0x23e39d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e39d4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.681] SetEndOfFile (hFile=0x24c) returned 1 [0283.681] CloseHandle (hObject=0x24c) returned 1 [0283.681] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.682] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.682] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0283.683] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.683] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.683] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.683] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.683] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.683] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.683] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.683] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.683] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.684] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.684] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.684] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.684] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.684] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.684] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.684] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.684] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.684] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.684] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.684] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.684] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0283.684] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0283.685] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d02a24e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0283.685] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d02a24e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.685] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d02a24e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d02a24e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d02a24e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.685] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd4522e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0283.685] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.685] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.685] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.685] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.685] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.685] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.685] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0283.686] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.686] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.686] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0283.686] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0283.686] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.686] GetLastError () returned 0x0 [0283.686] GetLastError () returned 0x0 [0283.686] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.687] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.688] WriteFile (in: hFile=0x250, lpBuffer=0x23e39e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e39e4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.689] SetEndOfFile (hFile=0x250) returned 1 [0283.689] CloseHandle (hObject=0x250) returned 1 [0283.689] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.690] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.690] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.690] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.690] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.690] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.690] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.690] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.691] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.691] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.691] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.691] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.691] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.691] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.691] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.691] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.691] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.691] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.691] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.692] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.692] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.692] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.692] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.692] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0283.692] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0283.692] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d02a24e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0283.692] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d02a24e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.693] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d02a24e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d02a24e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d02a24e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.693] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d02a24e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d02a24e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d02a24e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.693] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0283.693] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd6b4d3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd6b4d3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd6b4d3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0283.693] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.693] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.693] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.693] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.693] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.693] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.693] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5708e0) returned 1 [0283.694] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.694] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.694] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0283.694] CryptDestroyHash (hHash=0x55e910) returned 1 [0283.694] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.694] GetLastError () returned 0x0 [0283.694] GetLastError () returned 0x0 [0283.694] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.695] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.696] WriteFile (in: hFile=0x250, lpBuffer=0x23e3a24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a24*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.697] SetEndOfFile (hFile=0x250) returned 1 [0283.697] CloseHandle (hObject=0x250) returned 1 [0283.697] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.698] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.698] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0283.698] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.699] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.699] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.699] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.699] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.699] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.700] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.700] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.700] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.700] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.700] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0283.700] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0283.700] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd6b4d3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd6b4d3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d0505c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.700] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd6b4d3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd6b4d3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d0505c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.700] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d0505c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d0505c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d0505c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.700] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d0505c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d0505c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d0505c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.700] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.701] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd6b4d3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd6b4d3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd6b4d3, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0283.701] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.701] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.701] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.701] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0283.701] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c10) returned 1 [0283.702] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.702] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.702] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0283.702] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.702] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.702] GetLastError () returned 0x0 [0283.702] GetLastError () returned 0x0 [0283.702] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.703] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.704] WriteFile (in: hFile=0x250, lpBuffer=0x23e3a34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a34*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.705] SetEndOfFile (hFile=0x250) returned 1 [0283.705] CloseHandle (hObject=0x250) returned 1 [0283.705] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.706] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.707] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0283.707] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.708] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.708] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.708] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.708] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.708] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.708] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.708] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.708] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.708] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.709] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.709] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.709] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.709] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.709] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.711] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.711] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0283.711] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd6b4d3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd6b4d3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d0505c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.711] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8bd6b4d3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd6b4d3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d0505c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.711] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d0505c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d0505c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d0505c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.711] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d0505c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d0505c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d0505c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.711] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.711] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd4522e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0283.712] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.712] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.712] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.712] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.712] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570a78) returned 1 [0283.713] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.713] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.713] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0283.713] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.713] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.713] GetLastError () returned 0x0 [0283.713] GetLastError () returned 0x0 [0283.713] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.713] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.717] WriteFile (in: hFile=0x250, lpBuffer=0x23e3a74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a74*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.718] SetEndOfFile (hFile=0x250) returned 1 [0283.718] CloseHandle (hObject=0x250) returned 1 [0283.718] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.719] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.719] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.719] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.719] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.720] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.720] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.720] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.720] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.720] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.720] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.720] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.721] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.721] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.721] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.721] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.721] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.721] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.721] CryptDestroyKey (hKey=0x55e290) returned 1 [0283.721] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0283.721] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d076935, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.722] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d076935, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.722] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d076935, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d076935, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d076935, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.722] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d076935, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d076935, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d076935, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.722] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.722] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd4522e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd4522e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd4522e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0283.722] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0283.722] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd1f071, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0283.722] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.722] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.722] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.722] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.722] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.722] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.723] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0283.723] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.723] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.723] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0283.723] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.723] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.723] GetLastError () returned 0x0 [0283.723] GetLastError () returned 0x0 [0283.724] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.724] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.725] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3a84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3a84*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.726] SetEndOfFile (hFile=0x24c) returned 1 [0283.726] CloseHandle (hObject=0x24c) returned 1 [0283.726] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.728] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.728] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.728] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0283.729] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.729] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.729] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.729] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.729] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.729] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.730] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.730] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.730] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.730] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.730] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.731] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.731] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0283.731] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d076935, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0283.731] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d076935, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.731] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d076935, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d076935, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d09ca96, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.731] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d076935, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d076935, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d09ca96, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.731] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0283.731] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cfdde1c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4cfdde1c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d0040da, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.731] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0283.732] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.732] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.732] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.732] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0283.732] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0283.733] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.733] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.733] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0283.733] CryptDestroyHash (hHash=0x55e790) returned 1 [0283.733] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.733] GetLastError () returned 0x0 [0283.733] GetLastError () returned 0x0 [0283.733] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.734] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.735] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ac4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ac4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.737] SetEndOfFile (hFile=0x24c) returned 1 [0283.737] CloseHandle (hObject=0x24c) returned 1 [0283.737] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.738] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.738] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0283.738] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.738] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.739] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.739] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.739] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.739] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.739] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.739] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.740] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.740] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.740] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0283.740] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0283.741] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d09ca96, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0283.741] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d09ca96, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.741] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d09ca96, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d09ca96, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d09ca96, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.741] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d09ca96, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d09ca96, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d09ca96, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.741] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0283.741] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0283.741] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.741] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.742] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.742] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0283.742] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0283.743] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.743] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.743] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0283.743] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.743] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.743] GetLastError () returned 0x0 [0283.743] GetLastError () returned 0x0 [0283.743] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.744] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.745] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ad4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ad4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.746] SetEndOfFile (hFile=0x24c) returned 1 [0283.746] CloseHandle (hObject=0x24c) returned 1 [0283.746] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.747] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.747] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0283.748] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.748] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.748] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.749] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.749] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.749] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.749] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.749] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.749] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.749] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.750] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.750] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0283.750] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d0c2c81, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.750] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d0c2c81, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.750] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0c2c81, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d0c2c81, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d0c2c81, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.750] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0c2c81, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d0c2c81, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d0c2c81, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.750] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.751] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9420a0c8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9420a0c8, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0283.751] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.751] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.751] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.751] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0283.751] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570968) returned 1 [0283.752] CryptCreateHash (in: hProv=0x570968, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.752] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.752] CryptDeriveKey (in: hProv=0x570968, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0283.752] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0283.752] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.752] GetLastError () returned 0x0 [0283.752] GetLastError () returned 0x0 [0283.752] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.753] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.758] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b14*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.760] SetEndOfFile (hFile=0x24c) returned 1 [0283.760] CloseHandle (hObject=0x24c) returned 1 [0283.760] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.761] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.761] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0283.762] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.762] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.762] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.762] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.763] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.763] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.763] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.763] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.763] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.763] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.763] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.763] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.763] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.763] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.763] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.764] CryptDestroyKey (hKey=0x55e650) returned 1 [0283.764] CryptReleaseContext (hProv=0x570968, dwFlags=0x0) returned 1 [0283.764] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9420a0c8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d0e8dba, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.764] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9420a0c8, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d0e8dba, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.764] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3c09dafd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c09dafd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0283.764] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.764] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.765] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.765] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.765] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.765] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0283.765] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5708e0) returned 1 [0283.766] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.766] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.766] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e790) returned 1 [0283.766] CryptDestroyHash (hHash=0x55e290) returned 1 [0283.766] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.766] GetLastError () returned 0x0 [0283.766] GetLastError () returned 0x0 [0283.766] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.767] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.768] WriteFile (in: hFile=0x250, lpBuffer=0x23e3b24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3b24*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.769] SetEndOfFile (hFile=0x250) returned 1 [0283.770] CloseHandle (hObject=0x250) returned 1 [0283.770] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.771] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.771] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0283.771] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.772] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.772] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.772] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.772] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.773] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.773] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.773] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.773] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.773] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.773] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.773] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.774] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.774] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0283.774] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3c09dafd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d0e8dba, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.774] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9420a0c8, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3c09dafd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d0e8dba, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.774] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c0779b6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3c0779b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c09dafd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0283.774] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x942565a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x942565a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x942565a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0283.774] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x942565a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x942565a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x942565a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0283.774] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0e8dba, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d0e8dba, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d0e8dba, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.774] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0e8dba, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d0e8dba, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d0e8dba, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.774] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.774] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0c2c81, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d0c2c81, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d0e8dba, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.774] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0c2c81, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d0c2c81, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d0e8dba, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.774] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.775] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0283.775] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.775] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.775] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.775] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0283.775] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0283.776] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.776] CryptHashData (hHash=0x55e310, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.776] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0283.776] CryptDestroyHash (hHash=0x55e310) returned 1 [0283.776] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.776] GetLastError () returned 0x0 [0283.776] GetLastError () returned 0x0 [0283.776] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.777] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.778] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b74*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.779] SetEndOfFile (hFile=0x24c) returned 1 [0283.780] CloseHandle (hObject=0x24c) returned 1 [0283.780] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.781] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.781] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0283.781] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.781] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.782] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.782] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.782] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.782] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.783] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.783] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.783] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.783] CryptDestroyKey (hKey=0x55e910) returned 1 [0283.783] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0283.783] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d10f26d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.784] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d10f26d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.784] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d10f26d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d10f26d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d10f26d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.784] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d10f26d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d10f26d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d10f26d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.784] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.784] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3c0ea123, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c0ea123, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0283.784] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.784] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.784] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.784] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.784] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.784] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.785] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571518) returned 1 [0283.785] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.785] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.785] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0283.785] CryptDestroyHash (hHash=0x55e190) returned 1 [0283.785] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.785] GetLastError () returned 0x0 [0283.785] GetLastError () returned 0x0 [0283.786] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.786] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.787] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b94*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.790] SetEndOfFile (hFile=0x24c) returned 1 [0283.790] CloseHandle (hObject=0x24c) returned 1 [0283.790] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.791] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.791] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0283.792] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.792] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.792] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.792] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.793] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.793] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.793] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.793] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.794] CryptDestroyKey (hKey=0x55e910) returned 1 [0283.794] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0283.794] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3c0ea123, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d10f26d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.794] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3c0ea123, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d10f26d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.794] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d10f26d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d10f26d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d135407, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.794] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd1f071, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0283.794] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c0c3ca2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3c0c3ca2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c0ea123, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0283.794] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93186f59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93186f59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93186f59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0283.794] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93186f59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93186f59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93186f59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0283.794] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93186f59, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93186f59, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93186f59, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0283.794] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.795] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bd1f071, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0283.795] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.795] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.795] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.795] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0283.795] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0283.796] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.796] CryptHashData (hHash=0x55e650, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.796] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0283.796] CryptDestroyHash (hHash=0x55e650) returned 1 [0283.796] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.796] GetLastError () returned 0x0 [0283.796] GetLastError () returned 0x0 [0283.796] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.797] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.799] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3bd4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3bd4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.800] SetEndOfFile (hFile=0x24c) returned 1 [0283.800] CloseHandle (hObject=0x24c) returned 1 [0283.800] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.801] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.801] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0283.802] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.802] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.802] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.802] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.802] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.802] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.802] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.802] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.803] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.803] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.803] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.803] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.804] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.804] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0283.804] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d135407, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0283.804] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bd1f071, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bd1f071, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d135407, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.804] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d135407, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d135407, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d135407, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.804] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d135407, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d135407, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d135407, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.804] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0283.804] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0283.805] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.805] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.805] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.805] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0283.805] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570638) returned 1 [0283.806] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.806] CryptHashData (hHash=0x55e210, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.806] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0283.806] CryptDestroyHash (hHash=0x55e210) returned 1 [0283.806] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.806] GetLastError () returned 0x0 [0283.806] GetLastError () returned 0x0 [0283.807] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.807] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.808] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3be4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3be4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.809] SetEndOfFile (hFile=0x24c) returned 1 [0283.810] CloseHandle (hObject=0x24c) returned 1 [0283.810] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.811] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.811] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0283.811] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.812] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.812] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.812] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.812] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.813] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.813] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.813] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.813] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.813] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.813] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.813] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0283.814] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d15b5cf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.814] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d15b5cf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.814] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d15b5cf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d15b5cf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d15b5cf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.814] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d15b5cf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d15b5cf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d15b5cf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.814] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0283.814] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8bcf8c41, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x8bcf8c41, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x8bcf8c41, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0283.814] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0283.814] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a85f54c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1c2a8e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.Windows.Photos_8wekyb3d8bbwe", cAlternateFileName="MICROS~1.PHO")) returned 1 [0283.814] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.814] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.815] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.815] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.815] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570748) returned 1 [0283.816] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0283.816] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.816] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0283.816] CryptDestroyHash (hHash=0x55e650) returned 1 [0283.816] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0283.816] GetLastError () returned 0x0 [0283.816] GetLastError () returned 0x0 [0283.816] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.816] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0283.818] WriteFile (in: hFile=0x248, lpBuffer=0x23e3c24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c24*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.821] SetEndOfFile (hFile=0x248) returned 1 [0283.821] CloseHandle (hObject=0x248) returned 1 [0283.821] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.822] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.822] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.825] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.825] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.825] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.826] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0283.826] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.826] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.826] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.826] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.826] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.826] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.827] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.827] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.827] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.827] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.827] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.828] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.828] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0283.828] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0283.828] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a85f54c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d15b5cf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0283.828] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a85f54c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d15b5cf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.828] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0283.829] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.829] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.829] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.829] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0283.829] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0283.830] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.830] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.830] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e2d0) returned 1 [0283.830] CryptDestroyHash (hHash=0x55e750) returned 1 [0283.830] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.830] GetLastError () returned 0x0 [0283.830] GetLastError () returned 0x0 [0283.830] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.831] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.833] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3c34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3c34*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.834] SetEndOfFile (hFile=0x24c) returned 1 [0283.835] CloseHandle (hObject=0x24c) returned 1 [0283.835] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.836] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.836] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0283.836] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.837] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.837] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.837] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.837] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.838] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.838] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.838] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.838] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0283.839] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0283.839] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d1818de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0283.839] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d1818de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.839] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d1818de, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d1818de, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d1a7a1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.839] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0283.839] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.839] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.839] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.839] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.839] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.839] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0283.840] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5710d8) returned 1 [0283.840] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.840] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.840] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e750) returned 1 [0283.840] CryptDestroyHash (hHash=0x55e610) returned 1 [0283.840] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.840] GetLastError () returned 0x0 [0283.840] GetLastError () returned 0x0 [0283.841] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.841] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.844] WriteFile (in: hFile=0x250, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.846] SetEndOfFile (hFile=0x250) returned 1 [0283.846] CloseHandle (hObject=0x250) returned 1 [0283.846] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.847] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.847] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.847] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.847] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.847] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.847] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0283.847] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.848] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.848] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.848] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.848] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.848] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.848] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.848] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.849] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.849] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.849] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.849] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.849] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.849] CryptDestroyKey (hKey=0x55e750) returned 1 [0283.849] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0283.850] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d1a7a1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0283.850] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d1a7a1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.850] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d1a7a1e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d1a7a1e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d1a7a1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.850] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d1a7a1e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d1a7a1e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d1a7a1e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.850] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0283.850] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0283.851] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.851] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.851] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.851] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.851] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0283.852] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.852] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.852] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0283.852] CryptDestroyHash (hHash=0x55e610) returned 1 [0283.852] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.852] GetLastError () returned 0x0 [0283.852] GetLastError () returned 0x0 [0283.852] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.853] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.854] WriteFile (in: hFile=0x250, lpBuffer=0x23e3c84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c84*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.855] SetEndOfFile (hFile=0x250) returned 1 [0283.856] CloseHandle (hObject=0x250) returned 1 [0283.856] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.856] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.856] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.857] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.857] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.857] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.857] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0283.857] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.857] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.857] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.857] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.857] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.858] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.858] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.858] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.858] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.858] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.858] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.858] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.858] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.858] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.858] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.858] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.859] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.859] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.859] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.859] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.859] CryptDestroyKey (hKey=0x55e650) returned 1 [0283.859] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0283.859] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d1cddc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.859] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d1cddc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.860] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d1cddc4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d1cddc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d1cddc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.860] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d1cddc4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d1cddc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d1cddc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.860] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.860] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0283.860] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.860] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.860] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.860] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0283.860] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0283.861] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.861] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.861] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0283.861] CryptDestroyHash (hHash=0x55e210) returned 1 [0283.861] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.861] GetLastError () returned 0x0 [0283.861] GetLastError () returned 0x0 [0283.861] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.862] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.863] WriteFile (in: hFile=0x250, lpBuffer=0x23e3cc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3cc4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.865] SetEndOfFile (hFile=0x250) returned 1 [0283.865] CloseHandle (hObject=0x250) returned 1 [0283.865] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.869] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.870] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.870] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.870] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.870] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0283.870] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.870] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.871] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.871] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.871] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.871] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.871] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.871] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.871] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.871] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.872] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.872] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.872] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.873] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.873] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0283.873] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d1cddc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.874] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d1cddc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.874] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d1cddc4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d1cddc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d1cddc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.874] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d1cddc4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d1cddc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d1cddc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.874] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.874] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0283.874] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.876] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.877] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.877] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0283.877] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0283.878] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.878] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.878] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0283.878] CryptDestroyHash (hHash=0x55e750) returned 1 [0283.878] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.878] GetLastError () returned 0x0 [0283.878] GetLastError () returned 0x0 [0283.878] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.879] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.882] WriteFile (in: hFile=0x250, lpBuffer=0x23e3cd4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3cd4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.883] SetEndOfFile (hFile=0x250) returned 1 [0283.884] CloseHandle (hObject=0x250) returned 1 [0283.884] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.885] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.885] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.885] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.885] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0283.886] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.888] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.888] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.888] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.888] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.888] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.888] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.888] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.888] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.888] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.888] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.889] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.889] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.889] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.889] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.889] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.890] CryptDestroyKey (hKey=0x55e610) returned 1 [0283.890] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0283.891] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d2148d6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0283.891] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d2148d6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.891] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d2148d6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d2148d6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d21f892, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.891] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d2148d6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d2148d6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d21f892, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.891] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0283.891] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a91e2d1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a91e2d1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a91e2d1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0283.891] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0283.891] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0283.891] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.891] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.892] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.892] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.892] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0283.905] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.905] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.905] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0283.905] CryptDestroyHash (hHash=0x55e910) returned 1 [0283.905] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.905] GetLastError () returned 0x0 [0283.905] GetLastError () returned 0x0 [0283.906] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.906] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.908] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3d14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3d14*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.909] SetEndOfFile (hFile=0x24c) returned 1 [0283.910] CloseHandle (hObject=0x24c) returned 1 [0283.910] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.911] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.911] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0283.916] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.916] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.916] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.916] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.916] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.916] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.917] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.917] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.917] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.917] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.917] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.917] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.917] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.918] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.918] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.918] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.918] CryptDestroyKey (hKey=0x55e190) returned 1 [0283.918] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0283.918] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d24e5d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0283.919] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d24e5d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.919] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d24e5d4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d24e5d4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d24e5d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.919] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d24e5d4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d24e5d4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d24e5d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.919] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0283.919] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d15b5cf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d15b5cf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d1818de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.919] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0283.919] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.919] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.919] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.920] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.920] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0283.920] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0283.921] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.921] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.921] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e2d0) returned 1 [0283.921] CryptDestroyHash (hHash=0x55e910) returned 1 [0283.921] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.922] GetLastError () returned 0x0 [0283.922] GetLastError () returned 0x0 [0283.922] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.922] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.923] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3d24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3d24*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.925] SetEndOfFile (hFile=0x24c) returned 1 [0283.925] CloseHandle (hObject=0x24c) returned 1 [0283.925] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.926] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.926] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.928] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.928] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.929] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0283.929] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.929] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.929] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.929] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.929] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.930] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.930] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.930] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.930] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.930] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.930] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.930] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.931] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0283.931] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0283.931] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d27489d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0283.931] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d27489d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.931] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d27489d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d27489d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d27489d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.931] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d27489d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d27489d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d27489d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.931] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0283.931] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a85f54c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x215572b2, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2ca3f5b7, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0283.931] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.931] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.931] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.931] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0283.932] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0283.932] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.932] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.932] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0283.932] CryptDestroyHash (hHash=0x55e750) returned 1 [0283.932] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.932] GetLastError () returned 0x0 [0283.932] GetLastError () returned 0x0 [0283.933] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.933] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.935] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3d64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3d64*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.936] SetEndOfFile (hFile=0x24c) returned 1 [0283.937] CloseHandle (hObject=0x24c) returned 1 [0283.937] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.937] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.937] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.937] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.938] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.938] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0283.938] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.938] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.938] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.938] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.938] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.938] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.939] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.939] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.939] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.939] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.939] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.940] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.940] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0283.940] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a85f54c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x215572b2, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x4d29aa16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0283.940] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a85f54c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x215572b2, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x4d29aa16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.940] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d27489d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d27489d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d29aa16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.940] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bf29d64, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6bf29d64, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x6bfc26e7, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MediaDb.v1.sqlite", cAlternateFileName="MEDIAD~1.SQL")) returned 1 [0283.940] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c00eae9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6c00eae9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x417dbadb, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MediaDb.v1.sqlite-shm", cAlternateFileName="MEDIAD~3.SQL")) returned 1 [0283.940] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c00eae9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6c00eae9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2da3edc7, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x60920, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MediaDb.v1.sqlite-wal", cAlternateFileName="MEDIAD~2.SQL")) returned 1 [0283.940] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ca3f5b7, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2ca3f5b7, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2ca3f5b7, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PhotosAppTile", cAlternateFileName="PHOTOS~1")) returned 1 [0283.940] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.940] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.940] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.940] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0283.941] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0283.941] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.941] CryptHashData (hHash=0x55e2d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.941] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e790) returned 1 [0283.941] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0283.941] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.941] GetLastError () returned 0x0 [0283.941] GetLastError () returned 0x0 [0283.941] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.942] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTile\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptile\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.943] WriteFile (in: hFile=0x250, lpBuffer=0x23e3d74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3d74*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.944] SetEndOfFile (hFile=0x250) returned 1 [0283.944] CloseHandle (hObject=0x250) returned 1 [0283.944] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.945] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.945] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.945] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.945] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.945] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.945] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0283.946] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.946] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.946] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.946] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.946] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.946] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.946] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.946] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.946] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.946] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.946] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.947] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.947] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0283.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.947] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.947] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.947] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.947] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.947] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0283.948] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTile\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptile\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ca3f5b7, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2ca3f5b7, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x4d29aa16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.948] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ca3f5b7, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2ca3f5b7, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x4d29aa16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.948] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d29aa16, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d29aa16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d29aa16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.948] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d29aa16, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d29aa16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d29aa16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.948] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.948] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65a97266, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x65a97266, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x42e9e1ac, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="PhotosAppTracing_BGTask.etl", cAlternateFileName="PHOTOS~1.ETL")) returned 1 [0283.948] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x215572b2, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x215572b2, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x1cd824f7, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="PhotosAppTracing_BGTask.last.etl", cAlternateFileName="PHOTOS~2.ETL")) returned 1 [0283.948] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x215572b2, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x215572b2, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x1cd824f7, ftLastWriteTime.dwHighDateTime=0x1d7b05a, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="PhotosAppTracing_BGTask.last.etl", cAlternateFileName="PHOTOS~2.ETL")) returned 0 [0283.948] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0283.948] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1c2a8e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1c2a8e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72547070, dwReserved1=0x6e696361, cFileName="Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_X")) returned 1 [0283.948] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.948] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.949] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.949] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0283.949] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0283.949] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.949] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.949] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0283.949] CryptDestroyHash (hHash=0x55e910) returned 1 [0283.953] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.953] GetLastError () returned 0x0 [0283.953] GetLastError () returned 0x0 [0283.954] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.954] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.957] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3db4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3db4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.958] SetEndOfFile (hFile=0x24c) returned 1 [0283.959] CloseHandle (hObject=0x24c) returned 1 [0283.959] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.960] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.962] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0283.962] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.962] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.963] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.963] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.963] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.963] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.963] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.963] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.963] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.963] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.963] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.963] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.963] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0283.963] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.963] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.963] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.964] CryptDestroyKey (hKey=0x55e650) returned 1 [0283.964] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0283.964] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1c2a8e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d2c0e02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0283.964] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1c2a8e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d2c0e02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.964] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3c32624a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c32624a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0283.964] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.964] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.965] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.965] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0283.965] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0283.966] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0283.966] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.966] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e790) returned 1 [0283.966] CryptDestroyHash (hHash=0x55e210) returned 1 [0283.966] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0283.966] GetLastError () returned 0x0 [0283.966] GetLastError () returned 0x0 [0283.966] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.967] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0283.968] WriteFile (in: hFile=0x250, lpBuffer=0x23e3dd4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3dd4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.969] SetEndOfFile (hFile=0x250) returned 1 [0283.969] CloseHandle (hObject=0x250) returned 1 [0283.969] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.970] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.970] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.970] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.970] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.970] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.970] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0283.974] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.974] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.974] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.974] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.975] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.975] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.976] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.976] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.976] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.976] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.976] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.976] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.976] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.977] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.977] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.977] CryptDestroyKey (hKey=0x55e790) returned 1 [0283.978] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0283.978] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.1001.16470.0_x64__8wekyb3d8bbwe\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3c32624a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d2e6eda, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0283.978] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b1c2a8e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3c32624a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d2e6eda, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.978] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1f4ffe, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3c1f4ffe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c32624a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0283.978] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5b1e8cc4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1e8cc4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1e8cc4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0283.978] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5b1e8cc4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5b1e8cc4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5b1e8cc4, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0283.978] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d2e6eda, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d2e6eda, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d2e6eda, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.978] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d2e6eda, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d2e6eda, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d2e6eda, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.979] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0283.979] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d2c0e02, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d2c0e02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d2c0e02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.979] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d2c0e02, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d2c0e02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d2c0e02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.979] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0283.979] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0283.979] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.979] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.980] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.980] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0283.980] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0283.982] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.982] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.982] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0283.982] CryptDestroyHash (hHash=0x55e610) returned 1 [0283.982] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.982] GetLastError () returned 0x0 [0283.982] GetLastError () returned 0x0 [0283.982] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.983] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.984] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3e24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3e24*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.985] SetEndOfFile (hFile=0x24c) returned 1 [0283.985] CloseHandle (hObject=0x24c) returned 1 [0283.985] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.986] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.986] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.986] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0283.986] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.987] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.987] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.987] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.987] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.987] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.987] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0283.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.988] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.988] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.988] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.988] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.988] CryptDestroyKey (hKey=0x55e650) returned 1 [0283.988] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0283.988] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d30d26c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0283.988] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d30d26c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0283.989] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d30d26c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d30d26c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d30d26c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0283.989] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d30d26c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d30d26c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d30d26c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0283.989] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0283.989] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3c34c64c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c34c64c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0283.989] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0283.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0283.989] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0283.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0283.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0283.989] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571518) returned 1 [0283.990] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0283.990] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0283.990] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0283.990] CryptDestroyHash (hHash=0x55e650) returned 1 [0283.990] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0283.990] GetLastError () returned 0x0 [0283.990] GetLastError () returned 0x0 [0283.990] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0283.991] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0283.992] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3e44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3e44*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0283.993] SetEndOfFile (hFile=0x24c) returned 1 [0283.993] CloseHandle (hObject=0x24c) returned 1 [0283.993] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0283.994] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0283.994] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0283.995] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0283.995] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.995] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.995] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.995] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0283.998] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0283.999] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.999] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.999] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.999] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0283.999] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0283.999] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0283.999] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0283.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0283.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0283.999] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0283.999] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0283.999] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.000] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.000] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.000] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0284.000] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3c34c64c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d30d26c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0284.000] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3c34c64c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d30d26c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.000] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d30d26c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d30d26c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d30d26c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.000] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a8abac1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a8abac1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a8abac1, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0284.000] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c34c64c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3c34c64c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c34c64c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0284.000] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x67a6d241, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67a6d241, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67a6d241, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0284.000] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x67a6d241, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67a6d241, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67a6d241, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0284.000] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x67a6d241, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67a6d241, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x67a6d241, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0284.000] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0284.004] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5a885816, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0284.004] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.004] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.004] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.004] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0284.006] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0284.007] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.007] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.007] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0284.007] CryptDestroyHash (hHash=0x55e910) returned 1 [0284.007] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.007] GetLastError () returned 0x0 [0284.007] GetLastError () returned 0x0 [0284.007] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.008] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.010] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3e84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3e84*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.011] SetEndOfFile (hFile=0x24c) returned 1 [0284.011] CloseHandle (hObject=0x24c) returned 1 [0284.011] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.012] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.012] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0284.013] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.013] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.013] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.014] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.014] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.014] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.014] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.015] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.015] CryptDestroyKey (hKey=0x55e750) returned 1 [0284.015] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0284.015] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d333417, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0284.015] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a885816, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d333417, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.015] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d333417, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d333417, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d333417, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.016] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d333417, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d333417, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d333417, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.016] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0284.016] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x42eaeb21, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x42eaeb21, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0284.016] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.016] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.018] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.018] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.018] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.018] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0284.018] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0284.019] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.019] CryptHashData (hHash=0x55e750, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.019] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0284.019] CryptDestroyHash (hHash=0x55e750) returned 1 [0284.019] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.019] GetLastError () returned 0x0 [0284.019] GetLastError () returned 0x0 [0284.019] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.020] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.021] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3e94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3e94*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.022] SetEndOfFile (hFile=0x24c) returned 1 [0284.023] CloseHandle (hObject=0x24c) returned 1 [0284.023] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.023] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.024] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0284.024] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.024] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.024] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.025] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.025] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.025] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.025] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.025] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.026] CryptDestroyKey (hKey=0x55e790) returned 1 [0284.026] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0284.026] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x42eaeb21, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x4d359a71, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0284.026] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x42eaeb21, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x4d359a71, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.026] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d359a71, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d359a71, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d359a71, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.026] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d5bb6bd, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2d5bb6bd, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2d5bb6bd, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ShareCache", cAlternateFileName="SHAREC~1")) returned 1 [0284.026] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.026] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.027] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.027] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.027] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0284.027] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0284.027] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.027] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.027] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0284.027] CryptDestroyHash (hHash=0x55e750) returned 1 [0284.027] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.027] GetLastError () returned 0x0 [0284.027] GetLastError () returned 0x0 [0284.029] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.029] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState\\ShareCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\tempstate\\sharecache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.030] WriteFile (in: hFile=0x250, lpBuffer=0x23e3ed4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ed4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.031] SetEndOfFile (hFile=0x250) returned 1 [0284.032] CloseHandle (hObject=0x250) returned 1 [0284.032] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.032] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.033] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0284.033] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.033] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.033] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.034] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.034] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.034] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.034] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.034] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.035] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.035] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0284.035] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\TempState\\ShareCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\tempstate\\sharecache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d5bb6bd, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2d5bb6bd, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x4d37f8ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0284.035] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d5bb6bd, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2d5bb6bd, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x4d37f8ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.035] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d37f8ca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d37f8ca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d37f8ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.035] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d37f8ca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d37f8ca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d37f8ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.035] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0284.035] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d5bb6bd, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2d5bb6bd, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2d5bb6bd, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ShareCache", cAlternateFileName="SHAREC~1")) returned 0 [0284.035] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0284.035] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a885816, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x42eaeb21, ftLastAccessTime.dwHighDateTime=0x1d8a64d, ftLastWriteTime.dwLowDateTime=0x42eaeb21, ftLastWriteTime.dwHighDateTime=0x1d8a64d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0284.036] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0284.036] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97d7ec6c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9866f95d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy", cAlternateFileName="MICROS~1.SEC")) returned 1 [0284.036] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.036] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.036] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.036] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.036] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.036] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0284.036] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570da8) returned 1 [0284.037] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0284.037] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.037] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0284.037] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.037] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f190*=0x18) returned 1 [0284.037] GetLastError () returned 0x0 [0284.037] GetLastError () returned 0x0 [0284.037] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.037] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0284.038] WriteFile (in: hFile=0x248, lpBuffer=0x23e3ee4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ee4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.039] SetEndOfFile (hFile=0x248) returned 1 [0284.040] CloseHandle (hObject=0x248) returned 1 [0284.040] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.040] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.043] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.043] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.043] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0284.043] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.043] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.043] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.043] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.045] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.046] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.046] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.046] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.046] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.047] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.047] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.047] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.047] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0284.047] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97d7ec6c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d37f8ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0284.047] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97d7ec6c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d37f8ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.048] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0284.048] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.048] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.048] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.048] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0284.048] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0284.049] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.049] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.049] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0284.049] CryptDestroyHash (hHash=0x55e750) returned 1 [0284.049] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.049] GetLastError () returned 0x0 [0284.049] GetLastError () returned 0x0 [0284.049] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.049] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.052] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3f24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3f24*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.053] SetEndOfFile (hFile=0x24c) returned 1 [0284.053] CloseHandle (hObject=0x24c) returned 1 [0284.053] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.054] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.054] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.056] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.056] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.056] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.056] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0284.056] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.056] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.057] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.057] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.057] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.057] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.057] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.058] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.058] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.058] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.058] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0284.058] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d3a5aa2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0284.058] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d3a5aa2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.058] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d3a5aa2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d3a5aa2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d3a5aa2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.059] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0284.059] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.059] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.059] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.059] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0284.059] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0284.060] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.060] CryptHashData (hHash=0x55e2d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.060] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0284.060] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0284.060] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.060] GetLastError () returned 0x0 [0284.060] GetLastError () returned 0x0 [0284.060] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.061] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.062] WriteFile (in: hFile=0x250, lpBuffer=0x23e3f34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f34*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.063] SetEndOfFile (hFile=0x250) returned 1 [0284.063] CloseHandle (hObject=0x250) returned 1 [0284.063] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.064] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.065] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.065] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.065] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.065] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.065] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0284.065] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.065] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.065] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.065] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.066] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.068] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.068] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.068] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.068] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.068] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.069] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.069] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.069] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.069] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0284.069] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d3cbd27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0284.070] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d3cbd27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.070] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d3cbd27, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d3cbd27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d3cbd27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.070] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d3cbd27, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d3cbd27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d3cbd27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.070] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0284.070] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0284.070] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.070] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.070] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.070] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.070] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0284.071] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0284.071] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.071] CryptHashData (hHash=0x55e310, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.071] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e2d0) returned 1 [0284.071] CryptDestroyHash (hHash=0x55e310) returned 1 [0284.071] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.071] GetLastError () returned 0x0 [0284.071] GetLastError () returned 0x0 [0284.072] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.072] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.073] WriteFile (in: hFile=0x250, lpBuffer=0x23e3f74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f74*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.075] SetEndOfFile (hFile=0x250) returned 1 [0284.075] CloseHandle (hObject=0x250) returned 1 [0284.075] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.076] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.076] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.076] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.076] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0284.077] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.077] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.077] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.077] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.079] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.079] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.079] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.079] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.080] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.080] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.080] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.080] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0284.080] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0284.080] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d3cbd27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0284.080] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d3cbd27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.081] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d3cbd27, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d3cbd27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d3f2162, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.081] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d3cbd27, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d3cbd27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d3f2162, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.081] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0284.081] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0284.081] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.081] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.081] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.081] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0284.081] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0284.082] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.082] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.082] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0284.082] CryptDestroyHash (hHash=0x55e610) returned 1 [0284.082] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.082] GetLastError () returned 0x0 [0284.082] GetLastError () returned 0x0 [0284.082] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.083] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.084] WriteFile (in: hFile=0x250, lpBuffer=0x23e3f84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f84*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.085] SetEndOfFile (hFile=0x250) returned 1 [0284.085] CloseHandle (hObject=0x250) returned 1 [0284.085] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.086] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.086] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0284.087] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.087] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.087] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.087] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.088] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.088] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.088] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.088] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.089] CryptDestroyKey (hKey=0x55e910) returned 1 [0284.089] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0284.089] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d3f2162, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0284.089] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d3f2162, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.089] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d3f2162, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d3f2162, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d3f2162, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.089] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d3f2162, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d3f2162, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d3f2162, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.089] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0284.089] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0284.089] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.089] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.090] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.090] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.090] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.090] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0284.090] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0284.093] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.093] CryptHashData (hHash=0x55e2d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.093] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0284.093] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0284.093] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.093] GetLastError () returned 0x0 [0284.093] GetLastError () returned 0x0 [0284.093] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.093] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.095] WriteFile (in: hFile=0x250, lpBuffer=0x23e3fc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3fc4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.096] SetEndOfFile (hFile=0x250) returned 1 [0284.096] CloseHandle (hObject=0x250) returned 1 [0284.096] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.097] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.097] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.097] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.097] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.097] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.097] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0284.097] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.098] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.098] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.098] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.098] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.098] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.099] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.099] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.099] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.099] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.099] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.099] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.099] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.102] CryptDestroyKey (hKey=0x55e190) returned 1 [0284.102] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0284.102] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d4181c3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0284.103] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d4181c3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.103] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4181c3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d4181c3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d4181c3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.103] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4181c3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d4181c3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d4181c3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.103] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0284.103] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97ed6108, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97ed6108, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97ed6108, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0284.103] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0284.103] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e89cc4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0284.103] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.103] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.104] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.104] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0284.104] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0284.105] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.105] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.105] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0284.105] CryptDestroyHash (hHash=0x55e750) returned 1 [0284.105] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.106] GetLastError () returned 0x0 [0284.106] GetLastError () returned 0x0 [0284.106] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.107] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.108] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3fd4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3fd4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.110] SetEndOfFile (hFile=0x24c) returned 1 [0284.110] CloseHandle (hObject=0x24c) returned 1 [0284.110] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.111] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.111] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.113] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.113] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.114] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0284.114] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.114] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.114] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.114] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.114] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.114] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.114] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.115] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.115] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.115] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.115] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.115] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.116] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.116] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0284.116] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d43e699, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0284.116] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d43e699, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.116] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d43e699, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d43e699, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d43e699, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.116] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d43e699, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d43e699, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d43e699, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.116] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0284.116] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d37f8ca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d37f8ca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d37f8ca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.116] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0284.116] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.116] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.117] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.117] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0284.117] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0284.117] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.117] CryptHashData (hHash=0x55e310, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.117] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0284.118] CryptDestroyHash (hHash=0x55e310) returned 1 [0284.118] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.118] GetLastError () returned 0x0 [0284.118] GetLastError () returned 0x0 [0284.118] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.118] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.119] WriteFile (in: hFile=0x24c, lpBuffer=0x23e5d1c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e5d1c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.120] SetEndOfFile (hFile=0x24c) returned 1 [0284.121] CloseHandle (hObject=0x24c) returned 1 [0284.121] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.121] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.121] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.121] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0284.121] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.122] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.122] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.122] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.123] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.123] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.123] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.123] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.125] CryptDestroyKey (hKey=0x55e910) returned 1 [0284.125] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0284.125] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d43e699, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0284.126] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d43e699, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.126] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d43e699, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d43e699, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d43e699, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.126] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d43e699, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d43e699, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d43e699, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.126] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0284.126] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97dcaeaa, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97dcaeaa, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97dcaeaa, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0284.126] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.126] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.126] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.126] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0284.126] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0284.127] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.127] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.127] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0284.127] CryptDestroyHash (hHash=0x55e910) returned 1 [0284.127] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.127] GetLastError () returned 0x0 [0284.127] GetLastError () returned 0x0 [0284.127] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.128] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.129] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.130] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ff4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ff4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.131] SetEndOfFile (hFile=0x24c) returned 1 [0284.131] CloseHandle (hObject=0x24c) returned 1 [0284.131] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.132] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.132] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.132] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.132] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0284.132] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.133] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.133] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.133] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.133] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.133] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.133] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.134] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.134] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.134] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.134] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.134] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.134] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.135] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.135] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0284.135] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97dcaeaa, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97dcaeaa, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d46466a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0284.135] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97dcaeaa, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97dcaeaa, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d46466a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.135] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d46466a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d46466a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d46466a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.135] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d46466a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d46466a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d46466a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.135] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0284.136] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9866f95d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9866f95d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0284.136] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.136] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.136] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.136] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0284.136] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0284.137] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.137] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.137] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0284.139] CryptDestroyHash (hHash=0x55e610) returned 1 [0284.139] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.139] GetLastError () returned 0x0 [0284.140] GetLastError () returned 0x0 [0284.140] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.140] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.144] WriteFile (in: hFile=0x24c, lpBuffer=0x23e410c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e410c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.145] SetEndOfFile (hFile=0x24c) returned 1 [0284.145] CloseHandle (hObject=0x24c) returned 1 [0284.146] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.146] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.149] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.149] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.149] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.149] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0284.150] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.150] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.150] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.150] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.150] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.150] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.150] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.150] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.150] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.151] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.151] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.151] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.151] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.151] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.151] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.151] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.152] CryptDestroyKey (hKey=0x55e750) returned 1 [0284.152] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0284.152] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9866f95d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d48a925, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0284.152] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9866f95d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d48a925, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.152] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3c3e4ec1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c3e4ec1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0284.152] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.152] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.153] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.153] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0284.153] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0284.154] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.154] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.154] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0284.154] CryptDestroyHash (hHash=0x55e790) returned 1 [0284.154] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.154] GetLastError () returned 0x0 [0284.154] GetLastError () returned 0x0 [0284.154] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.155] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.157] WriteFile (in: hFile=0x250, lpBuffer=0x23e4300*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e4300*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.161] SetEndOfFile (hFile=0x250) returned 1 [0284.161] CloseHandle (hObject=0x250) returned 1 [0284.161] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.162] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.162] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.162] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.162] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.162] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.162] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0284.163] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.163] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.163] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.163] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.163] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.164] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.164] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.164] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.164] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.165] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0284.165] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0284.165] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\microsoft.windows.secondarytileexperience_10.0.0.0_neutral__cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3c3e4ec1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d4b0ba6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0284.165] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9866f95d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3c3e4ec1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d4b0ba6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.165] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3e4ec1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3c3e4ec1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c3e4ec1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0284.165] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x986e1f11, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x986e1f11, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x986e1f11, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0284.165] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x986e1f11, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x986e1f11, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x986e1f11, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0284.165] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4b0ba6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d4b0ba6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d4b0ba6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.165] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4b0ba6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d4b0ba6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d4b0ba6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.166] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0284.166] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d48a925, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d48a925, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d48a925, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.166] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d48a925, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d48a925, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d48a925, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.166] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0284.166] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0284.166] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.166] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.166] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.166] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0284.167] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0284.167] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.167] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.167] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0284.167] CryptDestroyHash (hHash=0x55e610) returned 1 [0284.167] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.167] GetLastError () returned 0x0 [0284.168] GetLastError () returned 0x0 [0284.168] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.171] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0284.171] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.172] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.173] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.174] SetEndOfFile (hFile=0x24c) returned 1 [0284.174] CloseHandle (hObject=0x24c) returned 1 [0284.175] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.175] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.175] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.176] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.176] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.176] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.176] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0284.176] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.176] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.176] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.176] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.177] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.177] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.177] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.177] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.177] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.177] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.177] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.177] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.178] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.178] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.178] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.178] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.178] CryptDestroyKey (hKey=0x55e910) returned 1 [0284.178] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0284.178] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d4d72ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0284.179] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d4d72ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.179] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4d72ff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d4d72ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d4d72ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.179] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4d72ff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d4d72ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d4d72ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.179] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0284.179] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3c5161fc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c5161fc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0284.179] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.179] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.179] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.179] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.179] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.180] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0284.180] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570638) returned 1 [0284.180] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.180] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.180] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0284.180] CryptDestroyHash (hHash=0x55e750) returned 1 [0284.180] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.181] GetLastError () returned 0x0 [0284.181] GetLastError () returned 0x0 [0284.181] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.181] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.182] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.184] SetEndOfFile (hFile=0x24c) returned 1 [0284.187] CloseHandle (hObject=0x24c) returned 1 [0284.187] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.188] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.188] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.188] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.188] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.188] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.188] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0284.188] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.188] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.189] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.189] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.189] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.189] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.189] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.189] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.189] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.189] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.189] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.189] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.190] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.190] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.190] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.190] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.190] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.190] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.190] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.190] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.191] CryptDestroyKey (hKey=0x55e790) returned 1 [0284.191] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0284.191] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3c5161fc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d4d72ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0284.191] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3c5161fc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d4d72ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.191] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4d72ff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d4d72ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d4fd0bf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.191] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e89cc4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0284.191] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5161fc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3c5161fc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c5161fc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0284.191] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9332a8a0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9332a8a0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9332a8a0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0284.191] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9332a8a0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9332a8a0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9332a8a0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0284.191] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9332a8a0, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9332a8a0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9332a8a0, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0284.193] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0284.194] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e89cc4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0284.194] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.194] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.194] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.194] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0284.194] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0284.195] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.195] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.195] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0284.195] CryptDestroyHash (hHash=0x55e610) returned 1 [0284.195] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.195] GetLastError () returned 0x0 [0284.195] GetLastError () returned 0x0 [0284.195] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.196] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0284.197] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.197] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.199] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.201] SetEndOfFile (hFile=0x24c) returned 1 [0284.201] CloseHandle (hObject=0x24c) returned 1 [0284.201] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.202] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.204] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.205] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.205] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0284.205] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.205] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.205] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.205] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.205] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.205] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.206] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.206] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.206] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.206] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.206] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.206] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.206] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.206] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.206] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.206] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.206] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.207] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.207] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.207] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.207] CryptDestroyKey (hKey=0x55e650) returned 1 [0284.207] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0284.207] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d4fd0bf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0284.207] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e89cc4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e89cc4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d4fd0bf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.208] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4fd0bf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d4fd0bf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d5234a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.208] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4fd0bf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d4fd0bf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d5234a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.208] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0284.208] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0284.208] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.208] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.208] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.208] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.208] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.208] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0284.208] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0284.209] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.209] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.209] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0284.209] CryptDestroyHash (hHash=0x55e790) returned 1 [0284.209] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.209] GetLastError () returned 0x0 [0284.209] GetLastError () returned 0x0 [0284.210] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.210] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.211] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.213] SetEndOfFile (hFile=0x24c) returned 1 [0284.213] CloseHandle (hObject=0x24c) returned 1 [0284.213] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.214] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.214] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.217] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0284.217] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.218] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.218] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.218] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.218] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.219] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.219] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.219] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.219] CryptDestroyKey (hKey=0x55e750) returned 1 [0284.219] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0284.220] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.SecondaryTileExperience_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.secondarytileexperience_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d5234a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0284.220] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4d5234a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.220] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d5234a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d5234a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d5234a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.220] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d5234a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d5234a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d5234a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.220] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0284.220] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97e6396b, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x97e6396b, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x97e6396b, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0284.220] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0284.220] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy", cAlternateFileName="MICROS~1.SHE")) returned 1 [0284.220] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.220] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.221] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.221] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.221] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.221] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0284.221] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570a78) returned 1 [0284.222] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0284.222] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.222] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0284.222] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.222] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f190*=0x18) returned 1 [0284.222] GetLastError () returned 0x0 [0284.222] GetLastError () returned 0x0 [0284.222] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.223] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0284.224] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.224] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0284.225] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.227] SetEndOfFile (hFile=0x248) returned 1 [0284.227] CloseHandle (hObject=0x248) returned 1 [0284.227] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.228] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.228] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.230] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.230] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.230] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0284.231] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.231] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.231] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.231] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.231] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.232] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.232] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.232] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.232] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.232] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.233] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.233] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.233] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.233] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.233] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.233] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0284.233] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e3e36ea, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d549521, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0284.233] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e3e36ea, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d549521, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.233] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0284.234] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.234] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.234] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.234] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0284.234] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0284.235] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.235] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.235] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0284.235] CryptDestroyHash (hHash=0x55e610) returned 1 [0284.235] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.235] GetLastError () returned 0x0 [0284.235] GetLastError () returned 0x0 [0284.235] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.236] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.240] WriteFile (in: hFile=0x24c, lpBuffer=0x23e524c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e524c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.242] SetEndOfFile (hFile=0x24c) returned 1 [0284.242] CloseHandle (hObject=0x24c) returned 1 [0284.242] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.243] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.243] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.243] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.243] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.243] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.243] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0284.244] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.244] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.244] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.244] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.244] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.245] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.245] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.245] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.245] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.246] CryptDestroyKey (hKey=0x55e210) returned 1 [0284.246] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0284.246] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4d56f799, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0284.246] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4d56f799, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.246] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d56f799, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d56f799, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d56f799, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.246] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0284.247] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.247] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.247] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.247] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.247] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.248] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0284.248] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0284.248] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.248] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.248] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0284.248] CryptDestroyHash (hHash=0x55e910) returned 1 [0284.249] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.249] GetLastError () returned 0x0 [0284.249] GetLastError () returned 0x0 [0284.249] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.250] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0284.255] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.256] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.258] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.260] SetEndOfFile (hFile=0x250) returned 1 [0284.260] CloseHandle (hObject=0x250) returned 1 [0284.260] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.261] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.261] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.281] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.281] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.281] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.281] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0284.281] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.281] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.282] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.282] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.282] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.282] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.282] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.282] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.282] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.282] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.282] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.283] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.283] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.283] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.283] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.283] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.283] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.283] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.283] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.283] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.284] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0284.284] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0284.284] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d595d2d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0284.284] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d595d2d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.284] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d595d2d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d595d2d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d595d2d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.284] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d595d2d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d595d2d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d595d2d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.284] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0284.285] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a19402a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a19402a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a19402a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0284.285] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.285] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.285] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.285] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.285] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.285] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0284.285] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0284.286] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.286] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.286] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0284.286] CryptDestroyHash (hHash=0x55e910) returned 1 [0284.286] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.286] GetLastError () returned 0x0 [0284.286] GetLastError () returned 0x0 [0284.286] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.287] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0284.288] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.288] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.290] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.291] SetEndOfFile (hFile=0x250) returned 1 [0284.291] CloseHandle (hObject=0x250) returned 1 [0284.291] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.292] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.292] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.304] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.304] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0284.307] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.307] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.307] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.307] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.308] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.308] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.308] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.308] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.309] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.309] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.309] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.310] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0284.310] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0284.310] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a19402a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a19402a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d5e1ef4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0284.310] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a19402a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a19402a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d5e1ef4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.310] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d5e1ef4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d5e1ef4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d5e1ef4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.310] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d5e1ef4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d5e1ef4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d5e1ef4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.310] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0284.311] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0284.311] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.311] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.311] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.311] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.311] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.311] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0284.311] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0284.312] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.312] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.312] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e750) returned 1 [0284.312] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.312] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.312] GetLastError () returned 0x0 [0284.312] GetLastError () returned 0x0 [0284.312] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.313] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.314] WriteFile (in: hFile=0x250, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.316] SetEndOfFile (hFile=0x250) returned 1 [0284.316] CloseHandle (hObject=0x250) returned 1 [0284.316] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.317] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.317] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.317] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.317] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.317] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.317] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0284.318] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.318] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.318] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.318] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.320] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.321] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.321] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.321] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.321] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.321] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.321] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.321] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.321] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.322] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.322] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.322] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.322] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.322] CryptDestroyKey (hKey=0x55e750) returned 1 [0284.322] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0284.322] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d62e3b3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0284.323] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d62e3b3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.323] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d62e3b3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d62e3b3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d62e3b3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.323] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d62e3b3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d62e3b3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d62e3b3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.323] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0284.323] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0284.323] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.323] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.323] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.323] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.323] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.323] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0284.324] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0284.324] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.324] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.324] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e790) returned 1 [0284.324] CryptDestroyHash (hHash=0x55e910) returned 1 [0284.324] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.324] GetLastError () returned 0x0 [0284.324] GetLastError () returned 0x0 [0284.330] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.331] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0284.331] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.332] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.333] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.334] SetEndOfFile (hFile=0x250) returned 1 [0284.335] CloseHandle (hObject=0x250) returned 1 [0284.335] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.336] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.336] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.336] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.336] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0284.337] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.337] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.337] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.337] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.337] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.337] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.337] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.337] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.337] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.338] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.338] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.338] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.338] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.338] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.338] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.338] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.338] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.338] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.338] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.338] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.339] CryptDestroyKey (hKey=0x55e790) returned 1 [0284.339] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0284.339] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4d654611, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0284.339] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4d654611, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.339] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d654611, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d654611, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d654611, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.339] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0284.339] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.340] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.340] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.340] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.340] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.340] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0284.340] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x5710d8) returned 1 [0284.344] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0284.344] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.344] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e790) returned 1 [0284.344] CryptDestroyHash (hHash=0x55e750) returned 1 [0284.345] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18) returned 1 [0284.345] GetLastError () returned 0x0 [0284.345] GetLastError () returned 0x0 [0284.345] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.346] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0284.346] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.347] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0284.349] WriteFile (in: hFile=0x254, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.350] SetEndOfFile (hFile=0x254) returned 1 [0284.350] CloseHandle (hObject=0x254) returned 1 [0284.350] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.351] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.351] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.351] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.352] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.352] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.352] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0284.352] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.352] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.352] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.352] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.355] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.355] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.355] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.355] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.355] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.355] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.355] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.355] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.355] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.355] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.356] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.356] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.357] CryptDestroyKey (hKey=0x55e790) returned 1 [0284.357] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0284.357] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4d67a75c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0284.357] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4d67a75c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.357] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d67a75c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d67a75c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d67a75c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.357] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d67a75c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d67a75c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d67a75c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.357] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0284.357] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6cb00b48, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6cb00b48, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6cb00b48, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0284.357] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0284.357] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0284.358] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.358] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.358] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.358] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0284.358] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0284.359] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.359] CryptHashData (hHash=0x55e750, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.359] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0284.359] CryptDestroyHash (hHash=0x55e750) returned 1 [0284.359] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.359] GetLastError () returned 0x0 [0284.359] GetLastError () returned 0x0 [0284.359] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.360] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.361] WriteFile (in: hFile=0x250, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.362] SetEndOfFile (hFile=0x250) returned 1 [0284.362] CloseHandle (hObject=0x250) returned 1 [0284.363] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.363] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.364] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.364] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.364] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.364] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.364] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0284.364] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.364] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.364] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.365] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.367] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.367] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.368] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.368] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.368] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.368] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.369] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0284.369] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0284.369] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d6a0a76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0284.369] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d6a0a76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.369] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6a0a76, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d6a0a76, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d6a0a76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.369] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6a0a76, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d6a0a76, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d6a0a76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.369] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0284.369] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a147a84, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a147a84, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a147a84, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0284.370] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0284.370] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0fb669, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79727466, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0284.370] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.370] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.370] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.370] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0284.370] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0284.371] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.371] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.371] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0284.371] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.371] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.371] GetLastError () returned 0x0 [0284.371] GetLastError () returned 0x0 [0284.371] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.380] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0284.381] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.381] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.383] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.384] SetEndOfFile (hFile=0x24c) returned 1 [0284.384] CloseHandle (hObject=0x24c) returned 1 [0284.385] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.385] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.386] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0284.386] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.387] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.389] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.390] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.390] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.390] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.390] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.390] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.390] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.390] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.390] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.390] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.390] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.391] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.391] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.391] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.391] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.391] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.391] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0284.391] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d6c8bed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0284.392] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d6c8bed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.392] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6c8bed, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d6c8bed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d6c8bed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.392] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6c8bed, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d6c8bed, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d6c8bed, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.392] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0284.392] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d549521, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d549521, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d549521, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.392] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0fb669, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0284.392] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.392] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.392] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.392] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0284.393] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0284.393] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.393] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.393] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0284.393] CryptDestroyHash (hHash=0x55e910) returned 1 [0284.394] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.394] GetLastError () returned 0x0 [0284.394] GetLastError () returned 0x0 [0284.394] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.394] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.396] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.397] SetEndOfFile (hFile=0x24c) returned 1 [0284.397] CloseHandle (hObject=0x24c) returned 1 [0284.398] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.399] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.399] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.399] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.399] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0284.399] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.399] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.400] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.400] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.402] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.403] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.403] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.403] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.403] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.404] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.404] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.404] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.404] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0284.405] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0284.405] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d6ece0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0284.405] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d6ece0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.405] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6ece0d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d6ece0d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d6ece0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.405] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d6ece0d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d6ece0d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d6ece0d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.405] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0284.406] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0d549b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0d549b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0284.406] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.406] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.406] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.406] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.406] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.406] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0284.406] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0284.407] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.407] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.407] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0284.407] CryptDestroyHash (hHash=0x55e750) returned 1 [0284.407] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.407] GetLastError () returned 0x0 [0284.407] GetLastError () returned 0x0 [0284.407] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.408] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0284.409] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.410] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.414] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.416] SetEndOfFile (hFile=0x24c) returned 1 [0284.416] CloseHandle (hObject=0x24c) returned 1 [0284.416] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.417] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.418] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.418] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.418] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.418] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0284.418] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.423] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.423] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.423] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.423] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.423] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.423] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.423] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.424] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.424] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.424] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.424] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.424] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.424] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.424] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.425] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0284.425] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0284.425] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0d549b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d71316c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0284.425] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0d549b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d71316c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.425] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d71316c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d71316c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d71316c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.425] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d71316c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d71316c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d71316c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.425] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0284.426] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e3e36ea, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e3e36ea, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0284.426] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.426] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.426] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.426] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0284.426] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0284.427] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.427] CryptHashData (hHash=0x55e310, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.427] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0284.427] CryptDestroyHash (hHash=0x55e310) returned 1 [0284.427] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.427] GetLastError () returned 0x0 [0284.427] GetLastError () returned 0x0 [0284.427] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.428] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.475] WriteFile (in: hFile=0x24c, lpBuffer=0x23e5368*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e5368*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.476] SetEndOfFile (hFile=0x24c) returned 1 [0284.476] CloseHandle (hObject=0x24c) returned 1 [0284.476] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.477] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.477] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0284.478] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.478] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.481] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.481] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.481] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.482] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.482] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.482] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.482] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.482] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.482] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.482] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.482] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.482] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.482] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.482] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.482] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.483] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.483] CryptDestroyKey (hKey=0x55e910) returned 1 [0284.483] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0284.483] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e3e36ea, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d7abb50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0284.484] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e3e36ea, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d7abb50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.484] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3c53c37f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c53c37f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0284.484] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.484] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.484] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.484] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0284.484] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0284.485] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.485] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.485] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0284.485] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.485] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.485] GetLastError () returned 0x0 [0284.485] GetLastError () returned 0x0 [0284.485] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.486] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0284.487] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.487] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.489] WriteFile (in: hFile=0x250, lpBuffer=0x23e3820*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3820*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.490] SetEndOfFile (hFile=0x250) returned 1 [0284.490] CloseHandle (hObject=0x250) returned 1 [0284.491] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.492] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.492] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.492] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.492] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.492] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.492] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0284.492] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.493] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.493] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.493] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.495] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.495] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.496] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.496] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.496] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.496] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.496] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.497] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.497] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.497] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.498] CryptDestroyKey (hKey=0x55e910) returned 1 [0284.498] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0284.498] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3c53c37f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d7d1efe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0284.498] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3c53c37f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d7d1efe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.498] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e3e36ea, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e7e520, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x5e455d80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat", cAlternateFileName="ACTIVA~1.DAT")) returned 1 [0284.498] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c53c37f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3c53c37f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c53c37f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0284.498] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5e409927, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e409927, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e409927, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0284.498] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5e409927, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e409927, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5e409927, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0284.498] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d7d1efe, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d7d1efe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d7d1efe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.498] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d7d1efe, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d7d1efe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d7d1efe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.498] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0284.499] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d739320, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d739320, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d7abb50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.499] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d739320, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d739320, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d7abb50, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.499] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0284.499] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0d549b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0d549b, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0284.499] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.499] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.499] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.499] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0284.499] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0284.500] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.500] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.500] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0284.500] CryptDestroyHash (hHash=0x55e910) returned 1 [0284.500] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.500] GetLastError () returned 0x0 [0284.500] GetLastError () returned 0x0 [0284.500] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.501] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.502] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3840*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3840*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.504] SetEndOfFile (hFile=0x24c) returned 1 [0284.504] CloseHandle (hObject=0x24c) returned 1 [0284.504] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.505] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.505] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.506] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.506] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.506] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0284.506] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.509] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.510] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.510] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.511] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.511] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.511] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.511] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.511] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.511] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.511] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.512] CryptDestroyKey (hKey=0x55e310) returned 1 [0284.512] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0284.512] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0d549b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d7f7f78, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0284.564] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0d549b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d7f7f78, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.564] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d7f7f78, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d7f7f78, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d7f7f78, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.564] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d7f7f78, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d7f7f78, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d7f7f78, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.565] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0284.565] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3c56251c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c56251c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0284.565] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.565] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.565] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.565] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0284.565] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570a78) returned 1 [0284.566] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.566] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.566] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0284.566] CryptDestroyHash (hHash=0x55e910) returned 1 [0284.566] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.566] GetLastError () returned 0x0 [0284.566] GetLastError () returned 0x0 [0284.566] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.567] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0284.568] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.568] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.570] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.571] SetEndOfFile (hFile=0x24c) returned 1 [0284.572] CloseHandle (hObject=0x24c) returned 1 [0284.572] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.572] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.573] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0284.573] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.573] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.573] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.574] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.574] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.574] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.574] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.574] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.574] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.575] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.575] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.575] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.575] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.575] CryptDestroyKey (hKey=0x55e790) returned 1 [0284.575] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0284.575] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3c56251c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d89173d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0284.576] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3c56251c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d89173d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.576] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d89173d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d89173d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d89173d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.576] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1218aa, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a1218aa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a1218aa, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0284.576] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5e7e520, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0xbd752228, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0284.576] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c56251c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3c56251c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3c56251c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0284.576] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7060301e, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7060301e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7060301e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0284.576] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7060301e, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7060301e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7060301e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0284.576] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7060301e, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7060301e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x7060301e, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0284.576] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0284.576] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5a0fb669, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0284.576] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.576] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.576] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.576] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.577] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0284.577] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0284.577] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.577] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.577] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0284.577] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.577] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.577] GetLastError () returned 0x0 [0284.577] GetLastError () returned 0x0 [0284.578] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.578] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.579] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.580] SetEndOfFile (hFile=0x24c) returned 1 [0284.580] CloseHandle (hObject=0x24c) returned 1 [0284.580] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.581] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.581] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0284.582] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.582] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.582] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.583] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.583] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.583] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.583] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.583] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.584] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.584] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0284.584] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d8b6b40, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0284.584] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0fb669, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5a0fb669, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4d8b6b40, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.584] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d8b6b40, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d8b6b40, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d8b6b40, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.584] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d8b6b40, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d8b6b40, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d8b6b40, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.584] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0284.584] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cd22192, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3cd22192, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0284.585] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.585] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.585] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.585] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.585] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.585] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0284.585] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0284.586] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.586] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.586] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0284.586] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.586] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.586] GetLastError () returned 0x0 [0284.586] GetLastError () returned 0x0 [0284.586] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.587] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0284.588] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.588] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.589] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.591] SetEndOfFile (hFile=0x24c) returned 1 [0284.591] CloseHandle (hObject=0x24c) returned 1 [0284.591] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.592] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.592] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0284.593] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.593] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.594] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.594] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.594] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.594] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.595] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.595] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.595] CryptDestroyKey (hKey=0x55e210) returned 1 [0284.595] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0284.595] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cd22192, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d8b6b40, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0284.596] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cd22192, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d8b6b40, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.596] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d8b6b40, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d8b6b40, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d8dcdaa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.596] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8505eedb, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x8505eedb, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x17e58369, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x204244, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TileCache_100_0_Data.bin", cAlternateFileName="TILECA~2.BIN")) returned 1 [0284.596] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c56251c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3c56251c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3cd22192, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x204244, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TileCache_100_0_Data.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TILECA~1.CRY")) returned 1 [0284.596] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85038b9a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x85038b9a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9503da57, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TileCache_100_0_Header.bin", cAlternateFileName="TILECA~1.BIN")) returned 1 [0284.596] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd22192, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3cd22192, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3cd22192, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TileCache_100_0_Header.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TILECA~2.CRY")) returned 1 [0284.596] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cd22192, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3cd22192, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3cd22192, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3928, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TileCache_100_0_Header.bin.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TILECA~2.CRY")) returned 0 [0284.596] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0284.596] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a0d549b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cd22192, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3cd22192, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0284.596] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0284.596] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563adc86, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56afae31, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56afae31, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.WindowsCalculator_8wekyb3d8bbwe", cAlternateFileName="MIB609~1.WIN")) returned 1 [0284.597] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.597] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.597] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.597] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0284.597] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5712f8) returned 1 [0284.598] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0284.598] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.598] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0284.598] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.598] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f190*=0x18) returned 1 [0284.598] GetLastError () returned 0x0 [0284.598] GetLastError () returned 0x0 [0284.598] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.598] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0284.617] WriteFile (in: hFile=0x248, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.618] SetEndOfFile (hFile=0x248) returned 1 [0284.618] CloseHandle (hObject=0x248) returned 1 [0284.618] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.619] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.619] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0284.620] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.620] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.620] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.620] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.620] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.621] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.621] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.622] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.622] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.622] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.623] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.623] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0284.623] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563adc86, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56afae31, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d9030c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0284.623] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563adc86, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56afae31, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d9030c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.623] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5652b1d3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0284.624] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.624] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.624] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.624] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0284.624] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570638) returned 1 [0284.625] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.625] CryptHashData (hHash=0x55e210, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.625] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0284.625] CryptDestroyHash (hHash=0x55e210) returned 1 [0284.625] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.625] GetLastError () returned 0x0 [0284.625] GetLastError () returned 0x0 [0284.625] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.626] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0284.627] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.627] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.629] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3524*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3524*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.631] SetEndOfFile (hFile=0x24c) returned 1 [0284.631] CloseHandle (hObject=0x24c) returned 1 [0284.631] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.632] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.632] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0284.633] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.633] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.633] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.633] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.634] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.634] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.634] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.634] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.634] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0284.635] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0284.635] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d929354, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0284.635] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d929354, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.635] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d929354, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d929354, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d929354, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.635] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5652b1d3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0284.635] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.635] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.635] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.635] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0284.636] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570a78) returned 1 [0284.636] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.636] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.636] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0284.636] CryptDestroyHash (hHash=0x55e750) returned 1 [0284.636] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.636] GetLastError () returned 0x0 [0284.637] GetLastError () returned 0x0 [0284.637] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.638] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.639] WriteFile (in: hFile=0x250, lpBuffer=0x23e524c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e524c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.640] SetEndOfFile (hFile=0x250) returned 1 [0284.640] CloseHandle (hObject=0x250) returned 1 [0284.644] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.645] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.645] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.645] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.645] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0284.646] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.646] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.646] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.646] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.646] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.646] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.646] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.646] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.646] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.647] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.647] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.647] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.647] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.648] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.649] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0284.649] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d94f68f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0284.649] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d94f68f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.649] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d94f68f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d94f68f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d94f68f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.649] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d94f68f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d94f68f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d94f68f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.649] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0284.649] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5652b1d3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0284.649] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.650] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.650] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.650] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0284.650] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571490) returned 1 [0284.651] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.651] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.651] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e310) returned 1 [0284.651] CryptDestroyHash (hHash=0x55e610) returned 1 [0284.651] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.651] GetLastError () returned 0x0 [0284.651] GetLastError () returned 0x0 [0284.651] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.652] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.660] WriteFile (in: hFile=0x250, lpBuffer=0x23e3584*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3584*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.661] SetEndOfFile (hFile=0x250) returned 1 [0284.661] CloseHandle (hObject=0x250) returned 1 [0284.661] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.662] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.662] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.673] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.673] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.673] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.673] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0284.673] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.674] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.674] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.674] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.674] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.674] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.674] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.674] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.674] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.674] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.674] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.675] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.675] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.675] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.675] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.675] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.676] CryptDestroyKey (hKey=0x55e310) returned 1 [0284.676] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0284.676] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d94f68f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0284.676] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d94f68f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.676] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d94f68f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d94f68f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d97689f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.676] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d94f68f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d94f68f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d97689f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.676] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0284.676] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5652b1d3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0284.677] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.677] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.677] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.677] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0284.677] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571380) returned 1 [0284.678] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.678] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.678] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0284.678] CryptDestroyHash (hHash=0x55e610) returned 1 [0284.678] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.678] GetLastError () returned 0x0 [0284.678] GetLastError () returned 0x0 [0284.678] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.679] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.681] WriteFile (in: hFile=0x250, lpBuffer=0x23e3594*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3594*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.683] SetEndOfFile (hFile=0x250) returned 1 [0284.683] CloseHandle (hObject=0x250) returned 1 [0284.683] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.684] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.684] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.684] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.684] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.684] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.687] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0284.687] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.687] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.687] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.687] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.688] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.688] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.688] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.688] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.689] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.689] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.689] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.689] CryptDestroyKey (hKey=0x55e650) returned 1 [0284.689] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0284.689] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d9a62d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0284.689] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d9a62d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.689] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d9a62d4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d9a62d4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d9a62d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.690] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d9a62d4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d9a62d4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d9a62d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.690] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0284.690] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5652b1d3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0284.690] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.690] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.690] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.690] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.690] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.690] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0284.690] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0284.691] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.691] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.691] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0284.691] CryptDestroyHash (hHash=0x55e310) returned 1 [0284.691] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.691] GetLastError () returned 0x0 [0284.691] GetLastError () returned 0x0 [0284.691] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.692] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.693] WriteFile (in: hFile=0x250, lpBuffer=0x23e52dc*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e52dc*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.695] SetEndOfFile (hFile=0x250) returned 1 [0284.695] CloseHandle (hObject=0x250) returned 1 [0284.695] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.696] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.696] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0284.697] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.697] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.697] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.697] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.697] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.697] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.698] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.698] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.699] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.704] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.704] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0284.704] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d9c323d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0284.705] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d9c323d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.705] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9c323d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d9c323d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d9c323d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.705] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9c323d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d9c323d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d9c323d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.705] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0284.705] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5652b1d3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5652b1d3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x5652b1d3, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0284.705] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0284.705] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x564b8c51, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x564b8c51, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x564b8c51, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0284.705] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.705] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.705] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.705] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0284.706] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0284.706] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.706] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.706] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0284.707] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.707] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.707] GetLastError () returned 0x0 [0284.707] GetLastError () returned 0x0 [0284.707] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.707] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.709] WriteFile (in: hFile=0x24c, lpBuffer=0x23e531c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e531c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.710] SetEndOfFile (hFile=0x24c) returned 1 [0284.710] CloseHandle (hObject=0x24c) returned 1 [0284.710] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.711] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.711] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.711] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.712] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0284.712] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.712] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.713] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.713] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.713] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.713] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.714] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.714] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.714] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.714] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.714] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.715] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.715] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0284.715] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0284.716] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x564b8c51, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x564b8c51, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d9e7d52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0284.716] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x564b8c51, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x564b8c51, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4d9e7d52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.716] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9e7d52, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d9e7d52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d9e7d52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.716] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9e7d52, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d9e7d52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d9e7d52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.716] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0284.716] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9030c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d9030c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d9030c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.716] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563f9f12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563f9f12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0284.717] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.717] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.717] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.717] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0284.717] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0284.718] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.718] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.718] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0284.718] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.718] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.718] GetLastError () returned 0x0 [0284.719] GetLastError () returned 0x0 [0284.719] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.719] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.721] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3624*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3624*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.722] SetEndOfFile (hFile=0x24c) returned 1 [0284.722] CloseHandle (hObject=0x24c) returned 1 [0284.722] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.723] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.724] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.724] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0284.724] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.724] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.724] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.724] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.725] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.725] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.725] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.725] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.726] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.726] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.726] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.726] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.726] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.726] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.726] CryptDestroyKey (hKey=0x55e910) returned 1 [0284.727] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0284.727] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563f9f12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4da0e19c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0284.727] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563f9f12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4da0e19c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.727] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da0e19c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4da0e19c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4da0e19c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.727] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da0e19c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4da0e19c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4da0e19c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.727] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0284.727] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563d3cec, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0284.727] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.728] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.728] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.728] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.728] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0284.728] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0284.729] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.729] CryptHashData (hHash=0x55e750, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.729] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0284.729] CryptDestroyHash (hHash=0x55e750) returned 1 [0284.729] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.729] GetLastError () returned 0x0 [0284.729] GetLastError () returned 0x0 [0284.729] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.730] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.732] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3664*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3664*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.733] SetEndOfFile (hFile=0x24c) returned 1 [0284.734] CloseHandle (hObject=0x24c) returned 1 [0284.734] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.735] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.735] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0284.735] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.736] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.736] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.736] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.736] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.736] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.737] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.737] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.737] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0284.737] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0284.738] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4da3427d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0284.738] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4da3427d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.738] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da3427d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4da3427d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4da3427d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.738] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da3427d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4da3427d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4da3427d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.738] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0284.743] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56afae31, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56afae31, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56afae31, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_X")) returned 1 [0284.743] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.743] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.743] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.743] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.743] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.743] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0284.744] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0284.744] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.744] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.744] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0284.744] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.744] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.745] GetLastError () returned 0x0 [0284.745] GetLastError () returned 0x0 [0284.745] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.745] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.750] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3674*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3674*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.751] SetEndOfFile (hFile=0x24c) returned 1 [0284.751] CloseHandle (hObject=0x24c) returned 1 [0284.751] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.752] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.752] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.753] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0284.753] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.753] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.754] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.754] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.754] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.754] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.755] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.755] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.755] CryptDestroyKey (hKey=0x55e910) returned 1 [0284.755] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0284.755] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56afae31, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56afae31, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4da5b985, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0284.756] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56afae31, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56afae31, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4da5b985, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.756] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56afae31, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3cf5e318, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3cf5e318, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0284.756] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.756] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.756] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.756] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.756] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.756] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0284.756] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5712f8) returned 1 [0284.757] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.757] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.757] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0284.757] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0284.757] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.757] GetLastError () returned 0x0 [0284.757] GetLastError () returned 0x0 [0284.758] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.758] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.760] WriteFile (in: hFile=0x250, lpBuffer=0x23e53cc*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e53cc*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.763] SetEndOfFile (hFile=0x250) returned 1 [0284.763] CloseHandle (hObject=0x250) returned 1 [0284.763] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.764] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.764] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.765] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.765] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.765] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.765] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0284.766] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.766] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.766] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.766] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.766] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.767] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.767] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.767] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.767] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.768] CryptDestroyKey (hKey=0x55e190) returned 1 [0284.768] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0284.768] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1510.9020.0_x64__8wekyb3d8bbwe\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56afae31, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3cf5e318, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4da5b985, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0284.768] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56afae31, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3cf5e318, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4da5b985, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.768] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf381af, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3cf381af, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3cf5e318, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0284.768] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x56b47287, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b47287, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b47287, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0284.768] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x56b47287, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x56b47287, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x56b47287, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0284.768] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da5b985, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4da5b985, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4da808e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.768] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da5b985, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4da5b985, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4da808e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.768] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0284.769] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da3427d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4da3427d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4da5b985, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.769] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da3427d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4da3427d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4da5b985, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.769] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0284.769] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563d3cec, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0284.769] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.769] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.769] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.769] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0284.769] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571490) returned 1 [0284.770] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.770] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.770] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0284.770] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.770] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.770] GetLastError () returned 0x0 [0284.770] GetLastError () returned 0x0 [0284.771] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.771] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.772] WriteFile (in: hFile=0x24c, lpBuffer=0x23e53ec*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e53ec*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.774] SetEndOfFile (hFile=0x24c) returned 1 [0284.774] CloseHandle (hObject=0x24c) returned 1 [0284.774] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.775] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.775] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.776] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.776] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.776] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.776] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0284.776] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.776] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.776] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.776] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.777] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.777] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.777] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.777] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.778] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.780] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.781] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.781] CryptDestroyKey (hKey=0x55e910) returned 1 [0284.781] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0284.781] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4da808e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0284.781] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4da808e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.782] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da808e8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4da808e8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4da808e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.782] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da808e8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4da808e8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4da808e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.782] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0284.782] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3cf5e318, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3cf5e318, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0284.782] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.782] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.782] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.782] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0284.782] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0284.783] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.783] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.783] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0284.783] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0284.783] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.783] GetLastError () returned 0x0 [0284.783] GetLastError () returned 0x0 [0284.784] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.784] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.788] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3724*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3724*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.789] SetEndOfFile (hFile=0x24c) returned 1 [0284.789] CloseHandle (hObject=0x24c) returned 1 [0284.789] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.790] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.790] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.790] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.790] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0284.791] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.791] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.791] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.792] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.792] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.792] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.792] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.793] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.793] CryptDestroyKey (hKey=0x55e750) returned 1 [0284.793] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0284.793] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3cf5e318, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4daa6b9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0284.794] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3cf5e318, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4daa6b9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.794] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4daa6b9e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4daa6b9e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4daa6b9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.794] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564b8c51, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x564b8c51, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x564b8c51, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0284.794] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf5e318, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3cf5e318, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3cf5e318, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0284.794] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf5e318, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3cf5e318, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3cf5e318, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 0 [0284.794] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0284.794] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563f9f12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563f9f12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x72632e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0284.794] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.794] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.794] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.794] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.794] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0284.795] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0284.795] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.795] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.795] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0284.796] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.796] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.796] GetLastError () returned 0x0 [0284.796] GetLastError () returned 0x0 [0284.796] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.796] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.799] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3734*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3734*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.800] SetEndOfFile (hFile=0x24c) returned 1 [0284.800] CloseHandle (hObject=0x24c) returned 1 [0284.800] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.801] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.802] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.802] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0284.802] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.802] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.802] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.802] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.803] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.803] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.803] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.803] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.805] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.805] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.805] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.805] CryptDestroyKey (hKey=0x55e750) returned 1 [0284.805] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0284.805] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563f9f12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4daccd3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0284.806] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563f9f12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563f9f12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4daccd3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.806] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4daccd3b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4daccd3b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4daccd3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.806] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4daccd3b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4daccd3b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4daccd3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.806] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0284.806] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563d3cec, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0284.806] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.806] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.806] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.807] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.807] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.807] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0284.807] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0284.807] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.808] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.808] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0284.808] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.808] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.808] GetLastError () returned 0x0 [0284.808] GetLastError () returned 0x0 [0284.808] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.809] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.810] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3774*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3774*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.811] SetEndOfFile (hFile=0x24c) returned 1 [0284.812] CloseHandle (hObject=0x24c) returned 1 [0284.812] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.813] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.813] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.813] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.813] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0284.813] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.813] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.814] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.814] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.814] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.814] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.814] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.814] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.814] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.814] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.814] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.814] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.814] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.815] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.815] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.815] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.815] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.815] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.815] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0284.815] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4daccd3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0284.816] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4daccd3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.816] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4daccd3b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4daccd3b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4daf2f27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.816] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4daccd3b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4daccd3b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4daf2f27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.816] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0284.816] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d3cec, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x563d3cec, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x563d3cec, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0284.816] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0284.816] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9993618c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99e6d249, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.WindowsFeedback_cw5n1h2txyewy", cAlternateFileName="MICROS~1.WIN")) returned 1 [0284.816] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.816] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.817] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.817] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.817] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.817] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0284.817] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571380) returned 1 [0284.818] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0284.818] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.818] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0284.818] CryptDestroyHash (hHash=0x55e910) returned 1 [0284.818] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f190*=0x18) returned 1 [0284.818] GetLastError () returned 0x0 [0284.818] GetLastError () returned 0x0 [0284.818] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.819] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0284.820] WriteFile (in: hFile=0x248, lpBuffer=0x23e3784*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3784*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.821] SetEndOfFile (hFile=0x248) returned 1 [0284.821] CloseHandle (hObject=0x248) returned 1 [0284.821] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.822] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.822] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.822] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.822] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.822] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0284.823] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.823] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.823] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.823] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.823] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.823] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.824] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.824] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.824] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.824] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.824] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.824] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.824] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.824] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.824] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.833] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0284.833] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0284.833] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9993618c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4daf2f27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0284.833] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9993618c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4daf2f27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.833] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9993618c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9993618c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0284.833] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.833] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.833] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.833] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.833] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.833] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0284.834] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0284.834] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.834] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.834] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0284.834] CryptDestroyHash (hHash=0x55e910) returned 1 [0284.834] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.834] GetLastError () returned 0x0 [0284.834] GetLastError () returned 0x0 [0284.834] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.835] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.838] WriteFile (in: hFile=0x24c, lpBuffer=0x23e37c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e37c4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.839] SetEndOfFile (hFile=0x24c) returned 1 [0284.839] CloseHandle (hObject=0x24c) returned 1 [0284.839] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.840] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.841] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.841] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.841] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0284.842] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.842] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.842] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.842] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.842] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.842] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.842] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.842] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.843] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.843] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.843] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.843] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.844] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0284.844] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0284.844] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9993618c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9993618c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4db1b9b5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0284.844] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9993618c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9993618c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4db1b9b5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.844] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db1b9b5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4db1b9b5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4db1b9b5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.844] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0284.844] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.845] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.845] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.845] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0284.845] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571380) returned 1 [0284.846] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.846] CryptHashData (hHash=0x55e7d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.846] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e310) returned 1 [0284.846] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0284.846] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.846] GetLastError () returned 0x0 [0284.846] GetLastError () returned 0x0 [0284.846] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.847] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.848] WriteFile (in: hFile=0x250, lpBuffer=0x23e37d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e37d4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.850] SetEndOfFile (hFile=0x250) returned 1 [0284.850] CloseHandle (hObject=0x250) returned 1 [0284.850] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.851] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.851] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.851] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.851] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0284.852] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.852] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.852] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.853] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.853] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.853] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.853] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.853] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.854] CryptDestroyKey (hKey=0x55e310) returned 1 [0284.854] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0284.854] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4db3f545, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0284.854] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4db3f545, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.854] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db3f545, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4db3f545, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4db3f545, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.855] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db3f545, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4db3f545, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4db3f545, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.855] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0284.855] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0284.855] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.855] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.855] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.855] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0284.855] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0284.856] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.856] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.856] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0284.856] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.856] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.856] GetLastError () returned 0x0 [0284.856] GetLastError () returned 0x0 [0284.857] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.857] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.859] WriteFile (in: hFile=0x250, lpBuffer=0x23e3814*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3814*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.860] SetEndOfFile (hFile=0x250) returned 1 [0284.860] CloseHandle (hObject=0x250) returned 1 [0284.860] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.861] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.861] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0284.862] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.862] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.862] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.863] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.863] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.863] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.863] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.863] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.863] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.863] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.863] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.863] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.864] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0284.864] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0284.864] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4db6574b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0284.864] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4db6574b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.864] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6574b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4db6574b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4db6574b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.864] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6574b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4db6574b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4db6574b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.864] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0284.865] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0284.865] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.865] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.865] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.865] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0284.865] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0284.866] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.866] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.866] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0284.866] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.866] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.866] GetLastError () returned 0x0 [0284.866] GetLastError () returned 0x0 [0284.866] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.867] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.868] WriteFile (in: hFile=0x250, lpBuffer=0x23e3824*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3824*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.870] SetEndOfFile (hFile=0x250) returned 1 [0284.870] CloseHandle (hObject=0x250) returned 1 [0284.870] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.871] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.871] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.873] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0284.874] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.874] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.874] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.875] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.875] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.875] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.875] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.875] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.875] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.875] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.875] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.875] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.875] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.875] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.875] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.875] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.876] CryptDestroyKey (hKey=0x55e610) returned 1 [0284.876] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0284.876] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4db6574b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0284.876] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4db6574b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.876] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6574b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4db6574b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4db6574b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.876] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6574b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4db6574b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4db6574b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.876] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0284.876] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0284.877] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.877] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.877] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.877] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0284.877] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0284.878] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.878] CryptHashData (hHash=0x55e7d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.878] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0284.878] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0284.878] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.878] GetLastError () returned 0x0 [0284.878] GetLastError () returned 0x0 [0284.878] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.878] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.881] WriteFile (in: hFile=0x250, lpBuffer=0x23e3864*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3864*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.882] SetEndOfFile (hFile=0x250) returned 1 [0284.882] CloseHandle (hObject=0x250) returned 1 [0284.882] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.883] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.883] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.883] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.884] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.884] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0284.884] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.884] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.884] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.884] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.884] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.884] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.885] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.885] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.885] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.885] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.885] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.885] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.885] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.885] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.885] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.886] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0284.886] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0284.886] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4db8b8a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0284.886] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4db8b8a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.886] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4db8b8a8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4db8b8a8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4db8b8a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.886] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4db8b8a8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4db8b8a8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4db8b8a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.886] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0284.886] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9995c397, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9995c397, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9995c397, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0284.886] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0284.886] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0284.887] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.887] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.887] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.887] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0284.887] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0284.888] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.888] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.888] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0284.888] CryptDestroyHash (hHash=0x55e790) returned 1 [0284.888] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.888] GetLastError () returned 0x0 [0284.888] GetLastError () returned 0x0 [0284.888] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.889] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.890] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3874*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3874*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.891] SetEndOfFile (hFile=0x24c) returned 1 [0284.891] CloseHandle (hObject=0x24c) returned 1 [0284.892] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.893] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.893] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0284.893] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.895] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.895] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.895] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.895] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.895] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.895] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.895] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.895] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.895] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.895] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.896] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.896] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.896] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.896] CryptDestroyKey (hKey=0x55e910) returned 1 [0284.896] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0284.896] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4dbb1a51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0284.897] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4dbb1a51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.897] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dbb1a51, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dbb1a51, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dbb1a51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.897] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dbb1a51, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dbb1a51, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dbb1a51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.897] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0284.897] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4daf2f27, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4daf2f27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4daf2f27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.897] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0284.897] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.897] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.897] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.897] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.898] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0284.898] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571518) returned 1 [0284.898] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.898] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.898] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0284.898] CryptDestroyHash (hHash=0x55e190) returned 1 [0284.898] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.898] GetLastError () returned 0x0 [0284.898] GetLastError () returned 0x0 [0284.899] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.899] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.900] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38b4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.901] SetEndOfFile (hFile=0x24c) returned 1 [0284.902] CloseHandle (hObject=0x24c) returned 1 [0284.902] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.902] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.902] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.903] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.903] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.903] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.903] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0284.904] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.904] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.904] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.904] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.904] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.904] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.904] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.904] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.904] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.904] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.905] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.905] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.905] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.905] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.905] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.905] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.905] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.905] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.905] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.905] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.906] CryptDestroyKey (hKey=0x55e910) returned 1 [0284.906] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0284.906] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4dbb1a51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0284.906] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4dbb1a51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.906] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dbb1a51, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dbb1a51, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dbb1a51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.906] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dbb1a51, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dbb1a51, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dbb1a51, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.906] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0284.906] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9989d823, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9989d823, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0284.906] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.906] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.907] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.907] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0284.907] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570f40) returned 1 [0284.907] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.907] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.908] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0284.908] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.908] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.908] GetLastError () returned 0x0 [0284.908] GetLastError () returned 0x0 [0284.908] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.908] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.909] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38c4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.910] SetEndOfFile (hFile=0x24c) returned 1 [0284.911] CloseHandle (hObject=0x24c) returned 1 [0284.911] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.911] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.912] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0284.912] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.912] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.913] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.913] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.913] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.913] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.913] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.913] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.913] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.913] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.913] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.914] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.914] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.914] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.914] CryptDestroyKey (hKey=0x55e790) returned 1 [0284.914] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0284.914] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9989d823, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4dbd7dc1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0284.914] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9989d823, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4dbd7dc1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.914] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dbd7dc1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dbd7dc1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dbd7dc1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.914] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dbd7dc1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dbd7dc1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dbd7dc1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.915] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0284.915] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99e6d249, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99e6d249, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0284.915] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.915] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.915] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.915] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.915] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.915] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0284.915] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0284.916] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.916] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.916] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0284.916] CryptDestroyHash (hHash=0x55e790) returned 1 [0284.916] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.916] GetLastError () returned 0x0 [0284.916] GetLastError () returned 0x0 [0284.916] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.917] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.922] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3904*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3904*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.924] SetEndOfFile (hFile=0x24c) returned 1 [0284.924] CloseHandle (hObject=0x24c) returned 1 [0284.924] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.931] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.931] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0284.932] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.932] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.932] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.932] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.933] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.933] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.933] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.933] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.933] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.933] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0284.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.933] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.934] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.934] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.934] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.935] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0284.935] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0284.935] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99e6d249, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4dbfdeb5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0284.935] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99e6d249, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4dbfdeb5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.935] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d0dba16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d0dba16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0284.935] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.935] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.935] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.935] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.936] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.936] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0284.936] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0284.936] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0284.936] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.936] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0284.936] CryptDestroyHash (hHash=0x55e310) returned 1 [0284.937] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0284.937] GetLastError () returned 0x0 [0284.937] GetLastError () returned 0x0 [0284.937] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.937] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0284.938] WriteFile (in: hFile=0x250, lpBuffer=0x23e3924*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3924*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.940] SetEndOfFile (hFile=0x250) returned 1 [0284.940] CloseHandle (hObject=0x250) returned 1 [0284.940] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.941] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.941] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0284.941] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.942] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.942] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.942] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.942] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.943] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.943] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.943] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.943] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.943] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.943] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.943] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.943] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.943] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.944] CryptDestroyKey (hKey=0x55e210) returned 1 [0284.944] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0284.944] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d0dba16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dc2434f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0284.944] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e6d249, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d0dba16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dc2434f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.944] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0b5864, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3d0b5864, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d0dba16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0284.944] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x99f5217e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99f5217e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99f5217e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0284.944] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x99f5217e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x99f5217e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x99f5217e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0284.944] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dc2434f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dc2434f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dc2434f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.944] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dc2434f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dc2434f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dc2434f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.944] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0284.944] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dbfdeb5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dbfdeb5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dbfdeb5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.944] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dbfdeb5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dbfdeb5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dbfdeb5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.944] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0284.945] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9989d823, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9989d823, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0284.945] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.945] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.946] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.946] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.946] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.946] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0284.946] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0284.947] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.947] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.947] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0284.947] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.947] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.947] GetLastError () returned 0x0 [0284.947] GetLastError () returned 0x0 [0284.947] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.948] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.949] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3974*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3974*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.951] SetEndOfFile (hFile=0x24c) returned 1 [0284.951] CloseHandle (hObject=0x24c) returned 1 [0284.951] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.952] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.952] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.952] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.952] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.952] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.952] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0284.952] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.953] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.953] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.953] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.953] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.953] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.953] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.954] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0284.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.954] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.954] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.954] CryptDestroyKey (hKey=0x55e910) returned 1 [0284.955] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0284.955] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9989d823, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4dc2434f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0284.955] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9989d823, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9989d823, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4dc2434f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.955] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dc2434f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dc2434f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dc4a41e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.955] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dc2434f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dc2434f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dc4a41e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.955] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0284.955] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d101c68, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d101c68, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0284.955] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.955] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.955] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.956] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.956] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0284.956] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0284.956] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.956] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.956] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0284.956] CryptDestroyHash (hHash=0x55e910) returned 1 [0284.956] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.957] GetLastError () returned 0x0 [0284.957] GetLastError () returned 0x0 [0284.957] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.957] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.958] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3994*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3994*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.959] SetEndOfFile (hFile=0x24c) returned 1 [0284.959] CloseHandle (hObject=0x24c) returned 1 [0284.960] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.960] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.961] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0284.961] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.961] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.961] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.962] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.962] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.962] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.962] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.962] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.963] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.963] CryptDestroyKey (hKey=0x55e190) returned 1 [0284.963] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0284.963] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d101c68, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dc4a41e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0284.963] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d101c68, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dc4a41e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.963] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dc4a41e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dc4a41e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dc4a41e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.963] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0284.963] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0dba16, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3d0dba16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d101c68, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0284.963] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93887d0c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93887d0c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93887d0c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0284.963] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93887d0c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93887d0c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93887d0c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0284.963] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93887d0c, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93887d0c, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93887d0c, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0284.963] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0284.964] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0284.964] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.964] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.964] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.964] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0284.964] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0284.965] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.965] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.965] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0284.965] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.965] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.965] GetLastError () returned 0x0 [0284.965] GetLastError () returned 0x0 [0284.965] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.968] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.970] WriteFile (in: hFile=0x24c, lpBuffer=0x23e39d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e39d4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.971] SetEndOfFile (hFile=0x24c) returned 1 [0284.971] CloseHandle (hObject=0x24c) returned 1 [0284.972] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.973] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.973] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0284.974] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.974] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.974] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.974] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.974] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.974] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.974] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.974] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.975] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.975] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0284.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.975] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.975] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.975] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.976] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.976] CryptDestroyKey (hKey=0x55e910) returned 1 [0284.976] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0284.976] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4dc70765, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0284.976] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4dc70765, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.976] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dc70765, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dc70765, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dc70765, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.976] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dc70765, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dc70765, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dc70765, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.976] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0284.976] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0284.977] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.977] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.977] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.977] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0284.977] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0284.978] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.978] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.978] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0284.978] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.978] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.978] GetLastError () returned 0x0 [0284.978] GetLastError () returned 0x0 [0284.978] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.979] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.980] WriteFile (in: hFile=0x24c, lpBuffer=0x23e39e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e39e4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.981] SetEndOfFile (hFile=0x24c) returned 1 [0284.981] CloseHandle (hObject=0x24c) returned 1 [0284.981] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.982] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.982] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.983] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.983] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0284.983] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.983] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.983] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.983] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.984] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.984] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.984] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.984] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.984] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.984] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.985] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.985] CryptDestroyKey (hKey=0x55e790) returned 1 [0284.985] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0284.985] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4dc70765, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0284.985] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4dc70765, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.985] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dc70765, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dc70765, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dc968fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0284.985] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dc70765, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dc70765, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dc968fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0284.985] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0284.986] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x998c3a7f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x998c3a7f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x998c3a7f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0284.986] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0284.986] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9783e1e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.WindowsStore_8wekyb3d8bbwe", cAlternateFileName="MICROS~4.WIN")) returned 1 [0284.986] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.986] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.986] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.986] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.986] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0284.986] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570d20) returned 1 [0284.987] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0284.987] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.987] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0284.987] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0284.987] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f190*=0x18) returned 1 [0284.987] GetLastError () returned 0x0 [0284.987] GetLastError () returned 0x0 [0284.987] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.988] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0284.989] WriteFile (in: hFile=0x248, lpBuffer=0x23e3a24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a24*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0284.990] SetEndOfFile (hFile=0x248) returned 1 [0284.990] CloseHandle (hObject=0x248) returned 1 [0284.990] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0284.991] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0284.991] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0284.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0284.992] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.992] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.992] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.992] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.992] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0284.992] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0284.992] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.992] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.992] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.993] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0284.993] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0284.993] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0284.993] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0284.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0284.993] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0284.993] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.993] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0284.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0284.994] CryptDestroyKey (hKey=0x55e910) returned 1 [0284.994] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0284.994] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dc968fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0284.994] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dc968fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0284.994] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9416799, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0284.994] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0284.994] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0284.995] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0284.995] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0284.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0284.995] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570968) returned 1 [0284.995] CryptCreateHash (in: hProv=0x570968, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0284.995] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0284.995] CryptDeriveKey (in: hProv=0x570968, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0284.995] CryptDestroyHash (hHash=0x55e610) returned 1 [0284.996] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0284.996] GetLastError () returned 0x0 [0284.996] GetLastError () returned 0x0 [0284.996] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0284.996] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0284.999] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3a34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3a34*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.002] SetEndOfFile (hFile=0x24c) returned 1 [0285.002] CloseHandle (hObject=0x24c) returned 1 [0285.002] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.003] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.003] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.004] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.004] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.004] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.004] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.004] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.005] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0285.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.005] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.005] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.005] CryptDestroyKey (hKey=0x55e650) returned 1 [0285.005] CryptReleaseContext (hProv=0x570968, dwFlags=0x0) returned 1 [0285.006] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dcbcb74, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0285.006] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dcbcb74, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.006] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dcbcb74, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dcbcb74, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dcbcb74, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.006] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0285.006] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.006] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.006] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.006] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0285.006] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5706c0) returned 1 [0285.007] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.007] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.007] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0285.007] CryptDestroyHash (hHash=0x55e610) returned 1 [0285.007] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.007] GetLastError () returned 0x0 [0285.007] GetLastError () returned 0x0 [0285.007] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.008] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.010] WriteFile (in: hFile=0x250, lpBuffer=0x23e3a74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a74*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.011] SetEndOfFile (hFile=0x250) returned 1 [0285.011] CloseHandle (hObject=0x250) returned 1 [0285.011] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.012] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.013] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0285.013] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.013] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.014] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.014] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.014] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.014] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0285.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.015] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.015] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.015] CryptDestroyKey (hKey=0x55e910) returned 1 [0285.015] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0285.015] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dcbcb74, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0285.016] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dcbcb74, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.016] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dcbcb74, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dcbcb74, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dcbcb74, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.016] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dcbcb74, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dcbcb74, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dcbcb74, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.016] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0285.016] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9416799, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9416799, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9416799, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0285.016] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.016] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.016] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.016] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.016] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0285.017] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c10) returned 1 [0285.017] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.017] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.017] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0285.018] CryptDestroyHash (hHash=0x55e610) returned 1 [0285.018] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.018] GetLastError () returned 0x0 [0285.018] GetLastError () returned 0x0 [0285.018] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.018] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.021] WriteFile (in: hFile=0x250, lpBuffer=0x23e3a84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a84*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.022] SetEndOfFile (hFile=0x250) returned 1 [0285.022] CloseHandle (hObject=0x250) returned 1 [0285.022] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.023] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.024] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0285.024] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.024] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.025] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.025] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.025] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.025] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.026] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.026] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.026] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.026] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0285.026] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0285.026] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9416799, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9416799, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dce2ea3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0285.027] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9416799, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9416799, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dce2ea3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.027] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dce2ea3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dce2ea3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dce2ea3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.027] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dce2ea3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dce2ea3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dce2ea3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.027] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0285.027] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0285.027] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.027] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.027] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.027] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.027] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.027] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0285.028] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0285.029] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.029] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.029] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e2d0) returned 1 [0285.029] CryptDestroyHash (hHash=0x55e790) returned 1 [0285.029] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.029] GetLastError () returned 0x0 [0285.029] GetLastError () returned 0x0 [0285.029] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.030] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.031] WriteFile (in: hFile=0x250, lpBuffer=0x23e3ac4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ac4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.032] SetEndOfFile (hFile=0x250) returned 1 [0285.032] CloseHandle (hObject=0x250) returned 1 [0285.033] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.033] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.034] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.034] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.034] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.035] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.035] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.035] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.035] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.035] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.035] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.035] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.035] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.035] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.035] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.036] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.036] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.036] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.036] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.036] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.036] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.036] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0285.036] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0285.036] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dd091dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0285.037] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dd091dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.037] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dd091dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dd091dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dd091dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.037] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dd091dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dd091dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dd091dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.037] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0285.037] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0285.037] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.037] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.037] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.037] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.037] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.038] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0285.038] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571408) returned 1 [0285.038] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.038] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.039] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0285.039] CryptDestroyHash (hHash=0x55e790) returned 1 [0285.039] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.039] GetLastError () returned 0x0 [0285.039] GetLastError () returned 0x0 [0285.039] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.039] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.041] WriteFile (in: hFile=0x250, lpBuffer=0x23e3ad4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ad4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.042] SetEndOfFile (hFile=0x250) returned 1 [0285.042] CloseHandle (hObject=0x250) returned 1 [0285.043] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.046] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.046] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0285.047] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.047] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.047] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.048] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.048] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.048] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.048] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.049] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.049] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.049] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.049] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.049] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0285.049] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dd091dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0285.049] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dd091dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.050] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd091dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dd091dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dd091dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.050] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd091dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dd091dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dd091dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.050] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0285.050] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93f064f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x93f064f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x93f064f, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0285.050] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0285.050] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0285.050] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.050] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.050] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.050] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.050] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.051] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0285.051] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0285.051] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.051] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.051] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0285.051] CryptDestroyHash (hHash=0x55e910) returned 1 [0285.052] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.052] GetLastError () returned 0x0 [0285.052] GetLastError () returned 0x0 [0285.052] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.052] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.054] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b14*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.056] SetEndOfFile (hFile=0x24c) returned 1 [0285.056] CloseHandle (hObject=0x24c) returned 1 [0285.056] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.057] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.057] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0285.058] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.058] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.058] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.058] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.058] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.061] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.061] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.061] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.061] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.061] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.061] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.061] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.061] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.061] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.062] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0285.062] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dd2f9d1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0285.062] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dd2f9d1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.062] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd2f9d1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dd2f9d1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dd2f9d1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.062] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd2f9d1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dd2f9d1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dd2f9d1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.062] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0285.062] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dc968fd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dc968fd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dc968fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.062] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0285.062] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.062] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.063] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.063] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.063] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.063] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0285.063] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0285.064] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.064] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.064] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0285.064] CryptDestroyHash (hHash=0x55e750) returned 1 [0285.064] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.064] GetLastError () returned 0x0 [0285.064] GetLastError () returned 0x0 [0285.064] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.065] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.066] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b24*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.067] SetEndOfFile (hFile=0x24c) returned 1 [0285.067] CloseHandle (hObject=0x24c) returned 1 [0285.068] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.069] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.069] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.069] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.069] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.070] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.070] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.070] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.070] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.070] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.070] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.070] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.070] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.070] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.070] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.070] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.070] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.071] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.071] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.071] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.071] CryptDestroyKey (hKey=0x55e910) returned 1 [0285.071] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0285.071] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dd5828f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0285.072] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dd5828f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.072] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd5828f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dd5828f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dd5828f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.072] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd5828f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dd5828f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dd5828f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.072] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0285.072] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0285.072] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.072] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.073] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.073] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0285.073] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0285.073] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.073] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.074] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0285.074] CryptDestroyHash (hHash=0x55e910) returned 1 [0285.074] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.074] GetLastError () returned 0x0 [0285.074] GetLastError () returned 0x0 [0285.074] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.074] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.076] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b64*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.077] SetEndOfFile (hFile=0x24c) returned 1 [0285.077] CloseHandle (hObject=0x24c) returned 1 [0285.078] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.078] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.078] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.079] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.079] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.079] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0285.079] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.079] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.079] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.080] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.080] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.080] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.080] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.080] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.080] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.080] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.080] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.080] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.081] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.081] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.081] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.081] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.081] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0285.081] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dd7b747, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0285.082] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dd7b747, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.082] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd7b747, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dd7b747, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dd7b747, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.082] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd7b747, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dd7b747, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dd7b747, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.082] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0285.082] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9783e1e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9783e1e, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_X")) returned 1 [0285.082] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.082] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.085] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.085] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.085] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.085] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0285.086] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0285.086] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.086] CryptHashData (hHash=0x55e210, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.086] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0285.086] CryptDestroyHash (hHash=0x55e210) returned 1 [0285.086] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.086] GetLastError () returned 0x0 [0285.086] GetLastError () returned 0x0 [0285.087] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.087] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.095] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b74*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.096] SetEndOfFile (hFile=0x24c) returned 1 [0285.096] CloseHandle (hObject=0x24c) returned 1 [0285.096] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.097] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.097] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.097] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.098] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0285.098] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.098] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.098] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.099] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.099] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.099] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.099] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.099] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.099] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.099] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.099] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.099] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.099] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0285.099] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.099] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.100] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.100] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.100] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.100] CryptDestroyKey (hKey=0x55e910) returned 1 [0285.100] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0285.100] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9783e1e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dda25a1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0285.100] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9783e1e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4dda25a1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.101] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3d14e09d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d14e09d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0285.101] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.101] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.101] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.101] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.101] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.101] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0285.101] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570e30) returned 1 [0285.102] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.102] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.102] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0285.102] CryptDestroyHash (hHash=0x55e910) returned 1 [0285.102] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.102] GetLastError () returned 0x0 [0285.102] GetLastError () returned 0x0 [0285.102] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.103] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.106] WriteFile (in: hFile=0x250, lpBuffer=0x23e3bc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3bc4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.107] SetEndOfFile (hFile=0x250) returned 1 [0285.108] CloseHandle (hObject=0x250) returned 1 [0285.108] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.108] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.109] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.109] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.109] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.109] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.109] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.109] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.109] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.109] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.109] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.110] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.110] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.110] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.110] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.110] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.110] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.110] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.110] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.110] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.110] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.110] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0285.111] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.111] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.111] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.111] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.111] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.111] CryptDestroyKey (hKey=0x55e190) returned 1 [0285.111] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0285.111] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.10.13.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.10.13.0_x64__8wekyb3d8bbwe\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3d14e09d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dda25a1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0285.112] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9783e1e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3d14e09d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dda25a1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.112] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d127fc9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3d127fc9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d14e09d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0285.112] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97f6443, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x97f6443, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x97f6443, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0285.112] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97f6443, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x97f6443, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x97f6443, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0285.112] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dda25a1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dda25a1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ddc7d00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.112] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dda25a1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dda25a1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ddc7d00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.112] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0285.112] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd7b747, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dd7b747, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dda25a1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.112] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd7b747, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4dd7b747, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4dda25a1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.112] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0285.112] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0285.112] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.112] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.113] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.113] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0285.113] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0285.113] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.113] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.114] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0285.114] CryptDestroyHash (hHash=0x55e910) returned 1 [0285.114] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.114] GetLastError () returned 0x0 [0285.114] GetLastError () returned 0x0 [0285.114] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.114] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.119] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3be4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3be4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.120] SetEndOfFile (hFile=0x24c) returned 1 [0285.121] CloseHandle (hObject=0x24c) returned 1 [0285.121] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.122] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.122] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.122] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0285.123] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.123] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.123] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.124] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.124] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.125] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.125] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.126] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.126] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.126] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.126] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.126] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.127] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.127] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.127] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.127] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.128] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.128] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0285.128] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4ddc7d00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0285.128] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4ddc7d00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.128] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ddc7d00, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ddc7d00, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ddc7d00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.128] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ddc7d00, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ddc7d00, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ddc7d00, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.128] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0285.128] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3d19ce59, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d19ce59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0285.129] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.129] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.129] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.129] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0285.129] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571490) returned 1 [0285.131] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.131] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.131] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0285.131] CryptDestroyHash (hHash=0x55e910) returned 1 [0285.131] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.131] GetLastError () returned 0x0 [0285.131] GetLastError () returned 0x0 [0285.131] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.132] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.164] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3c24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3c24*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.165] SetEndOfFile (hFile=0x24c) returned 1 [0285.165] CloseHandle (hObject=0x24c) returned 1 [0285.165] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.166] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.166] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0285.167] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.167] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.167] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.167] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.167] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.167] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.168] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.168] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.168] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.168] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.168] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.168] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.168] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.169] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.169] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.169] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.169] CryptDestroyKey (hKey=0x55e310) returned 1 [0285.169] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0285.169] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3d19ce59, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4de3a2bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0285.170] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3d19ce59, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4de3a2bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.170] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ddee84f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ddee84f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4de3a2bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.170] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0285.170] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d17453f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3d17453f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d19ce59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0285.170] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d17453f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3d17453f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d19ce59, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 0 [0285.170] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0285.170] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x937de8b, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x72632e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0285.170] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.170] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.170] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.170] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0285.171] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5708e0) returned 1 [0285.171] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.171] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.171] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0285.171] CryptDestroyHash (hHash=0x55e610) returned 1 [0285.171] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.171] GetLastError () returned 0x0 [0285.172] GetLastError () returned 0x0 [0285.172] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.172] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.173] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3c34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3c34*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.175] SetEndOfFile (hFile=0x24c) returned 1 [0285.175] CloseHandle (hObject=0x24c) returned 1 [0285.175] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.176] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.176] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.176] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.176] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.176] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.176] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.177] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.177] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.177] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.177] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.177] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.177] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.178] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.178] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.178] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.178] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.178] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.178] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.178] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.178] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.178] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.179] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.179] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.179] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.179] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.179] CryptDestroyKey (hKey=0x55e910) returned 1 [0285.179] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0285.179] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4de605ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0285.180] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x937de8b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x937de8b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4de605ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.180] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de605ce, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4de605ce, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4de605ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.180] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de605ce, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4de605ce, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4de605ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.180] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0285.180] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0285.180] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.180] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.180] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.180] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.180] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.181] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0285.181] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0285.181] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.181] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.181] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0285.181] CryptDestroyHash (hHash=0x55e910) returned 1 [0285.181] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.182] GetLastError () returned 0x0 [0285.182] GetLastError () returned 0x0 [0285.182] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.182] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.183] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3c74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3c74*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.185] SetEndOfFile (hFile=0x24c) returned 1 [0285.185] CloseHandle (hObject=0x24c) returned 1 [0285.185] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.186] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.186] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.186] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.186] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.186] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0285.187] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.187] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.187] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.187] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.187] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.187] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.187] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.187] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.187] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.187] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.187] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.188] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.188] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.188] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.188] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.188] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.188] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.188] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.188] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.188] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.188] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.189] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0285.189] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4de605ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0285.189] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x4de605ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.189] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de605ce, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4de605ce, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4de86810, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.189] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de605ce, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4de605ce, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4de86810, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.189] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0285.189] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9357b12, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x9357b12, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x9357b12, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0285.189] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0285.189] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c2a33a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x6f646174, cFileName="Microsoft.XboxGameCallableUI_cw5n1h2txyewy", cAlternateFileName="MICROS~1.XBO")) returned 1 [0285.189] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.189] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.190] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.190] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.190] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.190] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0285.190] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570638) returned 1 [0285.191] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0285.191] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.191] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0285.191] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.191] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18) returned 1 [0285.191] GetLastError () returned 0x0 [0285.191] GetLastError () returned 0x0 [0285.191] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.191] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0285.192] WriteFile (in: hFile=0x248, lpBuffer=0x23e3c84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c84*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.194] SetEndOfFile (hFile=0x248) returned 1 [0285.194] CloseHandle (hObject=0x248) returned 1 [0285.194] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.195] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.195] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.195] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.195] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0285.196] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.196] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.196] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.196] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.196] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.196] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.196] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.196] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.196] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.196] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.197] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.197] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.197] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.197] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.198] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0285.198] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4de86810, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0285.198] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4de86810, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.198] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be76e20, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0285.198] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.198] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.198] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.198] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0285.198] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0285.199] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.199] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.199] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0285.199] CryptDestroyHash (hHash=0x55e910) returned 1 [0285.199] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.199] GetLastError () returned 0x0 [0285.199] GetLastError () returned 0x0 [0285.199] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.204] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.206] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3cc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3cc4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.207] SetEndOfFile (hFile=0x24c) returned 1 [0285.207] CloseHandle (hObject=0x24c) returned 1 [0285.207] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.208] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.208] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.208] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.208] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.208] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.208] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.209] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.209] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.209] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.209] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.209] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.209] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.209] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.209] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.209] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.210] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.210] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.210] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.210] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.210] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.210] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.211] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0285.211] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0285.211] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4deacb3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0285.211] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4deacb3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.211] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4deacb3b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4deacb3b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4deacb3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.211] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0285.211] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.211] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.211] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.211] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.211] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0285.211] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5712f8) returned 1 [0285.212] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.212] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.212] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0285.212] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0285.212] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.212] GetLastError () returned 0x0 [0285.212] GetLastError () returned 0x0 [0285.212] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.213] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.215] WriteFile (in: hFile=0x250, lpBuffer=0x23e3cd4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3cd4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.216] SetEndOfFile (hFile=0x250) returned 1 [0285.216] CloseHandle (hObject=0x250) returned 1 [0285.216] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.217] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.217] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0285.218] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.218] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.218] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.218] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.218] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.218] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0285.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.219] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.219] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.219] CryptDestroyKey (hKey=0x55e190) returned 1 [0285.219] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0285.219] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4deacb3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0285.220] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4deacb3b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.220] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4deacb3b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4deacb3b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ded2b52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.220] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4deacb3b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4deacb3b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ded2b52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.220] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0285.220] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0285.220] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.220] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.220] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.220] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0285.220] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0285.221] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.221] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.221] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e790) returned 1 [0285.221] CryptDestroyHash (hHash=0x55e190) returned 1 [0285.221] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.221] GetLastError () returned 0x0 [0285.221] GetLastError () returned 0x0 [0285.221] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.222] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.223] WriteFile (in: hFile=0x250, lpBuffer=0x23e3d14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3d14*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.224] SetEndOfFile (hFile=0x250) returned 1 [0285.224] CloseHandle (hObject=0x250) returned 1 [0285.224] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.225] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.225] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.225] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.225] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0285.226] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.226] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.226] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.226] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.227] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.227] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.227] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.227] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.227] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.227] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.227] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.228] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.228] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.228] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.228] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0285.228] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.228] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.228] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.228] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.228] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.229] CryptDestroyKey (hKey=0x55e790) returned 1 [0285.229] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0285.229] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ded2b52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0285.229] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ded2b52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.230] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ded2b52, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ded2b52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ded2b52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.230] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ded2b52, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ded2b52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ded2b52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.230] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0285.230] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0285.230] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.230] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.230] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.231] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.231] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.231] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0285.232] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570858) returned 1 [0285.233] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.233] CryptHashData (hHash=0x55e310, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.233] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0285.233] CryptDestroyHash (hHash=0x55e310) returned 1 [0285.233] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.233] GetLastError () returned 0x0 [0285.233] GetLastError () returned 0x0 [0285.233] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.234] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.235] WriteFile (in: hFile=0x250, lpBuffer=0x23e3d24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3d24*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.236] SetEndOfFile (hFile=0x250) returned 1 [0285.236] CloseHandle (hObject=0x250) returned 1 [0285.236] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.237] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.237] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.237] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.237] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.238] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.238] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.238] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.238] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.238] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.238] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.239] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.239] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.239] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.239] CryptDestroyKey (hKey=0x55e190) returned 1 [0285.239] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0285.240] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4def8e8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0285.240] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4def8e8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.240] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4def8e8b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4def8e8b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4def8e8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.240] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4def8e8b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4def8e8b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4def8e8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.240] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0285.240] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0285.240] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.240] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.240] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.240] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.240] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.240] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0285.241] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5709f0) returned 1 [0285.241] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.241] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.241] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e7d0) returned 1 [0285.241] CryptDestroyHash (hHash=0x55e790) returned 1 [0285.241] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.241] GetLastError () returned 0x0 [0285.241] GetLastError () returned 0x0 [0285.241] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.242] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.243] WriteFile (in: hFile=0x250, lpBuffer=0x23e3d64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3d64*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.244] SetEndOfFile (hFile=0x250) returned 1 [0285.244] CloseHandle (hObject=0x250) returned 1 [0285.245] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.246] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.246] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.246] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.246] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.246] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.246] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0285.246] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.246] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.253] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.253] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.253] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.253] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.253] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.254] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.254] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.254] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.254] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.254] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.254] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.254] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.254] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.254] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.254] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.254] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.254] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.254] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.255] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0285.255] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0285.255] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4def8e8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0285.255] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4def8e8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.255] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4def8e8b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4def8e8b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4def8e8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.255] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4def8e8b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4def8e8b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4def8e8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.255] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0285.255] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be50bc7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be50bc7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be50bc7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0285.255] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0285.255] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be2a715, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0285.256] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.257] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.257] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.257] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.257] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.257] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0285.257] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0285.257] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.258] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.258] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0285.258] CryptDestroyHash (hHash=0x55e910) returned 1 [0285.258] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.258] GetLastError () returned 0x0 [0285.258] GetLastError () returned 0x0 [0285.258] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.258] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.260] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3d74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3d74*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.261] SetEndOfFile (hFile=0x24c) returned 1 [0285.261] CloseHandle (hObject=0x24c) returned 1 [0285.261] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.278] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.278] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.278] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.278] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.278] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.278] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0285.278] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.279] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.279] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.279] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.279] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.279] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.279] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.279] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.279] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.279] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.279] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.279] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.279] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.279] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.280] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.280] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.280] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.280] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.280] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.280] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.280] CryptDestroyKey (hKey=0x55e790) returned 1 [0285.280] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0285.280] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4df1f12b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0285.281] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4df1f12b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.281] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4df1f12b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4df1f12b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4df1f12b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.281] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4df1f12b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4df1f12b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4df1f12b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.281] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0285.281] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4de86810, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4de86810, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4de86810, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.281] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be0462f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be0462f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be0462f, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0285.281] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.281] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.281] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.281] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.281] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.281] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0285.281] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0285.282] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.282] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.282] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0285.282] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.282] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.282] GetLastError () returned 0x0 [0285.282] GetLastError () returned 0x0 [0285.282] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.283] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.284] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3db4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3db4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.286] SetEndOfFile (hFile=0x24c) returned 1 [0285.286] CloseHandle (hObject=0x24c) returned 1 [0285.286] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.287] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.287] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.287] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.287] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.287] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.287] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.287] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.287] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.288] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.288] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.288] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.288] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.288] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.288] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.288] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.288] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.288] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.288] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.288] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.288] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.288] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.288] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.289] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.289] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.289] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.289] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.289] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.289] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0285.289] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be0462f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be0462f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4df6b654, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0285.289] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be0462f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be0462f, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4df6b654, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.289] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4df6b654, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4df6b654, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4df6b654, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.289] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4df6b654, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4df6b654, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4df6b654, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.289] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0285.289] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0285.290] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.290] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.290] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.290] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.290] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.290] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0285.290] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0285.291] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.291] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.291] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0285.291] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.291] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.291] GetLastError () returned 0x0 [0285.291] GetLastError () returned 0x0 [0285.291] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.291] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.292] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3dc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3dc4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.294] SetEndOfFile (hFile=0x24c) returned 1 [0285.294] CloseHandle (hObject=0x24c) returned 1 [0285.294] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.295] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.296] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.296] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.296] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0285.297] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.297] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.297] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.298] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.299] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.299] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.299] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.299] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.299] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.300] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.300] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.300] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.301] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.301] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0285.301] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4df6b654, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0285.302] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4df6b654, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.302] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4df6b654, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4df6b654, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4df9188b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.302] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4df6b654, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4df6b654, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4df9188b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.302] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0285.302] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c2a33a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c2a33a7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0285.303] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.303] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.303] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.303] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.303] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.303] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0285.303] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0285.304] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.304] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.304] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0285.304] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.304] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.304] GetLastError () returned 0x0 [0285.304] GetLastError () returned 0x0 [0285.304] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.304] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.345] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3e04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3e04*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.346] SetEndOfFile (hFile=0x24c) returned 1 [0285.346] CloseHandle (hObject=0x24c) returned 1 [0285.346] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.347] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.347] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.347] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.347] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0285.348] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.348] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.348] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.348] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.348] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.348] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.348] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.348] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.348] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.348] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.348] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.348] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.348] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.348] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.349] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.349] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.349] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.349] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.349] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0285.349] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c2a33a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e003de4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0285.350] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c2a33a7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e003de4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.350] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d1e6d7a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d1e6d7a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0285.350] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.350] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.350] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.350] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0285.350] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0285.351] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.351] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.351] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0285.351] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.351] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.351] GetLastError () returned 0x0 [0285.351] GetLastError () returned 0x0 [0285.351] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.352] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.353] WriteFile (in: hFile=0x250, lpBuffer=0x23e3e24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e24*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.354] SetEndOfFile (hFile=0x250) returned 1 [0285.354] CloseHandle (hObject=0x250) returned 1 [0285.354] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.355] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.355] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.355] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.355] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.355] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.356] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.357] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.357] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.357] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.358] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.358] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0285.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.358] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.358] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.359] CryptDestroyKey (hKey=0x55e650) returned 1 [0285.359] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0285.359] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d1e6d7a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e003de4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0285.359] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c2a33a7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d1e6d7a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e003de4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.359] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1e6d7a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3d1e6d7a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d1e6d7a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0285.359] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9c31594e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c31594e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c31594e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0285.360] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9c31594e, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9c31594e, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9c31594e, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0285.360] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e003de4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e003de4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e003de4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.360] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e003de4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e003de4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e003de4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.360] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0285.360] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e003de4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e003de4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e003de4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.360] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e003de4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e003de4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e003de4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.360] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0285.360] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0285.360] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.360] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.360] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.360] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.361] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0285.361] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5708e0) returned 1 [0285.361] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.361] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.361] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0285.362] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.362] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.362] GetLastError () returned 0x0 [0285.362] GetLastError () returned 0x0 [0285.362] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.362] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.363] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3e74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3e74*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.365] SetEndOfFile (hFile=0x24c) returned 1 [0285.365] CloseHandle (hObject=0x24c) returned 1 [0285.365] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.366] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.366] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.366] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.366] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.366] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.366] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0285.367] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.367] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.367] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.367] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.367] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.368] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0285.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.368] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.368] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.368] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.368] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0285.369] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e02a28e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0285.369] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e02a28e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.369] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e02a28e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e02a28e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e02a28e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.369] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e02a28e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e02a28e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e02a28e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.369] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0285.369] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be0462f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d232f9a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d232f9a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0285.369] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.369] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.369] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.369] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.369] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0285.370] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5708e0) returned 1 [0285.370] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.370] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.370] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0285.370] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.370] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.370] GetLastError () returned 0x0 [0285.370] GetLastError () returned 0x0 [0285.371] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.371] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.372] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3e94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3e94*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.374] SetEndOfFile (hFile=0x24c) returned 1 [0285.374] CloseHandle (hObject=0x24c) returned 1 [0285.374] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.375] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.375] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0285.376] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.376] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.376] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.376] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.376] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.377] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.377] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.377] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.377] CryptDestroyKey (hKey=0x55e790) returned 1 [0285.377] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0285.378] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be0462f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d232f9a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e02a28e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0285.378] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be0462f, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d232f9a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e02a28e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.378] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e02a28e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e02a28e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e050474, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.378] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be2a715, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0285.378] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d20ce64, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3d20ce64, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d232f9a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0285.378] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93b82c39, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93b82c39, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93b82c39, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0285.378] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93b82c39, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93b82c39, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93b82c39, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0285.378] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93b82c39, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93b82c39, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93b82c39, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0285.378] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0285.378] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9be2a715, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0285.378] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.378] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.379] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.379] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0285.379] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571490) returned 1 [0285.379] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.379] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.379] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0285.380] CryptDestroyHash (hHash=0x55e910) returned 1 [0285.380] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.380] GetLastError () returned 0x0 [0285.380] GetLastError () returned 0x0 [0285.380] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.380] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.389] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ed4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ed4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.390] SetEndOfFile (hFile=0x24c) returned 1 [0285.390] CloseHandle (hObject=0x24c) returned 1 [0285.390] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.391] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.391] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.391] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.391] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.391] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.391] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.392] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.392] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.392] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.392] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.392] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.392] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.393] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.393] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.393] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.393] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.393] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.393] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0285.394] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0285.394] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e07650b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0285.394] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9be2a715, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9be2a715, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e07650b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.394] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e07650b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e07650b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e07650b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.394] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e07650b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e07650b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e07650b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.394] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0285.394] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0285.394] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.394] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.394] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.394] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0285.395] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0285.395] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.395] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.395] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0285.395] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.395] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.396] GetLastError () returned 0x0 [0285.396] GetLastError () returned 0x0 [0285.396] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.396] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.397] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ee4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ee4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.398] SetEndOfFile (hFile=0x24c) returned 1 [0285.399] CloseHandle (hObject=0x24c) returned 1 [0285.399] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.400] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.400] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.400] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.400] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.400] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.400] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0285.400] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.401] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.401] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.401] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.401] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.401] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.402] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.402] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.402] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.403] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.403] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0285.403] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e07650b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0285.403] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e07650b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.403] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e07650b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e07650b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e07650b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.403] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e07650b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e07650b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e07650b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.403] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0285.403] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9bdb8021, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9bdb8021, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9bdb8021, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0285.404] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0285.404] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d759694, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x47786174, cFileName="Microsoft.XboxIdentityProvider_cw5n1h2txyewy", cAlternateFileName="MICROS~2.XBO")) returned 1 [0285.404] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.404] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.404] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.404] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.404] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0285.404] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571408) returned 1 [0285.405] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0285.405] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.405] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0285.405] CryptDestroyHash (hHash=0x55e750) returned 1 [0285.405] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0285.405] GetLastError () returned 0x0 [0285.405] GetLastError () returned 0x0 [0285.405] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.406] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0285.407] WriteFile (in: hFile=0x248, lpBuffer=0x23e3f24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f24*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.408] SetEndOfFile (hFile=0x248) returned 1 [0285.409] CloseHandle (hObject=0x248) returned 1 [0285.409] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.409] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.409] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.410] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.410] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0285.410] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.410] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.410] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.411] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.411] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.411] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.411] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.411] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.411] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.411] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.411] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.411] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.411] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.411] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.412] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.412] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.412] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.412] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.412] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.412] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.412] CryptDestroyKey (hKey=0x55e910) returned 1 [0285.412] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0285.412] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d759694, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e09c987, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0285.413] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d759694, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e09c987, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.413] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0285.413] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.413] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.413] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.413] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0285.413] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0285.414] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.414] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.414] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0285.414] CryptDestroyHash (hHash=0x55e910) returned 1 [0285.414] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.414] GetLastError () returned 0x0 [0285.414] GetLastError () returned 0x0 [0285.414] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.415] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.417] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3f34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3f34*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.418] SetEndOfFile (hFile=0x24c) returned 1 [0285.420] CloseHandle (hObject=0x24c) returned 1 [0285.421] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.421] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.421] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.422] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.422] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.422] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.423] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.423] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.423] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.423] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.423] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.423] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.423] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.423] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.423] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.424] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.424] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0285.424] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0285.424] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e09c987, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0285.424] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e09c987, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.424] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e09c987, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e09c987, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e0c2acc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.424] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0285.425] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.425] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.426] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.426] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0285.426] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571408) returned 1 [0285.427] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.427] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.427] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0285.427] CryptDestroyHash (hHash=0x55e210) returned 1 [0285.427] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.427] GetLastError () returned 0x0 [0285.427] GetLastError () returned 0x0 [0285.427] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.428] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.429] WriteFile (in: hFile=0x250, lpBuffer=0x23e3f74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f74*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.431] SetEndOfFile (hFile=0x250) returned 1 [0285.431] CloseHandle (hObject=0x250) returned 1 [0285.431] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.432] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.432] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0285.432] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.433] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.433] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.433] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.433] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.434] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.434] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.463] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.463] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.463] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.463] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.464] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.464] CryptDestroyKey (hKey=0x55e910) returned 1 [0285.464] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0285.464] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e0c2acc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0285.465] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e0c2acc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.465] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0c2acc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e0c2acc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e0c2acc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.465] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e0c2acc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e0c2acc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e0c2acc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.465] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0285.466] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0285.466] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.466] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.466] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.466] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0285.468] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0285.469] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.469] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.469] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0285.469] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.469] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.469] GetLastError () returned 0x0 [0285.469] GetLastError () returned 0x0 [0285.470] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.470] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.472] WriteFile (in: hFile=0x250, lpBuffer=0x23e3f84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f84*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.473] SetEndOfFile (hFile=0x250) returned 1 [0285.474] CloseHandle (hObject=0x250) returned 1 [0285.474] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.475] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.475] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.475] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.475] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0285.475] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.476] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.476] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.476] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.476] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.477] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0285.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.477] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.477] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.478] CryptDestroyKey (hKey=0x55e190) returned 1 [0285.478] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0285.478] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e13534a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0285.478] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e13534a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.478] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e13534a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e13534a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e13534a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.478] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e13534a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e13534a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e13534a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.478] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0285.478] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0285.478] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.478] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.479] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.479] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0285.479] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0285.480] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.480] CryptHashData (hHash=0x55e650, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.480] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0285.480] CryptDestroyHash (hHash=0x55e650) returned 1 [0285.480] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.480] GetLastError () returned 0x0 [0285.480] GetLastError () returned 0x0 [0285.480] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.480] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.482] WriteFile (in: hFile=0x250, lpBuffer=0x23e3fc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3fc4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.484] SetEndOfFile (hFile=0x250) returned 1 [0285.484] CloseHandle (hObject=0x250) returned 1 [0285.484] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.485] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.485] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.486] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.486] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.486] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.486] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.487] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.487] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0285.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.487] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.487] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.488] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0285.488] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0285.488] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e13534a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0285.488] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e13534a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.488] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e13534a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e13534a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e15b5d9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.488] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e13534a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e13534a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e15b5d9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.488] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0285.488] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0285.489] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.489] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.489] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.489] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0285.489] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571518) returned 1 [0285.490] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.490] CryptHashData (hHash=0x55e310, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.490] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0285.490] CryptDestroyHash (hHash=0x55e310) returned 1 [0285.490] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.490] GetLastError () returned 0x0 [0285.490] GetLastError () returned 0x0 [0285.490] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.490] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.492] WriteFile (in: hFile=0x250, lpBuffer=0x23e3fd4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3fd4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.494] SetEndOfFile (hFile=0x250) returned 1 [0285.494] CloseHandle (hObject=0x250) returned 1 [0285.494] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.495] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.495] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.495] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.495] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.495] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.495] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0285.496] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.496] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.496] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.496] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.496] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.535] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.536] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.536] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.536] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.537] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0285.537] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0285.537] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e15b5d9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0285.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e15b5d9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e15b5d9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e15b5d9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e15b5d9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e15b5d9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e15b5d9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e15b5d9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.537] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0285.537] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d45e7c4, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d45e7c4, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d45e7c4, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0285.537] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0285.537] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d4383e5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0285.538] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.538] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.538] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.538] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.538] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.538] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0285.538] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c10) returned 1 [0285.539] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.539] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.539] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0285.539] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.539] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.539] GetLastError () returned 0x0 [0285.539] GetLastError () returned 0x0 [0285.539] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.540] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.541] WriteFile (in: hFile=0x24c, lpBuffer=0x23e5d1c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e5d1c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.542] SetEndOfFile (hFile=0x24c) returned 1 [0285.542] CloseHandle (hObject=0x24c) returned 1 [0285.542] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.542] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.542] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.542] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0285.543] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.543] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.543] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.543] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.544] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.544] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.544] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.544] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.544] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.544] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.544] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.544] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.544] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.544] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.544] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.545] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.545] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.545] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.545] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.545] CryptDestroyKey (hKey=0x55e790) returned 1 [0285.545] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0285.545] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e1cdbe0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0285.546] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e1cdbe0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.546] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1cdbe0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e1cdbe0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e1cdbe0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.546] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1cdbe0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e1cdbe0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e1cdbe0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.546] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0285.546] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e09c987, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e09c987, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e09c987, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.546] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0285.546] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.546] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.546] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.546] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.546] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.546] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0285.547] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0285.547] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.547] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.547] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0285.547] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.547] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.547] GetLastError () returned 0x0 [0285.547] GetLastError () returned 0x0 [0285.547] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.548] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.549] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.550] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ff4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ff4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.551] SetEndOfFile (hFile=0x24c) returned 1 [0285.552] CloseHandle (hObject=0x24c) returned 1 [0285.552] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.552] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.553] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.553] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.553] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.553] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.553] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.553] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.556] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.556] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.556] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.556] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.556] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.556] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.557] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.557] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.557] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.557] CryptDestroyKey (hKey=0x55e790) returned 1 [0285.558] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0285.558] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e1f3deb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0285.558] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e1f3deb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.558] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1f3deb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e1f3deb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e1f3deb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.558] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e1f3deb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e1f3deb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e1f3deb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.558] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0285.558] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0285.558] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.558] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.558] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.559] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.559] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.559] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0285.559] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0285.560] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.560] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.560] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0285.560] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.560] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.560] GetLastError () returned 0x0 [0285.560] GetLastError () returned 0x0 [0285.560] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.560] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.562] WriteFile (in: hFile=0x24c, lpBuffer=0x23e4014*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e4014*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.563] SetEndOfFile (hFile=0x24c) returned 1 [0285.563] CloseHandle (hObject=0x24c) returned 1 [0285.563] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.564] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.564] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.564] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.564] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.564] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0285.565] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.565] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.565] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.565] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.565] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.565] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.565] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.565] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.565] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.565] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.565] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.566] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0285.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.566] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.566] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.566] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.566] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.566] CryptDestroyKey (hKey=0x55e910) returned 1 [0285.566] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0285.567] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e219f64, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0285.567] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e219f64, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.567] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e219f64, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e219f64, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e219f64, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.567] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e219f64, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e219f64, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e219f64, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.567] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0285.567] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d759694, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d759694, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0285.567] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.567] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.567] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.567] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.567] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.568] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0285.568] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0285.568] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.568] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.568] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0285.568] CryptDestroyHash (hHash=0x55e650) returned 1 [0285.568] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.568] GetLastError () returned 0x0 [0285.568] GetLastError () returned 0x0 [0285.569] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.569] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.593] WriteFile (in: hFile=0x24c, lpBuffer=0x23e536c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e536c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.594] SetEndOfFile (hFile=0x24c) returned 1 [0285.594] CloseHandle (hObject=0x24c) returned 1 [0285.595] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.596] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.596] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.596] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.596] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.596] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.596] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0285.596] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.596] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.596] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.597] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.597] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.597] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.597] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.597] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.597] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.597] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.597] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.597] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.598] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.598] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.598] CryptDestroyKey (hKey=0x55e790) returned 1 [0285.598] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0285.598] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d759694, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e2663f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0285.598] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d759694, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e2663f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.599] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d27f4be, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d27f4be, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0285.599] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.599] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.601] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.601] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0285.601] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0285.601] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.601] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.601] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e5d0) returned 1 [0285.601] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0285.602] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.602] GetLastError () returned 0x0 [0285.602] GetLastError () returned 0x0 [0285.602] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.603] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0285.603] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.603] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.605] WriteFile (in: hFile=0x250, lpBuffer=0x23e3674*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3674*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.606] SetEndOfFile (hFile=0x250) returned 1 [0285.606] CloseHandle (hObject=0x250) returned 1 [0285.606] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.607] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.607] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.607] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.607] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.607] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.608] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.608] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.608] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.608] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.608] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.608] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.608] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.608] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.609] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.609] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.609] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.609] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.609] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.610] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0285.610] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0285.610] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10586.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d27f4be, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e2663f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0285.610] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d759694, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d27f4be, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e2663f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.610] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d2591dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3d2591dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d27f4be, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0285.610] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9d77f879, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d77f879, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d77f879, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0285.610] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9d77f879, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d77f879, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d77f879, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0285.610] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2663f5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e2663f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e28c6de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.610] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2663f5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e2663f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e28c6de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.610] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0285.610] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2401c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e2401c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e2663f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.611] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2401c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e2401c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e2663f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.611] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0285.611] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0285.611] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.611] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.611] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.611] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0285.611] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570a78) returned 1 [0285.612] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.612] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.612] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0285.612] CryptDestroyHash (hHash=0x55e790) returned 1 [0285.612] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.612] GetLastError () returned 0x0 [0285.612] GetLastError () returned 0x0 [0285.612] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.613] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.614] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3684*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3684*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.615] SetEndOfFile (hFile=0x24c) returned 1 [0285.615] CloseHandle (hObject=0x24c) returned 1 [0285.615] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.616] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.616] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.616] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0285.617] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.617] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.617] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.617] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.617] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.617] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.617] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.618] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.618] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.618] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.618] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.619] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0285.619] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0285.619] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e28c6de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0285.619] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e28c6de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.619] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e28c6de, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e28c6de, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e28c6de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.619] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e28c6de, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e28c6de, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e28c6de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.619] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0285.619] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d2a56fb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d2a56fb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0285.619] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.619] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.620] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.620] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0285.620] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571490) returned 1 [0285.620] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.621] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.621] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0285.621] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.621] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.621] GetLastError () returned 0x0 [0285.621] GetLastError () returned 0x0 [0285.621] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.622] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0285.623] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.624] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.627] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.629] SetEndOfFile (hFile=0x24c) returned 1 [0285.630] CloseHandle (hObject=0x24c) returned 1 [0285.630] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.631] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.631] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0285.632] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.632] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.632] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.632] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.633] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.633] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.633] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.633] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.634] CryptDestroyKey (hKey=0x55e310) returned 1 [0285.634] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0285.634] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d2a56fb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e2b2aa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0285.634] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d2a56fb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e2b2aa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.634] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2b2aa4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e2b2aa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e2b2aa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.634] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d4383e5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0285.634] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d2a56fb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3d2a56fb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d2a56fb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0285.634] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93faeefa, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93faeefa, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93faeefa, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0285.634] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93faeefa, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93faeefa, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93faeefa, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0285.634] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x93faeefa, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x93faeefa, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x93faeefa, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0285.634] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0285.634] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d4383e5, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0285.634] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.634] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.635] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.635] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0285.635] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0285.635] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.635] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.635] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0285.635] CryptDestroyHash (hHash=0x55e910) returned 1 [0285.635] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.635] GetLastError () returned 0x0 [0285.636] GetLastError () returned 0x0 [0285.636] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.636] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.643] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.644] SetEndOfFile (hFile=0x24c) returned 1 [0285.644] CloseHandle (hObject=0x24c) returned 1 [0285.644] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.645] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.645] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.646] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.646] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.646] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.647] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.647] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.647] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.648] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.648] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.648] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.648] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.648] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.649] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0285.649] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0285.649] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e2b2aa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0285.649] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d4383e5, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d4383e5, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e2b2aa4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.649] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2b2aa4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e2b2aa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e2d8b56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.649] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2b2aa4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e2b2aa4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e2d8b56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.649] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0285.649] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0285.649] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.649] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.650] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.650] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0285.650] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0285.650] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.651] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.651] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0285.651] CryptDestroyHash (hHash=0x55e790) returned 1 [0285.651] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.651] GetLastError () returned 0x0 [0285.651] GetLastError () returned 0x0 [0285.651] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.651] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0285.652] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.652] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.654] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.655] SetEndOfFile (hFile=0x24c) returned 1 [0285.655] CloseHandle (hObject=0x24c) returned 1 [0285.655] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.656] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.656] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0285.657] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.657] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.657] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.657] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.657] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.657] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.657] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.658] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.658] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.658] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.658] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0285.658] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0285.659] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e2d8b56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0285.659] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e2d8b56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.659] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2d8b56, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e2d8b56, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e2fed58, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.659] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2d8b56, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e2d8b56, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e2fed58, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.659] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0285.659] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d41224c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9d41224c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9d41224c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0285.659] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0285.659] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e8c896c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x49786174, cFileName="Windows.ContactSupport_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.CON")) returned 1 [0285.659] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.660] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.660] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.660] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0285.660] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570748) returned 1 [0285.660] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0285.661] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.661] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e790) returned 1 [0285.661] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.661] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f190*=0x18) returned 1 [0285.661] GetLastError () returned 0x0 [0285.661] GetLastError () returned 0x0 [0285.661] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.661] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0285.663] WriteFile (in: hFile=0x248, lpBuffer=0x23e5294*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e5294*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.664] SetEndOfFile (hFile=0x248) returned 1 [0285.664] CloseHandle (hObject=0x248) returned 1 [0285.664] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.665] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.665] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.675] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.675] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.675] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0285.676] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.676] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.676] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.676] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.676] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.676] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.676] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.677] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0285.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.677] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.677] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.677] CryptDestroyKey (hKey=0x55e790) returned 1 [0285.677] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0285.678] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e2fed58, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0285.678] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e2fed58, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.678] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0285.678] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.678] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.678] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.678] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.678] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.678] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0285.678] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0285.679] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.679] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.679] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0285.679] CryptDestroyHash (hHash=0x55e610) returned 1 [0285.679] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.679] GetLastError () returned 0x0 [0285.679] GetLastError () returned 0x0 [0285.679] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.680] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0285.681] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.681] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.684] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.685] SetEndOfFile (hFile=0x24c) returned 1 [0285.685] CloseHandle (hObject=0x24c) returned 1 [0285.685] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.686] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.686] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.686] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.686] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.686] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.686] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.687] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.687] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.687] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.687] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.687] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.688] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.688] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.688] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.688] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.689] CryptDestroyKey (hKey=0x55e210) returned 1 [0285.689] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0285.689] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e3319ae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0285.689] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e3319ae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.689] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e3319ae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e3319ae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e34b1a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.689] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0285.689] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.689] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.689] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.689] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.689] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.689] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0285.690] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571408) returned 1 [0285.690] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.690] CryptHashData (hHash=0x55e210, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.690] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e310) returned 1 [0285.690] CryptDestroyHash (hHash=0x55e210) returned 1 [0285.690] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.690] GetLastError () returned 0x0 [0285.690] GetLastError () returned 0x0 [0285.690] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.691] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.692] WriteFile (in: hFile=0x250, lpBuffer=0x23e3584*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3584*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.693] SetEndOfFile (hFile=0x250) returned 1 [0285.693] CloseHandle (hObject=0x250) returned 1 [0285.693] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.694] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.694] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.695] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.695] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.695] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.695] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0285.695] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.696] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.696] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.696] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.697] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.697] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.697] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.697] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.697] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.697] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.697] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.698] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.698] CryptDestroyKey (hKey=0x55e310) returned 1 [0285.698] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0285.698] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e34b1a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0285.699] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e34b1a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.699] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e34b1a0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e34b1a0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e34b1a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.699] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e34b1a0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e34b1a0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e34b1a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.699] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0285.699] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0285.699] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.699] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.699] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.699] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0285.700] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5706c0) returned 1 [0285.700] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.700] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.700] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0285.700] CryptDestroyHash (hHash=0x55e610) returned 1 [0285.701] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.701] GetLastError () returned 0x0 [0285.701] GetLastError () returned 0x0 [0285.701] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.701] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0285.702] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.703] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.704] WriteFile (in: hFile=0x250, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.705] SetEndOfFile (hFile=0x250) returned 1 [0285.705] CloseHandle (hObject=0x250) returned 1 [0285.710] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.710] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.711] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.711] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.711] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.711] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.711] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0285.711] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.711] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.712] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.712] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.712] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.712] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.712] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.713] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.713] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.713] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.713] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.713] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.714] CryptDestroyKey (hKey=0x55e910) returned 1 [0285.714] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0285.714] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e371506, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0285.714] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e371506, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.714] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e371506, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e371506, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e371506, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.714] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e371506, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e371506, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e371506, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.714] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0285.715] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0285.715] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.715] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.715] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.715] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0285.729] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571518) returned 1 [0285.730] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.730] CryptHashData (hHash=0x55e210, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.730] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0285.730] CryptDestroyHash (hHash=0x55e210) returned 1 [0285.730] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.730] GetLastError () returned 0x0 [0285.730] GetLastError () returned 0x0 [0285.730] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.731] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.732] WriteFile (in: hFile=0x250, lpBuffer=0x23e3584*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3584*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.733] SetEndOfFile (hFile=0x250) returned 1 [0285.733] CloseHandle (hObject=0x250) returned 1 [0285.733] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.734] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.735] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.735] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.736] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.736] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.736] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.737] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.737] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.737] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.737] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.737] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.738] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.738] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0285.738] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e3bd98f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0285.738] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e3bd98f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.738] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e3bd98f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e3bd98f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e3bd98f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.738] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e3bd98f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e3bd98f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e3bd98f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.738] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0285.739] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0285.739] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.739] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.739] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.739] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.739] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0285.739] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0285.740] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.740] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.740] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0285.740] CryptDestroyHash (hHash=0x55e910) returned 1 [0285.740] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.740] GetLastError () returned 0x0 [0285.740] GetLastError () returned 0x0 [0285.740] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.741] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0285.742] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.743] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.746] WriteFile (in: hFile=0x250, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.748] SetEndOfFile (hFile=0x250) returned 1 [0285.748] CloseHandle (hObject=0x250) returned 1 [0285.749] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.749] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.750] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0285.750] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.751] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.751] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.751] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.751] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.751] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.751] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.751] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.751] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.751] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.751] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.752] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.752] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.752] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.752] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.752] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.752] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.752] CryptDestroyKey (hKey=0x55e210) returned 1 [0285.753] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0285.753] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e3bd98f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0285.753] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e3bd98f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.753] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e3bd98f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e3bd98f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e3e3c06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.753] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e3bd98f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e3bd98f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e3e3c06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.753] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0285.753] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e55b288, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e55b288, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e55b288, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0285.753] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0285.753] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0285.754] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.754] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.754] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.754] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0285.754] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0285.755] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.755] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.755] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0285.755] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0285.755] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.755] GetLastError () returned 0x0 [0285.755] GetLastError () returned 0x0 [0285.755] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.756] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.757] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.758] SetEndOfFile (hFile=0x24c) returned 1 [0285.759] CloseHandle (hObject=0x24c) returned 1 [0285.759] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.760] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.760] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.760] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.760] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0285.760] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.761] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.761] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.761] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.761] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.762] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.762] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.762] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.762] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.763] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.763] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0285.763] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e3e3c06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0285.763] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e3e3c06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.763] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e3e3c06, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e3e3c06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e3e3c06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.763] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e3e3c06, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e3e3c06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e3e3c06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.763] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0285.764] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2fed58, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e2fed58, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e2fed58, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.764] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0285.764] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.764] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.764] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.764] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.764] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.764] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0285.764] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0285.765] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.765] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.765] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0285.765] CryptDestroyHash (hHash=0x55e910) returned 1 [0285.765] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.765] GetLastError () returned 0x0 [0285.765] GetLastError () returned 0x0 [0285.765] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.766] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0285.767] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.768] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.769] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.771] SetEndOfFile (hFile=0x24c) returned 1 [0285.771] CloseHandle (hObject=0x24c) returned 1 [0285.771] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.772] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.772] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.773] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.773] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.773] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.773] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.773] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.773] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.774] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.774] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.774] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.774] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.774] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.774] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.774] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.775] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.775] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.775] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.776] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0285.776] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0285.776] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e40a0d2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0285.776] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e40a0d2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.776] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e40a0d2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e40a0d2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e40a0d2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.776] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e40a0d2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e40a0d2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e40a0d2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.776] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0285.777] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0285.777] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.777] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.777] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.777] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0285.777] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0285.795] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.795] CryptHashData (hHash=0x55e7d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.795] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0285.795] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0285.795] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.795] GetLastError () returned 0x0 [0285.795] GetLastError () returned 0x0 [0285.795] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.796] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.797] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.798] SetEndOfFile (hFile=0x24c) returned 1 [0285.799] CloseHandle (hObject=0x24c) returned 1 [0285.799] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.800] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.800] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.800] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.800] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0285.801] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.801] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.801] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.801] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.801] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.802] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.802] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0285.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.802] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.802] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.802] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.803] CryptDestroyKey (hKey=0x55e910) returned 1 [0285.803] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0285.803] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e45637e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0285.803] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e45637e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.803] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e45637e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e45637e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e45637e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.803] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e45637e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e45637e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e45637e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.803] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0285.804] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0285.804] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.804] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.804] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.804] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.804] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.804] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0285.804] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0285.805] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.805] CryptHashData (hHash=0x55e210, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.805] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0285.805] CryptDestroyHash (hHash=0x55e210) returned 1 [0285.805] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.805] GetLastError () returned 0x0 [0285.805] GetLastError () returned 0x0 [0285.805] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.806] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0285.807] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.808] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.810] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.811] SetEndOfFile (hFile=0x24c) returned 1 [0285.812] CloseHandle (hObject=0x24c) returned 1 [0285.812] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.813] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.813] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.813] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.813] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0285.813] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.814] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.814] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.814] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.814] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.814] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.814] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.814] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.814] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.814] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.814] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.815] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.815] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.815] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.815] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.815] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.816] CryptDestroyKey (hKey=0x55e650) returned 1 [0285.816] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0285.816] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e45637e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0285.816] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e45637e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.816] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e45637e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e45637e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e47e3ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.816] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e45637e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e45637e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e47e3ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.816] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0285.816] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d33e052, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d33e052, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0285.816] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.816] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.817] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.817] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.817] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.817] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0285.817] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0285.818] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.818] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.818] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0285.818] CryptDestroyHash (hHash=0x55e290) returned 1 [0285.818] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.818] GetLastError () returned 0x0 [0285.818] GetLastError () returned 0x0 [0285.818] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.819] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.820] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.822] SetEndOfFile (hFile=0x24c) returned 1 [0285.822] CloseHandle (hObject=0x24c) returned 1 [0285.822] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.823] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.823] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.823] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.823] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.824] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.824] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.824] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.824] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.824] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.825] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.825] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.825] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.825] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.825] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.825] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.825] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.825] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.826] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.826] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.826] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.826] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.826] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.826] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.827] CryptDestroyKey (hKey=0x55e910) returned 1 [0285.827] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0285.827] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d33e052, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e47e3ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0285.827] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d33e052, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e47e3ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.827] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e47e3ce, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e47e3ce, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e47e3ce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.827] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0285.827] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d317e49, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3d317e49, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d33e052, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0285.827] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x944bfdaf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x944bfdaf, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x944bfdaf, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0285.827] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x944bfdaf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x944bfdaf, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x944bfdaf, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0285.827] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x944bfdaf, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x944bfdaf, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x944bfdaf, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0285.827] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0285.828] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0285.828] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.828] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.828] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.828] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0285.828] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0285.829] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.829] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.829] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0285.829] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.829] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.829] GetLastError () returned 0x0 [0285.829] GetLastError () returned 0x0 [0285.829] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.830] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0285.831] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.832] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.833] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.834] SetEndOfFile (hFile=0x24c) returned 1 [0285.834] CloseHandle (hObject=0x24c) returned 1 [0285.835] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.835] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.836] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.836] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0285.836] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.837] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.837] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.837] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.837] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.838] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.838] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.838] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.848] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.848] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.848] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0285.848] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e4a28c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0285.849] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e4a28c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.849] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e4a28c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e4a28c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e4a28c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.849] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e4a28c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e4a28c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e4a28c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.849] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0285.849] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e49c81d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0285.849] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.849] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.849] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.849] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.850] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0285.850] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0285.854] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.855] CryptHashData (hHash=0x55e290, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.855] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0285.855] CryptDestroyHash (hHash=0x55e290) returned 1 [0285.855] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.855] GetLastError () returned 0x0 [0285.855] GetLastError () returned 0x0 [0285.855] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.856] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.857] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.865] SetEndOfFile (hFile=0x24c) returned 1 [0285.865] CloseHandle (hObject=0x24c) returned 1 [0285.865] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.866] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.866] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.866] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.866] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.866] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.866] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0285.867] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.867] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.867] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.867] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.919] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.919] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.919] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.920] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0285.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.920] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.920] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.921] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0285.921] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0285.921] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e4eece4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0285.921] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e49c81d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e49c81d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e4eece4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.921] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e4eece4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e4eece4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e4eece4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.922] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e4eece4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e4eece4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e4eece4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.922] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0285.923] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e8c896c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e8c896c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e8c896c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 1 [0285.923] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.923] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.924] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.924] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0285.924] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0285.925] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.925] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.925] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0285.925] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.925] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.925] GetLastError () returned 0x0 [0285.925] GetLastError () returned 0x0 [0285.925] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.926] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0285.927] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.927] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.936] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.937] SetEndOfFile (hFile=0x24c) returned 1 [0285.937] CloseHandle (hObject=0x24c) returned 1 [0285.938] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.939] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.939] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0285.940] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.940] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.941] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.941] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.941] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.941] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.944] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.945] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.945] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.945] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.945] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.945] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.945] CryptDestroyKey (hKey=0x55e910) returned 1 [0285.946] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0285.946] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e8c896c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e8c896c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e5876cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0285.946] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e8c896c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e8c896c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e5876cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.946] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e8c896c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d364319, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d364319, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0285.946] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.946] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.946] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.946] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.946] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0285.947] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571408) returned 1 [0285.947] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0285.948] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.948] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0285.948] CryptDestroyHash (hHash=0x55e790) returned 1 [0285.948] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0285.948] GetLastError () returned 0x0 [0285.948] GetLastError () returned 0x0 [0285.948] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.949] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0285.952] WriteFile (in: hFile=0x250, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.953] SetEndOfFile (hFile=0x250) returned 1 [0285.953] CloseHandle (hObject=0x250) returned 1 [0285.953] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.954] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.955] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0285.955] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.955] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.956] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.956] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.956] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.956] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.956] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.956] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.956] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.956] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.956] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.956] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.957] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.957] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.957] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.957] CryptDestroyKey (hKey=0x55e910) returned 1 [0285.958] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0285.958] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e8c896c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d364319, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e5b589d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0285.958] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e8c896c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3d364319, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e5b589d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.958] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d33e052, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3d33e052, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d364319, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0285.958] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9e9d39e1, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e9d39e1, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e9d39e1, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0285.959] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9e9d39e1, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e9d39e1, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e9d39e1, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0285.959] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5b589d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e5b589d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e5d4f49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.959] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5b589d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e5b589d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e5d4f49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.959] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0285.959] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5876cd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e5876cd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e5b589d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.959] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5876cd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e5876cd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e5b589d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.959] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0285.959] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e8c896c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9e8c896c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9e8c896c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Windows.ContactSupport_10.0.10586.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 0 [0285.959] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0285.959] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b79dad4, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6e6f432e, dwReserved1=0x74636174, cFileName="windows.devicesflow_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.DEV")) returned 1 [0285.960] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.960] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.960] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.960] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0285.960] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570f40) returned 1 [0285.961] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0285.961] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.961] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0285.961] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0285.961] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18) returned 1 [0285.961] GetLastError () returned 0x0 [0285.961] GetLastError () returned 0x0 [0285.961] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.962] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0285.963] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.963] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0285.965] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.966] SetEndOfFile (hFile=0x248) returned 1 [0285.966] CloseHandle (hObject=0x248) returned 1 [0285.966] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.967] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.967] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.967] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0285.968] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.968] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.968] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.968] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.968] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.969] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.969] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.969] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.969] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.969] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.969] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.969] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0285.969] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.969] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.970] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.970] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.970] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.970] CryptDestroyKey (hKey=0x55e610) returned 1 [0285.970] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0285.970] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e5d4f49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0285.970] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e5d4f49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.970] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b6deebf, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0285.971] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.971] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.971] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.971] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.971] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.971] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0285.971] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5707d0) returned 1 [0285.972] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.972] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.972] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0285.972] CryptDestroyHash (hHash=0x55e610) returned 1 [0285.972] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.972] GetLastError () returned 0x0 [0285.972] GetLastError () returned 0x0 [0285.972] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.973] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.974] WriteFile (in: hFile=0x24c, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.976] SetEndOfFile (hFile=0x24c) returned 1 [0285.976] CloseHandle (hObject=0x24c) returned 1 [0285.976] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.977] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.977] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.977] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.977] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0285.978] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.978] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.978] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.978] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.978] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.979] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.979] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.979] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0285.979] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.979] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.979] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.980] CryptDestroyKey (hKey=0x55e750) returned 1 [0285.980] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0285.980] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e5f9e57, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0285.980] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e5f9e57, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.980] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f9e57, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e5f9e57, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e5f9e57, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.980] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5f9e57, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e5f9e57, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e5f9e57, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.981] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0285.981] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b79dad4, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b79dad4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b79dad4, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0285.981] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.982] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.982] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.982] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.982] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0285.983] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0285.983] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.983] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.983] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0285.984] CryptDestroyHash (hHash=0x55e910) returned 1 [0285.984] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.984] GetLastError () returned 0x0 [0285.984] GetLastError () returned 0x0 [0285.984] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.985] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0285.985] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.986] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.988] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0285.989] SetEndOfFile (hFile=0x24c) returned 1 [0285.989] CloseHandle (hObject=0x24c) returned 1 [0285.989] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0285.990] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.990] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0285.991] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0285.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0285.991] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.991] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.991] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.991] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0285.992] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0285.992] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.992] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.992] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.992] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0285.992] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.992] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0285.992] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0285.992] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.992] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0285.992] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0285.993] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0285.993] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.993] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0285.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0285.993] CryptDestroyKey (hKey=0x55e190) returned 1 [0285.993] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0285.993] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b79dad4, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b79dad4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e620048, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0285.993] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b79dad4, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b79dad4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e620048, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0285.994] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e620048, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e620048, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e620048, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.994] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e620048, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e620048, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e620048, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0285.994] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0285.994] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5d4f49, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e5d4f49, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e5f9e57, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0285.994] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b6deebf, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0285.994] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0285.994] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0285.994] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0285.994] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0285.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0285.994] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571518) returned 1 [0285.995] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0285.995] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0285.995] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0285.995] CryptDestroyHash (hHash=0x55e650) returned 1 [0285.995] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0285.995] GetLastError () returned 0x0 [0285.995] GetLastError () returned 0x0 [0285.996] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0285.996] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0285.998] WriteFile (in: hFile=0x24c, lpBuffer=0x23e35c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e35c4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.000] SetEndOfFile (hFile=0x24c) returned 1 [0286.000] CloseHandle (hObject=0x24c) returned 1 [0286.000] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.001] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.001] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.001] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.001] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.002] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.002] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.002] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.002] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.002] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.003] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.003] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.003] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.003] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.004] CryptDestroyKey (hKey=0x55e610) returned 1 [0286.004] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0286.004] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e620048, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0286.004] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e620048, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.004] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e620048, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e620048, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e64ab9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.004] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e620048, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e620048, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e64ab9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.005] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0286.005] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b6deebf, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0286.005] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.005] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.005] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.005] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.005] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0286.006] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.006] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.006] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0286.006] CryptDestroyHash (hHash=0x55e910) returned 1 [0286.006] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.006] GetLastError () returned 0x0 [0286.006] GetLastError () returned 0x0 [0286.006] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.007] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0286.008] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.008] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.010] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.011] SetEndOfFile (hFile=0x24c) returned 1 [0286.011] CloseHandle (hObject=0x24c) returned 1 [0286.012] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.013] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.013] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.013] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.014] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.014] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.014] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.015] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.015] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.015] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.015] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.016] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.016] CryptDestroyKey (hKey=0x55e750) returned 1 [0286.016] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0286.016] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e64ab9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.016] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e64ab9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.017] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e64ab9e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e64ab9e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e64ab9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.017] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e64ab9e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e64ab9e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e64ab9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.017] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.017] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b6deebf, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0286.017] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.017] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.017] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.017] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.018] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0286.018] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.018] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.018] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0286.019] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.019] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.019] GetLastError () returned 0x0 [0286.019] GetLastError () returned 0x0 [0286.019] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.019] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.021] WriteFile (in: hFile=0x24c, lpBuffer=0x23e35a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e35a4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.022] SetEndOfFile (hFile=0x24c) returned 1 [0286.023] CloseHandle (hObject=0x24c) returned 1 [0286.023] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.024] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.024] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.024] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.025] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.025] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.025] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.026] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.026] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.026] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.026] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.026] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.026] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.026] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.027] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.027] CryptDestroyKey (hKey=0x55e650) returned 1 [0286.027] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0286.027] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e66c748, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0286.027] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e66c748, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.027] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e66c748, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e66c748, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e66c748, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.028] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e66c748, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e66c748, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e66c748, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.029] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0286.029] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x3d3b084b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d3b084b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0286.029] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.029] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.029] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.029] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.029] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.030] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.030] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0286.030] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.030] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.030] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0286.031] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.031] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.031] GetLastError () returned 0x0 [0286.031] GetLastError () returned 0x0 [0286.031] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.032] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0286.032] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.033] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.035] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.036] SetEndOfFile (hFile=0x24c) returned 1 [0286.036] CloseHandle (hObject=0x24c) returned 1 [0286.036] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.037] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.037] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.037] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.037] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.037] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.037] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.038] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.038] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.038] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.038] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.039] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.039] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.039] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.039] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.039] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.040] CryptDestroyKey (hKey=0x55e750) returned 1 [0286.040] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0286.040] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x3d3b084b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e692719, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.040] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x3d3b084b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e692719, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.040] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e692719, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e692719, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e692719, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.040] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b79dad4, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b79dad4, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b79dad4, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0286.040] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d3b084b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3d3b084b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3d3b084b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0286.040] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc372dde6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xc372dde6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc372dde6, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0286.040] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc372dde6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xc372dde6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc372dde6, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0286.040] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc372dde6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xc372dde6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xc372dde6, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0286.040] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.041] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b6deebf, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0286.041] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.041] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.041] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.041] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.041] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0286.042] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.042] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.042] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0286.042] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.042] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.042] GetLastError () returned 0x0 [0286.042] GetLastError () returned 0x0 [0286.042] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.043] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.045] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3594*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3594*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.046] SetEndOfFile (hFile=0x24c) returned 1 [0286.046] CloseHandle (hObject=0x24c) returned 1 [0286.047] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.047] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.048] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.048] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.048] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.049] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.049] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.051] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.052] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.052] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.052] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.052] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.052] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.052] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.052] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.052] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.052] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.053] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.053] CryptDestroyKey (hKey=0x55e650) returned 1 [0286.053] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0286.053] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e692719, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0286.053] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e692719, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.053] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e692719, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e692719, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e6ba253, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.053] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e692719, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e692719, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e6ba253, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.053] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0286.053] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b6deebf, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0286.054] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.054] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.054] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.054] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.054] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.054] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.054] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0286.055] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.055] CryptHashData (hHash=0x55e290, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.055] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0286.055] CryptDestroyHash (hHash=0x55e290) returned 1 [0286.055] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.055] GetLastError () returned 0x0 [0286.055] GetLastError () returned 0x0 [0286.055] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.056] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0286.057] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.057] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.058] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.060] SetEndOfFile (hFile=0x24c) returned 1 [0286.060] CloseHandle (hObject=0x24c) returned 1 [0286.060] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.061] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.061] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.061] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.061] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.061] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.061] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.061] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.062] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.062] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.062] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.062] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.062] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.062] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.062] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.062] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.062] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.062] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.063] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.063] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.063] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.063] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.063] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.063] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.063] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.063] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.063] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.063] CryptDestroyKey (hKey=0x55e910) returned 1 [0286.064] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0286.064] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e6ba253, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0286.064] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4e6ba253, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.064] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e6ba253, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e6ba253, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e6dec25, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.064] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e6ba253, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e6ba253, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e6dec25, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.064] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0286.064] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b6deebf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0x1b6deebf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x1b6deebf, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0286.064] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0286.064] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efcf224, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x5f4f6174, cFileName="windows.immersivecontrolpanel_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.IMM")) returned 1 [0286.064] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.064] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.065] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.065] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.065] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.065] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.065] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5710d8) returned 1 [0286.066] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0286.066] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.066] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0286.066] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0286.066] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18) returned 1 [0286.066] GetLastError () returned 0x0 [0286.066] GetLastError () returned 0x0 [0286.066] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.067] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0286.068] WriteFile (in: hFile=0x248, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.069] SetEndOfFile (hFile=0x248) returned 1 [0286.069] CloseHandle (hObject=0x248) returned 1 [0286.069] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.070] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.070] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.070] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.070] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.070] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.070] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.071] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.071] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.071] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.071] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.071] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.071] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.071] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.072] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.072] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.072] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.072] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.073] CryptDestroyKey (hKey=0x55e610) returned 1 [0286.073] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0286.073] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e6dec25, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0286.073] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e6dec25, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.073] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efa8e98, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0286.073] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.073] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.074] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.074] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.074] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.074] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0286.074] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.075] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.077] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0286.077] CryptDestroyHash (hHash=0x55e910) returned 1 [0286.077] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.077] GetLastError () returned 0x0 [0286.077] GetLastError () returned 0x0 [0286.077] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.078] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0286.079] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.079] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.081] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3524*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3524*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.083] SetEndOfFile (hFile=0x24c) returned 1 [0286.083] CloseHandle (hObject=0x24c) returned 1 [0286.083] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.084] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.084] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.084] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.084] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.084] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.085] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.085] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.085] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.085] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.085] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.085] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.085] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.086] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.086] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.086] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.086] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.086] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.087] CryptDestroyKey (hKey=0x55e290) returned 1 [0286.087] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0286.087] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e704e27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0286.087] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e704e27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.087] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e704e27, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e704e27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e704e27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.087] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e704e27, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e704e27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e704e27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.087] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0286.087] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efcf224, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efcf224, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efcf224, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0286.088] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.088] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.088] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.088] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.088] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0286.089] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.089] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.089] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0286.089] CryptDestroyHash (hHash=0x55e650) returned 1 [0286.089] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.089] GetLastError () returned 0x0 [0286.089] GetLastError () returned 0x0 [0286.089] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.090] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.091] WriteFile (in: hFile=0x24c, lpBuffer=0x23e524c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e524c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.092] SetEndOfFile (hFile=0x24c) returned 1 [0286.093] CloseHandle (hObject=0x24c) returned 1 [0286.093] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.094] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.094] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.094] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.094] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.094] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.094] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.094] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.094] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.095] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.095] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.095] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.095] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.095] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.095] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.095] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.095] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.095] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.095] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.095] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.095] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.096] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.096] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.096] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.096] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.096] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.096] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.096] CryptDestroyKey (hKey=0x55e610) returned 1 [0286.096] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0286.096] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efcf224, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efcf224, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e704e27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0286.097] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efcf224, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efcf224, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e704e27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.097] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e704e27, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e704e27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e72b044, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.097] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e704e27, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e704e27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e72b044, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.097] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0286.097] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e6dec25, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e6dec25, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e6dec25, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.097] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efa8e98, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0286.097] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.097] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.097] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.097] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.097] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.098] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571518) returned 1 [0286.098] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.098] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.098] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0286.098] CryptDestroyHash (hHash=0x55e310) returned 1 [0286.098] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.099] GetLastError () returned 0x0 [0286.099] GetLastError () returned 0x0 [0286.099] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.099] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0286.100] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.100] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.101] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.103] SetEndOfFile (hFile=0x24c) returned 1 [0286.103] CloseHandle (hObject=0x24c) returned 1 [0286.103] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.104] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.104] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.104] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.105] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.105] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.105] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.115] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.116] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.116] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.117] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.117] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.117] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.117] CryptDestroyKey (hKey=0x55e610) returned 1 [0286.118] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0286.118] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e72b044, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0286.118] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e72b044, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.118] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e72b044, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e72b044, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e72b044, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.118] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e72b044, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e72b044, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e72b044, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.118] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0286.119] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x905ddec2, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0286.119] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.119] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.119] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.119] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.120] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570a78) returned 1 [0286.120] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.121] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.121] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0286.121] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0286.121] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.121] GetLastError () returned 0x0 [0286.121] GetLastError () returned 0x0 [0286.121] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.122] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.124] WriteFile (in: hFile=0x24c, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.126] SetEndOfFile (hFile=0x24c) returned 1 [0286.126] CloseHandle (hObject=0x24c) returned 1 [0286.127] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.127] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.127] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.128] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.128] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.128] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.128] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.129] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.129] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.129] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.129] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.129] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.130] CryptDestroyKey (hKey=0x55e750) returned 1 [0286.130] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0286.130] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x905ddec2, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4e77799b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.130] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x905ddec2, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4e77799b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.130] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e77799b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e77799b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e77799b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.130] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x905ddec2, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x905ddec2, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x905ddec2, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Indexed", cAlternateFileName="")) returned 1 [0286.130] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.130] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.130] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.130] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.130] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.131] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570eb8) returned 1 [0286.131] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0286.131] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.131] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0286.131] CryptDestroyHash (hHash=0x55e750) returned 1 [0286.131] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0286.131] GetLastError () returned 0x0 [0286.131] GetLastError () returned 0x0 [0286.131] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.132] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0286.133] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.133] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0286.135] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.136] SetEndOfFile (hFile=0x250) returned 1 [0286.136] CloseHandle (hObject=0x250) returned 1 [0286.136] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.137] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.138] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.138] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.138] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.139] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.139] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.139] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.139] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.139] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.140] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.140] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.140] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.140] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.140] CryptDestroyKey (hKey=0x55e210) returned 1 [0286.140] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0286.140] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x905ddec2, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x905ddec2, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4e77799b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0286.140] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x905ddec2, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x905ddec2, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4e77799b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.141] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e77799b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e77799b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e77799b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.141] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x905ddec2, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x905ddec2, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x905ddec2, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0286.141] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.141] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.141] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.141] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.141] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.141] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.141] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570858) returned 1 [0286.142] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0286.142] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.142] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e910) returned 1 [0286.142] CryptDestroyHash (hHash=0x55e650) returned 1 [0286.142] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ea58*=0x18) returned 1 [0286.142] GetLastError () returned 0x0 [0286.142] GetLastError () returned 0x0 [0286.142] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.143] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0286.144] WriteFile (in: hFile=0x254, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.146] SetEndOfFile (hFile=0x254) returned 1 [0286.146] CloseHandle (hObject=0x254) returned 1 [0286.146] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.147] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.147] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.147] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.148] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.148] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.148] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.148] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.148] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.148] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.148] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.149] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.149] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.149] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.149] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.149] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.149] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.149] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.149] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.149] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.149] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.150] CryptDestroyKey (hKey=0x55e910) returned 1 [0286.150] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0286.150] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x905ddec2, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x905ddec2, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4e79db3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0286.150] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x905ddec2, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x905ddec2, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4e79db3e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.150] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x905ddec2, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x90d3d67e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x90d3d67e, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0286.150] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.150] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.150] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.150] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.151] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.151] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.151] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571408) returned 1 [0286.151] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0286.152] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.152] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0286.152] CryptDestroyHash (hHash=0x55e650) returned 1 [0286.152] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0286.152] GetLastError () returned 0x0 [0286.152] GetLastError () returned 0x0 [0286.152] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.155] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0286.155] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.156] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0286.159] WriteFile (in: hFile=0x258, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.161] SetEndOfFile (hFile=0x258) returned 1 [0286.161] CloseHandle (hObject=0x258) returned 1 [0286.161] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.162] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.162] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.162] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.162] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.162] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.162] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.162] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.163] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.163] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.163] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.163] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.163] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.164] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.164] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.164] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.165] CryptDestroyKey (hKey=0x55e790) returned 1 [0286.165] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0286.165] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x905ddec2, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x90d3d67e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x4e7c3a96, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0286.165] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x905ddec2, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x90d3d67e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x4e7c3a96, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x959c295b, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x959c295b, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x2216c19d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="aaa_Classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms", cAlternateFileName="AAA_CL~1.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9634c035, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9634c035, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x2315dd0d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3f3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="aaa_Classic_{728047C0-00D2-4FDB-A069-06338B92E93B}.settingcontent-ms", cAlternateFileName="AAA_CL~2.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9653bff9, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9653bff9, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x231d0415, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3df, dwReserved0=0x405534, dwReserved1=0x0, cFileName="aaa_Classic_{7940ACF8-60BA-4213-A7C3-F3B400EE266D}.settingcontent-ms", cAlternateFileName="AAA_CL~3.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x967520dd, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x967520dd, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x232db48a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x405534, dwReserved1=0x0, cFileName="aaa_Classic_{A88F43D0-B9C8-42F2-B9F3-90902FC0B22B}.settingcontent-ms", cAlternateFileName="AAA_CL~4.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fd05f2, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x96fd05f2, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x233016ec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x422, dwReserved0=0x405534, dwReserved1=0x0, cFileName="aaa_Classic_{E2E2F6CF-9D1A-4004-8999-8AB81010B5AC}.settingcontent-ms", cAlternateFileName="AA5F2E~1.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97317979, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x97317979, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_Proxy_Automatic_Config_Group.settingcontent-ms", cAlternateFileName="AAA_PR~1.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x976ab254, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x976ab254, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x23884dd1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupAppSizesList.settingcontent-ms", cAlternateFileName="AAA_SE~1.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97a3ea55, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x97a3ea55, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupAutoplayDefaults.settingcontent-ms", cAlternateFileName="AAA_SE~2.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97ca0f7e, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x97ca0f7e, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupDataSenseMainPageOverview.settingcontent-ms", cAlternateFileName="AAA_SE~3.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982bd1ca, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x982bd1ca, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4a9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupDataSenseMainPageSettings.settingcontent-ms", cAlternateFileName="AAA_SE~4.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9947888a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9947888a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x49d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupEaseOfAccessFilterKeys.settingcontent-ms", cAlternateFileName="AA0FEE~1.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc43b7e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xecc43b7e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupEaseOfAccessNarrator.settingcontent-ms", cAlternateFileName="AAB00A~1.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed534910, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xed534910, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupEaseOfAccessOSK.settingcontent-ms", cAlternateFileName="AAEB38~1.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed796d2a, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xed796d2a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupEaseOfAccessOther.settingcontent-ms", cAlternateFileName="AAD0AF~1.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeda459b8, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xeda459b8, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x49d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupEaseOfAccessStickyKeys.settingcontent-ms", cAlternateFileName="AAC64E~1.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc81ced, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xedc81ced, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x49d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupEaseOfAccessToggleKeys.settingcontent-ms", cAlternateFileName="AAD87B~1.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedfa2dee, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xedfa2dee, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupFamilyUsers.settingcontent-ms", cAlternateFileName="AAD94F~1.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee29dc95, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xee29dc95, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2339a047, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x463, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupInputMouse.settingcontent-ms", cAlternateFileName="AAA063~1.SET")) returned 1 [0286.166] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7aec57, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xee7aec57, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x487, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupLockScreenPreview.settingcontent-ms", cAlternateFileName="AAE326~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeef48586, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xeef48586, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x456, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupMapsUpdates.settingcontent-ms", cAlternateFileName="AA7296~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6bba7d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xef6bba7d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupNotificationsAppList.settingcontent-ms", cAlternateFileName="AAC25D~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a8d3e7, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf0a8d3e7, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x475, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupOneSyncAccounts.settingcontent-ms", cAlternateFileName="AAECAE~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0d15b3d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf0d15b3d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupPCSystemDetails.settingcontent-ms", cAlternateFileName="AA7B22~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1868e9a, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1868e9a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x49f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupPCSystemDeviceEncryption.settingcontent-ms", cAlternateFileName="AA90D6~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1cbb2a9, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf1cbb2a9, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupPCSystemSupportInfo.settingcontent-ms", cAlternateFileName="AA8AD4~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf21a60a1, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf21a60a1, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupPCSystemWindowsInfo.settingcontent-ms", cAlternateFileName="AAEE78~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf22fd6b9, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf22fd6b9, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x434, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupPen.settingcontent-ms", cAlternateFileName="AAD39C~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24ed57a, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf24ed57a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x238f74d9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x48f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupPersonalizeColorChoose.settingcontent-ms", cAlternateFileName="AA8BAF~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf29fe6c2, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf29fe6c2, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x238ab028, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupPowerAndSleepDisplayOff.settingcontent-ms", cAlternateFileName="AAAECF~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5d3009a, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf5d3009a, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2339a047, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4b5, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupPowerAndSleepDisplayOffAoAc.settingcontent-ms", cAlternateFileName="AACD91~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5dc8b02, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf5dc8b02, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2339a047, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupPowerAndSleepSleep.settingcontent-ms", cAlternateFileName="AAF7F3~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5e614f0, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf5e614f0, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupPrivacyLocationHistory.settingcontent-ms", cAlternateFileName="AAF226~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ef9cb3, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf5ef9cb3, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupRegionDateTimeFormats.settingcontent-ms", cAlternateFileName="AA3E8B~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf605130f, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf605130f, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x471, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupSpeechMicrophone.settingcontent-ms", cAlternateFileName="AAC29B~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7139dfb, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf7139dfb, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupSpeechTextToSpeech.settingcontent-ms", cAlternateFileName="AA18E7~1.SET")) returned 1 [0286.167] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7624aaf, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf7624aaf, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupVirtualDesktops.settingcontent-ms", cAlternateFileName="AA8C6B~1.SET")) returned 1 [0286.168] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf77a22ff, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf77a22ff, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsGroupYourAccount.settingcontent-ms", cAlternateFileName="AA1C73~1.SET")) returned 1 [0286.168] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf79de4ea, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf79de4ea, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x435, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageAccountsManage.settingcontent-ms", cAlternateFileName="AAD2AF~1.SET")) returned 1 [0286.168] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf89aa04e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf89aa04e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageAccountsPicture.settingcontent-ms", cAlternateFileName="AA8DF2~1.SET")) returned 1 [0286.168] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93f2166, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xf93f2166, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageAccountsSync.settingcontent-ms", cAlternateFileName="AAB6AF~1.SET")) returned 1 [0286.168] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb5d629c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfb5d629c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageAccountsUsers.settingcontent-ms", cAlternateFileName="AAF973~1.SET")) returned 1 [0286.168] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbc3e966, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfbc3e966, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageActivate.settingcontent-ms", cAlternateFileName="AAFE78~1.SET")) returned 1 [0286.168] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe2e789, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfbe2e789, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageAppsDefaults.settingcontent-ms", cAlternateFileName="AA91CC~1.SET")) returned 1 [0286.168] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfd20c1, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfbfd20c1, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x238ab028, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ea, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageAppsDefaultsFileExtensionView.settingcontent-ms", cAlternateFileName="AA86F6~1.SET")) returned 1 [0286.168] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc25a894, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc25a894, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageAppsDefaultsProtocolView.settingcontent-ms", cAlternateFileName="AA13B2~1.SET")) returned 1 [0286.168] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc5c7f08, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc5c7f08, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x444, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageAppsNotifications.settingcontent-ms", cAlternateFileName="AAF9A5~1.SET")) returned 1 [0286.168] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc71f7fa, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc71f7fa, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x421, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageBackground.settingcontent-ms", cAlternateFileName="AA064F~1.SET")) returned 1 [0286.168] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc95ba08, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfc95ba08, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageBatterySaver.settingcontent-ms", cAlternateFileName="AA8E4E~1.SET")) returned 1 [0286.168] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcbe3e9d, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfcbe3e9d, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x40d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageColors.settingcontent-ms", cAlternateFileName="AAB06B~1.SET")) returned 1 [0286.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd1415ac, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfd1415ac, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x444, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageDataSenseOverview.settingcontent-ms", cAlternateFileName="AAF001~1.SET")) returned 1 [0286.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6b8695, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfd6b8695, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x421, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageDevicesPen.settingcontent-ms", cAlternateFileName="AABBC2~1.SET")) returned 1 [0286.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd98d42b, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfd98d42b, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageDevicesPrinters.settingcontent-ms", cAlternateFileName="AAE8DA~1.SET")) returned 1 [0286.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe172fc6, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe172fc6, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageEaseOfAccessClosedCaptioning.settingcontent-ms", cAlternateFileName="AAAB49~1.SET")) returned 1 [0286.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe683ed2, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfe683ed2, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageEaseOfAccessHighContrast.settingcontent-ms", cAlternateFileName="AA2192~1.SET")) returned 1 [0286.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfec53c5e, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xfec53c5e, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x453, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageEaseOfAccessKeyboard.settingcontent-ms", cAlternateFileName="AA0CA5~1.SET")) returned 1 [0286.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff64fa62, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xff64fa62, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageEaseOfAccessMagnifier.settingcontent-ms", cAlternateFileName="AABD4A~1.SET")) returned 1 [0286.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a20be, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5a20be, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageEaseOfAccessMoreOptions.settingcontent-ms", cAlternateFileName="AA913F~1.SET")) returned 1 [0286.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc30775, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc30775, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x444, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageEaseOfAccessMouse.settingcontent-ms", cAlternateFileName="AA05B3~1.SET")) returned 1 [0286.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1488bb9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1488bb9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x238ab028, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x453, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageEaseOfAccessNarrator.settingcontent-ms", cAlternateFileName="AAEDFB~1.SET")) returned 1 [0286.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c6e696, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1c6e696, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x421, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageLockScreen.settingcontent-ms", cAlternateFileName="AA6364~1.SET")) returned 1 [0286.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b1a2e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x29b1a2e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x403, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageMaps.settingcontent-ms", cAlternateFileName="AA31EA~1.SET")) returned 1 [0286.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3767165, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3767165, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageMultiTasking.settingcontent-ms", cAlternateFileName="AA9989~1.SET")) returned 1 [0286.169] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f26c92, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x3f26c92, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkAirplaneMode.settingcontent-ms", cAlternateFileName="AA619A~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a6f05, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x55a6f05, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkDialup.settingcontent-ms", cAlternateFileName="AA0465~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d8cca0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x5d8cca0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkDirectAccess.settingcontent-ms", cAlternateFileName="AA896E~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67fb07e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x67fb07e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkEthernet.settingcontent-ms", cAlternateFileName="AA39CE~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fea519, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x8fea519, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkMobileBroadband.settingcontent-ms", cAlternateFileName="AAF71D~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99e63e4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x99e63e4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x453, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkMobileHotspot.settingcontent-ms", cAlternateFileName="AA6FDD~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1a5e70, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xa1a5e70, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkProxy.settingcontent-ms", cAlternateFileName="AA16BE~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacd2f90, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xacd2f90, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x421, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkVPN.settingcontent-ms", cAlternateFileName="AAE339~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5515c4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb5515c4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x426, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkWiFi.settingcontent-ms", cAlternateFileName="AA60E9~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbad4de5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbad4de5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageNetworkWorkplace.settingcontent-ms", cAlternateFileName="AA3ED6~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbb9ac6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xbbb9ac6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePCSystemAutoPlay.settingcontent-ms", cAlternateFileName="AAEEC3~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0caaae, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc0caaae, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x444, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePCSystemBluetooth.settingcontent-ms", cAlternateFileName="AA6CEB~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2484cb, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc2484cb, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePCSystemDevices.settingcontent-ms", cAlternateFileName="AACA0F~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6c0872, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xc6c0872, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePCSystemDeviceSettings.settingcontent-ms", cAlternateFileName="AAD2D6~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcea6833, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xcea6833, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePCSystemDisplay.settingcontent-ms", cAlternateFileName="AA6364~2.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd429d08, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xd429d08, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePCSystemInfo.settingcontent-ms", cAlternateFileName="AA018C~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd63fe7d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xd63fe7d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x444, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePCSystemShellMode.settingcontent-ms", cAlternateFileName="AA5C62~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb049b8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xdb049b8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyAccountInfo.settingcontent-ms", cAlternateFileName="AA1248~1.SET")) returned 1 [0286.170] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde42e1a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xde42e1a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyCalendar.settingcontent-ms", cAlternateFileName="AA017B~1.SET")) returned 1 [0286.171] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe61a652, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe61a652, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyCallHistory.settingcontent-ms", cAlternateFileName="AA415E~1.SET")) returned 1 [0286.171] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e41e2, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xe7e41e2, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyContacts.settingcontent-ms", cAlternateFileName="AA1DE6~1.SET")) returned 1 [0286.171] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb3e67, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xedb3e67, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyCustomPeripherals.settingcontent-ms", cAlternateFileName="AA090F~1.SET")) returned 1 [0286.171] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf52c076, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xf52c076, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x42b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyEmail.settingcontent-ms", cAlternateFileName="AA7C3F~1.SET")) returned 1 [0286.171] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcc5962, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xfcc5962, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x435, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyGeneral.settingcontent-ms", cAlternateFileName="AA9864~1.SET")) returned 1 [0286.171] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x101b08a7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x101b08a7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyLocation.settingcontent-ms", cAlternateFileName="AAD632~1.SET")) returned 1 [0286.171] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1051e0e3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1051e0e3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyMessaging.settingcontent-ms", cAlternateFileName="AA8919~1.SET")) returned 1 [0286.171] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x107f285a, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x107f285a, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x444, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyMicrophone.settingcontent-ms", cAlternateFileName="AAE799~1.SET")) returned 1 [0286.171] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10de8730, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x10de8730, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x444, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyMotionData.settingcontent-ms", cAlternateFileName="AAF2F8~1.SET")) returned 1 [0286.171] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1102b950, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1102b950, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyPersonalization.settingcontent-ms", cAlternateFileName="AACED3~1.SET")) returned 1 [0286.171] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x112871d0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x112871d0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyRadios.settingcontent-ms", cAlternateFileName="AAC1C7~1.SET")) returned 1 [0286.172] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1149d5d9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1149d5d9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacySIUFSettings.settingcontent-ms", cAlternateFileName="AA247E~1.SET")) returned 1 [0286.172] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11666fba, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x11666fba, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPagePrivacyWebcam.settingcontent-ms", cAlternateFileName="AA907A~1.SET")) returned 1 [0286.172] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118309de, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x118309de, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms", cAlternateFileName="AAB4D2~1.SET")) returned 1 [0286.172] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11e72c7e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x11e72c7e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageRestoreMusUpdate.settingcontent-ms", cAlternateFileName="AAD392~1.SET")) returned 1 [0286.172] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x127099fd, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x127099fd, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageRestoreOneBackup.settingcontent-ms", cAlternateFileName="AAC14A~1.SET")) returned 1 [0286.172] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x131adc30, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x131adc30, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x435, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageRestoreRestore.settingcontent-ms", cAlternateFileName="AA489C~1.SET")) returned 1 [0286.172] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x133517d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x133517d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms", cAlternateFileName="AA98C3~1.SET")) returned 1 [0286.172] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1347c6a3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1347c6a3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x40d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageSpeech.settingcontent-ms", cAlternateFileName="AA0C1F~1.SET")) returned 1 [0286.172] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x135ad91f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x135ad91f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageStart.settingcontent-ms", cAlternateFileName="AA7F40~1.SET")) returned 1 [0286.172] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x138ce9b9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x138ce9b9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms", cAlternateFileName="AA3F18~1.SET")) returned 1 [0286.172] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13a98583, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13a98583, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x238f74d9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x476, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms", cAlternateFileName="AADC68~1.SET")) returned 1 [0286.172] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13cd4a2e, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13cd4a2e, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x40d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageThemes.settingcontent-ms", cAlternateFileName="AA43E2~1.SET")) returned 1 [0286.172] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13fcf8c0, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x13fcf8c0, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageTimeRegionDateTime.settingcontent-ms", cAlternateFileName="AAC193~1.SET")) returned 1 [0286.172] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142a4510, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x142a4510, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x233c02ad, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageTimeRegionLanguage.settingcontent-ms", cAlternateFileName="AA52B7~1.SET")) returned 1 [0286.173] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x147b5757, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x147b5757, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageTimeRegionSpelling.settingcontent-ms", cAlternateFileName="AA4071~1.SET")) returned 1 [0286.173] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14933008, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x14933008, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SettingsPageWindowsDefender.settingcontent-ms", cAlternateFileName="AA994C~1.SET")) returned 1 [0286.173] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14c2dcc8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x14c2dcc8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_Settings_DeveloperModeGroup.settingcontent-ms", cAlternateFileName="AA7CD7~1.SET")) returned 1 [0286.173] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x166f3270, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x166f3270, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms", cAlternateFileName="AA2361~1.SET")) returned 1 [0286.173] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16a608f5, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x16a608f5, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms", cAlternateFileName="AAA_SY~1.SET")) returned 1 [0286.173] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ce918c, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x16ce918c, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms", cAlternateFileName="AAA_SY~2.SET")) returned 1 [0286.173] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ed93a3, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x16ed93a3, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23884dd1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms", cAlternateFileName="AAA_SY~3.SET")) returned 1 [0286.173] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x171618d8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x171618d8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms", cAlternateFileName="AAA_SY~4.SET")) returned 1 [0286.173] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x174a8da1, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x174a8da1, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23884dd1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x54d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms", cAlternateFileName="AA5254~1.SET")) returned 1 [0286.173] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17567c08, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x17567c08, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms", cAlternateFileName="AA2C2E~1.SET")) returned 1 [0286.173] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17ac4b94, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x17ac4b94, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x584, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms", cAlternateFileName="AA8CB1~1.SET")) returned 1 [0286.173] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x194b2528, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x194b2528, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x575, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms", cAlternateFileName="AAA651~1.SET")) returned 1 [0286.173] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x195e37f6, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x195e37f6, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms", cAlternateFileName="AABD4E~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1986bebc, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1986bebc, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms", cAlternateFileName="AA8E91~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a752af4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1a752af4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms", cAlternateFileName="AAD5FB~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b174b28, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1b174b28, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms", cAlternateFileName="AADFD0~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba658c7, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1ba658c7, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x54b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms", cAlternateFileName="AAFBF6~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bf0409b, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x1bf0409b, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms", cAlternateFileName="AA0EB6~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ad15e9, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x68ad15e9, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms", cAlternateFileName="AA16CC~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c4ee17, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x68c4ee17, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x519, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms", cAlternateFileName="AAD6FB~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f96122, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x68f96122, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x55b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms", cAlternateFileName="AAFD0D~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6915b22f, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6915b22f, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms", cAlternateFileName="AA4EF2~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695f9eee, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x695f9eee, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms", cAlternateFileName="AAB22F~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69941380, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x69941380, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms", cAlternateFileName="AA0FB5~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a4f01a8, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6a4f01a8, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x54b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms", cAlternateFileName="AA29E2~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ad221a4, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6ad221a4, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms", cAlternateFileName="AA3E47~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b0b5b24, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6b0b5b24, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms", cAlternateFileName="AA114E~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b2cbc78, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6b2cbc78, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x52d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_Narrator_SpeechVoices.settingcontent-ms", cAlternateFileName="AA692E~1.SET")) returned 1 [0286.174] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b5a0835, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6b5a0835, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x529, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Accessibility_NotificationDuration.settingcontent-ms", cAlternateFileName="AA31F0~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c414b8d, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0x6c414b8d, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Autoplay_IsEnabled.settingcontent-ms", cAlternateFileName="AA5C9A~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd8f57a6, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfd8f57a6, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_BatterySaver_LandingPage_OverrideControl.settingcontent-ms", cAlternateFileName="AA9529~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd98e121, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfd98e121, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink-2.settingcontent-ms", cAlternateFileName="AAED09~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda4ccc6, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfda4ccc6, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x23884dd1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x537, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink.settingcontent-ms", cAlternateFileName="AA2914~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdb31cfc, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfdb31cfc, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x54e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink-2.settingcontent-ms", cAlternateFileName="AA1E1A~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdcaf23b, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfdcaf23b, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x546, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink.settingcontent-ms", cAlternateFileName="AA138B~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd47bd4, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfdd47bd4, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x233c02ad, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_DataSense_ConfigureSetLimitButton.settingcontent-ms", cAlternateFileName="AA1B73~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfde0687c, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfde0687c, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_DateTime_CountryRegion.settingcontent-ms", cAlternateFileName="AAF42F~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdeeb6a3, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfdeeb6a3, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_DateTime_IsAutomaticDSTAdjustEnabled.settingcontent-ms", cAlternateFileName="AAC2C5~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab0f6f, ftCreationTime.dwHighDateTime=0x1d70073, ftLastAccessTime.dwLowDateTime=0xfeab0f6f, ftLastAccessTime.dwHighDateTime=0x1d70073, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x529, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_DateTime_IsTimeSetAutomaticallyEnabled.settingcontent-ms", cAlternateFileName="AA7FFC~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a385d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1a385d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_DateTime_IsTimeZoneSetAutomaticallyEnabled.settingcontent-ms", cAlternateFileName="AAEAA2~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4aa79f4, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4aa79f4, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4a7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_DateTime_Set.settingcontent-ms", cAlternateFileName="AAD480~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b8c81c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4b8c81c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_DateTime_SetFormats.settingcontent-ms", cAlternateFileName="AACB48~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c71605, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4c71605, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2347ee66, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_DateTime_TimezoneInfo.settingcontent-ms", cAlternateFileName="AAFF0C~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4da2867, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4da2867, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_DefaultApps_Audio.settingcontent-ms", cAlternateFileName="AA6049~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e876b3, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4e876b3, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_DefaultApps_Browser.settingcontent-ms", cAlternateFileName="AA0ACC~1.SET")) returned 1 [0286.175] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f928c8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x4f928c8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_DefaultApps_Email.settingcontent-ms", cAlternateFileName="AA36FF~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x509d741, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x509d741, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4b3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_DefaultApps_Map.settingcontent-ms", cAlternateFileName="AA3906~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51a8820, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x51a8820, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_DefaultApps_Photos.settingcontent-ms", cAlternateFileName="AA1CA4~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f37d99, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x5f37d99, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23884dd1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_DefaultApps_Video.settingcontent-ms", cAlternateFileName="AA2D48~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c4690c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x7c4690c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Devices_Pen_EnablePixie.settingcontent-ms", cAlternateFileName="AA3CE9~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19f230, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb19f230, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Devices_Pen_EnableRipple.settingcontent-ms", cAlternateFileName="AA6E40~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2aa39d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb2aa39d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4db, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Devices_Pen_SetHandedness.settingcontent-ms", cAlternateFileName="AA13AF~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3b54f0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb3b54f0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Device_Add.settingcontent-ms", cAlternateFileName="AA17AC~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c04b8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb4c04b8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_AdvancedSettings.settingcontent-ms", cAlternateFileName="AA1EEC~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5cb3ee, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb5cb3ee, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_Brightness.settingcontent-ms", cAlternateFileName="AA73A3~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6b0258, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb6b0258, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4da, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_DPI_Override.settingcontent-ms", cAlternateFileName="AA923B~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7bb2f5, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb7bb2f5, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_Duplicate.settingcontent-ms", cAlternateFileName="AA3073~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c6456, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb8c6456, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_IdentifyDetectWireless.settingcontent-ms", cAlternateFileName="AA5F02~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d14cf, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xb9d14cf, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x511, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_IsAutoBrightnessEnabled.settingcontent-ms", cAlternateFileName="AA9A18~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b7ea2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xc8b7ea2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_IsRotationLocked.settingcontent-ms", cAlternateFileName="AA6264~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf59231c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0xf59231c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d5, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_MainMonitor.settingcontent-ms", cAlternateFileName="AAF454~1.SET")) returned 1 [0286.176] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12d73452, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x12d73452, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233c02ad, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_Monitors.settingcontent-ms", cAlternateFileName="AA5C91~1.SET")) returned 1 [0286.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e7e4f6, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x12e7e4f6, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d5, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Display_Orientation.settingcontent-ms", cAlternateFileName="AA4ABA~1.SET")) returned 1 [0286.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12f634d2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x12f634d2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Mouse_SetButtonConfiguration.settingcontent-ms", cAlternateFileName="AAC6EE~1.SET")) returned 1 [0286.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1304806c, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1304806c, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Mouse_SetScrollPage.settingcontent-ms", cAlternateFileName="AA706B~1.SET")) returned 1 [0286.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x131531fb, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x131531fb, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a9aeb1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_CursorSpeed.settingcontent-ms", cAlternateFileName="AAE56F~1.SET")) returned 1 [0286.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13238029, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x13238029, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x505, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_EnableEdgeGesture.settingcontent-ms", cAlternateFileName="AA140C~1.SET")) returned 1 [0286.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1331ced9, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1331ced9, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_EnableTouchPad.settingcontent-ms", cAlternateFileName="AA1803~1.SET")) returned 1 [0286.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1344e05e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1344e05e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_EnableVisualFeedback.settingcontent-ms", cAlternateFileName="AA4060~1.SET")) returned 1 [0286.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13fed879, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x13fed879, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_EnableVisualFeedbackPM.settingcontent-ms", cAlternateFileName="AA50D8~1.SET")) returned 1 [0286.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14203966, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x14203966, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_FourFingerTapEnabled.settingcontent-ms", cAlternateFileName="AABF11~1.SET")) returned 1 [0286.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x177ce9db, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x177ce9db, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2339a047, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_LeaveOnWithMouse.settingcontent-ms", cAlternateFileName="AA5689~1.SET")) returned 1 [0286.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17cdfb15, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x17cdfb15, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_PanEnabled.settingcontent-ms", cAlternateFileName="AA25A5~1.SET")) returned 1 [0286.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19064db7, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x19064db7, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x519, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_RightClickZoneEnabled.settingcontent-ms", cAlternateFileName="AAA6F5~1.SET")) returned 1 [0286.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e7b71d7, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1e7b71d7, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238f74d9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x514, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_SetActivationTimeout.settingcontent-ms", cAlternateFileName="AA4412~1.SET")) returned 1 [0286.177] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f710191, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1f710191, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_SetScrollDirection.settingcontent-ms", cAlternateFileName="AA99A4~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ff4233e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x1ff4233e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_TapAndDrag.settingcontent-ms", cAlternateFileName="AAE53C~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x224a91ec, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x224a91ec, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_TapsEnabled.settingcontent-ms", cAlternateFileName="AA27D0~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a78c0e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x22a78c0e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x523, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_ThreeFingerSlideEnabled.settingcontent-ms", cAlternateFileName="AAA960~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c68f16, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x22c68f16, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23458c07, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x519, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_ThreeFingerTapEnabled.settingcontent-ms", cAlternateFileName="AA2D71~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22e58c4a, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x22e58c4a, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_TwoFingerTapEnabled.settingcontent-ms", cAlternateFileName="AA729F~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2312d9e6, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2312d9e6, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Input_Touch_ZoomEnabled.settingcontent-ms", cAlternateFileName="AA9D0C~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2453a3a4, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2453a3a4, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x515, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsAutoCorrectionEnabled.settingcontent-ms", cAlternateFileName="AAEFA7~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24e5ccc3, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x24e5ccc3, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsAutoShiftEngageEnabled.settingcontent-ms", cAlternateFileName="AA9BCB~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251fc483, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x251fc483, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsCompatibilityKeyboardEnabled.settingcontent-ms", cAlternateFileName="AA7448~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25674bba, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x25674bba, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238f74d9, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x519, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsDoubleTapSpaceEnabled.settingcontent-ms", cAlternateFileName="AAEECF~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x259e35e8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x259e35e8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23884dd1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x522, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsKeyAudioFeedbackEnabled.settingcontent-ms", cAlternateFileName="AA28DA~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25e2ceeb, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x25e2ceeb, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x54b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsPredictionSpaceInsertionEnabled.settingcontent-ms", cAlternateFileName="AA2377~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x260a8ee1, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x260a8ee1, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsShiftLockEnabled.settingcontent-ms", cAlternateFileName="AA8C87~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262e4835, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x262e4835, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsSpellcheckingEnabled.settingcontent-ms", cAlternateFileName="AA2897~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26969b00, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x26969b00, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x519, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Keyboard_IsTextPredictionEnabled.settingcontent-ms", cAlternateFileName="AAC8EF~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d8eaf6, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x26d8eaf6, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4d9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Language_Add_Profile.settingcontent-ms", cAlternateFileName="AAEB7A~1.SET")) returned 1 [0286.178] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x270b6864, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x270b6864, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a0254b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x533, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Language_Installed_Profiles_Collection.settingcontent-ms", cAlternateFileName="AA8460~1.SET")) returned 1 [0286.179] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2797a518, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2797a518, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4fc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Language_Personal_Data_Control.settingcontent-ms", cAlternateFileName="AA83B4~1.SET")) returned 1 [0286.179] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e76442, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x27e76442, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Language_Web_Content_Control.settingcontent-ms", cAlternateFileName="AA7819~1.SET")) returned 1 [0286.179] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x281e3bed, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x281e3bed, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Maps_DeleteAll.settingcontent-ms", cAlternateFileName="AA2E08~1.SET")) returned 1 [0286.179] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283ad77e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x283ad77e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4df, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Maps_Download_Add_Package.settingcontent-ms", cAlternateFileName="AAAC5D~1.SET")) returned 1 [0286.179] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bb96a4, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x28bb96a4, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Misc_ResetYourPC.settingcontent-ms", cAlternateFileName="AA578E~1.SET")) returned 1 [0286.179] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28cc4a7f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x28cc4a7f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x523, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Misc_RollbackYourPC_PreviewBuild.settingcontent-ms", cAlternateFileName="AA2327~1.SET")) returned 1 [0286.179] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28eb4661, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x28eb4661, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2339a047, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Misc_RollbackYourPC_Windows7.settingcontent-ms", cAlternateFileName="AABE84~1.SET")) returned 1 [0286.179] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293271fb, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x293271fb, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Misc_RollbackYourPC_Windows8.settingcontent-ms", cAlternateFileName="AA1FF5~1.SET")) returned 1 [0286.179] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297795d1, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x297795d1, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Misc_RollbackYourPC_Windows8_1.settingcontent-ms", cAlternateFileName="AAC183~1.SET")) returned 1 [0286.179] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x299431b7, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x299431b7, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_MultiTasking_AeroSnapEnabled.settingcontent-ms", cAlternateFileName="AABC3F~1.SET")) returned 1 [0286.179] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29b59691, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x29b59691, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_MultiTasking_JointResizeEnabled.settingcontent-ms", cAlternateFileName="AAB1AC~1.SET")) returned 1 [0286.179] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29ec688d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x29ec688d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x503, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_MultiTasking_SnapAssistEnabled.settingcontent-ms", cAlternateFileName="AA7060~1.SET")) returned 1 [0286.179] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a2120ec, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a2120ec, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_MultiTasking_SnapFillEnabled.settingcontent-ms", cAlternateFileName="AA3E7E~1.SET")) returned 1 [0286.179] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a6602d6, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a6602d6, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_MusUpdate_AdvancedSettingsLink.settingcontent-ms", cAlternateFileName="AA04EB~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a934e01, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2a934e01, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2391d733, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_MusUpdate_UpdateActionButton.settingcontent-ms", cAlternateFileName="AA469D~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa7aff2, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2aa7aff2, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Notifications_PinnedQuickActions.settingcontent-ms", cAlternateFileName="AADDFE~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2afba6bf, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2afba6bf, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233c02ad, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Notifications_SelectIconsToAppearOnTaskbar.settingcontent-ms", cAlternateFileName="AAA6C3~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b3c066a, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2b3c066a, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Notifications_ShowAppNotifications.settingcontent-ms", cAlternateFileName="AAE32A~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b4f1999, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2b4f1999, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Notifications_SoftLandingEnabled.settingcontent-ms", cAlternateFileName="AAC020~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b969f9e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2b969f9e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4eb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Notifications_SystemIcons.settingcontent-ms", cAlternateFileName="AAF88B~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bbcc5d4, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2bbcc5d4, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_ActivateWindowsLicense.settingcontent-ms", cAlternateFileName="AA74A9~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bde25fe, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2bde25fe, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_GetPCName.settingcontent-ms", cAlternateFileName="AAFFA7~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c043349, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2c043349, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238ab028, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_InstalledRamStatus.settingcontent-ms", cAlternateFileName="AAEEB2~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c32594e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2c32594e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_JoinCloudDomain.settingcontent-ms", cAlternateFileName="AAB7CB~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4a300e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2c4a300e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238ab028, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_JoinDomain.settingcontent-ms", cAlternateFileName="AA7198~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c79dfda, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2c79dfda, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_LeaveOrganization.settingcontent-ms", cAlternateFileName="AA516E~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc62cc6, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2cc62cc6, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ee, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_PenAndTouchStatus.settingcontent-ms", cAlternateFileName="AA0779~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dad702f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2dad702f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_ProcessorStatus.settingcontent-ms", cAlternateFileName="AAA302~1.SET")) returned 1 [0286.180] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e9e3c3b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2e9e3c3b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x234329b1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_ProductIdStatus.settingcontent-ms", cAlternateFileName="AA94BF~1.SET")) returned 1 [0286.181] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed5138d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x2ed5138d, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2394398e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4c1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_RenamePC.settingcontent-ms", cAlternateFileName="AADA5D~1.SET")) returned 1 [0286.181] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x306f2868, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x306f2868, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4e9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PCSystem_SystemTypeStatus.settingcontent-ms", cAlternateFileName="AA9DA3~1.SET")) returned 1 [0286.181] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31160d5f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x31160d5f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2340c766, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_Background_ChooseBackground.settingcontent-ms", cAlternateFileName="AAA8A2~1.SET")) returned 1 [0286.181] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3170a66e, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3170a66e, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_Background_ChooseFit.settingcontent-ms", cAlternateFileName="AA99F9~1.SET")) returned 1 [0286.181] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31a77cfe, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x31a77cfe, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_Color_ColorPrevalence.settingcontent-ms", cAlternateFileName="AA5480~1.SET")) returned 1 [0286.181] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x328ec16f, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x328ec16f, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x521, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_Color_EnableTransparency.settingcontent-ms", cAlternateFileName="AA13E8~1.SET")) returned 1 [0286.181] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f546a8, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x32f546a8, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239b6099, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_LockScreenAppsBadge.settingcontent-ms", cAlternateFileName="AA6C9E~1.SET")) returned 1 [0286.181] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x333a682b, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x333a682b, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_LockScreenAppsTile.settingcontent-ms", cAlternateFileName="AAD1E2~1.SET")) returned 1 [0286.181] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334d7c8a, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x334d7c8a, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x238d127e, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x519, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_LockScreenBackground.settingcontent-ms", cAlternateFileName="AA5259~1.SET")) returned 1 [0286.181] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x336554be, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x336554be, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2339a047, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x54b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_LockScreenChooseBackgroundType.settingcontent-ms", cAlternateFileName="AA2361~2.SET")) returned 1 [0286.181] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a5b30a, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x33a5b30a, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x239dc2f0, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Personalize_LockScreenSlideshowSource_CloudBrandName.settingcontent-ms", cAlternateFileName="AA9A7D~1.SET")) returned 1 [0286.181] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f6c454, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x33f6c454, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC.settingcontent-ms", cAlternateFileName="AA8BA7~1.SET")) returned 1 [0286.181] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344c97b6, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x344c97b6, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC_AoAc.settingcontent-ms", cAlternateFileName="AA6260~1.SET")) returned 1 [0286.182] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34871a58, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x34871a58, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x520, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC.settingcontent-ms", cAlternateFileName="AAB4AA~1.SET")) returned 1 [0286.182] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x353788c4, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x353788c4, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23969bec, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC_AoAc.settingcontent-ms", cAlternateFileName="AA92D7~1.SET")) returned 1 [0286.182] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3570c0be, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3570c0be, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x2398fe3f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PowerAndSleep_SleepTimeoutAC.settingcontent-ms", cAlternateFileName="AA98AC~1.SET")) returned 1 [0286.182] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35922136, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x35922136, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x233e650b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_PowerAndSleep_SleepTimeoutDC.settingcontent-ms", cAlternateFileName="AACF0D~1.SET")) returned 1 [0286.182] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c43302, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x35c43302, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a4ea03, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Privacy_AdvertisingIdEnabled.settingcontent-ms", cAlternateFileName="AA1A7E~1.SET")) returned 1 [0286.182] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360bb815, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x360bb815, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a74c5a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x518, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Privacy_BackgroundApps_SubText.settingcontent-ms", cAlternateFileName="AA2357~1.SET")) returned 1 [0286.182] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3636a2ee, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x3636a2ee, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x23a287a5, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAA_SystemSettings_Privacy_EnableCollectionOfUrlsAppsUse.settingcontent-ms", cAlternateFileName="AAD362~1.SET")) returned 1 [0286.192] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.192] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.192] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.192] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.192] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0286.193] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.193] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.193] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0286.193] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0286.193] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.193] GetLastError () returned 0x0 [0286.193] GetLastError () returned 0x0 [0286.193] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.194] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.195] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.197] SetEndOfFile (hFile=0x24c) returned 1 [0286.197] CloseHandle (hObject=0x24c) returned 1 [0286.197] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.198] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.198] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.199] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.199] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.199] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.199] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.199] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.202] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.202] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.202] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.203] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.203] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.203] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.203] CryptDestroyKey (hKey=0x55e610) returned 1 [0286.203] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0286.203] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e81032f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.203] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e81032f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.204] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e81032f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e81032f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e81032f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.204] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e81032f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e81032f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e81032f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.204] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.204] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3db24969, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3db24969, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0286.204] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.204] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.204] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.204] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.204] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0286.205] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.205] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.205] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0286.205] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.205] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.205] GetLastError () returned 0x0 [0286.205] GetLastError () returned 0x0 [0286.205] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.206] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0286.207] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.207] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.209] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.211] SetEndOfFile (hFile=0x24c) returned 1 [0286.211] CloseHandle (hObject=0x24c) returned 1 [0286.211] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.212] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.212] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.212] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.212] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.212] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.212] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.213] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.213] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.213] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.213] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.213] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.213] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.213] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.213] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.213] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.213] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.213] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.214] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.214] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.214] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.214] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.214] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.214] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.214] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.214] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.214] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.215] CryptDestroyKey (hKey=0x55e910) returned 1 [0286.215] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0286.215] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3db24969, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e836181, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0286.215] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3db24969, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e836181, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.215] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e836181, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e836181, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e836181, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.215] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5efcf224, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efcf224, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efcf224, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0286.215] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db24969, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3db24969, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3db24969, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0286.215] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x94794b2d, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94794b2d, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94794b2d, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0286.215] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x947bac6a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x947bac6a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x947bac6a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0286.215] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x947bac6a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x947bac6a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x947bac6a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0286.215] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0286.216] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efa8e98, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0286.216] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.216] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.216] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.216] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.216] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.216] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.216] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0286.217] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.217] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.217] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0286.217] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.217] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.217] GetLastError () returned 0x0 [0286.217] GetLastError () returned 0x0 [0286.217] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.218] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.219] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.221] SetEndOfFile (hFile=0x24c) returned 1 [0286.221] CloseHandle (hObject=0x24c) returned 1 [0286.221] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.222] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.222] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.222] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.222] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.222] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.222] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.223] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.223] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.223] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.223] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.223] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.223] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.223] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.223] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.223] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.224] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.224] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.224] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.224] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.224] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.224] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.224] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.224] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.224] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.224] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.224] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.225] CryptDestroyKey (hKey=0x55e910) returned 1 [0286.225] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0286.225] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e85c2c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0286.225] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e85c2c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.225] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e85c2c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e85c2c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e85c2c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.225] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e85c2c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e85c2c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e85c2c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.225] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0286.225] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efa8e98, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0286.226] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.226] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.226] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.226] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.226] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.226] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.226] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0286.227] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.227] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.227] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0286.227] CryptDestroyHash (hHash=0x55e910) returned 1 [0286.227] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.227] GetLastError () returned 0x0 [0286.227] GetLastError () returned 0x0 [0286.227] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.228] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0286.229] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.229] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.230] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.232] SetEndOfFile (hFile=0x24c) returned 1 [0286.232] CloseHandle (hObject=0x24c) returned 1 [0286.232] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.233] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.233] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.233] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.234] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.234] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.234] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.234] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.234] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.234] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.235] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.235] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.235] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.235] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.235] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.235] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.235] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.236] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.236] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.236] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.236] CryptDestroyKey (hKey=0x55e210) returned 1 [0286.236] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0286.236] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e85c2c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.236] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4e85c2c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.237] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e85c2c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e85c2c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e88248e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.237] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e85c2c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e85c2c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e88248e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.237] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.237] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5efa8e98, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5efa8e98, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5efa8e98, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0286.237] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0286.237] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x5f4f6174, cFileName="Windows.MiracastView_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.MIR")) returned 1 [0286.237] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.237] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.237] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.237] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.238] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.238] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5709f0) returned 1 [0286.238] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0286.238] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.239] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0286.239] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0286.239] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18) returned 1 [0286.239] GetLastError () returned 0x0 [0286.239] GetLastError () returned 0x0 [0286.239] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.239] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0286.241] WriteFile (in: hFile=0x248, lpBuffer=0x23e52cc*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e52cc*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.242] SetEndOfFile (hFile=0x248) returned 1 [0286.242] CloseHandle (hObject=0x248) returned 1 [0286.242] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.243] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.243] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.243] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.243] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.243] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.243] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.244] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.244] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.244] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.244] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.244] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.245] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.245] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.245] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.245] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.246] CryptDestroyKey (hKey=0x55e910) returned 1 [0286.246] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0286.246] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e88248e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0286.246] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e88248e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.246] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0286.246] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.246] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.246] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.246] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.246] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.249] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.249] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0286.249] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.249] CryptHashData (hHash=0x55e210, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.249] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0286.249] CryptDestroyHash (hHash=0x55e210) returned 1 [0286.250] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.250] GetLastError () returned 0x0 [0286.250] GetLastError () returned 0x0 [0286.250] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.250] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.252] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3604*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3604*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.253] SetEndOfFile (hFile=0x24c) returned 1 [0286.254] CloseHandle (hObject=0x24c) returned 1 [0286.254] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.254] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.254] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.255] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.255] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.255] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.255] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.255] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.255] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.256] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.256] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.256] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.256] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.256] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.256] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.256] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.256] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.256] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.256] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.256] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.257] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.257] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.257] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.257] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.257] CryptDestroyKey (hKey=0x55e750) returned 1 [0286.257] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0286.257] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e8a8bb8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0286.257] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e8a8bb8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.258] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e8a8bb8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e8a8bb8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e8a8bb8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.258] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e8a8bb8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e8a8bb8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e8a8bb8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.258] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0286.258] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0286.258] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.258] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.258] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.258] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.258] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0286.259] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.259] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.259] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0286.259] CryptDestroyHash (hHash=0x55e290) returned 1 [0286.259] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.259] GetLastError () returned 0x0 [0286.259] GetLastError () returned 0x0 [0286.259] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.260] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.261] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3644*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3644*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.287] SetEndOfFile (hFile=0x24c) returned 1 [0286.288] CloseHandle (hObject=0x24c) returned 1 [0286.288] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.289] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.289] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.289] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.289] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.289] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.289] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.290] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.290] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.290] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.290] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.290] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.290] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.291] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.291] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.291] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.291] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.291] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.291] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.291] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.291] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.291] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.291] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.291] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.292] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.292] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.292] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.292] CryptDestroyKey (hKey=0x55e610) returned 1 [0286.292] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0286.292] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e8a8bb8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.293] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e8a8bb8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.293] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e8a8bb8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e8a8bb8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e8f4c4a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.293] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e8a8bb8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e8a8bb8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e8f4c4a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.293] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.293] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e88248e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e88248e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e88248e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.293] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0286.293] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.293] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.293] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.294] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.294] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.294] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.294] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570968) returned 1 [0286.295] CryptCreateHash (in: hProv=0x570968, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.295] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.295] CryptDeriveKey (in: hProv=0x570968, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0286.295] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.295] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.295] GetLastError () returned 0x0 [0286.295] GetLastError () returned 0x0 [0286.295] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.296] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.297] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3684*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3684*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.298] SetEndOfFile (hFile=0x24c) returned 1 [0286.299] CloseHandle (hObject=0x24c) returned 1 [0286.299] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.300] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.300] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.300] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.300] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.300] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.301] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.301] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.301] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.301] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.301] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.301] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.301] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.301] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.301] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.301] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.302] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.302] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.302] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.302] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.302] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.302] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.302] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.302] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.302] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.303] CryptDestroyKey (hKey=0x55e650) returned 1 [0286.303] CryptReleaseContext (hProv=0x570968, dwFlags=0x0) returned 1 [0286.303] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e91ae28, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0286.303] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e91ae28, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.303] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e91ae28, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e91ae28, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e91ae28, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.303] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e91ae28, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e91ae28, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e91ae28, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.303] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0286.303] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0286.303] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.303] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.304] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.304] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.304] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0286.305] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.305] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.305] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0286.305] CryptDestroyHash (hHash=0x55e650) returned 1 [0286.305] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.305] GetLastError () returned 0x0 [0286.305] GetLastError () returned 0x0 [0286.305] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.306] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.307] WriteFile (in: hFile=0x24c, lpBuffer=0x23e36c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e36c4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.308] SetEndOfFile (hFile=0x24c) returned 1 [0286.308] CloseHandle (hObject=0x24c) returned 1 [0286.308] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.312] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.312] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.312] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.312] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.312] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.312] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.313] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.313] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.313] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.313] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.313] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.313] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.313] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.313] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.313] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.314] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.314] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.314] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.314] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.314] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.314] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.314] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.314] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.315] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.315] CryptDestroyKey (hKey=0x55e610) returned 1 [0286.315] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0286.315] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e91ae28, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.315] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e91ae28, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.315] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e91ae28, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e91ae28, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e91ae28, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.315] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e91ae28, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e91ae28, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e91ae28, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.315] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.316] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0286.316] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.316] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.316] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.316] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.316] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.316] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.316] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571518) returned 1 [0286.317] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.317] CryptHashData (hHash=0x55e190, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.317] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0286.317] CryptDestroyHash (hHash=0x55e190) returned 1 [0286.317] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.317] GetLastError () returned 0x0 [0286.317] GetLastError () returned 0x0 [0286.317] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.318] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.320] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3704*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3704*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.321] SetEndOfFile (hFile=0x24c) returned 1 [0286.321] CloseHandle (hObject=0x24c) returned 1 [0286.321] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.323] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.323] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.323] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.323] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.323] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.323] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.324] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.324] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.324] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.324] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.324] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.324] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.324] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.324] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.324] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.324] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.325] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.325] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.325] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.325] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.325] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.325] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.326] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.326] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.326] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.326] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.326] CryptDestroyKey (hKey=0x55e610) returned 1 [0286.326] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0286.326] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e941a0b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0286.327] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e941a0b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.327] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e941a0b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e941a0b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e941a0b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.327] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e941a0b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e941a0b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e941a0b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.327] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0286.327] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3db701e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3db701e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0286.327] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.327] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.327] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.327] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.327] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.327] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.328] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0286.328] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.328] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.328] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e2d0) returned 1 [0286.328] CryptDestroyHash (hHash=0x55e750) returned 1 [0286.328] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.328] GetLastError () returned 0x0 [0286.328] GetLastError () returned 0x0 [0286.329] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.329] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.330] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3744*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3744*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.332] SetEndOfFile (hFile=0x24c) returned 1 [0286.332] CloseHandle (hObject=0x24c) returned 1 [0286.332] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.333] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.333] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.333] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.333] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.334] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.334] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.334] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.334] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.334] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.334] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.334] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.335] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.335] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.335] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.335] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.335] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.335] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.335] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.335] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.335] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.336] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.336] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0286.336] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0286.336] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3db701e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e9673b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.336] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3db701e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e9673b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.336] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9673b7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e9673b7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e9673b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.336] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0286.337] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db49f7c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3db49f7c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3db49f7c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0286.337] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x94d8a887, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94d8a887, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94d8a887, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0286.337] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x94d8a887, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94d8a887, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94d8a887, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0286.337] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x94d8a887, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x94d8a887, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x94d8a887, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0286.337] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.337] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0286.337] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.337] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.337] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.337] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.337] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.337] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.337] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0286.338] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.338] CryptHashData (hHash=0x55e190, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.338] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0286.338] CryptDestroyHash (hHash=0x55e190) returned 1 [0286.338] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.338] GetLastError () returned 0x0 [0286.338] GetLastError () returned 0x0 [0286.339] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.339] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.340] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3784*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3784*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.342] SetEndOfFile (hFile=0x24c) returned 1 [0286.342] CloseHandle (hObject=0x24c) returned 1 [0286.346] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.347] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.347] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.348] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.348] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.348] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.348] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.349] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.349] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.349] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.349] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.349] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.349] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.349] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.349] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.349] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.349] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.349] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.350] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.350] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.350] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.350] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.350] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.351] CryptDestroyKey (hKey=0x55e910) returned 1 [0286.351] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0286.351] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e9673b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.351] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e9673b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.351] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9673b7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e9673b7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e98d85e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.351] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9673b7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e9673b7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e98d85e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.351] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.351] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0286.351] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.351] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.352] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.352] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.352] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.352] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.352] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0286.353] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.353] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.353] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0286.353] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.353] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.353] GetLastError () returned 0x0 [0286.353] GetLastError () returned 0x0 [0286.353] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.354] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.355] WriteFile (in: hFile=0x24c, lpBuffer=0x23e37c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e37c4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.358] SetEndOfFile (hFile=0x24c) returned 1 [0286.358] CloseHandle (hObject=0x24c) returned 1 [0286.358] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.359] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.359] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.359] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.359] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.360] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.360] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.360] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.360] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.360] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.360] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.360] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.360] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.360] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.360] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.360] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.361] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.361] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.361] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.361] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.361] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.361] CryptDestroyKey (hKey=0x55e650) returned 1 [0286.361] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0286.362] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e98d85e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0286.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e98d85e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e98d85e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e98d85e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e9b370b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.362] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e98d85e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e98d85e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e9b370b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.362] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0286.362] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9f847eb6, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x9f847eb6, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x9f847eb6, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0286.362] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0286.362] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x5f4f6174, cFileName="Windows.PrintDialog_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.PRI")) returned 1 [0286.362] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.362] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.363] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.363] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.363] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5710d8) returned 1 [0286.363] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0286.363] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.364] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0286.364] CryptDestroyHash (hHash=0x55e910) returned 1 [0286.364] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18) returned 1 [0286.364] GetLastError () returned 0x0 [0286.364] GetLastError () returned 0x0 [0286.364] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.364] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0286.366] WriteFile (in: hFile=0x248, lpBuffer=0x23e3804*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3804*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.367] SetEndOfFile (hFile=0x248) returned 1 [0286.367] CloseHandle (hObject=0x248) returned 1 [0286.367] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.368] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.368] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.369] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.369] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.369] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.369] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.369] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.370] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.370] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.370] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.370] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.370] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.371] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0286.371] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0286.371] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e9b370b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0286.371] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e9b370b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.371] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0286.371] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.371] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.372] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.372] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.372] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570748) returned 1 [0286.372] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.372] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.373] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0286.373] CryptDestroyHash (hHash=0x55e910) returned 1 [0286.373] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.373] GetLastError () returned 0x0 [0286.373] GetLastError () returned 0x0 [0286.373] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.373] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.374] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3844*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3844*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.375] SetEndOfFile (hFile=0x24c) returned 1 [0286.376] CloseHandle (hObject=0x24c) returned 1 [0286.376] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.376] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.377] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.377] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.377] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.377] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.378] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.378] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.378] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.378] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.378] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.379] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0286.379] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0286.379] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e9d99fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0286.379] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e9d99fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.379] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9d99fd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e9d99fd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e9d99fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.379] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9d99fd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e9d99fd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e9d99fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.379] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0286.379] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0286.379] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.379] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.380] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.380] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.380] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0286.380] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.380] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.380] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0286.381] CryptDestroyHash (hHash=0x55e210) returned 1 [0286.381] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.381] GetLastError () returned 0x0 [0286.381] GetLastError () returned 0x0 [0286.381] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.381] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.382] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3854*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3854*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.383] SetEndOfFile (hFile=0x24c) returned 1 [0286.383] CloseHandle (hObject=0x24c) returned 1 [0286.383] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.384] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.384] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.384] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.384] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.385] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.385] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.385] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.385] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.386] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.386] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.386] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.386] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.386] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.387] CryptDestroyKey (hKey=0x55e910) returned 1 [0286.387] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0286.387] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e9d99fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0286.388] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e9d99fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.388] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9d99fd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e9d99fd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e9d99fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.389] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9d99fd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e9d99fd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e9d99fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.389] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0286.389] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9b370b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e9b370b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e9b370b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.389] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0286.389] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.389] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.389] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.389] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.389] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0286.390] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.390] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.390] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0286.390] CryptDestroyHash (hHash=0x55e910) returned 1 [0286.390] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.390] GetLastError () returned 0x0 [0286.390] GetLastError () returned 0x0 [0286.390] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.391] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.392] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38a4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.393] SetEndOfFile (hFile=0x24c) returned 1 [0286.393] CloseHandle (hObject=0x24c) returned 1 [0286.393] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.394] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.394] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.394] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.394] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.395] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.395] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.395] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.395] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.395] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.396] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.396] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.396] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.396] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.396] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.396] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.396] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.396] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.396] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.396] CryptDestroyKey (hKey=0x55e190) returned 1 [0286.396] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0286.396] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e9ffcd7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0286.397] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e9ffcd7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.397] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9ffcd7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e9ffcd7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e9ffcd7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.397] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9ffcd7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e9ffcd7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4e9ffcd7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.397] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0286.397] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0286.397] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.397] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.397] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.397] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.397] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.397] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.397] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b00) returned 1 [0286.398] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.398] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.398] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0286.398] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0286.398] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.398] GetLastError () returned 0x0 [0286.398] GetLastError () returned 0x0 [0286.398] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.399] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.402] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38e4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.404] SetEndOfFile (hFile=0x24c) returned 1 [0286.404] CloseHandle (hObject=0x24c) returned 1 [0286.404] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.405] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.405] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.405] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.405] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.405] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.406] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.406] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.406] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.406] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.409] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.410] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.410] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.410] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.410] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.410] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.410] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.410] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.410] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.411] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.411] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.411] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.411] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.411] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.411] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.411] CryptDestroyKey (hKey=0x55e650) returned 1 [0286.412] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0286.412] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e9ffcd7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0286.412] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4e9ffcd7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.412] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9ffcd7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e9ffcd7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ea25e61, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.412] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9ffcd7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4e9ffcd7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ea25e61, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.412] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0286.412] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0286.412] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.413] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.413] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.413] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.413] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.413] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571380) returned 1 [0286.414] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.414] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.414] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0286.414] CryptDestroyHash (hHash=0x55e790) returned 1 [0286.414] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.414] GetLastError () returned 0x0 [0286.414] GetLastError () returned 0x0 [0286.414] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.415] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.416] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38f4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.418] SetEndOfFile (hFile=0x24c) returned 1 [0286.418] CloseHandle (hObject=0x24c) returned 1 [0286.418] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.420] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.420] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.421] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.421] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.421] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.421] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.422] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.422] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.422] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.422] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.423] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.423] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.423] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.423] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0286.423] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0286.423] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ea25e61, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0286.423] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ea25e61, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.423] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ea25e61, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ea25e61, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ea25e61, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.423] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ea25e61, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ea25e61, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ea25e61, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.423] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0286.424] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3db963e6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3db963e6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0286.424] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.424] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.424] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.424] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.424] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0286.425] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.425] CryptHashData (hHash=0x55e2d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.425] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0286.425] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0286.425] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.425] GetLastError () returned 0x0 [0286.425] GetLastError () returned 0x0 [0286.425] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.426] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.427] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3934*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3934*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.428] SetEndOfFile (hFile=0x24c) returned 1 [0286.428] CloseHandle (hObject=0x24c) returned 1 [0286.428] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.429] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.429] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.429] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.429] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.429] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.430] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.430] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.430] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.430] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.430] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.430] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.431] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.431] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.431] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.431] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.431] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.431] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.431] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.432] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.432] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.432] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.432] CryptDestroyKey (hKey=0x55e790) returned 1 [0286.432] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0286.432] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3db963e6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ea4c4c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0286.433] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3db963e6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ea4c4c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.433] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ea4c4c6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ea4c4c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ea4c4c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.433] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa05d73cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05d73cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05d73cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0286.433] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db963e6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3db963e6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3db963e6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0286.433] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x950391b1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x950391b1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x950391b1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0286.433] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x950391b1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x950391b1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x950391b1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0286.433] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x950391b1, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x950391b1, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x950391b1, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0286.433] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0286.433] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0286.433] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.433] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.434] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.434] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.434] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0286.435] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.435] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.435] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0286.435] CryptDestroyHash (hHash=0x55e290) returned 1 [0286.435] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.435] GetLastError () returned 0x0 [0286.435] GetLastError () returned 0x0 [0286.435] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.436] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.437] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3944*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3944*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.438] SetEndOfFile (hFile=0x24c) returned 1 [0286.439] CloseHandle (hObject=0x24c) returned 1 [0286.439] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.439] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.439] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.439] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.439] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.440] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.440] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.440] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.440] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.441] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.441] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.441] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.441] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.442] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0286.442] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0286.442] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ea7255c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0286.442] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ea7255c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.442] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ea7255c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ea7255c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ea7255c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.442] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ea7255c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ea7255c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ea7255c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.442] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0286.442] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0286.442] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.442] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.443] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.443] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.443] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0286.443] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.443] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.443] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0286.443] CryptDestroyHash (hHash=0x55e790) returned 1 [0286.443] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.443] GetLastError () returned 0x0 [0286.444] GetLastError () returned 0x0 [0286.444] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.444] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.447] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3984*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3984*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.448] SetEndOfFile (hFile=0x24c) returned 1 [0286.448] CloseHandle (hObject=0x24c) returned 1 [0286.449] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.449] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.449] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.449] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.449] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.450] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.450] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.450] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.451] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.451] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.451] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.451] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.451] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.451] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.452] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0286.452] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0286.452] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ea7255c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0286.452] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ea7255c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.452] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ea7255c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ea7255c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ea7255c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.452] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ea7255c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ea7255c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ea7255c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.452] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0286.452] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa05b11cd, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xa05b11cd, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xa05b11cd, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 0 [0286.452] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0286.453] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3706b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab58681a, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabc1516c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61446574, dwReserved1=0x5f4f6174, cFileName="Windows.PurchaseDialog_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.PUR")) returned 1 [0286.453] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.453] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.453] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.453] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.453] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.453] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.453] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570fc8) returned 1 [0286.454] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0286.454] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.454] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e750) returned 1 [0286.454] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0286.454] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18) returned 1 [0286.454] GetLastError () returned 0x0 [0286.454] GetLastError () returned 0x0 [0286.454] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.454] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0286.455] WriteFile (in: hFile=0x248, lpBuffer=0x23e3994*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3994*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.456] SetEndOfFile (hFile=0x248) returned 1 [0286.457] CloseHandle (hObject=0x248) returned 1 [0286.457] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.458] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.458] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.458] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.458] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.459] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.459] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.459] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.459] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.459] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.459] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.459] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.459] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.459] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.459] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.459] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.459] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.459] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.460] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.460] CryptDestroyKey (hKey=0x55e750) returned 1 [0286.460] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0286.460] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3706b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab58681a, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ea9853e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0286.460] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3706b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab58681a, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ea9853e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.460] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xab58681a, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab58681a, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0286.460] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.460] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.461] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.461] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.461] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0286.461] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.461] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.461] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0286.461] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.461] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.461] GetLastError () returned 0x0 [0286.461] GetLastError () returned 0x0 [0286.462] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.462] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.464] WriteFile (in: hFile=0x24c, lpBuffer=0x23e39d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e39d4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.465] SetEndOfFile (hFile=0x24c) returned 1 [0286.465] CloseHandle (hObject=0x24c) returned 1 [0286.465] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.466] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.466] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.466] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.466] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.467] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.467] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.467] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.467] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.467] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.467] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.467] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.468] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.468] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.468] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.468] CryptDestroyKey (hKey=0x55e650) returned 1 [0286.468] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0286.468] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xab58681a, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab58681a, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ea9853e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0286.469] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xab58681a, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab58681a, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ea9853e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.469] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ea9853e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ea9853e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eabe82b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.469] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0286.469] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.469] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.471] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.471] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.471] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0286.472] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0286.472] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.472] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e2d0) returned 1 [0286.472] CryptDestroyHash (hHash=0x55e750) returned 1 [0286.472] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0286.472] GetLastError () returned 0x0 [0286.472] GetLastError () returned 0x0 [0286.472] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.472] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0286.474] WriteFile (in: hFile=0x250, lpBuffer=0x23e39e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e39e4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.475] SetEndOfFile (hFile=0x250) returned 1 [0286.475] CloseHandle (hObject=0x250) returned 1 [0286.475] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.476] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.476] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.476] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.476] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.477] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.477] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.477] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.477] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.477] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.477] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.477] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.478] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.478] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.478] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.478] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0286.478] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0286.478] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4eabe82b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.479] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4eabe82b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.479] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4eabe82b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eabe82b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eabe82b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.479] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4eabe82b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eabe82b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eabe82b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.479] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.479] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0286.479] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.479] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.479] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.479] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.479] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0286.480] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0286.480] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.480] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0286.480] CryptDestroyHash (hHash=0x55e190) returned 1 [0286.480] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0286.480] GetLastError () returned 0x0 [0286.480] GetLastError () returned 0x0 [0286.480] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.484] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0286.486] WriteFile (in: hFile=0x250, lpBuffer=0x23e3a24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a24*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.487] SetEndOfFile (hFile=0x250) returned 1 [0286.487] CloseHandle (hObject=0x250) returned 1 [0286.487] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.488] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.488] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.488] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.488] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.489] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.489] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.490] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.490] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.490] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.491] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.491] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.491] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.491] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.491] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.492] CryptDestroyKey (hKey=0x55e910) returned 1 [0286.492] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0286.492] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4eae4b6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0286.492] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4eae4b6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.493] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4eae4b6f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eae4b6f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eae4b6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.493] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4eae4b6f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eae4b6f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eae4b6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.493] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0286.493] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0286.493] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.493] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.493] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.493] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.493] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.494] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.494] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0286.495] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0286.495] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.495] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0286.495] CryptDestroyHash (hHash=0x55e910) returned 1 [0286.495] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0286.495] GetLastError () returned 0x0 [0286.495] GetLastError () returned 0x0 [0286.495] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.495] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0286.498] WriteFile (in: hFile=0x250, lpBuffer=0x23e3a34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a34*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.499] SetEndOfFile (hFile=0x250) returned 1 [0286.500] CloseHandle (hObject=0x250) returned 1 [0286.500] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.500] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.500] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.501] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.501] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.501] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.502] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.502] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.618] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.619] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.619] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.619] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.619] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.619] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.620] CryptDestroyKey (hKey=0x55e610) returned 1 [0286.620] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0286.620] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4eae4b6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.621] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4eae4b6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.621] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4eae4b6f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eae4b6f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eb0c67d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.621] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4eae4b6f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eae4b6f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eb0c67d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.621] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.621] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0286.622] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.622] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.622] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.622] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.622] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570a78) returned 1 [0286.623] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0286.623] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.623] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0286.623] CryptDestroyHash (hHash=0x55e290) returned 1 [0286.623] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0286.623] GetLastError () returned 0x0 [0286.623] GetLastError () returned 0x0 [0286.623] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.624] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0286.625] WriteFile (in: hFile=0x250, lpBuffer=0x23e3a74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3a74*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.627] SetEndOfFile (hFile=0x250) returned 1 [0286.627] CloseHandle (hObject=0x250) returned 1 [0286.627] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.628] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.628] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.628] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.628] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.628] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.628] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.629] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.629] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.629] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.629] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.629] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.629] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.629] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.629] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.630] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.630] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.630] CryptDestroyKey (hKey=0x55e910) returned 1 [0286.630] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0286.630] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ec3c099, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0286.631] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ec3c099, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.631] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec3c099, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ec3c099, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ec3c099, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.631] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec3c099, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ec3c099, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ec3c099, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.631] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0286.631] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab6b791d, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab6b791d, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab6b791d, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0286.631] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0286.631] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab409029, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="AppData", cAlternateFileName="")) returned 1 [0286.631] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.631] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.631] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.631] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.632] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0286.632] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.632] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.632] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e310) returned 1 [0286.632] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.632] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.632] GetLastError () returned 0x0 [0286.632] GetLastError () returned 0x0 [0286.632] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.633] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\appdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.634] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3a84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3a84*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.635] SetEndOfFile (hFile=0x24c) returned 1 [0286.635] CloseHandle (hObject=0x24c) returned 1 [0286.635] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.636] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.636] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.637] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.637] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.638] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.638] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.638] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.638] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.638] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.639] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.639] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.639] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.639] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.639] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.639] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.639] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.639] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.639] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.640] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.640] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.640] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.640] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.640] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.640] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.641] CryptDestroyKey (hKey=0x55e310) returned 1 [0286.641] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0286.641] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\AppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\appdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ec3c099, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0286.641] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ec3c099, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.641] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec3c099, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ec3c099, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ec3c099, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.641] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec3c099, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ec3c099, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ec3c099, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.641] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0286.641] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ea9853e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ea9853e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ea9853e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.642] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3e2e5c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab3e2e5c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab3e2e5c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalCache", cAlternateFileName="LOCALC~1")) returned 1 [0286.642] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.642] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.642] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.642] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.642] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0286.643] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.643] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.643] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0286.643] CryptDestroyHash (hHash=0x55e750) returned 1 [0286.643] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.643] GetLastError () returned 0x0 [0286.643] GetLastError () returned 0x0 [0286.643] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.643] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\localcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.645] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ac4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ac4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.646] SetEndOfFile (hFile=0x24c) returned 1 [0286.647] CloseHandle (hObject=0x24c) returned 1 [0286.647] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.648] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.648] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.648] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.648] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.648] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.649] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.649] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.649] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.649] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.649] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.649] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.650] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.650] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.650] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.650] CryptDestroyKey (hKey=0x55e610) returned 1 [0286.650] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0286.650] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\localcache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3e2e5c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab3e2e5c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ec623a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0286.650] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3e2e5c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab3e2e5c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ec623a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.650] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec623a6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ec623a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ec623a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.651] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec623a6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ec623a6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ec623a6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.651] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0286.651] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3706b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab3706b2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab3706b2, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LocalState", cAlternateFileName="LOCALS~1")) returned 1 [0286.651] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.651] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.651] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.651] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.651] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5708e0) returned 1 [0286.652] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.652] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.652] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0286.652] CryptDestroyHash (hHash=0x55e910) returned 1 [0286.652] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.652] GetLastError () returned 0x0 [0286.652] GetLastError () returned 0x0 [0286.652] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.653] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\localstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.655] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ad4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ad4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.656] SetEndOfFile (hFile=0x24c) returned 1 [0286.656] CloseHandle (hObject=0x24c) returned 1 [0286.656] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.657] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.657] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.658] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.658] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.658] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.658] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.659] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.659] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.659] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.659] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.659] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.659] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.659] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.659] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.659] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.659] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.660] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.660] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.660] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.660] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.660] CryptDestroyKey (hKey=0x55e750) returned 1 [0286.660] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0286.661] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\LocalState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\localstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3706b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab3706b2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ec884d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0286.661] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3706b2, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab3706b2, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ec884d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.661] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec884d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ec884d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ec884d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.661] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec884d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ec884d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ec884d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.661] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0286.661] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab396ad7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab396ad7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab396ad7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RoamingState", cAlternateFileName="ROAMIN~1")) returned 1 [0286.661] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.661] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.663] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.663] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.663] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.663] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.663] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0286.664] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.664] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.664] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0286.664] CryptDestroyHash (hHash=0x55e210) returned 1 [0286.664] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.664] GetLastError () returned 0x0 [0286.664] GetLastError () returned 0x0 [0286.664] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.665] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\RoamingState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\roamingstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.666] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b14*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.676] SetEndOfFile (hFile=0x24c) returned 1 [0286.676] CloseHandle (hObject=0x24c) returned 1 [0286.676] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.677] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.677] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.677] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.677] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.678] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.678] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.678] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.678] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.678] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.678] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.678] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.678] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.678] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.678] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.679] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.679] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.679] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.679] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.679] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.679] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.679] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.679] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.679] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.679] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.679] CryptDestroyKey (hKey=0x55e750) returned 1 [0286.680] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0286.680] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\RoamingState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\roamingstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab396ad7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab396ad7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ec884d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.680] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab396ad7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab396ad7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ec884d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.680] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec884d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ec884d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ecbdd4f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.680] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec884d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ec884d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ecbdd4f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.680] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.680] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3e2e5c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3dbe2946, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dbe2946, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Settings", cAlternateFileName="")) returned 1 [0286.680] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.680] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.680] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.681] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.681] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.681] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0286.681] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.681] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.681] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0286.681] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.682] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.682] GetLastError () returned 0x0 [0286.682] GetLastError () returned 0x0 [0286.682] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.682] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.684] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b24*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.685] SetEndOfFile (hFile=0x24c) returned 1 [0286.685] CloseHandle (hObject=0x24c) returned 1 [0286.685] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.686] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.686] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.687] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.687] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.687] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.687] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.687] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.687] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.688] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.688] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.688] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.688] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.688] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.688] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.689] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.689] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.689] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.689] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.689] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.689] CryptDestroyKey (hKey=0x55e910) returned 1 [0286.689] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0286.689] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3e2e5c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3dbe2946, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ecbdd4f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0286.690] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3e2e5c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3dbe2946, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ecbdd4f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.690] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ecbdd4f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ecbdd4f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ecd498f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.690] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab409029, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="roaming.lock", cAlternateFileName="ROAMIN~1.LOC")) returned 1 [0286.690] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbe2946, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dbe2946, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dbe2946, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETTIN~1.CRY")) returned 1 [0286.690] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9554a342, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9554a342, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9554a342, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG1", cAlternateFileName="SETTIN~1.LOG")) returned 1 [0286.690] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9554a342, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9554a342, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9554a342, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 1 [0286.690] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9554a342, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x9554a342, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x9554a342, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="settings.dat.LOG2", cAlternateFileName="SETTIN~2.LOG")) returned 0 [0286.690] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0286.690] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab409029, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61642e73, dwReserved1=0x4f4c2e74, cFileName="SystemAppData", cAlternateFileName="SYSTEM~1")) returned 1 [0286.690] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.690] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.691] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.691] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.691] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.691] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0286.692] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.692] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.692] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0286.692] CryptDestroyHash (hHash=0x55e790) returned 1 [0286.692] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.692] GetLastError () returned 0x0 [0286.692] GetLastError () returned 0x0 [0286.692] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.693] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\SystemAppData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\systemappdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.695] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b64*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.696] SetEndOfFile (hFile=0x24c) returned 1 [0286.696] CloseHandle (hObject=0x24c) returned 1 [0286.696] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.697] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.697] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.697] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.697] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.697] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.698] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.698] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.698] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.698] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.698] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.698] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.698] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.699] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.699] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.699] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.699] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.699] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.699] CryptDestroyKey (hKey=0x55e610) returned 1 [0286.699] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0286.699] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\SystemAppData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\systemappdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ecd498f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.702] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab409029, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab409029, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ecd498f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.702] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ecd498f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ecd498f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ecd498f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.702] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ecd498f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ecd498f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ecd498f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.702] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.702] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab396ad7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab396ad7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xab396ad7, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TempState", cAlternateFileName="TEMPST~1")) returned 1 [0286.702] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.702] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.702] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.702] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.702] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.702] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0286.702] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570f40) returned 1 [0286.703] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.703] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.703] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0286.703] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.703] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.703] GetLastError () returned 0x0 [0286.703] GetLastError () returned 0x0 [0286.703] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.704] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\TempState\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\tempstate\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.705] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b74*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.706] SetEndOfFile (hFile=0x24c) returned 1 [0286.706] CloseHandle (hObject=0x24c) returned 1 [0286.706] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.707] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.707] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.708] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.708] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.708] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.708] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.709] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.709] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.709] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.709] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.710] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.710] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.710] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.710] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.710] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.710] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.710] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.710] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.710] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.710] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.711] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.711] CryptDestroyKey (hKey=0x55e650) returned 1 [0286.711] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0286.711] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\TempState\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\tempstate\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab396ad7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab396ad7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ecfaae5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0286.711] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab396ad7, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xab396ad7, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ecfaae5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.712] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ecfaae5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ecfaae5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ecfaae5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.712] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ecfaae5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ecfaae5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ecfaae5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.712] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0286.712] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabc1516c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabc1516c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 1 [0286.712] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.712] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.712] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.712] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.713] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0286.713] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.713] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.714] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0286.714] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.714] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.714] GetLastError () returned 0x0 [0286.714] GetLastError () returned 0x0 [0286.714] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.715] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.720] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3bb4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3bb4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.722] SetEndOfFile (hFile=0x24c) returned 1 [0286.722] CloseHandle (hObject=0x24c) returned 1 [0286.722] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.723] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.723] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.724] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.724] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.724] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.724] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.724] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.724] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.724] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.724] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.725] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.725] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.725] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.725] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.725] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.728] CryptDestroyKey (hKey=0x55e210) returned 1 [0286.728] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0286.728] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabc1516c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ed20e2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0286.728] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabc1516c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4ed20e2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.728] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3dc08c67, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dc08c67, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore", cAlternateFileName="ACTIVA~1")) returned 1 [0286.729] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.729] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.729] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.729] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.729] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0286.729] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b88) returned 1 [0286.730] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0286.730] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.730] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0286.730] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.730] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0286.730] GetLastError () returned 0x0 [0286.730] GetLastError () returned 0x0 [0286.730] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.730] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0286.732] WriteFile (in: hFile=0x250, lpBuffer=0x23e3bc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3bc4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.733] SetEndOfFile (hFile=0x250) returned 1 [0286.733] CloseHandle (hObject=0x250) returned 1 [0286.733] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.734] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.734] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.734] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.735] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.735] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.735] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.735] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.735] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.735] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.736] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.736] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.736] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.736] CryptDestroyKey (hKey=0x55e650) returned 1 [0286.736] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0286.736] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3dc08c67, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ed20e2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.736] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3dc08c67, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ed20e2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.736] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dc08c67, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dc08c67, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dc08c67, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACTIVA~1.CRY")) returned 1 [0286.736] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xabd46105, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabd46105, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabd46105, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG1", cAlternateFileName="ACTIVA~1.LOG")) returned 1 [0286.737] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xabd6c431, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabd6c431, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabd6c431, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ActivationStore.dat.LOG2", cAlternateFileName="ACTIVA~2.LOG")) returned 1 [0286.737] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed20e2c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ed20e2c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ed46f91, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.737] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed20e2c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ed20e2c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ed46f91, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.737] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.737] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ecfaae5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ecfaae5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ed20e2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.737] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ecfaae5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ecfaae5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ed20e2c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.737] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0286.737] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabc1516c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xabc1516c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xabc1516c, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 0 [0286.737] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0286.737] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="windows_ie_ac_001", cAlternateFileName="WINDOW~1")) returned 1 [0286.737] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.737] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.737] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.738] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.738] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.738] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0286.738] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571518) returned 1 [0286.738] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0286.738] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.738] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0286.738] CryptDestroyHash (hHash=0x55e650) returned 1 [0286.738] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0286.738] GetLastError () returned 0x0 [0286.739] GetLastError () returned 0x0 [0286.739] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.739] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0286.742] WriteFile (in: hFile=0x248, lpBuffer=0x23e3c04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c04*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.743] SetEndOfFile (hFile=0x248) returned 1 [0286.743] CloseHandle (hObject=0x248) returned 1 [0286.743] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.744] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.744] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.745] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.745] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.745] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0286.745] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.746] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.746] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.746] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.747] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.747] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.747] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.747] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.747] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.748] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.748] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.748] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.748] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.748] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.749] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0286.749] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0286.749] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ed46f91, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0286.749] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ed46f91, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.749] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AC", cAlternateFileName="")) returned 1 [0286.749] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.749] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.750] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.750] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0286.750] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0286.751] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.751] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.751] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0286.751] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.751] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.751] GetLastError () returned 0x0 [0286.751] GetLastError () returned 0x0 [0286.751] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.752] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.754] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3c14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3c14*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.756] SetEndOfFile (hFile=0x24c) returned 1 [0286.757] CloseHandle (hObject=0x24c) returned 1 [0286.757] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.758] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.758] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0286.758] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.759] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.759] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.759] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.759] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.759] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.760] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.760] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.760] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.760] CryptDestroyKey (hKey=0x55e750) returned 1 [0286.760] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0286.760] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ed6d1fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0286.760] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ed6d1fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.760] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ed6d1fd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ed6d1fd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ed6d1fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.760] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="INetCache", cAlternateFileName="INETCA~1")) returned 1 [0286.761] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.761] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.761] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.761] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0286.761] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5706c0) returned 1 [0286.762] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0286.762] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.762] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e790) returned 1 [0286.762] CryptDestroyHash (hHash=0x55e750) returned 1 [0286.762] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0286.762] GetLastError () returned 0x0 [0286.762] GetLastError () returned 0x0 [0286.762] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.763] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\inetcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0286.764] WriteFile (in: hFile=0x250, lpBuffer=0x23e3c54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c54*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.765] SetEndOfFile (hFile=0x250) returned 1 [0286.765] CloseHandle (hObject=0x250) returned 1 [0286.765] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.766] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.766] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.766] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.766] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.767] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.767] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.767] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.767] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.767] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.768] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.768] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.768] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.768] CryptDestroyKey (hKey=0x55e790) returned 1 [0286.768] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0286.769] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\inetcache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ed93534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0286.769] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ed93534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.769] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ed93534, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ed93534, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ed93534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.769] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ed93534, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ed93534, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ed93534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.769] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0286.769] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetCookies", cAlternateFileName="INETCO~1")) returned 1 [0286.769] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.769] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.769] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.769] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.769] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0286.769] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0286.770] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0286.770] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.770] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0286.770] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.770] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0286.770] GetLastError () returned 0x0 [0286.770] GetLastError () returned 0x0 [0286.770] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.771] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\inetcookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0286.772] WriteFile (in: hFile=0x250, lpBuffer=0x23e3c64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3c64*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.773] SetEndOfFile (hFile=0x250) returned 1 [0286.773] CloseHandle (hObject=0x250) returned 1 [0286.773] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.774] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.774] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.775] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.775] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.775] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0286.775] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.775] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.776] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.776] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.776] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.776] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.776] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.776] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.776] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.777] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.777] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.777] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.777] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.780] CryptDestroyKey (hKey=0x55e650) returned 1 [0286.780] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0286.781] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetCookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\inetcookies\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ed93534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0286.781] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ed93534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.781] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ed93534, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ed93534, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ed93534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.781] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ed93534, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ed93534, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ed93534, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.781] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0286.781] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="INetHistory", cAlternateFileName="INETHI~1")) returned 1 [0286.781] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.781] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.782] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.782] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0286.782] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0286.783] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0286.783] CryptHashData (hHash=0x55e750, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.783] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e610) returned 1 [0286.783] CryptDestroyHash (hHash=0x55e750) returned 1 [0286.783] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0286.783] GetLastError () returned 0x0 [0286.783] GetLastError () returned 0x0 [0286.783] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.783] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetHistory\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\inethistory\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0286.785] WriteFile (in: hFile=0x250, lpBuffer=0x23e3ca4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ca4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.786] SetEndOfFile (hFile=0x250) returned 1 [0286.786] CloseHandle (hObject=0x250) returned 1 [0286.786] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.787] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.787] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.788] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.788] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.788] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.788] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0286.788] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.788] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.789] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.789] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.789] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.790] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.790] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.790] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.790] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.790] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.790] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.790] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.790] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.790] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.790] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.794] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.794] CryptDestroyKey (hKey=0x55e610) returned 1 [0286.794] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0286.795] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\INetHistory\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\inethistory\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4edb9792, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.795] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4edb9792, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.795] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4edb9792, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4edb9792, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4edb9792, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.795] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4edb9792, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4edb9792, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4edb9792, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.795] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.795] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0286.796] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.796] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.796] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.796] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.796] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.796] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0286.796] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0286.797] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0286.797] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.797] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0286.797] CryptDestroyHash (hHash=0x55e610) returned 1 [0286.797] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0286.797] GetLastError () returned 0x0 [0286.797] GetLastError () returned 0x0 [0286.798] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.798] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0286.799] WriteFile (in: hFile=0x250, lpBuffer=0x23e3cb4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3cb4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.800] SetEndOfFile (hFile=0x250) returned 1 [0286.801] CloseHandle (hObject=0x250) returned 1 [0286.801] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.801] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.802] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.802] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.802] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.802] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.802] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.802] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.802] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.803] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.803] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.803] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.803] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.803] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.804] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.804] CryptDestroyKey (hKey=0x55e650) returned 1 [0286.804] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0286.804] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Packages\\windows_ie_ac_001\\AC\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\packages\\windows_ie_ac_001\\ac\\temp\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4eddffc0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.804] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4eddffc0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.804] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eddffc0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eddffc0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eddffc0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.804] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eddffc0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eddffc0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eddffc0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.804] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.804] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 0 [0286.804] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0286.805] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed46f91, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ed46f91, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ed46f91, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.805] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed46f91, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ed46f91, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ed46f91, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x79726f74, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.805] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0286.805] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42cc0372, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42cc0372, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7275502e, dwReserved1=0x73616863, cFileName="windows_ie_ac_001", cAlternateFileName="WINDOW~1")) returned 0 [0286.805] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0286.805] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73f4dcd0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73f4dcd0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x73f4dcd0, ftLastWriteTime.dwHighDateTime=0x1d70074, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f65695f, dwReserved1=0x305f6361, cFileName="PeerDistRepub", cAlternateFileName="PEERDI~1")) returned 1 [0286.805] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.805] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.805] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.805] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0286.805] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571160) returned 1 [0286.806] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0286.806] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.806] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e910) returned 1 [0286.806] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0286.806] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0286.806] GetLastError () returned 0x0 [0286.806] GetLastError () returned 0x0 [0286.806] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.807] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\PeerDistRepub\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\peerdistrepub\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0286.808] WriteFile (in: hFile=0x244, lpBuffer=0x23e3cf4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3cf4*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.809] SetEndOfFile (hFile=0x244) returned 1 [0286.809] CloseHandle (hObject=0x244) returned 1 [0286.810] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.811] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.811] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0286.811] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.812] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.812] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.812] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.813] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.813] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.813] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.813] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.813] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.814] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.814] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.814] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.814] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.814] CryptDestroyKey (hKey=0x55e910) returned 1 [0286.814] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0286.814] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\PeerDistRepub\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\peerdistrepub\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73f4dcd0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73f4dcd0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x4eddffc0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0286.815] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73f4dcd0, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x73f4dcd0, ftLastAccessTime.dwHighDateTime=0x1d70074, ftLastWriteTime.dwLowDateTime=0x4eddffc0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.815] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eddffc0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eddffc0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee05c16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.815] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eddffc0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eddffc0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee05c16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.815] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0286.815] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdc699b5c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xdc699b5c, ftLastWriteTime.dwHighDateTime=0x1d70070, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Publishers", cAlternateFileName="PUBLIS~1")) returned 1 [0286.815] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.815] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.815] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.815] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.815] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0286.816] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5712f8) returned 1 [0286.816] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0286.816] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.816] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0286.816] CryptDestroyHash (hHash=0x55e750) returned 1 [0286.816] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0286.816] GetLastError () returned 0x0 [0286.816] GetLastError () returned 0x0 [0286.817] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.817] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Publishers\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\publishers\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0286.819] WriteFile (in: hFile=0x244, lpBuffer=0x23e3d04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3d04*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.820] SetEndOfFile (hFile=0x244) returned 1 [0286.820] CloseHandle (hObject=0x244) returned 1 [0286.820] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.821] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.821] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.821] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.821] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0286.821] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.821] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.821] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.821] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.822] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.822] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.822] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.822] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.822] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.822] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.822] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.822] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.822] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.822] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.822] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.822] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.822] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.823] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.823] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0286.823] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0286.823] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Publishers\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\publishers\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdc699b5c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4ee05c16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0286.823] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xdc699b5c, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0x4ee05c16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.823] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd5c81f26, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xd828181e, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="8wekyb3d8bbwe", cAlternateFileName="8WEKYB~1")) returned 1 [0286.823] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.823] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.824] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.824] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0286.824] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571160) returned 1 [0286.824] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0286.826] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.827] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0286.827] CryptDestroyHash (hHash=0x55e910) returned 1 [0286.827] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18) returned 1 [0286.827] GetLastError () returned 0x0 [0286.827] GetLastError () returned 0x0 [0286.827] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.827] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Publishers\\8wekyb3d8bbwe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\publishers\\8wekyb3d8bbwe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0286.829] WriteFile (in: hFile=0x248, lpBuffer=0x23e3d44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3d44*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.830] SetEndOfFile (hFile=0x248) returned 1 [0286.830] CloseHandle (hObject=0x248) returned 1 [0286.830] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.831] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.831] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.831] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.831] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0286.832] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.832] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.832] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.832] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.832] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.832] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.832] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.832] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.832] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.833] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.833] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.833] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.833] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.833] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.833] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.833] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.833] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.833] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.833] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.833] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.834] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0286.834] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0286.834] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Publishers\\8wekyb3d8bbwe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\publishers\\8wekyb3d8bbwe\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd828181e, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x4ee2bf62, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.834] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc699b5c, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd828181e, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0x4ee2bf62, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.834] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee2bf62, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ee2bf62, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee2bf62, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.834] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee2bf62, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ee2bf62, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee2bf62, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.834] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.834] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee05c16, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ee05c16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee05c16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.834] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee05c16, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ee05c16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee05c16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.834] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0286.835] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3e83f2cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e83f2cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Temp", cAlternateFileName="")) returned 1 [0286.835] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.835] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.835] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.835] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.835] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0286.835] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571518) returned 1 [0286.836] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0286.836] CryptHashData (hHash=0x55e650, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.836] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0286.836] CryptDestroyHash (hHash=0x55e650) returned 1 [0286.836] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0286.836] GetLastError () returned 0x0 [0286.836] GetLastError () returned 0x0 [0286.836] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.836] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0286.838] WriteFile (in: hFile=0x244, lpBuffer=0x23e3d54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3d54*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.839] SetEndOfFile (hFile=0x244) returned 1 [0286.839] CloseHandle (hObject=0x244) returned 1 [0286.839] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.840] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.840] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.840] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.841] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.841] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0286.841] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.841] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.841] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.841] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.841] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.841] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.842] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.842] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.842] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.842] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.842] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.842] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.842] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.842] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.842] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.842] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.843] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0286.843] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0286.843] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3e83f2cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee2bf62, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0286.843] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3e83f2cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee2bf62, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.843] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e66c7b0, ftCreationTime.dwHighDateTime=0x1d8b51b, ftLastAccessTime.dwLowDateTime=0x770860b0, ftLastAccessTime.dwHighDateTime=0x1d8b828, ftLastWriteTime.dwLowDateTime=0x770860b0, ftLastWriteTime.dwHighDateTime=0x1d8b828, nFileSizeHigh=0x0, nFileSizeLow=0x2b2a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="- MwW4XZp67E_9pAqsu.m4a", cAlternateFileName="-MWW4X~1.M4A")) returned 1 [0286.843] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dc2ee7c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dc2ee7c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dc2ee7c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x23a3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="05bOxrW8gBe90jfUA.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="05BOXR~1.CRY")) returned 1 [0286.843] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dc5b25f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dc5b25f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dc5b25f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x5d3b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="3jT5vTaXObsO6ly.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="3JT5VT~1.CRY")) returned 1 [0286.843] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dc7b380, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dc7b380, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dca15cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12980, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4iw-n1TVRQ.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="4IW-N1~1.CRY")) returned 1 [0286.843] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7564dfd0, ftCreationTime.dwHighDateTime=0x1d8b207, ftLastAccessTime.dwLowDateTime=0x1b696d0, ftLastAccessTime.dwHighDateTime=0x1d8c0fa, ftLastWriteTime.dwLowDateTime=0x1b696d0, ftLastWriteTime.dwHighDateTime=0x1d8c0fa, nFileSizeHigh=0x0, nFileSizeLow=0x1273f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6C9LmWx4ZweRH-N8MVgc.m4a", cAlternateFileName="6C9LMW~1.M4A")) returned 1 [0286.843] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dca15cb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dca15cb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dca15cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6616, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7QOD-nDkCpDtF.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="7QOD-N~1.CRY")) returned 1 [0286.843] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcc782e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dcc782e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dcedb09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x16c89, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AKF5RMVuL.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AKF5RM~1.CRY")) returned 1 [0286.843] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcedb09, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dcedb09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dcedb09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2a6d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="aST1NNRiNs.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AST1NN~1.CRY")) returned 1 [0286.843] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd13d32, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dd13d32, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dd13d32, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x147bf, dwReserved0=0x405534, dwReserved1=0x0, cFileName="bCEmh opLek6-VR.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="BCEMHO~1.CRY")) returned 1 [0286.843] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd39fce, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dd39fce, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dd39fce, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x11f4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="C_ZwX4AeKy.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="C_ZWX4~1.CRY")) returned 1 [0286.844] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31b53103, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0x31b53103, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xaf8be050, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x56d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="dd_ndp462-kb3151800-x86-x64-allos-enu_decompression_log.txt", cAlternateFileName="DD_NDP~1.TXT")) returned 1 [0286.844] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dd81185, ftCreationTime.dwHighDateTime=0x1d8a73a, ftLastAccessTime.dwLowDateTime=0x5dd81185, ftLastAccessTime.dwHighDateTime=0x1d8a73a, ftLastWriteTime.dwLowDateTime=0xaecaedbe, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x405534, dwReserved1=0x0, cFileName="dd_SetupUtility.txt", cAlternateFileName="DD_SET~1.TXT")) returned 1 [0286.844] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca79040, ftCreationTime.dwHighDateTime=0x1d8b2c4, ftLastAccessTime.dwLowDateTime=0xe2c16a10, ftLastAccessTime.dwHighDateTime=0x1d8b83a, ftLastWriteTime.dwLowDateTime=0xe2c16a10, ftLastWriteTime.dwHighDateTime=0x1d8b83a, nFileSizeHigh=0x0, nFileSizeLow=0x127c9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="D_XMRLdD7KxOJRgiMu.xls", cAlternateFileName="D_XMRL~1.XLS")) returned 1 [0286.844] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd60128, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dd60128, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dd60128, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6c0d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="e2D-jErkU.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="E2D-JE~1.CRY")) returned 1 [0286.844] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd60128, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dd60128, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dd60128, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1085, dwReserved0=0x405534, dwReserved1=0x0, cFileName="G8GELb-MmZg8jqw2.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="G8GELB~1.CRY")) returned 1 [0286.844] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac4db6d0, ftCreationTime.dwHighDateTime=0x1d8b0d0, ftLastAccessTime.dwLowDateTime=0x45c39930, ftLastAccessTime.dwHighDateTime=0x1d8bc28, ftLastWriteTime.dwLowDateTime=0x45c39930, ftLastWriteTime.dwHighDateTime=0x1d8bc28, nFileSizeHigh=0x0, nFileSizeLow=0xf76a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="gBzoOVFo6qkp3vNYJyM.m4a", cAlternateFileName="GBZOOV~1.M4A")) returned 1 [0286.844] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6c956530, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="gen_py", cAlternateFileName="")) returned 1 [0286.844] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.844] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.844] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.844] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0286.844] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570c98) returned 1 [0286.845] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0286.845] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.845] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0286.845] CryptDestroyHash (hHash=0x55e910) returned 1 [0286.845] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f190*=0x18) returned 1 [0286.845] GetLastError () returned 0x0 [0286.845] GetLastError () returned 0x0 [0286.845] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.846] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0286.847] WriteFile (in: hFile=0x248, lpBuffer=0x23e3d94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3d94*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.848] SetEndOfFile (hFile=0x248) returned 1 [0286.848] CloseHandle (hObject=0x248) returned 1 [0286.848] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.849] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.849] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.849] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.849] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.849] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.850] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0286.850] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.850] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.850] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.850] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.850] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.850] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.850] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.850] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.850] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.851] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.851] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.851] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.851] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.851] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.851] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.851] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.852] CryptDestroyKey (hKey=0x55e650) returned 1 [0286.852] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0286.852] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4ee52118, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0286.852] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6c956530, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4ee52118, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.852] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x3de91316, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3de91316, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="3.8", cAlternateFileName="")) returned 1 [0286.852] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.852] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.852] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.852] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0286.852] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570fc8) returned 1 [0286.853] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.853] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.853] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e2d0) returned 1 [0286.853] CryptDestroyHash (hHash=0x55e790) returned 1 [0286.853] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.853] GetLastError () returned 0x0 [0286.853] GetLastError () returned 0x0 [0286.853] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.854] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.855] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3da4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3da4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.856] SetEndOfFile (hFile=0x24c) returned 1 [0286.856] CloseHandle (hObject=0x24c) returned 1 [0286.856] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.857] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.857] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.861] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0286.861] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.861] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.862] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.862] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.862] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.862] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.862] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.862] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.863] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.863] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0286.863] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0286.863] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\gen_py\\3.8\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\gen_py\\3.8\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x3de91316, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee52118, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0286.863] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c956530, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x3de91316, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee52118, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.863] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd863c2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dd863c2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dd863c2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="dicts.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DICTSD~1.CRY")) returned 1 [0286.863] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee52118, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ee52118, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee52118, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.863] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd863c2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dd863c2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3de91316, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="__init__.py.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="__INIT~1.CRY")) returned 1 [0286.863] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd863c2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dd863c2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3de91316, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="__init__.py.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="__INIT~1.CRY")) returned 0 [0286.863] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0286.864] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee52118, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ee52118, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee52118, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x79702e5f, dwReserved1=0x7972632e, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.864] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee52118, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ee52118, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee52118, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x79702e5f, dwReserved1=0x7972632e, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.864] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0286.864] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3deb76c3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3deb76c3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3deb76c3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x7da4, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="HJwVLZ3PSHquOb.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="HJWVLZ~1.CRY")) returned 1 [0286.864] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad0ac941, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb20d7af2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb40bb1bf, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="hsperfdata_RDhJ0CNFevzX", cAlternateFileName="HSPERF~1")) returned 1 [0286.864] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.864] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.864] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.864] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.864] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.864] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0286.864] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570b00) returned 1 [0286.865] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0286.865] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.865] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e390) returned 1 [0286.865] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0286.865] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f190*=0x18) returned 1 [0286.865] GetLastError () returned 0x0 [0286.865] GetLastError () returned 0x0 [0286.865] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.866] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\hsperfdata_RDhJ0CNFevzX\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\hsperfdata_rdhj0cnfevzx\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0286.869] WriteFile (in: hFile=0x248, lpBuffer=0x23e3de4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3de4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.870] SetEndOfFile (hFile=0x248) returned 1 [0286.870] CloseHandle (hObject=0x248) returned 1 [0286.871] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.871] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.872] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0286.872] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.873] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.873] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.873] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.873] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.873] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.873] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.873] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.874] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.874] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.874] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.874] CryptDestroyKey (hKey=0x55e390) returned 1 [0286.874] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0286.874] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\hsperfdata_RDhJ0CNFevzX\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\hsperfdata_rdhj0cnfevzx\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad0ac941, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb40bb1bf, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4ee7ed53, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0286.875] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad0ac941, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb40bb1bf, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4ee7ed53, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.875] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee7ed53, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ee7ed53, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee7ed53, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.875] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee7ed53, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ee7ed53, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee7ed53, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.875] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0286.875] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee2bf62, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ee2bf62, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee2bf62, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.875] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dedd8f8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3dedd8f8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3dedd8f8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x30e5, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="JavaDeployReg.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="JAVADE~1.CRY")) returned 1 [0286.875] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df0397c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3df0397c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e01bbbf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="jawshtml.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="JAWSHT~1.CRY")) returned 1 [0286.875] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e01bbbf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e01bbbf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e13fdfe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x10a17, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="jusched.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="JUSCHE~1.CRY")) returned 1 [0286.875] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e13fdfe, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e13fdfe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e13fdfe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x5a0b, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="k0Yt5beXz5AeRkPE.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="K0YT5B~1.CRY")) returned 1 [0286.875] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e13fdfe, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e13fdfe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e166029, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xe653, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kaG-RU.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="KAG-RU~1.CRY")) returned 1 [0286.875] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4446530, ftCreationTime.dwHighDateTime=0x1d8b4d3, ftLastAccessTime.dwLowDateTime=0xfcea84a0, ftLastAccessTime.dwHighDateTime=0x1d8b9fa, ftLastWriteTime.dwLowDateTime=0xfcea84a0, ftLastWriteTime.dwHighDateTime=0x1d8b9fa, nFileSizeHigh=0x0, nFileSizeLow=0x17c0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kRqTUciydxV.swf", cAlternateFileName="KRQTUC~1.SWF")) returned 1 [0286.875] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e166029, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e166029, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e166029, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x5f7c, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="lLZnbDqDVS9oAn0Blc.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="LLZNBD~1.CRY")) returned 1 [0286.875] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6f22e454, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f22e454, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f22e454, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Low", cAlternateFileName="")) returned 1 [0286.875] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.875] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.876] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.876] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.876] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.876] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5712f8) returned 1 [0286.876] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0286.876] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.876] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0286.876] CryptDestroyHash (hHash=0x55e790) returned 1 [0286.877] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0286.877] GetLastError () returned 0x0 [0286.877] GetLastError () returned 0x0 [0286.877] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.877] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Low\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\low\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0286.881] WriteFile (in: hFile=0x248, lpBuffer=0x23e3df4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3df4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.882] SetEndOfFile (hFile=0x248) returned 1 [0286.883] CloseHandle (hObject=0x248) returned 1 [0286.883] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.884] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.884] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.884] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.884] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.884] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0286.884] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.884] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.884] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.885] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.885] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.885] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.885] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.885] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.885] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.885] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.886] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.886] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.886] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0286.886] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0286.886] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\low\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6f22e454, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f22e454, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4ee9e556, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0286.887] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6f22e454, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f22e454, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4ee9e556, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.887] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ee9e556, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ee9e556, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee9e556, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.887] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ee9e556, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ee9e556, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ee9e556, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.887] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0286.887] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e18c29e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e18c29e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e18c29e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xfc48, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="lwhKV0RLG.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="LWHKV0~1.CRY")) returned 1 [0286.887] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e18c29e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e18c29e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e1b280e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xcca1, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="MDJNfXn-rR8zF.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MDJNFX~1.CRY")) returned 1 [0286.887] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e1b280e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e1b280e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e1d8808, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xf430, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mEKNibmQaSlD xF.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MEKNIB~1.CRY")) returned 1 [0286.887] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e1d8808, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e1d8808, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e2e1cfd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xbbfc2, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft .NET Framework 4.6.2 Setup_20220803_150943770.html.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MICROS~1.CRY")) returned 1 [0286.887] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e307f54, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e307f54, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e307f54, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xca3c, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="N-vzC5.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="N-VZC5~1.CRY")) returned 1 [0286.887] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e307f54, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e307f54, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e5b7c70, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x641a, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="nehlL.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NEHLLM~1.CRY")) returned 1 [0286.887] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e5b7c70, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e5b7c70, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e5b7c70, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2a74, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="NixI5wZ1CbFhS.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NIXI5W~1.CRY")) returned 1 [0286.887] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c567380, ftCreationTime.dwHighDateTime=0x1d8b78d, ftLastAccessTime.dwLowDateTime=0x6056a360, ftLastAccessTime.dwHighDateTime=0x1d8ba6a, ftLastWriteTime.dwLowDateTime=0x6056a360, ftLastWriteTime.dwHighDateTime=0x1d8ba6a, nFileSizeHigh=0x0, nFileSizeLow=0x2229, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="nsYzHxPa.m4a", cAlternateFileName="")) returned 1 [0286.887] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e5b7c70, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e5b7c70, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e5dcce8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x15f52, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="oaZtL.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="OAZTLM~1.CRY")) returned 1 [0286.887] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834de3cc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x3e602ea4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e602ea4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="outlook logging", cAlternateFileName="OUTLOO~1")) returned 1 [0286.887] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.887] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.888] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.888] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.888] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.888] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0286.888] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570a78) returned 1 [0286.888] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0286.889] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.889] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e610) returned 1 [0286.889] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0286.889] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f190*=0x18) returned 1 [0286.889] GetLastError () returned 0x0 [0286.889] GetLastError () returned 0x0 [0286.889] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.889] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\outlook logging\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\outlook logging\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0286.893] WriteFile (in: hFile=0x248, lpBuffer=0x23e3e34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e34*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.894] SetEndOfFile (hFile=0x248) returned 1 [0286.894] CloseHandle (hObject=0x248) returned 1 [0286.894] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.895] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.895] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.895] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.895] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0286.896] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.896] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.896] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.896] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.896] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.896] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.896] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.896] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.896] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.896] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.897] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.897] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.897] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.897] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.897] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.897] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.898] CryptDestroyKey (hKey=0x55e610) returned 1 [0286.898] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0286.898] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\outlook logging\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\outlook logging\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834de3cc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x3e602ea4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eec4844, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0286.898] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x834de3cc, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x3e602ea4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eec4844, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.898] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e5dcce8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e5dcce8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e602ea4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="firstrun.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FIRSTR~1.CRY")) returned 1 [0286.898] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eec4844, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eec4844, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eec4844, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.898] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eec4844, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eec4844, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eec4844, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.898] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0286.898] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e602ea4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e602ea4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e602ea4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x28a0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="r_7_Qtprf0Dr 3RJEs3.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="R_7_QT~1.CRY")) returned 1 [0286.898] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e602ea4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e602ea4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e602ea4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4c1a, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="sbGkCoi59b4.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SBGKCO~1.CRY")) returned 1 [0286.898] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e629183, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e629183, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e7a6c1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x44d55, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SetupExe(20220802104140E88).log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SETUPE~1.CRY")) returned 1 [0286.898] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8696bb0, ftCreationTime.dwHighDateTime=0x1d8ba07, ftLastAccessTime.dwLowDateTime=0x1039a450, ftLastAccessTime.dwHighDateTime=0x1d8c0e0, ftLastWriteTime.dwLowDateTime=0x1039a450, ftLastWriteTime.dwHighDateTime=0x1d8c0e0, nFileSizeHigh=0x0, nFileSizeLow=0x3e42, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SpXbfbgJ.mp4", cAlternateFileName="")) returned 1 [0286.898] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e7a6c1c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e7a6c1c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e7a6c1c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x881f, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="U0mBMbuTd.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="U0MBMB~1.CRY")) returned 1 [0286.898] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44e1c2c0, ftCreationTime.dwHighDateTime=0x1d8bdeb, ftLastAccessTime.dwLowDateTime=0xfe833750, ftLastAccessTime.dwHighDateTime=0x1d8bf2f, ftLastWriteTime.dwLowDateTime=0xfe833750, ftLastWriteTime.dwHighDateTime=0x1d8bf2f, nFileSizeHigh=0x0, nFileSizeLow=0x3008, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="vD8eUWUIvpEQWi.m4a", cAlternateFileName="VD8EUW~1.M4A")) returned 1 [0286.898] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e7ccbbc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e7ccbbc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e7ccbbc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xc693, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="x2j5rfYgbAEGB 00y.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="X2J5RF~1.CRY")) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e7f2e0c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e7f2e0c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e7f2e0c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x89fc, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="XC64ZB-20220802-1035.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="XC64ZB~1.CRY")) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e7f2e0c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e7f2e0c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e81914c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x58cf, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ZkWWZSWWkn.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZKWWZS~1.CRY")) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e81914c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e81914c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e81914c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x7094, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="_DEn5NsuwIa6-O9getx.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="_DEN5N~1.CRY")) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e81914c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e81914c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e81914c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="{6B789349-1698-4EA5-B0F1-2664E9E9AE46} - OProcSessId.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="{6B789~1.CRY")) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x40233548, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40233548, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40233548, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="~DF1043EC192B4E17F8.TMP", cAlternateFileName="~DF104~1.TMP")) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5faf66, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3c5faf66, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40233548, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="~DF14ED840F157E120E.TMP", cAlternateFileName="~DF14E~1.TMP")) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7d8bd80d, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x7d8bd80d, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x7d8bd80d, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="~DF45387DDACE8D4D66.TMP", cAlternateFileName="~DF453~1.TMP")) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x379374cb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x379374cb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40233548, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="~DF64BEC3238A96FCF5.TMP", cAlternateFileName="~DF64B~1.TMP")) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe39035, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xdbe39035, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdbeab755, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="~DF88DBD32E76AFA14C.TMP", cAlternateFileName="~DF88D~1.TMP")) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x74625823, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x74625823, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x74625823, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="~DFC82C101602F59499.TMP", cAlternateFileName="~DFC82~1.TMP")) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xdbeab755, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0xdbeab755, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0xdbeab755, ftLastWriteTime.dwHighDateTime=0x1d8ccb5, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="~DFDD957DDC34FFB186.TMP", cAlternateFileName="~DFDD9~1.TMP")) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3273b0ad, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3273b0ad, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40232970, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="~DFE2E3E18FD2185616.TMP", cAlternateFileName="~DFE2E~1.TMP")) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x6f3abcc4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f3abcc4, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f3abcc4, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="~DFFFCB558BD9DED4B2.TMP", cAlternateFileName="~DFFFC~1.TMP")) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x6f3abcc4, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x6f3abcc4, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6f3abcc4, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="~DFFFCB558BD9DED4B2.TMP", cAlternateFileName="~DFFFC~1.TMP")) returned 0 [0286.899] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0286.899] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x45443944, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0286.899] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.899] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.900] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.900] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.900] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.900] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0286.900] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570b88) returned 1 [0286.901] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0286.901] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.901] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0286.901] CryptDestroyHash (hHash=0x55e290) returned 1 [0286.901] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0286.901] GetLastError () returned 0x0 [0286.901] GetLastError () returned 0x0 [0286.901] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.901] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temporary Internet Files\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temporary internet files\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0286.902] WriteFile (in: hFile=0x244, lpBuffer=0x23e3e44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3e44*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.903] SetEndOfFile (hFile=0x244) returned 1 [0286.909] CloseHandle (hObject=0x244) returned 1 [0286.909] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.910] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.910] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.910] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.910] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.910] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.910] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0286.910] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.910] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.910] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.910] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.911] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.911] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.911] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.911] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.912] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.912] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.912] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0286.912] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0286.912] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temporary Internet Files\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temporary internet files\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f424, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f404, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x10çU")) returned 0xffffffff [0286.913] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40a64b1d, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="TileDataLayer", cAlternateFileName="TILEDA~1")) returned 1 [0286.913] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.913] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.913] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.913] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0286.913] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5712f8) returned 1 [0286.914] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0286.914] CryptHashData (hHash=0x55e750, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.914] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0286.914] CryptDestroyHash (hHash=0x55e750) returned 1 [0286.914] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0286.914] GetLastError () returned 0x0 [0286.914] GetLastError () returned 0x0 [0286.914] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.914] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0286.915] WriteFile (in: hFile=0x244, lpBuffer=0x23e3e84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3e84*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.917] SetEndOfFile (hFile=0x244) returned 1 [0286.917] CloseHandle (hObject=0x244) returned 1 [0286.917] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.918] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.918] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.918] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.918] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.918] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0286.919] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.919] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.919] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.919] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.919] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.919] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.919] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.920] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0286.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.920] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.920] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.920] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.920] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.920] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0286.921] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0286.921] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4eeeaa73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0286.921] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a64b1d, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4eeeaa73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.921] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f28e077, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f28e077, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Database", cAlternateFileName="")) returned 1 [0286.921] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.921] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.924] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.924] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.924] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0286.924] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571160) returned 1 [0286.924] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0286.924] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.924] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e5d0) returned 1 [0286.925] CryptDestroyHash (hHash=0x55e910) returned 1 [0286.925] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f190*=0x18) returned 1 [0286.925] GetLastError () returned 0x0 [0286.925] GetLastError () returned 0x0 [0286.925] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.925] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0286.926] WriteFile (in: hFile=0x248, lpBuffer=0x23e3e94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e94*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.927] SetEndOfFile (hFile=0x248) returned 1 [0286.928] CloseHandle (hObject=0x248) returned 1 [0286.928] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.929] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.929] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.929] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.929] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0286.929] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.929] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.929] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.930] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.930] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.930] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.930] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.930] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.930] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.930] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.930] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.930] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.931] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.931] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.931] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.931] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.931] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0286.931] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0286.931] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\TileDataLayer\\Database\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\tiledatalayer\\database\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f28e077, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ef10d2f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0286.931] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f28e077, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ef10d2f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.931] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e83f2cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e83f2cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e8655e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="EDB.chk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBCHK~1.CRY")) returned 1 [0286.931] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a64b1d, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8db19be0, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6106b8b, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="EDB.log", cAlternateFileName="")) returned 1 [0286.931] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8655e8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e8655e8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3e8655e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="EDB.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBLOG~1.CRY")) returned 1 [0286.931] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8655e8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3e8655e8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3eaf4430, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="EDB00007.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDB000~1.CRY")) returned 1 [0286.932] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ab0ffe, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40ab0ffe, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40ab0ffe, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="EDBres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0286.932] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ab0ffe, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40ab0ffe, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x40ab0ffe, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="EDBres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0286.932] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eb1a784, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3eb1a784, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f267a3c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="EDBtmp.log.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EDBTMP~1.CRY")) returned 1 [0286.932] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef10d2f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ef10d2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ef10d2f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.932] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b6fbaa, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40b6fbaa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x10d71c2f, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xf0000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vedatamodel.edb", cAlternateFileName="VEDATA~1.EDB")) returned 1 [0286.932] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b6fbaa, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40b6fbaa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x10d71c2f, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0xf0000, dwReserved0=0x405534, dwReserved1=0x0, cFileName="vedatamodel.edb", cAlternateFileName="VEDATA~1.EDB")) returned 0 [0286.932] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0286.932] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eeeaa73, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eeeaa73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eeeaa73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6c65646f, dwReserved1=0x6264652e, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.932] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eeeaa73, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eeeaa73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eeeaa73, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x6c65646f, dwReserved1=0x6264652e, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.932] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0286.932] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5599aefd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0286.932] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.932] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.932] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.932] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.932] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.933] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0286.933] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571518) returned 1 [0286.933] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0286.933] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.933] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0286.933] CryptDestroyHash (hHash=0x55e650) returned 1 [0286.933] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0286.933] GetLastError () returned 0x0 [0286.933] GetLastError () returned 0x0 [0286.934] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.935] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\VirtualStore\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\virtualstore\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0286.936] WriteFile (in: hFile=0x244, lpBuffer=0x23e3ed4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3ed4*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.938] SetEndOfFile (hFile=0x244) returned 1 [0286.938] CloseHandle (hObject=0x244) returned 1 [0286.938] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.939] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.939] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.940] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.940] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.940] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.940] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.941] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.941] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.941] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.941] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.942] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0286.942] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0286.942] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\VirtualStore\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\virtualstore\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ef36f69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0286.942] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ef36f69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.942] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef36f69, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ef36f69, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ef36f69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.942] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef36f69, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ef36f69, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ef36f69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.942] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0286.946] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5599aefd, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5599aefd, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5599aefd, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0 [0286.946] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0286.946] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb529ceaa, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x726f7453, dwReserved1=0x72657265, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0286.946] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.946] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.947] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.947] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.947] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0286.947] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571160) returned 1 [0286.948] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0286.948] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.948] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e710) returned 1 [0286.948] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0286.948] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18) returned 1 [0286.948] GetLastError () returned 0x0 [0286.948] GetLastError () returned 0x0 [0286.948] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.949] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0286.950] WriteFile (in: hFile=0x240, lpBuffer=0x23e3ee4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3ee4*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.951] SetEndOfFile (hFile=0x240) returned 1 [0286.951] CloseHandle (hObject=0x240) returned 1 [0286.951] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.952] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.952] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.953] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.953] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.953] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0286.953] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.953] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.953] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.954] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.954] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.954] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.954] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.954] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.955] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.955] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.955] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.955] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.955] CryptDestroyKey (hKey=0x55e710) returned 1 [0286.955] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0286.955] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4ef36f69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0286.956] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4ef36f69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.956] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ef36f69, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ef36f69, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ef5ddb9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.956] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x77bddea1, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77bddea1, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0286.956] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.956] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.956] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.956] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.956] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.956] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0286.956] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570858) returned 1 [0286.957] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0286.957] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.957] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e910) returned 1 [0286.957] CryptDestroyHash (hHash=0x55e310) returned 1 [0286.957] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0286.957] GetLastError () returned 0x0 [0286.957] GetLastError () returned 0x0 [0286.957] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.958] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0286.961] WriteFile (in: hFile=0x244, lpBuffer=0x23e3f24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3f24*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.962] SetEndOfFile (hFile=0x244) returned 1 [0286.962] CloseHandle (hObject=0x244) returned 1 [0286.962] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.963] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.963] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.963] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.963] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.963] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0286.964] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.964] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.964] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.964] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.965] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.965] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.965] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.965] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.965] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.965] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0286.965] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.965] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.966] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.966] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.966] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.966] CryptDestroyKey (hKey=0x55e910) returned 1 [0286.966] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0286.966] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x77bddea1, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4ef5ddb9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0286.966] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x77bddea1, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4ef5ddb9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.966] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f14c05a, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0286.966] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.966] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.967] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.967] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.967] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0286.967] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5709f0) returned 1 [0286.967] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0286.967] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.967] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e710) returned 1 [0286.967] CryptDestroyHash (hHash=0x55e750) returned 1 [0286.968] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f190*=0x18) returned 1 [0286.968] GetLastError () returned 0x0 [0286.968] GetLastError () returned 0x0 [0286.968] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.968] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\cryptneturlcache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0286.969] WriteFile (in: hFile=0x248, lpBuffer=0x23e3f34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f34*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.970] SetEndOfFile (hFile=0x248) returned 1 [0286.970] CloseHandle (hObject=0x248) returned 1 [0286.970] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.971] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.971] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.971] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.971] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.971] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.971] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0286.972] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.972] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.972] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.972] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.972] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.972] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.973] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.973] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.973] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.973] CryptDestroyKey (hKey=0x55e710) returned 1 [0286.974] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0286.974] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\cryptneturlcache\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ef8334e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0286.974] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4ef8334e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.974] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xd3a042a0, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xd3a042a0, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0286.974] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.974] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.974] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.974] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0286.974] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0286.975] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.975] CryptHashData (hHash=0x55e710, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.975] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e5d0) returned 1 [0286.975] CryptDestroyHash (hHash=0x55e710) returned 1 [0286.975] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.975] GetLastError () returned 0x0 [0286.975] GetLastError () returned 0x0 [0286.975] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.976] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.978] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3f74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3f74*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.980] SetEndOfFile (hFile=0x24c) returned 1 [0286.982] CloseHandle (hObject=0x24c) returned 1 [0286.982] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.983] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.983] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.983] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.983] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0286.984] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.984] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.984] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.984] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.984] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.985] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.985] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.985] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.985] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0286.985] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.985] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.985] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.985] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.985] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.986] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0286.986] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0286.986] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xd3a042a0, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0x4ef8334e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0286.986] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xd3a042a0, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0x4ef8334e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.986] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x64a9c09, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x64a9c09, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x64a9c09, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x12bb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="57C8EDB95DF3F0AD4EE2DC2B8CFD4157", cAlternateFileName="57C8ED~1")) returned 1 [0286.986] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xdd75384e, ftLastWriteTime.dwHighDateTime=0x1d7b055, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776", cAlternateFileName="7423F8~1")) returned 1 [0286.986] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x65dad7a, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x65dad7a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x65dad7a, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="77EC63BDA74BD0D0E0426DC8F8008506", cAlternateFileName="77EC63~1")) returned 1 [0286.986] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x65dad7a, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x65dad7a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x2af524cd, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FB0D848F74F70BB2EAA93746D24D9749", cAlternateFileName="FB0D84~1")) returned 1 [0286.986] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ef8334e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ef8334e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4efa9590, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.986] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ef8334e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ef8334e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4efa9590, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.986] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0286.986] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ef8334e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ef8334e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ef8334e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.986] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xd3a042a0, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xd3a042a0, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="MetaData", cAlternateFileName="")) returned 1 [0286.986] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.987] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.989] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0286.989] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0286.990] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0286.990] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.990] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0286.990] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0286.990] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ef28*=0x18) returned 1 [0286.990] GetLastError () returned 0x0 [0286.990] GetLastError () returned 0x0 [0286.990] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0286.990] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0286.992] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3fb4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3fb4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0286.993] SetEndOfFile (hFile=0x24c) returned 1 [0286.994] CloseHandle (hObject=0x24c) returned 1 [0286.994] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0286.994] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0286.995] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0286.995] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0286.995] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.995] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.995] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.995] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0286.996] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0286.996] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.996] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.996] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.996] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0286.996] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0286.996] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0286.996] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0286.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0286.997] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0286.997] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0286.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0286.997] CryptDestroyKey (hKey=0x55e210) returned 1 [0286.997] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0286.997] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xd3a042a0, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0x4efa9590, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0286.997] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xd3a042a0, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0x4efa9590, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0286.997] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x64a9c09, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x64a9c09, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x5d0b6766, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x405534, dwReserved1=0x0, cFileName="57C8EDB95DF3F0AD4EE2DC2B8CFD4157", cAlternateFileName="57C8ED~1")) returned 1 [0286.998] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4f14c05a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd3a042a0, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776", cAlternateFileName="7423F8~1")) returned 1 [0286.998] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x65dad7a, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x65dad7a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x65dad7a, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x405534, dwReserved1=0x0, cFileName="77EC63BDA74BD0D0E0426DC8F8008506", cAlternateFileName="77EC63~1")) returned 1 [0286.998] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x65dad7a, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x65dad7a, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x813c7edb, ftLastWriteTime.dwHighDateTime=0x1d8a73a, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FB0D848F74F70BB2EAA93746D24D9749", cAlternateFileName="FB0D84~1")) returned 1 [0286.998] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4efa9590, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4efa9590, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4efa9590, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.998] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4efa9590, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4efa9590, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4efa9590, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0286.998] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0286.998] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x4f14c05a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xd3a042a0, ftLastAccessTime.dwHighDateTime=0x1d8a64b, ftLastWriteTime.dwLowDateTime=0xd3a042a0, ftLastWriteTime.dwHighDateTime=0x1d8a64b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="MetaData", cAlternateFileName="")) returned 0 [0286.998] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0286.998] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ef5ddb9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ef5ddb9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ef5ddb9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4161, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0286.998] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77bddea1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77bddea1, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77bddea1, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4161, dwReserved1=0x5f4f545f, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0286.998] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0286.998] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0286.998] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0286.998] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0286.999] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0286.999] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571160) returned 1 [0286.999] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0286.999] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0286.999] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0286.999] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0286.999] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f190*=0x18) returned 1 [0286.999] GetLastError () returned 0x0 [0287.000] GetLastError () returned 0x0 [0287.000] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.000] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0287.001] WriteFile (in: hFile=0x248, lpBuffer=0x23e3fc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3fc4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.002] SetEndOfFile (hFile=0x248) returned 1 [0287.003] CloseHandle (hObject=0x248) returned 1 [0287.003] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.004] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.004] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.004] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.005] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.005] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.005] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.005] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.005] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.006] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.006] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.006] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.006] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.006] CryptDestroyKey (hKey=0x55e910) returned 1 [0287.006] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0287.006] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77bddea1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77bddea1, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4efcf885, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0287.007] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77bddea1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77bddea1, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x4efcf885, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.007] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4efcf885, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4efcf885, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4efcf885, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.007] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77bddea1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x3f3bef8d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f3bef8d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0287.007] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.007] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.007] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.007] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.007] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0287.008] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0287.008] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.008] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0287.008] CryptDestroyHash (hHash=0x55e910) returned 1 [0287.008] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0287.008] GetLastError () returned 0x0 [0287.008] GetLastError () returned 0x0 [0287.008] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.009] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\services\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0287.011] WriteFile (in: hFile=0x24c, lpBuffer=0x23e5d0c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e5d0c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.012] SetEndOfFile (hFile=0x24c) returned 1 [0287.012] CloseHandle (hObject=0x24c) returned 1 [0287.013] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.013] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.013] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.013] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.014] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.014] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.014] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.014] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.014] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.014] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.015] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.015] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.015] CryptDestroyKey (hKey=0x55e610) returned 1 [0287.015] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0287.015] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\microsoft\\internet explorer\\services\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77bddea1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x3f3bef8d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4efcf885, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0287.015] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77bddea1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x3f3bef8d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4efcf885, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.016] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4efcf885, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4efcf885, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4efcf885, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.016] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f3a236c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f3a236c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f3bef8d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x405534, dwReserved1=0x0, cFileName="search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SEARCH~1.CRY")) returned 1 [0287.016] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f3a236c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f3a236c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f3bef8d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x10be, dwReserved0=0x405534, dwReserved1=0x0, cFileName="search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SEARCH~1.CRY")) returned 0 [0287.016] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0287.016] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77bddea1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x3f3bef8d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f3bef8d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 0 [0287.016] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0287.016] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x77bddea1, ftCreationTime.dwHighDateTime=0x1d8c12e, ftLastAccessTime.dwLowDateTime=0x77bddea1, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x77bddea1, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4161, dwReserved1=0x5f4f545f, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0287.016] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0287.016] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName="Sun", cAlternateFileName="")) returned 1 [0287.016] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.016] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.016] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.016] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.016] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.017] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571160) returned 1 [0287.017] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0287.017] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.017] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0287.017] CryptDestroyHash (hHash=0x55e910) returned 1 [0287.017] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0287.017] GetLastError () returned 0x0 [0287.017] GetLastError () returned 0x0 [0287.018] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.018] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.019] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0287.020] WriteFile (in: hFile=0x244, lpBuffer=0x23e5d1c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e5d1c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.021] SetEndOfFile (hFile=0x244) returned 1 [0287.021] CloseHandle (hObject=0x244) returned 1 [0287.021] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.021] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.021] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.022] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.022] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.022] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.022] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.022] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.022] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.022] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.022] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.022] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.023] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.023] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.023] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.023] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.023] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.023] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.024] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.024] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0287.024] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0287.024] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4eff5ab6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0287.024] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4eff5ab6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.024] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4eff5ab6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eff5ab6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4eff5ab6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.024] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0287.025] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.025] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.025] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.025] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.025] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570fc8) returned 1 [0287.026] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0287.026] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.026] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0287.026] CryptDestroyHash (hHash=0x55e610) returned 1 [0287.026] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f190*=0x18) returned 1 [0287.026] GetLastError () returned 0x0 [0287.026] GetLastError () returned 0x0 [0287.026] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.027] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.027] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0287.030] WriteFile (in: hFile=0x248, lpBuffer=0x23e4024*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e4024*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.031] SetEndOfFile (hFile=0x248) returned 1 [0287.031] CloseHandle (hObject=0x248) returned 1 [0287.031] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.032] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.032] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.033] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.033] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.033] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.033] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.033] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.034] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.034] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.034] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.035] CryptDestroyKey (hKey=0x55e650) returned 1 [0287.035] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0287.035] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4eff5ab6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0287.035] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4eff5ab6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.035] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0287.035] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.035] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.035] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.035] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.035] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.035] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.035] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0287.036] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0287.036] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.036] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0287.036] CryptDestroyHash (hHash=0x55e910) returned 1 [0287.036] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0287.036] GetLastError () returned 0x0 [0287.036] GetLastError () returned 0x0 [0287.036] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.037] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0287.038] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.038] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0287.042] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3524*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3524*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.043] SetEndOfFile (hFile=0x24c) returned 1 [0287.043] CloseHandle (hObject=0x24c) returned 1 [0287.043] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.044] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.044] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.044] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.045] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.045] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.045] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.045] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.045] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.045] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.045] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.045] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.045] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.046] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.046] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.046] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.046] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.046] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.046] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.046] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.047] CryptDestroyKey (hKey=0x55e650) returned 1 [0287.047] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0287.047] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f01d1cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0287.047] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f01d1cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.047] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cache", cAlternateFileName="")) returned 1 [0287.047] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.047] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.048] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.048] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.048] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0287.048] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0287.048] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.048] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e2d0) returned 1 [0287.049] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.049] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0287.049] GetLastError () returned 0x0 [0287.049] GetLastError () returned 0x0 [0287.049] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.049] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0287.050] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.050] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0287.056] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.057] SetEndOfFile (hFile=0x250) returned 1 [0287.057] CloseHandle (hObject=0x250) returned 1 [0287.057] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.058] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.059] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.156] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.164] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.164] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.164] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.165] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.166] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.166] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.166] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.168] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0287.168] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0287.168] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f041f8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0287.171] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f041f8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.171] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6.0", cAlternateFileName="")) returned 1 [0287.171] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.172] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.172] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.172] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.172] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570b00) returned 1 [0287.174] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0287.174] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.174] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e390) returned 1 [0287.174] CryptDestroyHash (hHash=0x55e650) returned 1 [0287.174] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ea58*=0x18) returned 1 [0287.174] GetLastError () returned 0x0 [0287.174] GetLastError () returned 0x0 [0287.180] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.181] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0287.189] WriteFile (in: hFile=0x254, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.190] SetEndOfFile (hFile=0x254) returned 1 [0287.190] CloseHandle (hObject=0x254) returned 1 [0287.190] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.191] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.191] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.191] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.192] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.192] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.192] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.192] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.193] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.193] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.193] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.193] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.194] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.194] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.194] CryptDestroyKey (hKey=0x55e390) returned 1 [0287.194] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0287.194] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f19a2c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0287.194] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f19a2c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.195] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1 [0287.195] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.195] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.195] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.195] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.195] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5712f8) returned 1 [0287.196] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.196] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.196] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.196] CryptDestroyHash (hHash=0x55e790) returned 1 [0287.196] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.196] GetLastError () returned 0x0 [0287.196] GetLastError () returned 0x0 [0287.196] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.197] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0287.198] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.198] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\0\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\0\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.199] WriteFile (in: hFile=0x258, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.201] SetEndOfFile (hFile=0x258) returned 1 [0287.201] CloseHandle (hObject=0x258) returned 1 [0287.201] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.202] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.203] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.203] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.203] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.203] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.203] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.203] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.204] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.204] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.204] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.204] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.204] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.204] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.204] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.204] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.205] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.205] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.205] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.205] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.205] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.205] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.205] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.205] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.206] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.206] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0287.206] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\0\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\0\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f19a2c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0287.206] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f19a2c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.206] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f19a2c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f19a2c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f1bf8a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.206] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f19a2c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f19a2c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f1bf8a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.206] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0287.207] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="1", cAlternateFileName="")) returned 1 [0287.207] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.207] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.207] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.207] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.207] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.207] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.207] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570748) returned 1 [0287.208] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.208] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.208] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.208] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.208] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.208] GetLastError () returned 0x0 [0287.208] GetLastError () returned 0x0 [0287.209] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.209] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\1\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\1\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.211] WriteFile (in: hFile=0x258, lpBuffer=0x23e35a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e35a4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.212] SetEndOfFile (hFile=0x258) returned 1 [0287.213] CloseHandle (hObject=0x258) returned 1 [0287.213] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.214] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.214] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.214] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.214] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.214] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.214] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.214] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.214] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.215] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.215] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.215] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.215] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.215] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.215] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.215] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.215] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.217] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.217] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.217] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.218] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.218] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.218] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.218] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0287.218] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\1\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\1\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f1bf8a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.218] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f1bf8a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.219] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f1bf8a8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f1bf8a8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f1bf8a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.219] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f1bf8a8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f1bf8a8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f1bf8a8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.219] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.219] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="10", cAlternateFileName="")) returned 1 [0287.219] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.219] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.219] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.219] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.219] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570e30) returned 1 [0287.220] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.220] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.220] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.220] CryptDestroyHash (hHash=0x55e910) returned 1 [0287.220] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.220] GetLastError () returned 0x0 [0287.220] GetLastError () returned 0x0 [0287.220] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.221] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\10\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\10\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.222] WriteFile (in: hFile=0x258, lpBuffer=0x23e527c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e527c*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.223] SetEndOfFile (hFile=0x258) returned 1 [0287.223] CloseHandle (hObject=0x258) returned 1 [0287.223] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.224] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.224] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.224] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.225] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.225] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.225] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.225] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.225] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.225] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.225] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.226] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.226] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.226] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.226] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.226] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.226] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.226] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.226] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.226] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.226] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.226] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.226] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.226] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.227] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.227] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0287.227] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\10\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\10\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f1e596d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.227] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f1e596d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.227] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f1e596d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f1e596d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f1e596d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.227] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f1e596d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f1e596d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f1e596d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.227] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.227] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="11", cAlternateFileName="")) returned 1 [0287.228] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.228] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.228] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.228] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.228] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.228] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.228] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5707d0) returned 1 [0287.229] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.229] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.229] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.229] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.229] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.229] GetLastError () returned 0x0 [0287.229] GetLastError () returned 0x0 [0287.229] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.230] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0287.230] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.231] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\11\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\11\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.232] WriteFile (in: hFile=0x258, lpBuffer=0x23e35a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e35a4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.233] SetEndOfFile (hFile=0x258) returned 1 [0287.233] CloseHandle (hObject=0x258) returned 1 [0287.233] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.234] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.234] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.234] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.234] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.235] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.235] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.235] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.235] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.235] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.236] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.236] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.236] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.236] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.236] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.236] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.236] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.236] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.236] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.237] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.237] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0287.237] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\11\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\11\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f20bc42, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.237] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f20bc42, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.237] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f20bc42, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f20bc42, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f20bc42, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.237] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f20bc42, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f20bc42, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f20bc42, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.237] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.237] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="12", cAlternateFileName="")) returned 1 [0287.237] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.237] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.238] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.238] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.238] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.238] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570f40) returned 1 [0287.238] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.238] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.238] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.238] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.238] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.238] GetLastError () returned 0x0 [0287.238] GetLastError () returned 0x0 [0287.239] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.239] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\12\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\12\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.241] WriteFile (in: hFile=0x258, lpBuffer=0x23e35d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e35d4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.242] SetEndOfFile (hFile=0x258) returned 1 [0287.242] CloseHandle (hObject=0x258) returned 1 [0287.242] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.243] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.243] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.243] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.243] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.243] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.244] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.244] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.244] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.244] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.244] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.244] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.245] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.245] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.245] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.245] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.246] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.246] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0287.246] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\12\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\12\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f20bc42, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0287.246] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f20bc42, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.246] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f20bc42, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f20bc42, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f20bc42, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.246] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f20bc42, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f20bc42, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f20bc42, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.246] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0287.246] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="13", cAlternateFileName="")) returned 1 [0287.246] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.246] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.252] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.252] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.252] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.252] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.252] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570fc8) returned 1 [0287.252] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.252] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.252] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.252] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0287.253] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.253] GetLastError () returned 0x0 [0287.253] GetLastError () returned 0x0 [0287.253] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.253] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\13\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\13\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.254] WriteFile (in: hFile=0x258, lpBuffer=0x23e528c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e528c*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.255] SetEndOfFile (hFile=0x258) returned 1 [0287.256] CloseHandle (hObject=0x258) returned 1 [0287.256] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.256] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.256] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.257] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.257] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.257] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.257] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.257] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.257] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.257] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.257] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.257] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.257] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.258] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.258] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.258] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.258] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.258] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.258] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.258] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.258] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.258] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.258] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.259] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.259] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.259] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0287.259] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\13\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\13\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f23951a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0287.259] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f23951a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.259] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f23951a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f23951a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f23951a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.259] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f23951a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f23951a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f23951a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.259] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0287.259] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="14", cAlternateFileName="")) returned 1 [0287.259] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.260] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.260] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.260] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.260] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571270) returned 1 [0287.260] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.261] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.261] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.261] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.261] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.261] GetLastError () returned 0x0 [0287.261] GetLastError () returned 0x0 [0287.261] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.262] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0287.288] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.289] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\14\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\14\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.291] WriteFile (in: hFile=0x258, lpBuffer=0x23e35a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e35a4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.292] SetEndOfFile (hFile=0x258) returned 1 [0287.292] CloseHandle (hObject=0x258) returned 1 [0287.292] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.293] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.293] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.294] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.294] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.294] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.294] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.294] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.294] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.294] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.294] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.294] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.295] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.295] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.295] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.295] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.295] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.295] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.295] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.295] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.295] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.295] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.295] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.295] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.296] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.296] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.296] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.296] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0287.296] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\14\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\14\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f27e3f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.296] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f27e3f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.296] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f27e3f1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f27e3f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f27e3f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.296] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f27e3f1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f27e3f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f27e3f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.297] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.297] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="15", cAlternateFileName="")) returned 1 [0287.297] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.297] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.297] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.297] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.297] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.297] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.297] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5712f8) returned 1 [0287.298] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.298] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.298] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e390) returned 1 [0287.298] CryptDestroyHash (hHash=0x55e790) returned 1 [0287.298] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.298] GetLastError () returned 0x0 [0287.298] GetLastError () returned 0x0 [0287.298] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.299] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\15\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\15\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.300] WriteFile (in: hFile=0x258, lpBuffer=0x23e35e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e35e4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.301] SetEndOfFile (hFile=0x258) returned 1 [0287.301] CloseHandle (hObject=0x258) returned 1 [0287.301] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.302] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.302] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.302] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.302] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.302] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.303] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.303] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.303] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.303] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.303] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.303] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.303] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.303] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.304] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.304] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.304] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.304] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.304] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.304] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.304] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.304] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.304] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.304] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.305] CryptDestroyKey (hKey=0x55e390) returned 1 [0287.305] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0287.305] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\15\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\15\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f2a44c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.305] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f2a44c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.305] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f2a44c6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f2a44c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f2a44c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.305] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f2a44c6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f2a44c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f2a44c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.305] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.305] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="16", cAlternateFileName="")) returned 1 [0287.305] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.305] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.306] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.306] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.306] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.306] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.306] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5712f8) returned 1 [0287.306] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.307] CryptHashData (hHash=0x55e210, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.307] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.307] CryptDestroyHash (hHash=0x55e210) returned 1 [0287.307] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.307] GetLastError () returned 0x0 [0287.307] GetLastError () returned 0x0 [0287.307] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.307] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0287.308] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.308] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\16\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\16\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.315] WriteFile (in: hFile=0x258, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.316] SetEndOfFile (hFile=0x258) returned 1 [0287.316] CloseHandle (hObject=0x258) returned 1 [0287.316] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.317] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.317] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.317] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.317] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.317] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.317] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.318] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.318] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.318] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.318] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.318] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.318] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.318] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.318] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.318] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.319] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.319] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.319] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.319] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.319] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.319] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.319] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.320] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.320] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0287.320] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\16\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\16\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f2a44c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.320] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f2a44c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.320] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f2a44c6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f2a44c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f2cc182, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.320] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f2a44c6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f2a44c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f2cc182, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.320] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.320] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="17", cAlternateFileName="")) returned 1 [0287.320] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.320] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.320] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.321] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.321] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.321] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571518) returned 1 [0287.321] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.321] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.321] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.322] CryptDestroyHash (hHash=0x55e310) returned 1 [0287.322] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.322] GetLastError () returned 0x0 [0287.322] GetLastError () returned 0x0 [0287.322] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.323] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\17\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\17\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.324] WriteFile (in: hFile=0x258, lpBuffer=0x23e529c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e529c*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.326] SetEndOfFile (hFile=0x258) returned 1 [0287.326] CloseHandle (hObject=0x258) returned 1 [0287.326] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.327] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.327] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.327] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.327] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.327] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.327] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.327] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.327] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.327] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.327] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.328] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.328] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.328] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.328] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.328] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.328] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.328] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.328] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.328] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.328] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.328] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.329] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.329] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.329] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.329] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.329] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.329] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.329] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0287.329] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\17\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\17\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f2cc182, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.329] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f2cc182, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.330] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f2cc182, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f2cc182, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f2f08c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.330] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f2cc182, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f2cc182, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f2f08c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.330] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.330] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="18", cAlternateFileName="")) returned 1 [0287.330] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.330] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.330] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.330] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.330] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.330] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.330] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5709f0) returned 1 [0287.331] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.331] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.331] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e310) returned 1 [0287.331] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.331] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.331] GetLastError () returned 0x0 [0287.331] GetLastError () returned 0x0 [0287.331] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.332] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0287.332] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.333] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\18\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\18\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.334] WriteFile (in: hFile=0x258, lpBuffer=0x23e3534*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3534*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.335] SetEndOfFile (hFile=0x258) returned 1 [0287.335] CloseHandle (hObject=0x258) returned 1 [0287.335] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.336] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.336] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.336] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.336] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.336] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.337] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.337] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.337] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.337] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.337] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.337] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.337] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.337] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.338] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.338] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.338] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.338] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.338] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.338] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.338] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.338] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.338] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.338] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.338] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.338] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.339] CryptDestroyKey (hKey=0x55e310) returned 1 [0287.339] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0287.339] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\18\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\18\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f2f08c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0287.339] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f2f08c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.339] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f2f08c9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f2f08c9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f2f08c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.339] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f2f08c9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f2f08c9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f2f08c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.339] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0287.339] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="19", cAlternateFileName="")) returned 1 [0287.339] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.339] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.339] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.340] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.340] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.340] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.340] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570d20) returned 1 [0287.341] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.341] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.341] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e910) returned 1 [0287.341] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.341] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.341] GetLastError () returned 0x0 [0287.341] GetLastError () returned 0x0 [0287.341] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.342] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\19\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\19\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.343] WriteFile (in: hFile=0x258, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.344] SetEndOfFile (hFile=0x258) returned 1 [0287.344] CloseHandle (hObject=0x258) returned 1 [0287.344] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.345] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.345] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.345] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.345] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.345] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.345] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.345] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.345] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.345] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.345] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.346] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.346] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.346] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.346] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.346] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.346] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.346] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.346] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.346] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.346] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.347] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.347] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.347] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.347] CryptDestroyKey (hKey=0x55e910) returned 1 [0287.347] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0287.347] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\19\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\19\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f316c69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.347] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f316c69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.347] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f316c69, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f316c69, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f316c69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.347] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f316c69, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f316c69, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f316c69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.347] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.347] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="2", cAlternateFileName="")) returned 1 [0287.348] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.348] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.348] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.348] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.348] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.348] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.348] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571408) returned 1 [0287.349] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.349] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.349] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e910) returned 1 [0287.349] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.349] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.349] GetLastError () returned 0x0 [0287.349] GetLastError () returned 0x0 [0287.349] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.350] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0287.350] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.351] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\2\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\2\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.353] WriteFile (in: hFile=0x258, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.355] SetEndOfFile (hFile=0x258) returned 1 [0287.355] CloseHandle (hObject=0x258) returned 1 [0287.355] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.356] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.356] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.356] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.356] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.357] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.357] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.357] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.357] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.357] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.357] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.358] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.358] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.358] CryptDestroyKey (hKey=0x55e910) returned 1 [0287.358] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0287.358] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\2\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\2\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f316c69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0287.359] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f316c69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.359] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f316c69, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f316c69, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f316c69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.359] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f316c69, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f316c69, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f316c69, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.359] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0287.359] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="20", cAlternateFileName="")) returned 1 [0287.359] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.359] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.359] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.359] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.359] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.359] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5710d8) returned 1 [0287.360] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.360] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.360] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e390) returned 1 [0287.360] CryptDestroyHash (hHash=0x55e910) returned 1 [0287.360] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.360] GetLastError () returned 0x0 [0287.360] GetLastError () returned 0x0 [0287.360] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.361] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\20\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\20\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.362] WriteFile (in: hFile=0x258, lpBuffer=0x23e35c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e35c4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.363] SetEndOfFile (hFile=0x258) returned 1 [0287.363] CloseHandle (hObject=0x258) returned 1 [0287.363] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.364] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.364] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.364] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.364] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.364] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.364] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.364] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.365] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.365] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.365] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.365] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.365] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.365] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.365] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.365] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.365] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.365] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.366] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.366] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.366] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.366] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.366] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.366] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.366] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.366] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.366] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.366] CryptDestroyKey (hKey=0x55e390) returned 1 [0287.366] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0287.367] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\20\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\20\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f33ce2d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.367] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f33ce2d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.367] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f33ce2d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f33ce2d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f33ce2d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.367] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f33ce2d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f33ce2d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f33ce2d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.367] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.367] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="21", cAlternateFileName="")) returned 1 [0287.367] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.367] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.367] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.367] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.368] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570fc8) returned 1 [0287.368] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.368] CryptHashData (hHash=0x55e210, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.368] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.368] CryptDestroyHash (hHash=0x55e210) returned 1 [0287.368] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.368] GetLastError () returned 0x0 [0287.368] GetLastError () returned 0x0 [0287.369] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.369] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\21\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\21\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.370] WriteFile (in: hFile=0x258, lpBuffer=0x23e529c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e529c*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.373] SetEndOfFile (hFile=0x258) returned 1 [0287.373] CloseHandle (hObject=0x258) returned 1 [0287.373] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.374] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.374] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.374] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.374] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.375] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.375] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.375] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.375] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.376] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.376] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.376] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.376] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.380] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.380] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0287.380] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\21\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\21\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f33ce2d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.380] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f33ce2d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.380] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f33ce2d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f33ce2d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f363164, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.380] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f33ce2d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f33ce2d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f363164, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.380] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.380] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="22", cAlternateFileName="")) returned 1 [0287.380] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.380] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.381] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.381] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.381] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.381] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.381] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5710d8) returned 1 [0287.381] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.382] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.382] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e310) returned 1 [0287.382] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.382] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.382] GetLastError () returned 0x0 [0287.382] GetLastError () returned 0x0 [0287.382] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.382] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\22\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\22\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.384] WriteFile (in: hFile=0x258, lpBuffer=0x23e35d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e35d4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.385] SetEndOfFile (hFile=0x258) returned 1 [0287.385] CloseHandle (hObject=0x258) returned 1 [0287.385] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.386] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.386] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.386] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.387] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.387] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.387] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.389] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.389] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.389] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.389] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.389] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.389] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.389] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.389] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.389] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.390] CryptDestroyKey (hKey=0x55e310) returned 1 [0287.390] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0287.390] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\22\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\22\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f363164, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0287.390] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f363164, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.390] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f363164, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f363164, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f363164, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.390] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f363164, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f363164, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f363164, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.390] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0287.390] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="23", cAlternateFileName="")) returned 1 [0287.391] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.391] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.391] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.391] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.391] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.391] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.391] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571050) returned 1 [0287.392] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.392] CryptHashData (hHash=0x55e310, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.392] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.392] CryptDestroyHash (hHash=0x55e310) returned 1 [0287.392] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.392] GetLastError () returned 0x0 [0287.392] GetLastError () returned 0x0 [0287.392] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.393] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\23\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\23\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.394] WriteFile (in: hFile=0x258, lpBuffer=0x23e3614*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3614*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.396] SetEndOfFile (hFile=0x258) returned 1 [0287.396] CloseHandle (hObject=0x258) returned 1 [0287.396] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.397] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.397] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.397] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.397] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.397] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.397] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.397] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.397] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.398] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.398] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.398] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.398] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.398] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.398] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.398] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.398] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.398] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.398] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.398] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.398] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.398] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.399] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.399] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.399] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.399] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.399] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0287.399] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\23\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\23\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f3893cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.400] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f3893cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.400] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f3893cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f3893cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f3893cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.400] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f3893cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f3893cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f3893cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.400] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.400] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="24", cAlternateFileName="")) returned 1 [0287.400] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.400] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.400] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.400] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.400] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.400] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.400] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571408) returned 1 [0287.401] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.401] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.401] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.401] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.401] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.401] GetLastError () returned 0x0 [0287.401] GetLastError () returned 0x0 [0287.401] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.402] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\24\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\24\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.404] WriteFile (in: hFile=0x258, lpBuffer=0x23e3624*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3624*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.405] SetEndOfFile (hFile=0x258) returned 1 [0287.405] CloseHandle (hObject=0x258) returned 1 [0287.405] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.406] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.406] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.406] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.406] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.406] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.407] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.407] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.407] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.407] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.407] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.407] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.407] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.407] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.408] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.408] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.408] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.408] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.408] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.408] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.408] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.408] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.408] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.408] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.408] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.408] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.408] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.409] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.409] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0287.409] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\24\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\24\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f3af629, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.409] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f3af629, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.409] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f3893cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f3893cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f3af629, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.409] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f3893cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f3893cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f3af629, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.409] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.409] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="25", cAlternateFileName="")) returned 1 [0287.409] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.409] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.410] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.410] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.410] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.410] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571490) returned 1 [0287.410] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.410] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.411] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.411] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.411] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.411] GetLastError () returned 0x0 [0287.411] GetLastError () returned 0x0 [0287.411] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.411] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\25\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\25\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.412] WriteFile (in: hFile=0x258, lpBuffer=0x23e3664*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3664*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.413] SetEndOfFile (hFile=0x258) returned 1 [0287.414] CloseHandle (hObject=0x258) returned 1 [0287.414] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.415] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.415] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.415] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.415] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.415] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.415] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.416] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.416] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.416] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.416] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.416] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.416] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.417] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.417] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.417] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.417] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.417] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.417] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0287.417] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\25\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\25\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f3af629, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0287.418] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f3af629, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.418] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f3af629, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f3af629, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f3af629, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.418] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f3af629, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f3af629, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f3af629, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.418] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0287.418] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="26", cAlternateFileName="")) returned 1 [0287.418] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.418] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.418] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.418] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.418] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.418] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.418] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571270) returned 1 [0287.419] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.419] CryptHashData (hHash=0x55e790, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.419] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e910) returned 1 [0287.419] CryptDestroyHash (hHash=0x55e790) returned 1 [0287.419] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.419] GetLastError () returned 0x0 [0287.419] GetLastError () returned 0x0 [0287.419] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.420] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\26\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\26\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.422] WriteFile (in: hFile=0x258, lpBuffer=0x23e3674*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3674*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.423] SetEndOfFile (hFile=0x258) returned 1 [0287.423] CloseHandle (hObject=0x258) returned 1 [0287.423] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.424] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.424] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.424] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.424] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.424] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.424] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.425] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.425] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.425] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.425] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.425] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.426] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.426] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.426] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.426] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.426] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.426] CryptDestroyKey (hKey=0x55e910) returned 1 [0287.426] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0287.426] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\26\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\26\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f3d57f8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.427] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f3d57f8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.427] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f3d57f8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f3d57f8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f3d57f8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.427] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f3d57f8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f3d57f8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f3d57f8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.427] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.427] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="27", cAlternateFileName="")) returned 1 [0287.427] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.427] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.427] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.427] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.427] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.427] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570e30) returned 1 [0287.428] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.428] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.428] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.428] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0287.428] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.428] GetLastError () returned 0x0 [0287.428] GetLastError () returned 0x0 [0287.428] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.429] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\27\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\27\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.433] WriteFile (in: hFile=0x258, lpBuffer=0x23e36b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e36b4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.437] SetEndOfFile (hFile=0x258) returned 1 [0287.437] CloseHandle (hObject=0x258) returned 1 [0287.437] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.438] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.438] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.438] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.438] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.438] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.439] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.439] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.439] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.439] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.439] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.439] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.439] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.439] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.439] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.439] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.439] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.439] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.440] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.440] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.440] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.440] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0287.440] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\27\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\27\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f3d57f8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0287.441] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f3d57f8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.441] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f3d57f8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f3d57f8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f3fb97a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.441] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f3d57f8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f3d57f8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f3fb97a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.441] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0287.441] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="28", cAlternateFileName="")) returned 1 [0287.441] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.441] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.441] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.441] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.442] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570e30) returned 1 [0287.442] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.442] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.442] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.442] CryptDestroyHash (hHash=0x55e910) returned 1 [0287.442] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.442] GetLastError () returned 0x0 [0287.442] GetLastError () returned 0x0 [0287.442] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.443] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\28\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\28\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.444] WriteFile (in: hFile=0x258, lpBuffer=0x23e36c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e36c4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.445] SetEndOfFile (hFile=0x258) returned 1 [0287.445] CloseHandle (hObject=0x258) returned 1 [0287.445] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.446] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.446] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.447] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.447] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.447] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.448] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.448] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.448] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.448] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.448] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.448] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.448] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.448] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.448] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.449] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.449] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.449] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.449] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.449] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.450] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.450] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0287.450] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\28\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\28\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f3fb97a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0287.450] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f3fb97a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.450] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f3fb97a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f3fb97a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f3fb97a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.450] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f3fb97a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f3fb97a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f3fb97a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.450] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0287.450] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="29", cAlternateFileName="")) returned 1 [0287.451] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.451] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.451] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.451] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.451] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571160) returned 1 [0287.452] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.452] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.452] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.452] CryptDestroyHash (hHash=0x55e910) returned 1 [0287.452] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.452] GetLastError () returned 0x0 [0287.452] GetLastError () returned 0x0 [0287.452] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.453] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\29\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\29\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.459] WriteFile (in: hFile=0x258, lpBuffer=0x23e3704*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3704*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.460] SetEndOfFile (hFile=0x258) returned 1 [0287.461] CloseHandle (hObject=0x258) returned 1 [0287.461] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.461] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.462] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.462] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.462] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.462] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.462] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.462] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.462] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.462] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.462] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.463] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.463] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.463] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.463] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.463] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.463] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.463] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.463] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.463] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.463] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.463] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.463] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.463] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.463] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.464] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.464] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.464] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0287.464] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\29\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\29\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f421d1d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0287.464] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f421d1d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.464] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f421d1d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f421d1d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f421d1d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.464] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f421d1d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f421d1d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f421d1d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.464] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0287.464] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="3", cAlternateFileName="")) returned 1 [0287.464] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.465] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.465] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.465] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.465] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.465] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570fc8) returned 1 [0287.466] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.466] CryptHashData (hHash=0x55e390, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.466] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.466] CryptDestroyHash (hHash=0x55e390) returned 1 [0287.466] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.466] GetLastError () returned 0x0 [0287.466] GetLastError () returned 0x0 [0287.466] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.467] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\3\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\3\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.468] WriteFile (in: hFile=0x258, lpBuffer=0x23e3714*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3714*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.469] SetEndOfFile (hFile=0x258) returned 1 [0287.469] CloseHandle (hObject=0x258) returned 1 [0287.469] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.470] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.470] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.470] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.471] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.471] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.471] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.471] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.471] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.472] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.472] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.472] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.472] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.472] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.472] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.472] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.472] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0287.472] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\3\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\3\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f447eae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.472] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f447eae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.472] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f447eae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f447eae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f447eae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.473] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f447eae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f447eae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f447eae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.473] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.473] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="30", cAlternateFileName="")) returned 1 [0287.473] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.473] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.473] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.473] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.473] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.473] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.473] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571160) returned 1 [0287.474] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.474] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.474] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e910) returned 1 [0287.474] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.474] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.474] GetLastError () returned 0x0 [0287.474] GetLastError () returned 0x0 [0287.474] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.475] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\30\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\30\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.475] WriteFile (in: hFile=0x258, lpBuffer=0x23e3754*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3754*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.477] SetEndOfFile (hFile=0x258) returned 1 [0287.477] CloseHandle (hObject=0x258) returned 1 [0287.477] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.478] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.478] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.478] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.478] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.478] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.478] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.479] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.479] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.479] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.479] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.479] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.479] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.479] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.479] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.479] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.479] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.479] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.479] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.480] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.480] CryptDestroyKey (hKey=0x55e910) returned 1 [0287.480] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0287.480] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\30\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\30\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f447eae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.480] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f447eae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.480] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f447eae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f447eae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f447eae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.480] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f447eae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f447eae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f447eae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.480] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.480] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="31", cAlternateFileName="")) returned 1 [0287.480] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.481] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.481] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.481] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.481] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.483] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.483] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5709f0) returned 1 [0287.484] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.484] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.484] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.484] CryptDestroyHash (hHash=0x55e910) returned 1 [0287.484] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.484] GetLastError () returned 0x0 [0287.484] GetLastError () returned 0x0 [0287.484] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.485] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\31\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\31\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.486] WriteFile (in: hFile=0x258, lpBuffer=0x23e3764*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3764*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.487] SetEndOfFile (hFile=0x258) returned 1 [0287.488] CloseHandle (hObject=0x258) returned 1 [0287.488] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.488] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.488] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.488] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.489] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.489] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.489] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.489] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.489] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.489] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.490] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.490] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.490] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.490] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.490] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.490] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.490] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.491] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.491] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0287.491] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\31\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\31\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f46e14f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0287.491] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f46e14f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.491] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f46e14f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f46e14f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f46e14f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.491] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f46e14f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f46e14f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f46e14f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.491] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0287.491] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="32", cAlternateFileName="")) returned 1 [0287.491] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.491] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.491] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.492] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.492] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.492] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.492] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570e30) returned 1 [0287.492] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.492] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.492] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.492] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.492] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.492] GetLastError () returned 0x0 [0287.492] GetLastError () returned 0x0 [0287.493] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.493] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\32\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\32\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.495] WriteFile (in: hFile=0x258, lpBuffer=0x23e37a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e37a4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.496] SetEndOfFile (hFile=0x258) returned 1 [0287.496] CloseHandle (hObject=0x258) returned 1 [0287.496] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.497] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.497] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.497] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.497] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.497] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.498] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.498] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.498] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.498] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.498] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.498] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.498] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.498] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.499] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.499] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.499] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.499] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.499] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0287.499] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\32\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\32\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f46e14f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.500] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f46e14f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.500] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f46e14f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f46e14f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f46e14f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.500] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f46e14f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f46e14f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f46e14f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.500] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.500] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="33", cAlternateFileName="")) returned 1 [0287.500] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.500] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.500] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.500] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.500] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571270) returned 1 [0287.501] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.501] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.501] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e7d0) returned 1 [0287.501] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.501] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.501] GetLastError () returned 0x0 [0287.501] GetLastError () returned 0x0 [0287.501] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.502] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\33\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\33\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.503] WriteFile (in: hFile=0x258, lpBuffer=0x23e37b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e37b4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.504] SetEndOfFile (hFile=0x258) returned 1 [0287.505] CloseHandle (hObject=0x258) returned 1 [0287.505] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.505] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.505] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.505] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.506] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.506] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.506] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.506] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.506] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.506] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.506] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.507] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.510] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.510] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.510] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.510] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.510] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.511] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0287.511] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0287.511] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\33\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\33\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f4942ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.511] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f4942ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.511] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f4942ff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f4942ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f4942ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.511] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f4942ff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f4942ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f4942ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.511] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.511] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="34", cAlternateFileName="")) returned 1 [0287.512] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.512] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.512] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.512] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.512] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.512] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.512] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570a78) returned 1 [0287.513] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.513] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.513] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.513] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.513] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.513] GetLastError () returned 0x0 [0287.513] GetLastError () returned 0x0 [0287.513] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.514] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\34\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\34\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.515] WriteFile (in: hFile=0x258, lpBuffer=0x23e37f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e37f4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.516] SetEndOfFile (hFile=0x258) returned 1 [0287.516] CloseHandle (hObject=0x258) returned 1 [0287.516] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.517] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.517] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.517] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.517] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.518] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.518] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.518] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.518] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.518] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.519] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.519] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.519] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.519] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.519] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.520] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.520] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.520] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.520] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.520] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.520] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.520] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0287.520] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\34\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\34\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f4ba53a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.521] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f4ba53a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.521] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f4ba53a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f4ba53a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f4ba53a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.521] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f4ba53a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f4ba53a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f4ba53a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.521] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.521] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="35", cAlternateFileName="")) returned 1 [0287.521] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.522] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.522] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.522] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.522] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.522] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.522] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570638) returned 1 [0287.523] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.523] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.523] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.523] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.524] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.524] GetLastError () returned 0x0 [0287.524] GetLastError () returned 0x0 [0287.524] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.525] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\35\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\35\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.526] WriteFile (in: hFile=0x258, lpBuffer=0x23e3804*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3804*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.527] SetEndOfFile (hFile=0x258) returned 1 [0287.527] CloseHandle (hObject=0x258) returned 1 [0287.528] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.530] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.530] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.530] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.530] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.530] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.531] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.531] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.531] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.531] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.531] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.531] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.531] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.531] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.531] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.532] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.532] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.532] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.532] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.532] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.532] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.532] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.532] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.532] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.532] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.532] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.533] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.533] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0287.533] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\35\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\35\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f4ba53a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0287.533] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f4ba53a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.533] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f4ba53a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f4ba53a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f4ba53a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.533] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f4ba53a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f4ba53a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f4ba53a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.533] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0287.533] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="36", cAlternateFileName="")) returned 1 [0287.534] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.534] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.534] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.534] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.534] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571160) returned 1 [0287.535] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.535] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.535] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e210) returned 1 [0287.535] CryptDestroyHash (hHash=0x55e910) returned 1 [0287.535] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.535] GetLastError () returned 0x0 [0287.535] GetLastError () returned 0x0 [0287.535] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.536] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\36\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\36\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.537] WriteFile (in: hFile=0x258, lpBuffer=0x23e3844*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3844*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.538] SetEndOfFile (hFile=0x258) returned 1 [0287.539] CloseHandle (hObject=0x258) returned 1 [0287.539] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.539] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.539] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.540] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.540] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.540] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.540] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.540] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.540] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.540] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.540] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.541] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.541] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.541] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.541] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.541] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.541] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.541] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.541] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.541] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.541] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.541] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.542] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.542] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.542] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.542] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.542] CryptDestroyKey (hKey=0x55e210) returned 1 [0287.542] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0287.542] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\36\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\36\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f4e0886, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.543] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f4e0886, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.543] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f4e0886, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f4e0886, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f4e0886, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.543] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f4e0886, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f4e0886, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f4e0886, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.543] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.543] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="37", cAlternateFileName="")) returned 1 [0287.543] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.543] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.543] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.543] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.543] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.544] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.544] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571490) returned 1 [0287.545] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.545] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.545] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e310) returned 1 [0287.545] CryptDestroyHash (hHash=0x55e910) returned 1 [0287.545] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.545] GetLastError () returned 0x0 [0287.545] GetLastError () returned 0x0 [0287.545] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.546] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\37\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\37\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.547] WriteFile (in: hFile=0x258, lpBuffer=0x23e3854*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3854*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.548] SetEndOfFile (hFile=0x258) returned 1 [0287.548] CloseHandle (hObject=0x258) returned 1 [0287.548] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.549] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.549] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.550] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.550] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.550] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.550] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.550] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.551] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.551] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.551] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.551] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.552] CryptDestroyKey (hKey=0x55e310) returned 1 [0287.552] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0287.552] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\37\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\37\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f506b08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.552] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f506b08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.552] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f506b08, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f506b08, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f506b08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.552] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f506b08, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f506b08, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f506b08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.552] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.552] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="38", cAlternateFileName="")) returned 1 [0287.553] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.553] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.553] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.553] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.553] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.553] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.553] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571050) returned 1 [0287.554] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.554] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.554] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.554] CryptDestroyHash (hHash=0x55e790) returned 1 [0287.554] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.554] GetLastError () returned 0x0 [0287.554] GetLastError () returned 0x0 [0287.554] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.555] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\38\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\38\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.556] WriteFile (in: hFile=0x258, lpBuffer=0x23e3894*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3894*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.557] SetEndOfFile (hFile=0x258) returned 1 [0287.557] CloseHandle (hObject=0x258) returned 1 [0287.557] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.558] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.558] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.558] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.558] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.558] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.559] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.559] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.559] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.560] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.560] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.560] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.560] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.560] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.560] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.560] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.560] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.560] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.560] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.561] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.561] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.561] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.561] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.561] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0287.561] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\38\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\38\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f506b08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.562] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f506b08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.562] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f506b08, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f506b08, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f506b08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.562] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f506b08, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f506b08, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f506b08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.562] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.562] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="39", cAlternateFileName="")) returned 1 [0287.562] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.562] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.562] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.562] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.562] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.563] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.563] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570b00) returned 1 [0287.563] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.563] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.563] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.563] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.563] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.564] GetLastError () returned 0x0 [0287.564] GetLastError () returned 0x0 [0287.564] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.564] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\39\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\39\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.566] WriteFile (in: hFile=0x258, lpBuffer=0x23e38a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e38a4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.567] SetEndOfFile (hFile=0x258) returned 1 [0287.568] CloseHandle (hObject=0x258) returned 1 [0287.568] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.568] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.568] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.569] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.569] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.569] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.569] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.569] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.569] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.569] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.569] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.570] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.570] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.570] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.570] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.571] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.571] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.571] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.571] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0287.571] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\39\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\39\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f52cd44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.572] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f52cd44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.572] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f52cd44, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f52cd44, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f52cd44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.572] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f52cd44, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f52cd44, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f52cd44, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.572] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.572] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="4", cAlternateFileName="")) returned 1 [0287.572] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.572] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.576] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.576] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.576] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.576] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570858) returned 1 [0287.577] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.577] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.577] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.577] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.577] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.577] GetLastError () returned 0x0 [0287.577] GetLastError () returned 0x0 [0287.578] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.578] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\4\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\4\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.579] WriteFile (in: hFile=0x258, lpBuffer=0x23e38e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e38e4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.581] SetEndOfFile (hFile=0x258) returned 1 [0287.581] CloseHandle (hObject=0x258) returned 1 [0287.581] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.582] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.582] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.582] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.583] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.583] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.583] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.583] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.584] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.584] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.584] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.584] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.584] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.584] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.584] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.584] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0287.585] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\4\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\4\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f5534c0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.585] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f5534c0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.585] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f5534c0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f5534c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f5534c0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.585] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f5534c0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f5534c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f5534c0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.585] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.585] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="40", cAlternateFileName="")) returned 1 [0287.585] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.585] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.585] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.585] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.586] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.586] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.586] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570b88) returned 1 [0287.586] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.586] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.586] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e910) returned 1 [0287.587] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.587] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.587] GetLastError () returned 0x0 [0287.587] GetLastError () returned 0x0 [0287.587] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.587] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\40\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\40\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.589] WriteFile (in: hFile=0x258, lpBuffer=0x23e38f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e38f4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.592] SetEndOfFile (hFile=0x258) returned 1 [0287.592] CloseHandle (hObject=0x258) returned 1 [0287.592] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.593] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.593] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.593] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.594] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.594] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.594] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.595] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.595] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.595] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.595] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.595] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.595] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.596] CryptDestroyKey (hKey=0x55e910) returned 1 [0287.596] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0287.596] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\40\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\40\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f5534c0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.596] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f5534c0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.596] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f5534c0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f5534c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f579205, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.596] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f5534c0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f5534c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f579205, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.596] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.596] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="41", cAlternateFileName="")) returned 1 [0287.597] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.597] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.597] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.597] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.597] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.597] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570b00) returned 1 [0287.598] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.598] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.598] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e210) returned 1 [0287.598] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.598] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.598] GetLastError () returned 0x0 [0287.598] GetLastError () returned 0x0 [0287.598] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.599] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\41\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\41\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.600] WriteFile (in: hFile=0x258, lpBuffer=0x23e3934*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3934*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.601] SetEndOfFile (hFile=0x258) returned 1 [0287.601] CloseHandle (hObject=0x258) returned 1 [0287.601] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.602] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.602] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.603] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.603] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.603] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.604] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.604] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.604] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.604] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.604] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.605] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.605] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.605] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.605] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.605] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.605] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.605] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.606] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.606] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.606] CryptDestroyKey (hKey=0x55e210) returned 1 [0287.606] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0287.606] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\41\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\41\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f579205, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.606] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f579205, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.607] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f579205, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f579205, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f579205, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.607] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f579205, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f579205, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f579205, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.607] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.607] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="42", cAlternateFileName="")) returned 1 [0287.607] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.607] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.607] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.607] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.607] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.607] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.607] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570b88) returned 1 [0287.608] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.608] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.608] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.608] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.608] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.608] GetLastError () returned 0x0 [0287.608] GetLastError () returned 0x0 [0287.608] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.609] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\42\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\42\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.610] WriteFile (in: hFile=0x258, lpBuffer=0x23e3944*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3944*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.611] SetEndOfFile (hFile=0x258) returned 1 [0287.611] CloseHandle (hObject=0x258) returned 1 [0287.611] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.613] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.613] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.613] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.613] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.613] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.613] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.613] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.613] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.614] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.614] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.614] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.614] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.614] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.614] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.614] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.615] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.615] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.615] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.615] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.615] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.615] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0287.615] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\42\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\42\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f59f792, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.616] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f59f792, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.616] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f59f792, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f59f792, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f59f792, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.616] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f59f792, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f59f792, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f59f792, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.616] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.616] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="43", cAlternateFileName="")) returned 1 [0287.616] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.616] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.616] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.616] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.616] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.617] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571050) returned 1 [0287.617] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.617] CryptHashData (hHash=0x55e390, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.617] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e310) returned 1 [0287.617] CryptDestroyHash (hHash=0x55e390) returned 1 [0287.617] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.617] GetLastError () returned 0x0 [0287.617] GetLastError () returned 0x0 [0287.618] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.618] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\43\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\43\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.621] WriteFile (in: hFile=0x258, lpBuffer=0x23e3984*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3984*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.622] SetEndOfFile (hFile=0x258) returned 1 [0287.622] CloseHandle (hObject=0x258) returned 1 [0287.622] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.623] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.623] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.623] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.624] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.624] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.624] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.624] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.624] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.624] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.625] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.625] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.625] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.625] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.625] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.625] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.625] CryptDestroyKey (hKey=0x55e310) returned 1 [0287.626] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0287.626] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\43\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\43\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f59f792, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0287.626] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f59f792, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.626] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f59f792, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f59f792, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f5c559f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.626] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f59f792, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f59f792, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f5c559f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.626] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0287.626] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="44", cAlternateFileName="")) returned 1 [0287.626] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.626] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.626] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.626] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.626] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.626] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.626] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571160) returned 1 [0287.627] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.627] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.627] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.627] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.627] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.627] GetLastError () returned 0x0 [0287.627] GetLastError () returned 0x0 [0287.627] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.628] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\44\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\44\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.629] WriteFile (in: hFile=0x258, lpBuffer=0x23e3994*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3994*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.630] SetEndOfFile (hFile=0x258) returned 1 [0287.630] CloseHandle (hObject=0x258) returned 1 [0287.630] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.631] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.631] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.632] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.632] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.632] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.632] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.633] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.633] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.633] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.633] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.633] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.634] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.634] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.634] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.634] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.635] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.635] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.635] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.635] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0287.635] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\44\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\44\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f5c559f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0287.636] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f5c559f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.636] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f5c559f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f5c559f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f5c559f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.636] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f5c559f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f5c559f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f5c559f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.636] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0287.636] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="45", cAlternateFileName="")) returned 1 [0287.636] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.636] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.637] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.637] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.637] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.640] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.640] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570b00) returned 1 [0287.641] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.641] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.641] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.641] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0287.641] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.641] GetLastError () returned 0x0 [0287.641] GetLastError () returned 0x0 [0287.641] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.642] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\45\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\45\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.643] WriteFile (in: hFile=0x258, lpBuffer=0x23e39d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e39d4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.644] SetEndOfFile (hFile=0x258) returned 1 [0287.644] CloseHandle (hObject=0x258) returned 1 [0287.644] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.645] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.645] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.645] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.645] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.645] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.646] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.646] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.646] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.646] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.646] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.646] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.646] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.646] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.646] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.647] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.647] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.647] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.647] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.647] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.647] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.648] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.648] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0287.648] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\45\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\45\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f5f245a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0287.648] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f5f245a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.648] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f5f245a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f5f245a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f5f245a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.648] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f5f245a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f5f245a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f5f245a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.648] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0287.648] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="46", cAlternateFileName="")) returned 1 [0287.648] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.648] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.648] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.648] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.649] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.649] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.649] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5708e0) returned 1 [0287.649] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.649] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.649] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.649] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.649] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.649] GetLastError () returned 0x0 [0287.649] GetLastError () returned 0x0 [0287.650] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.650] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\46\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\46\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.651] WriteFile (in: hFile=0x258, lpBuffer=0x23e39e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e39e4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.652] SetEndOfFile (hFile=0x258) returned 1 [0287.652] CloseHandle (hObject=0x258) returned 1 [0287.652] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.654] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.654] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.655] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.655] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.655] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.655] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.655] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.655] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.655] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.655] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.655] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.655] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.656] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.656] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.656] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.656] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.656] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.656] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.657] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.657] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0287.657] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\46\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\46\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f5f245a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.657] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f5f245a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.657] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f5f245a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f5f245a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f5f245a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.657] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f5f245a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f5f245a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f5f245a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.657] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.657] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="47", cAlternateFileName="")) returned 1 [0287.657] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.657] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.657] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.657] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.657] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.658] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.658] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570b88) returned 1 [0287.658] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.658] CryptHashData (hHash=0x55e190, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.658] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e910) returned 1 [0287.658] CryptDestroyHash (hHash=0x55e190) returned 1 [0287.658] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.658] GetLastError () returned 0x0 [0287.658] GetLastError () returned 0x0 [0287.658] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.659] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\47\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\47\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.661] WriteFile (in: hFile=0x258, lpBuffer=0x23e3a24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3a24*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.662] SetEndOfFile (hFile=0x258) returned 1 [0287.662] CloseHandle (hObject=0x258) returned 1 [0287.662] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.663] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.663] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.663] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.663] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.663] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.663] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.663] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.663] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.663] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.663] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.663] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.664] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.664] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.664] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.664] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.664] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.664] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.664] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.664] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.664] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.664] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.664] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.664] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.664] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.664] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.665] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.665] CryptDestroyKey (hKey=0x55e910) returned 1 [0287.665] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0287.665] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\47\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\47\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f61311c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.665] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f61311c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.665] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f61311c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f61311c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f61311c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.665] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f61311c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f61311c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f61311c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.665] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.665] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="48", cAlternateFileName="")) returned 1 [0287.665] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.665] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.666] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.666] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.666] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.666] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.666] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570d20) returned 1 [0287.666] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.666] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.666] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e910) returned 1 [0287.666] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.667] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.667] GetLastError () returned 0x0 [0287.667] GetLastError () returned 0x0 [0287.667] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.667] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\48\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\48\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.668] WriteFile (in: hFile=0x258, lpBuffer=0x23e3a34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3a34*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.679] SetEndOfFile (hFile=0x258) returned 1 [0287.679] CloseHandle (hObject=0x258) returned 1 [0287.679] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.680] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.680] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.708] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.709] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.709] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.709] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.710] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.710] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.710] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.710] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.710] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.710] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.710] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.710] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.711] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.711] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.711] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.711] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.711] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.711] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.711] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.711] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.711] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.711] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.711] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.712] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.712] CryptDestroyKey (hKey=0x55e910) returned 1 [0287.712] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0287.712] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\48\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\48\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f61311c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.713] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f61311c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.713] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f61311c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f61311c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f637d06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.713] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f61311c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f61311c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f637d06, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.713] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.714] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="49", cAlternateFileName="")) returned 1 [0287.714] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.714] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.714] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.714] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.714] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570e30) returned 1 [0287.716] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.716] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.716] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e190) returned 1 [0287.716] CryptDestroyHash (hHash=0x55e910) returned 1 [0287.716] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.716] GetLastError () returned 0x0 [0287.716] GetLastError () returned 0x0 [0287.716] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.717] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\49\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\49\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.719] WriteFile (in: hFile=0x258, lpBuffer=0x23e3a74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3a74*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.720] SetEndOfFile (hFile=0x258) returned 1 [0287.721] CloseHandle (hObject=0x258) returned 1 [0287.721] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.722] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.722] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.722] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.722] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.722] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.722] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.722] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.723] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.723] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.723] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.723] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.723] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.724] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.724] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.724] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.724] CryptDestroyKey (hKey=0x55e190) returned 1 [0287.724] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0287.724] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\49\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\49\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f6aa48c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.724] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f6aa48c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.724] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6aa48c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f6aa48c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f6aa48c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.725] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6aa48c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f6aa48c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f6aa48c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.725] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.725] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="5", cAlternateFileName="")) returned 1 [0287.725] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.725] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.725] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.725] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.725] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571408) returned 1 [0287.726] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.726] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.726] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e390) returned 1 [0287.726] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.726] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.726] GetLastError () returned 0x0 [0287.726] GetLastError () returned 0x0 [0287.727] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.727] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\5\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\5\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.729] WriteFile (in: hFile=0x258, lpBuffer=0x23e3a84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3a84*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.730] SetEndOfFile (hFile=0x258) returned 1 [0287.730] CloseHandle (hObject=0x258) returned 1 [0287.730] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.731] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.731] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.732] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.732] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.732] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.732] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.732] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.732] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.732] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.732] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.732] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.733] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.733] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.733] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.733] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.733] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.734] CryptDestroyKey (hKey=0x55e390) returned 1 [0287.734] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0287.734] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\5\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\5\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f6aa48c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.734] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f6aa48c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.734] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6aa48c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f6aa48c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f6aa48c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.734] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6aa48c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f6aa48c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f6aa48c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.734] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.734] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07ceef2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="50", cAlternateFileName="")) returned 1 [0287.734] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.734] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.734] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.734] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.735] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570c98) returned 1 [0287.735] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.735] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.735] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.735] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.735] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.735] GetLastError () returned 0x0 [0287.735] GetLastError () returned 0x0 [0287.735] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.736] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\50\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\50\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.738] WriteFile (in: hFile=0x258, lpBuffer=0x23e3ac4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3ac4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.739] SetEndOfFile (hFile=0x258) returned 1 [0287.739] CloseHandle (hObject=0x258) returned 1 [0287.739] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.740] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.740] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.740] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.740] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.740] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.740] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.741] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.741] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.741] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.741] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.741] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.741] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.742] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.742] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0287.742] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\50\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\50\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f6d0828, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.742] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07ceef2, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07ceef2, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f6d0828, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.742] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6d0828, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f6d0828, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f6d0828, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.742] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6d0828, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f6d0828, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f6d0828, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.742] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.742] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="51", cAlternateFileName="")) returned 1 [0287.742] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.743] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.743] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.743] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.743] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.743] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.743] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570c10) returned 1 [0287.743] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.743] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.743] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e910) returned 1 [0287.743] CryptDestroyHash (hHash=0x55e310) returned 1 [0287.744] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.744] GetLastError () returned 0x0 [0287.744] GetLastError () returned 0x0 [0287.744] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.744] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\51\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\51\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.748] WriteFile (in: hFile=0x258, lpBuffer=0x23e3ad4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3ad4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.749] SetEndOfFile (hFile=0x258) returned 1 [0287.749] CloseHandle (hObject=0x258) returned 1 [0287.749] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.750] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.750] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.750] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.750] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.750] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.750] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.751] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.751] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.751] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.751] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.751] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.751] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.751] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.751] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.751] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.751] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.752] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.752] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.752] CryptDestroyKey (hKey=0x55e910) returned 1 [0287.752] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0287.752] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\51\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\51\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f6f6828, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.752] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f6f6828, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.752] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6f6828, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f6f6828, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f6f6828, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.752] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6f6828, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f6f6828, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f6f6828, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.752] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.752] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="52", cAlternateFileName="")) returned 1 [0287.753] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.753] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.753] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.753] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.753] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570fc8) returned 1 [0287.753] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.754] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.754] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.754] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.754] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.754] GetLastError () returned 0x0 [0287.754] GetLastError () returned 0x0 [0287.754] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.754] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\52\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\52\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.755] WriteFile (in: hFile=0x258, lpBuffer=0x23e3b14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3b14*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.756] SetEndOfFile (hFile=0x258) returned 1 [0287.757] CloseHandle (hObject=0x258) returned 1 [0287.757] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.757] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.757] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.757] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.757] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.758] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.758] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.758] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.758] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.758] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.758] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.759] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.759] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.759] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.759] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.759] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.760] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0287.760] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\52\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\52\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f6f6828, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.760] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f6f6828, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.760] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6f6828, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f6f6828, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f6f6828, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.760] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6f6828, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f6f6828, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f6f6828, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.760] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.760] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="53", cAlternateFileName="")) returned 1 [0287.760] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.760] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.760] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.760] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.760] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570fc8) returned 1 [0287.761] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.761] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.761] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.761] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.761] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.761] GetLastError () returned 0x0 [0287.761] GetLastError () returned 0x0 [0287.761] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.762] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\53\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\53\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.764] WriteFile (in: hFile=0x258, lpBuffer=0x23e3b24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3b24*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.765] SetEndOfFile (hFile=0x258) returned 1 [0287.765] CloseHandle (hObject=0x258) returned 1 [0287.765] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.766] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.766] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.766] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.766] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.766] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.767] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.767] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.767] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.767] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.767] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.768] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.768] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.773] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.773] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0287.773] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\53\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\53\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f71cb6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.773] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f71cb6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.773] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f71cb6f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f71cb6f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f71cb6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.774] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f71cb6f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f71cb6f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f71cb6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.774] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.774] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="54", cAlternateFileName="")) returned 1 [0287.774] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.774] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.774] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.774] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.774] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571160) returned 1 [0287.775] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.775] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.775] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.775] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.775] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.775] GetLastError () returned 0x0 [0287.775] GetLastError () returned 0x0 [0287.775] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.776] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\54\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\54\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.778] WriteFile (in: hFile=0x258, lpBuffer=0x23e3b64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3b64*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.779] SetEndOfFile (hFile=0x258) returned 1 [0287.779] CloseHandle (hObject=0x258) returned 1 [0287.779] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.780] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.780] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.781] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.781] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.781] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.781] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.781] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.782] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.782] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.782] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.783] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.783] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0287.783] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\54\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\54\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f71cb6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0287.783] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f71cb6f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.783] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f71cb6f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f71cb6f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f742d71, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.783] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f71cb6f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f71cb6f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f742d71, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.783] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0287.787] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="55", cAlternateFileName="")) returned 1 [0287.787] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.787] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.787] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.787] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.788] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.788] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.788] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5706c0) returned 1 [0287.788] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.788] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.788] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.788] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.788] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.788] GetLastError () returned 0x0 [0287.788] GetLastError () returned 0x0 [0287.789] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.789] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\55\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\55\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.790] WriteFile (in: hFile=0x258, lpBuffer=0x23e3b74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3b74*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.792] SetEndOfFile (hFile=0x258) returned 1 [0287.792] CloseHandle (hObject=0x258) returned 1 [0287.792] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.793] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.795] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.795] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.795] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.795] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.795] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.795] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.795] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.795] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.796] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.796] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.796] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.796] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.796] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.796] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.796] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.796] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.796] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.796] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.796] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.796] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.796] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.797] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.797] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0287.797] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\55\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\55\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f742d71, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.797] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f742d71, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.797] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f742d71, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f742d71, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f742d71, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.797] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f742d71, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f742d71, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f742d71, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.797] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.797] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="56", cAlternateFileName="")) returned 1 [0287.797] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.797] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.798] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.798] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.798] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.798] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5707d0) returned 1 [0287.798] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.798] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.798] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e910) returned 1 [0287.798] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.799] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.799] GetLastError () returned 0x0 [0287.799] GetLastError () returned 0x0 [0287.799] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.799] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\56\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\56\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.800] WriteFile (in: hFile=0x258, lpBuffer=0x23e3bb4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3bb4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.801] SetEndOfFile (hFile=0x258) returned 1 [0287.802] CloseHandle (hObject=0x258) returned 1 [0287.802] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.802] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.803] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.803] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.803] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.803] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.804] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.804] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.804] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.804] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.804] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.804] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.804] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.804] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.804] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.804] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.805] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.805] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.805] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.805] CryptDestroyKey (hKey=0x55e910) returned 1 [0287.805] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0287.805] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\56\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\56\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f769041, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.805] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f769041, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.805] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f769041, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f769041, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f769041, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.805] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f769041, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f769041, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f769041, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.805] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.805] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="57", cAlternateFileName="")) returned 1 [0287.806] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.806] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.806] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.806] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.806] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.806] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.806] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570858) returned 1 [0287.807] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.807] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.807] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e910) returned 1 [0287.807] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.807] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.807] GetLastError () returned 0x0 [0287.807] GetLastError () returned 0x0 [0287.807] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.807] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\57\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\57\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.808] WriteFile (in: hFile=0x258, lpBuffer=0x23e3bc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3bc4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.809] SetEndOfFile (hFile=0x258) returned 1 [0287.809] CloseHandle (hObject=0x258) returned 1 [0287.810] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.810] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.810] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.810] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.810] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.811] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.811] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.811] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.811] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.812] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.812] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.812] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.812] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.812] CryptDestroyKey (hKey=0x55e910) returned 1 [0287.813] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0287.813] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\57\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\57\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f769041, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.813] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f769041, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.813] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f769041, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f769041, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f78f2d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.813] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f769041, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f769041, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f78f2d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.813] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.813] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="58", cAlternateFileName="")) returned 1 [0287.813] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.813] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.813] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.813] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.813] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.813] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570da8) returned 1 [0287.814] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.814] CryptHashData (hHash=0x55e310, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.814] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.814] CryptDestroyHash (hHash=0x55e310) returned 1 [0287.814] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.814] GetLastError () returned 0x0 [0287.814] GetLastError () returned 0x0 [0287.814] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.815] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\58\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\58\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.816] WriteFile (in: hFile=0x258, lpBuffer=0x23e3c04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3c04*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.817] SetEndOfFile (hFile=0x258) returned 1 [0287.817] CloseHandle (hObject=0x258) returned 1 [0287.818] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.818] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.818] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.818] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.818] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.819] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.819] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.819] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.819] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.819] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.819] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.820] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.820] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.820] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.820] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.820] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.820] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.820] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.820] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0287.821] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\58\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\58\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f78f2d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.821] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f78f2d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.821] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f78f2d7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f78f2d7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f78f2d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.821] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f78f2d7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f78f2d7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f78f2d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.821] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.821] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="59", cAlternateFileName="")) returned 1 [0287.821] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.821] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.821] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.821] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.821] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.821] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570f40) returned 1 [0287.822] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.822] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.822] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.822] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.822] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.822] GetLastError () returned 0x0 [0287.822] GetLastError () returned 0x0 [0287.822] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.823] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\59\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\59\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.824] WriteFile (in: hFile=0x258, lpBuffer=0x23e3c14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3c14*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.827] SetEndOfFile (hFile=0x258) returned 1 [0287.827] CloseHandle (hObject=0x258) returned 1 [0287.827] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.828] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.828] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.828] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.828] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.829] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.829] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.829] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.829] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.829] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.829] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.830] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.830] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.830] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.830] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.830] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.830] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0287.830] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\59\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\59\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f78f2d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.830] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f78f2d7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.830] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f78f2d7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f78f2d7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f7b550a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.830] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f78f2d7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f78f2d7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f7b550a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.830] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.831] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="6", cAlternateFileName="")) returned 1 [0287.831] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.831] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.831] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.831] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.831] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.831] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571050) returned 1 [0287.832] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.832] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.832] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.832] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.832] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.832] GetLastError () returned 0x0 [0287.832] GetLastError () returned 0x0 [0287.832] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.832] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\6\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\6\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.834] WriteFile (in: hFile=0x258, lpBuffer=0x23e3c54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3c54*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.835] SetEndOfFile (hFile=0x258) returned 1 [0287.835] CloseHandle (hObject=0x258) returned 1 [0287.835] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.836] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.836] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.837] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.837] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.837] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.838] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.838] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.838] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.838] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.839] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.839] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.839] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.839] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.840] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.840] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.840] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.840] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.840] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.841] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.841] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.841] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.841] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.842] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.842] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0287.842] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\6\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\6\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f7b550a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.842] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f7b550a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.843] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f7b550a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f7b550a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f7b550a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.843] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f7b550a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f7b550a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f7b550a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.843] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.843] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07f529f, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="60", cAlternateFileName="")) returned 1 [0287.843] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.843] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.844] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.844] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.844] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571408) returned 1 [0287.845] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.845] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.845] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.845] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.846] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.846] GetLastError () returned 0x0 [0287.846] GetLastError () returned 0x0 [0287.846] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.847] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\60\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\60\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.850] WriteFile (in: hFile=0x258, lpBuffer=0x23e3c64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3c64*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.851] SetEndOfFile (hFile=0x258) returned 1 [0287.851] CloseHandle (hObject=0x258) returned 1 [0287.851] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.852] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.852] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.853] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.853] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.853] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.853] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.853] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.853] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.854] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.854] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.854] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.854] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0287.854] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\60\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\60\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f7db88c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0287.855] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07f529f, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07f529f, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f7db88c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.855] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f7db88c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f7db88c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f7db88c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.855] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f7db88c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f7db88c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f7db88c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.855] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0287.855] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="61", cAlternateFileName="")) returned 1 [0287.855] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.855] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.855] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.855] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.855] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570638) returned 1 [0287.856] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.856] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.856] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.856] CryptDestroyHash (hHash=0x55e910) returned 1 [0287.856] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.856] GetLastError () returned 0x0 [0287.856] GetLastError () returned 0x0 [0287.856] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.857] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\61\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\61\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.858] WriteFile (in: hFile=0x258, lpBuffer=0x23e3ca4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3ca4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.859] SetEndOfFile (hFile=0x258) returned 1 [0287.859] CloseHandle (hObject=0x258) returned 1 [0287.859] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.860] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.860] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.860] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.860] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.860] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.861] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.861] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.861] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.861] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.861] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.862] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.862] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.862] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.862] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.862] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0287.862] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\61\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\61\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f801948, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.863] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f801948, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.863] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f801948, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f801948, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f801948, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.863] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f801948, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f801948, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f801948, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.863] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.863] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="62", cAlternateFileName="")) returned 1 [0287.863] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.863] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.863] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.863] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.863] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570638) returned 1 [0287.864] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.864] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.864] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.864] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.864] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.864] GetLastError () returned 0x0 [0287.864] GetLastError () returned 0x0 [0287.864] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.865] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\62\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\62\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.868] WriteFile (in: hFile=0x258, lpBuffer=0x23e3cb4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3cb4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.869] SetEndOfFile (hFile=0x258) returned 1 [0287.869] CloseHandle (hObject=0x258) returned 1 [0287.870] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.870] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.870] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.870] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.870] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.871] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.871] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.871] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.871] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.871] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.871] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.871] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.872] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.872] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.872] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.872] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.872] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.872] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.873] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.873] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0287.873] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\62\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\62\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f801948, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f801948, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f801948, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f801948, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f801948, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.873] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f801948, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f801948, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f801948, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.873] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.873] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="63", cAlternateFileName="")) returned 1 [0287.874] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.874] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.874] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.874] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.874] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.874] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571050) returned 1 [0287.875] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.875] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.875] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e390) returned 1 [0287.875] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.875] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.875] GetLastError () returned 0x0 [0287.875] GetLastError () returned 0x0 [0287.875] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.876] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\63\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\63\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.877] WriteFile (in: hFile=0x258, lpBuffer=0x23e3cf4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3cf4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.878] SetEndOfFile (hFile=0x258) returned 1 [0287.878] CloseHandle (hObject=0x258) returned 1 [0287.878] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.879] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.879] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.879] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.879] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.879] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.879] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.880] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.880] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.880] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.880] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.880] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.880] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.880] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.880] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.881] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.881] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0287.881] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.881] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.881] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.881] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.882] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.882] CryptDestroyKey (hKey=0x55e390) returned 1 [0287.882] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0287.882] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\63\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\63\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f827bf0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0287.882] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f827bf0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.882] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f827bf0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f827bf0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f827bf0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.883] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f827bf0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f827bf0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f827bf0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.883] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0287.883] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="7", cAlternateFileName="")) returned 1 [0287.883] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.883] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.883] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.883] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.883] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.883] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.883] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571160) returned 1 [0287.884] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.884] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.884] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.884] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.884] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.884] GetLastError () returned 0x0 [0287.884] GetLastError () returned 0x0 [0287.885] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.885] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\7\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\7\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.888] WriteFile (in: hFile=0x258, lpBuffer=0x23e3d04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3d04*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.890] SetEndOfFile (hFile=0x258) returned 1 [0287.890] CloseHandle (hObject=0x258) returned 1 [0287.890] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.891] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.891] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.891] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.891] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.891] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.892] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.892] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.892] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.892] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.892] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.892] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.893] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.893] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.893] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.893] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.893] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.894] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.894] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0287.894] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\7\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\7\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f827bf0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.894] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f827bf0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.894] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f827bf0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f827bf0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f84e40e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.894] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f827bf0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f827bf0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f84e40e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.894] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.894] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="8", cAlternateFileName="")) returned 1 [0287.894] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.894] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.895] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.895] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.895] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.895] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5710d8) returned 1 [0287.896] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.896] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.896] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e7d0) returned 1 [0287.896] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.896] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.896] GetLastError () returned 0x0 [0287.896] GetLastError () returned 0x0 [0287.896] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.896] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\8\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\8\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.908] WriteFile (in: hFile=0x258, lpBuffer=0x23e3d44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3d44*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.909] SetEndOfFile (hFile=0x258) returned 1 [0287.909] CloseHandle (hObject=0x258) returned 1 [0287.909] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.910] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.910] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.910] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.910] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.911] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.911] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.911] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.911] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.911] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.911] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.912] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.912] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0287.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.912] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.912] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.912] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.912] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.913] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0287.913] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0287.913] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\8\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\8\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f87cb8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0287.913] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f87cb8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.913] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f87cb8b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f87cb8b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f87cb8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.913] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f87cb8b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f87cb8b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f87cb8b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.913] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0287.913] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb07a8d04, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="9", cAlternateFileName="")) returned 1 [0287.913] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.913] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.913] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.913] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.913] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.914] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.914] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570a78) returned 1 [0287.914] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.915] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.915] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0287.915] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.915] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.915] GetLastError () returned 0x0 [0287.915] GetLastError () returned 0x0 [0287.915] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.916] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\9\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\9\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.954] WriteFile (in: hFile=0x258, lpBuffer=0x23e3d54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3d54*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.955] SetEndOfFile (hFile=0x258) returned 1 [0287.955] CloseHandle (hObject=0x258) returned 1 [0287.956] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.956] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.956] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.957] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.957] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.957] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.957] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.957] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.957] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.957] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.958] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.958] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.958] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.958] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.958] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.958] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.958] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.958] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.958] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.958] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.958] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.958] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.959] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.959] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.959] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.959] CryptDestroyKey (hKey=0x55e790) returned 1 [0287.959] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0287.959] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\9\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\9\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f8e6bee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0287.959] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07a8d04, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb07a8d04, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f8e6bee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.959] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f87cb8b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f87cb8b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f8e6bee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.959] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f87cb8b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f87cb8b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f8e6bee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.959] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0287.960] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb0782b4c, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="host", cAlternateFileName="")) returned 1 [0287.960] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.960] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.960] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.960] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.960] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5707d0) returned 1 [0287.961] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.961] CryptHashData (hHash=0x55e210, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.961] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e190) returned 1 [0287.961] CryptDestroyHash (hHash=0x55e210) returned 1 [0287.961] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.961] GetLastError () returned 0x0 [0287.961] GetLastError () returned 0x0 [0287.961] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.962] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\host\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\host\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.963] WriteFile (in: hFile=0x258, lpBuffer=0x23e3d94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3d94*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.964] SetEndOfFile (hFile=0x258) returned 1 [0287.970] CloseHandle (hObject=0x258) returned 1 [0287.970] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.971] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.971] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.971] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.971] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.971] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.972] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0287.972] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.972] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.972] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.972] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.972] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.973] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.973] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.973] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0287.973] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.973] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.973] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.973] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.974] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.974] CryptDestroyKey (hKey=0x55e190) returned 1 [0287.974] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0287.974] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\host\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\host\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f8e6bee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.974] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb0782b4c, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb0782b4c, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f8e6bee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.974] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f8e6bee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f8e6bee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f91600d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.974] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f8e6bee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f8e6bee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f91600d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.974] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.975] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f19a2c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f19a2c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f19a2c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.975] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="muffin", cAlternateFileName="")) returned 1 [0287.975] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.975] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.975] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.975] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.975] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0287.975] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570748) returned 1 [0287.976] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0287.976] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.976] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0287.976] CryptDestroyHash (hHash=0x55e910) returned 1 [0287.976] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0287.976] GetLastError () returned 0x0 [0287.976] GetLastError () returned 0x0 [0287.976] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.977] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\muffin\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\muffin\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0287.979] WriteFile (in: hFile=0x258, lpBuffer=0x23e3da4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3da4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.980] SetEndOfFile (hFile=0x258) returned 1 [0287.980] CloseHandle (hObject=0x258) returned 1 [0287.980] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.982] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.982] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.982] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.982] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.982] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.982] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0287.983] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.983] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.983] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.983] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.983] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.983] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.983] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.984] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.984] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.984] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.984] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.984] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.984] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.985] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.985] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.985] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.985] CryptDestroyKey (hKey=0x55e750) returned 1 [0287.985] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0287.985] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\cache\\6.0\\muffin\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\cache\\6.0\\muffin\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f91600d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0287.986] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f91600d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.986] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f91600d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f91600d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f91600d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.986] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f91600d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f91600d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f91600d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.986] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0287.986] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb081b453, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb081b453, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb081b453, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="muffin", cAlternateFileName="")) returned 0 [0287.986] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0287.986] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f041f8f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f041f8f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f041f8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.986] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f041f8f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f041f8f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f041f8f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.986] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0287.987] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb03c911e, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb03c911e, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb2529fc2, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0287.987] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f01d1cd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f01d1cd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f01d1cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.987] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="log", cAlternateFileName="")) returned 1 [0287.987] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.987] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.987] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.987] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.987] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0287.987] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c98) returned 1 [0287.988] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0287.988] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.988] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e390) returned 1 [0287.988] CryptDestroyHash (hHash=0x55e750) returned 1 [0287.988] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0287.988] GetLastError () returned 0x0 [0287.988] GetLastError () returned 0x0 [0287.989] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.989] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\log\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0287.990] WriteFile (in: hFile=0x250, lpBuffer=0x23e3de4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3de4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0287.992] SetEndOfFile (hFile=0x250) returned 1 [0287.992] CloseHandle (hObject=0x250) returned 1 [0287.992] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0287.993] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.993] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0287.993] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0287.993] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.993] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0287.994] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.994] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.994] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0287.994] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0287.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.994] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.994] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.995] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0287.995] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0287.995] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0287.995] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0287.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0287.995] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0287.995] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.995] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0287.995] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0287.996] CryptDestroyKey (hKey=0x55e390) returned 1 [0287.996] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0287.996] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\log\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f9335e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0287.996] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f9335e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0287.996] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f9335e2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f9335e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f9335e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0287.996] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f9335e2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f9335e2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f9335e2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0287.996] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0287.996] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb024b974, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb024b974, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb024b974, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="security", cAlternateFileName="")) returned 1 [0287.996] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0287.996] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.996] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0287.997] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0287.997] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0287.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0287.997] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570748) returned 1 [0287.997] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0287.997] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0287.997] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0287.998] CryptDestroyHash (hHash=0x55e910) returned 1 [0287.998] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0287.998] GetLastError () returned 0x0 [0287.998] GetLastError () returned 0x0 [0287.998] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0287.998] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\security\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0288.001] WriteFile (in: hFile=0x250, lpBuffer=0x23e3df4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3df4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.002] SetEndOfFile (hFile=0x250) returned 1 [0288.002] CloseHandle (hObject=0x250) returned 1 [0288.002] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.003] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.003] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0288.004] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.004] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.004] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.004] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.004] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.004] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.005] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.005] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.005] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.005] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.005] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.005] CryptDestroyKey (hKey=0x55e650) returned 1 [0288.005] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0288.006] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\locallow\\sun\\java\\deployment\\security\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb024b974, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb024b974, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f958f11, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0288.006] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb024b974, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb024b974, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x4f958f11, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.006] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f958f11, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f958f11, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f958f11, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.006] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f958f11, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f958f11, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f958f11, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.006] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0288.006] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb024b974, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb024b974, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb024b974, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="security", cAlternateFileName="")) returned 0 [0288.006] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0288.006] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4eff5ab6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eff5ab6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f01d1cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4179, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.006] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4eff5ab6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4eff5ab6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f01d1cd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4179, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.006] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0288.006] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0288.006] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0288.007] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaef38b07, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xaef38b07, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xaef38b07, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78452074, dwReserved1=0x726f6c70, cFileName="Sun", cAlternateFileName="")) returned 0 [0288.007] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0288.007] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40d866a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40d866a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e7466, dwReserved1=0x5f4f545f, cFileName="Roaming", cAlternateFileName="")) returned 1 [0288.007] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.007] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.007] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.007] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.007] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0288.007] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5710d8) returned 1 [0288.008] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0288.008] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.008] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e610) returned 1 [0288.008] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0288.008] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f660*=0x18) returned 1 [0288.008] GetLastError () returned 0x0 [0288.008] GetLastError () returned 0x0 [0288.008] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.009] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0288.010] WriteFile (in: hFile=0x240, lpBuffer=0x23e3e34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3e34*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.011] SetEndOfFile (hFile=0x240) returned 1 [0288.011] CloseHandle (hObject=0x240) returned 1 [0288.011] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.015] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.015] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.015] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0288.015] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.015] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.015] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.016] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.016] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.016] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.016] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.016] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.016] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.016] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.016] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.016] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.016] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.016] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.016] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.017] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.017] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.017] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.017] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.017] CryptDestroyKey (hKey=0x55e610) returned 1 [0288.017] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0288.017] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40d866a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f958f11, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0288.017] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40d866a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f958f11, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.017] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f4a3d2b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f4a3d2b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f4ca010, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x17765, dwReserved0=0x405534, dwReserved1=0x0, cFileName="-QEWNDo.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="-QEWND~1.CRY")) returned 1 [0288.017] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce0cd1b0, ftCreationTime.dwHighDateTime=0x1d8b17b, ftLastAccessTime.dwLowDateTime=0x543d2ef0, ftLastAccessTime.dwHighDateTime=0x1d8b349, ftLastWriteTime.dwLowDateTime=0x543d2ef0, ftLastWriteTime.dwHighDateTime=0x1d8b349, nFileSizeHigh=0x0, nFileSizeLow=0xf53b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0pokX_RRd5vnIveq__.wav", cAlternateFileName="0POKX_~1.WAV")) returned 1 [0288.018] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b9afc40, ftCreationTime.dwHighDateTime=0x1d8ba32, ftLastAccessTime.dwLowDateTime=0x41e03f00, ftLastAccessTime.dwHighDateTime=0x1d8bb2c, ftLastWriteTime.dwLowDateTime=0x41e03f00, ftLastWriteTime.dwHighDateTime=0x1d8bb2c, nFileSizeHigh=0x0, nFileSizeLow=0x176d6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0vYb.swf", cAlternateFileName="")) returned 1 [0288.018] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f4f0373, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f4f0373, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f4f0373, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1590, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0w7D3bPlKq.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="0W7D3B~1.CRY")) returned 1 [0288.018] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c9ec80, ftCreationTime.dwHighDateTime=0x1d8bc9d, ftLastAccessTime.dwLowDateTime=0xdbb27bf0, ftLastAccessTime.dwHighDateTime=0x1d8bcf0, ftLastWriteTime.dwLowDateTime=0xdbb27bf0, ftLastWriteTime.dwHighDateTime=0x1d8bcf0, nFileSizeHigh=0x0, nFileSizeLow=0x16f72, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2Fgp9mw-J_mcf.m4a", cAlternateFileName="2FGP9M~1.M4A")) returned 1 [0288.018] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x425d17c0, ftCreationTime.dwHighDateTime=0x1d8b337, ftLastAccessTime.dwLowDateTime=0xd0999f50, ftLastAccessTime.dwHighDateTime=0x1d8b566, ftLastWriteTime.dwLowDateTime=0xd0999f50, ftLastWriteTime.dwHighDateTime=0x1d8b566, nFileSizeHigh=0x0, nFileSizeLow=0xaf63, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4vz-qweGNEXago h.xlsx", cAlternateFileName="4VZ-QW~1.XLS")) returned 1 [0288.018] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9488d360, ftCreationTime.dwHighDateTime=0x1d8c019, ftLastAccessTime.dwLowDateTime=0xa279a0d0, ftLastAccessTime.dwHighDateTime=0x1d8c0a0, ftLastWriteTime.dwLowDateTime=0xa279a0d0, ftLastWriteTime.dwHighDateTime=0x1d8c0a0, nFileSizeHigh=0x0, nFileSizeLow=0x11b7a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6kUEEcCK7opdkFTN.m4a", cAlternateFileName="6KUEEC~1.M4A")) returned 1 [0288.018] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f4f0373, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f4f0373, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f4f0373, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2a4f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AAlqxA.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AALQXA~1.CRY")) returned 1 [0288.018] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0288.018] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.018] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.018] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.018] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.018] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.018] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0288.018] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570e30) returned 1 [0288.019] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0288.019] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.019] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e290) returned 1 [0288.019] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.019] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0288.019] GetLastError () returned 0x0 [0288.019] GetLastError () returned 0x0 [0288.019] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.020] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\adobe\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0288.022] WriteFile (in: hFile=0x244, lpBuffer=0x23e3e44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3e44*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.023] SetEndOfFile (hFile=0x244) returned 1 [0288.023] CloseHandle (hObject=0x244) returned 1 [0288.023] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.024] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.024] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.024] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0288.024] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.024] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.024] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.025] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.025] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.025] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.025] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.025] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.025] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.025] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.026] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.026] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.026] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.026] CryptDestroyKey (hKey=0x55e290) returned 1 [0288.026] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0288.026] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\adobe\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f97f1bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0288.026] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f97f1bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.026] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0288.026] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.027] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.027] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.027] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.027] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.027] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.027] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5709f0) returned 1 [0288.027] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.027] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.028] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0288.028] CryptDestroyHash (hHash=0x55e610) returned 1 [0288.028] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.028] GetLastError () returned 0x0 [0288.028] GetLastError () returned 0x0 [0288.028] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.029] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\adobe\\flash player\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.030] WriteFile (in: hFile=0x248, lpBuffer=0x23e3e84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3e84*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.031] SetEndOfFile (hFile=0x248) returned 1 [0288.031] CloseHandle (hObject=0x248) returned 1 [0288.031] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.032] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.032] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.032] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.032] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0288.033] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.033] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.033] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.033] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.033] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.033] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.034] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.034] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.034] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.034] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.034] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.034] CryptDestroyKey (hKey=0x55e650) returned 1 [0288.034] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0288.034] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\adobe\\flash player\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f9a5423, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0288.035] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f9a5423, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.035] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9a5423, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f9a5423, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f9a5423, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.035] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 1 [0288.035] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.035] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.035] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.035] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.035] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.035] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0288.035] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0288.036] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.036] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.036] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0288.036] CryptDestroyHash (hHash=0x55e650) returned 1 [0288.036] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.036] GetLastError () returned 0x0 [0288.036] GetLastError () returned 0x0 [0288.036] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.037] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\adobe\\flash player\\nativecache\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.038] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3e94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3e94*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.039] SetEndOfFile (hFile=0x24c) returned 1 [0288.039] CloseHandle (hObject=0x24c) returned 1 [0288.039] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.040] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.040] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.040] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0288.040] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.040] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.040] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.041] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.041] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.041] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.041] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.041] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.041] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.041] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.041] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.041] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.042] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.042] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.042] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.042] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0288.042] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0288.042] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\adobe\\flash player\\nativecache\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f9a5423, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0288.042] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4f9a5423, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.042] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9a5423, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f9a5423, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f9a5423, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.042] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9a5423, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f9a5423, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f9a5423, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.042] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0288.043] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42a37b71, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42a37b71, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42a37b71, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 0 [0288.043] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0288.043] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f97f1bd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f97f1bd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f97f1bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x65686361, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.043] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f97f1bd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f97f1bd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f97f1bd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x65686361, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.043] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0288.043] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f51658c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f51658c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f51658c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xf699, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="AV_xxjsK txE9KQ.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AV_XXJ~1.CRY")) returned 1 [0288.043] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56714f00, ftCreationTime.dwHighDateTime=0x1d8b0c2, ftLastAccessTime.dwLowDateTime=0x39af4540, ftLastAccessTime.dwHighDateTime=0x1d8b390, ftLastWriteTime.dwLowDateTime=0x39af4540, ftLastWriteTime.dwHighDateTime=0x1d8b390, nFileSizeHigh=0x0, nFileSizeLow=0xd9c9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="BEL0Hf.ods", cAlternateFileName="")) returned 1 [0288.043] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f53cca9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f53cca9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f53cca9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18657, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="C lTvIFLCLEIOs.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CLTVIF~1.CRY")) returned 1 [0288.043] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f563a08, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f563a08, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f563a08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x27dc, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Daw XG.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DAWXGC~1.CRY")) returned 1 [0288.043] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x420d7e40, ftCreationTime.dwHighDateTime=0x1d8bfc6, ftLastAccessTime.dwLowDateTime=0xc43a3ff0, ftLastAccessTime.dwHighDateTime=0x1d8c117, ftLastWriteTime.dwLowDateTime=0xc43a3ff0, ftLastWriteTime.dwHighDateTime=0x1d8c117, nFileSizeHigh=0x0, nFileSizeLow=0x17e81, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="dTBWs5OPc_Ez8klubHY.ots", cAlternateFileName="DTBWS5~1.OTS")) returned 1 [0288.043] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2b13220, ftCreationTime.dwHighDateTime=0x1d8b7a5, ftLastAccessTime.dwLowDateTime=0xfb3a3d20, ftLastAccessTime.dwHighDateTime=0x1d8ba69, ftLastWriteTime.dwLowDateTime=0xfb3a3d20, ftLastWriteTime.dwHighDateTime=0x1d8ba69, nFileSizeHigh=0x0, nFileSizeLow=0x2a07, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="fTLHb2oaa.odp", cAlternateFileName="FTLHB2~1.ODP")) returned 1 [0288.043] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99bd9150, ftCreationTime.dwHighDateTime=0x1d8bee7, ftLastAccessTime.dwLowDateTime=0xac6fc360, ftLastAccessTime.dwHighDateTime=0x1d8beea, ftLastWriteTime.dwLowDateTime=0xac6fc360, ftLastWriteTime.dwHighDateTime=0x1d8beea, nFileSizeHigh=0x0, nFileSizeLow=0x14505, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Hz4-vvREQQByoxF7.mp4", cAlternateFileName="HZ4-VV~1.MP4")) returned 1 [0288.043] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5890a8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f5890a8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f5aeea5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x183c1, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IEEEJcQHB4cvJ_cdO_.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IEEEJC~1.CRY")) returned 1 [0288.043] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f958f11, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f958f11, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f958f11, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.043] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5aeea5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f5aeea5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f5d50ee, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x10bdc, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kfd4AT641M9lZzo.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="KFD4AT~1.CRY")) returned 1 [0288.044] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5fb6e6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f5fb6e6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f621587, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18b5d, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Khe4uWhPkS4.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="KHE4UW~1.CRY")) returned 1 [0288.044] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f621587, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f621587, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f621587, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18d3, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kQZZ OvT-A19.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="KQZZOV~1.CRY")) returned 1 [0288.044] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8524abd0, ftCreationTime.dwHighDateTime=0x1d8b7bb, ftLastAccessTime.dwLowDateTime=0x80bfc980, ftLastAccessTime.dwHighDateTime=0x1d8bc39, ftLastWriteTime.dwLowDateTime=0x80bfc980, ftLastWriteTime.dwHighDateTime=0x1d8bc39, nFileSizeHigh=0x0, nFileSizeLow=0x3ba8, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="L_DTMq.mp4", cAlternateFileName="")) returned 1 [0288.044] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f65dce4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f65dce4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f66da78, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xfa7f, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mbzzavocx5tumDy.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MBZZAV~1.CRY")) returned 1 [0288.044] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xa92f1c4e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa92f1c4e, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0288.044] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.044] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.044] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.044] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.044] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.044] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0288.044] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570a78) returned 1 [0288.045] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0288.045] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.045] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0288.045] CryptDestroyHash (hHash=0x55e750) returned 1 [0288.045] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0288.045] GetLastError () returned 0x0 [0288.045] GetLastError () returned 0x0 [0288.045] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.046] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0288.047] WriteFile (in: hFile=0x244, lpBuffer=0x23e3ed4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3ed4*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.048] SetEndOfFile (hFile=0x244) returned 1 [0288.048] CloseHandle (hObject=0x244) returned 1 [0288.048] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.049] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.049] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.049] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.049] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.049] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.049] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0288.049] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.050] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.050] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.050] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.050] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.050] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.050] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.050] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.050] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.050] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.050] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.050] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.050] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.051] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.051] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.051] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.051] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.051] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.051] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.051] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.051] CryptDestroyKey (hKey=0x55e610) returned 1 [0288.051] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0288.051] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x4f9cb66e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0288.052] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x4f9cb66e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.052] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x811e1db4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0288.052] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.052] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.052] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.052] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.052] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.052] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570e30) returned 1 [0288.053] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.053] CryptHashData (hHash=0x55e310, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.053] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0288.053] CryptDestroyHash (hHash=0x55e310) returned 1 [0288.053] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.053] GetLastError () returned 0x0 [0288.053] GetLastError () returned 0x0 [0288.053] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.053] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\addins\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.056] WriteFile (in: hFile=0x248, lpBuffer=0x23e3ee4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ee4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.057] SetEndOfFile (hFile=0x248) returned 1 [0288.057] CloseHandle (hObject=0x248) returned 1 [0288.057] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.058] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.058] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.058] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.058] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0288.058] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.059] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.059] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.059] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.059] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.059] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.060] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.060] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.060] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.060] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.060] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.060] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.060] CryptDestroyKey (hKey=0x55e910) returned 1 [0288.060] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0288.061] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\AddIns\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\addins\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4f9cb66e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0288.061] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e1db4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x811e1db4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4f9cb66e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.061] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9cb66e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f9cb66e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f9cb66e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.061] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9cb66e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f9cb66e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f9cb66e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.061] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0288.061] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e898ff, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e898ff, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80e9aa3d, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0288.061] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.061] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.061] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.061] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.061] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.062] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0288.062] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570748) returned 1 [0288.062] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.062] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.062] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e710) returned 1 [0288.062] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.062] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.062] GetLastError () returned 0x0 [0288.062] GetLastError () returned 0x0 [0288.063] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.063] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\bibliography\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.064] WriteFile (in: hFile=0x248, lpBuffer=0x23e3f24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f24*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.065] SetEndOfFile (hFile=0x248) returned 1 [0288.065] CloseHandle (hObject=0x248) returned 1 [0288.065] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.066] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.066] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.066] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.066] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.066] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.067] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0288.067] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.067] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.067] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.067] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.067] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.067] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.068] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.068] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.068] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.068] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.068] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.068] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.068] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.068] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.068] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.069] CryptDestroyKey (hKey=0x55e710) returned 1 [0288.069] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0288.069] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\bibliography\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e898ff, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e898ff, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4f9f179e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0288.069] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e898ff, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e898ff, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4f9f179e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.069] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9f179e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f9f179e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f9f179e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.069] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e9aa3d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e9aa3d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80ed2ca5, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1 [0288.069] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.069] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.069] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.069] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.069] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0288.069] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0288.070] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.070] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.070] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0288.070] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.070] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.070] GetLastError () returned 0x0 [0288.070] GetLastError () returned 0x0 [0288.070] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.071] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\bibliography\\style\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.112] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3f34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3f34*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.114] SetEndOfFile (hFile=0x24c) returned 1 [0288.114] CloseHandle (hObject=0x24c) returned 1 [0288.114] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.115] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.115] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.115] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0288.115] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.116] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.116] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.116] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.116] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.116] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.116] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.116] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.117] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.117] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.117] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.117] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.117] CryptDestroyKey (hKey=0x55e390) returned 1 [0288.117] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0288.117] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\bibliography\\style\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e9aa3d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e9aa3d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4f9f179e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e9aa3d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e9aa3d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4f9f179e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e9e60e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e9e60e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5a58ff51, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x51722, dwReserved0=0x405534, dwReserved1=0x0, cFileName="APASixthEditionOfficeOnline.xsl", cAlternateFileName="APASIX~1.XSL")) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ea6d97, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ea6d97, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5a638a82, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x48839, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80eabbab, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80eabbab, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5a6d16e8, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x4197e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80eaf650, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80eaf650, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5a638a82, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x3e966, dwReserved0=0x405534, dwReserved1=0x0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80eb319b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80eb319b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5a638a82, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x3d639, dwReserved0=0x405534, dwReserved1=0x0, cFileName="GostTitle.XSL", cAlternateFileName="GOSTTI~1.XSL")) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80eb804f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80eb804f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5a7ecfbc, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x45882, dwReserved0=0x405534, dwReserved1=0x0, cFileName="HarvardAnglia2008OfficeOnline.xsl", cAlternateFileName="HARVAR~1.XSL")) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ebb9a1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ebb9a1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5afed704, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IEEE2006OfficeOnline.xsl", cAlternateFileName="IEEE20~1.XSL")) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9f179e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f9f179e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fa64002, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ec07b6, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ec07b6, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5afed704, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x42132, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ec4265, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ec4265, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5afed704, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x351ea, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="ISO690~1.XSL")) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ecb8b4, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ecb8b4, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5afed704, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x3e4f3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MLASeventhEditionOfficeOnline.xsl", cAlternateFileName="MLASEV~1.XSL")) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ed06d2, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ed06d2, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5b432832, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ed2ca5, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ed2ca5, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5b500917, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80ed2ca5, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80ed2ca5, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5b500917, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0 [0288.118] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0288.118] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80e9aa3d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80e9aa3d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80ed2ca5, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0 [0288.118] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0288.119] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x44687ae6, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0288.119] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.119] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.119] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.119] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.119] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.119] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570fc8) returned 1 [0288.120] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.120] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.120] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0288.120] CryptDestroyHash (hHash=0x55e210) returned 1 [0288.120] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.120] GetLastError () returned 0x0 [0288.120] GetLastError () returned 0x0 [0288.120] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.121] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\credentials\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.122] WriteFile (in: hFile=0x248, lpBuffer=0x23e3f44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f44*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.123] SetEndOfFile (hFile=0x248) returned 1 [0288.124] CloseHandle (hObject=0x248) returned 1 [0288.124] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.125] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.125] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.125] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.125] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.125] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.125] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.125] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.125] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.125] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.126] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.126] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.126] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.126] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.126] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.126] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.126] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.126] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.126] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.126] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.127] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.127] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.127] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.127] CryptDestroyKey (hKey=0x55e650) returned 1 [0288.127] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0288.127] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Credentials\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\credentials\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fa64002, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0288.127] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x44687ae6, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44687ae6, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fa64002, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.127] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa64002, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fa64002, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fa8b6e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.127] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fa64002, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fa64002, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fa8b6e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.127] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0288.128] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816a7a21, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x816a7a21, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0288.128] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.128] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.128] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.128] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.128] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570fc8) returned 1 [0288.129] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.129] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.129] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0288.129] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.129] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.129] GetLastError () returned 0x0 [0288.129] GetLastError () returned 0x0 [0288.129] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.129] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\document building blocks\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.134] WriteFile (in: hFile=0x248, lpBuffer=0x23e3f84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f84*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.135] SetEndOfFile (hFile=0x248) returned 1 [0288.135] CloseHandle (hObject=0x248) returned 1 [0288.135] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.136] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.136] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0288.136] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.136] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.137] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.137] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.137] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.138] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.138] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.138] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.138] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.138] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.138] CryptDestroyKey (hKey=0x55e650) returned 1 [0288.138] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0288.138] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\document building blocks\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816a7a21, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4fa8b6e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0288.139] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x816a7a21, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4fa8b6e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.139] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x81712f94, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0288.139] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.139] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.139] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.139] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.139] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0288.139] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5708e0) returned 1 [0288.140] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.140] CryptHashData (hHash=0x55e190, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.140] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0288.140] CryptDestroyHash (hHash=0x55e190) returned 1 [0288.140] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.140] GetLastError () returned 0x0 [0288.140] GetLastError () returned 0x0 [0288.140] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.141] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\document building blocks\\1033\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.142] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3f94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3f94*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.143] SetEndOfFile (hFile=0x24c) returned 1 [0288.143] CloseHandle (hObject=0x24c) returned 1 [0288.143] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.144] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.144] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.144] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.144] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0288.145] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.145] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.145] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.145] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.145] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.146] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.146] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.146] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.146] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.146] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.146] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.146] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.146] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.146] CryptDestroyKey (hKey=0x55e710) returned 1 [0288.146] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0288.146] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\document building blocks\\1033\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4fab04b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0288.147] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4fab04b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.147] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x81712f94, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x817190ef, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0288.147] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.147] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.147] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.147] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0288.147] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0288.148] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0288.148] CryptHashData (hHash=0x55e650, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.148] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e710) returned 1 [0288.148] CryptDestroyHash (hHash=0x55e650) returned 1 [0288.148] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0288.148] GetLastError () returned 0x0 [0288.148] GetLastError () returned 0x0 [0288.148] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.149] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0288.150] WriteFile (in: hFile=0x250, lpBuffer=0x23e3fd4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3fd4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.151] SetEndOfFile (hFile=0x250) returned 1 [0288.151] CloseHandle (hObject=0x250) returned 1 [0288.151] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.152] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.152] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.152] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0288.153] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.153] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.154] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.154] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.154] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.155] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.155] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.155] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.155] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.155] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.155] CryptDestroyKey (hKey=0x55e710) returned 1 [0288.156] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0288.156] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x817190ef, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4fab04b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0288.156] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81712f94, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x817190ef, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4fab04b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.156] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x817190ef, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x817190ef, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5ca4c63b, ftLastWriteTime.dwHighDateTime=0x1d705ed, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0288.156] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fab04b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fab04b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fab04b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.156] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fab04b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fab04b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fab04b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.156] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0288.156] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fab04b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fab04b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fab04b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.156] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fab04b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fab04b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fab04b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.156] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0288.156] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fa8b6e0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fa8b6e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fa8b6e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.156] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fa8b6e0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fa8b6e0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fa8b6e0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.156] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0288.157] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa92f1c4e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x31c6a486, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Excel", cAlternateFileName="")) returned 1 [0288.157] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.157] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.157] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.157] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.157] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0288.157] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570a78) returned 1 [0288.158] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.158] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.158] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0288.158] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.158] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.158] GetLastError () returned 0x0 [0288.158] GetLastError () returned 0x0 [0288.158] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.159] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\excel\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.160] WriteFile (in: hFile=0x248, lpBuffer=0x23e3fe4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3fe4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.161] SetEndOfFile (hFile=0x248) returned 1 [0288.161] CloseHandle (hObject=0x248) returned 1 [0288.161] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.163] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.163] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.164] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0288.164] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.164] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.164] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.165] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.165] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.165] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.165] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.165] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.166] CryptDestroyKey (hKey=0x55e650) returned 1 [0288.166] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0288.166] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\excel\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa92f1c4e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x4fad6727, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0288.166] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa92f1c4e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x4fad6727, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.166] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fad6727, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fad6727, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fad6727, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.166] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934f7bb4, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0288.166] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.166] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.167] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.167] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.167] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0288.167] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0288.167] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.168] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.168] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0288.168] CryptDestroyHash (hHash=0x55e710) returned 1 [0288.168] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.168] GetLastError () returned 0x0 [0288.168] GetLastError () returned 0x0 [0288.168] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.168] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\excel\\xlstart\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.173] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ff4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ff4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.174] SetEndOfFile (hFile=0x24c) returned 1 [0288.174] CloseHandle (hObject=0x24c) returned 1 [0288.174] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.175] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.175] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.175] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.175] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.175] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.176] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.176] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.176] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.176] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.176] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.176] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.176] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.176] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.177] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.177] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.177] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.177] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.177] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.177] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.177] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.177] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.177] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.177] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.178] CryptDestroyKey (hKey=0x55e750) returned 1 [0288.178] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0288.178] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\excel\\xlstart\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934f7bb4, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x4fafc94a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0288.178] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934f7bb4, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x4fafc94a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.178] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fafc94a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fafc94a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fafc94a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.178] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fafc94a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fafc94a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fafc94a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.178] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0288.178] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934f7bb4, ftCreationTime.dwHighDateTime=0x1d7b063, ftLastAccessTime.dwLowDateTime=0x934f7bb4, ftLastAccessTime.dwHighDateTime=0x1d7b063, ftLastWriteTime.dwLowDateTime=0x934f7bb4, ftLastWriteTime.dwHighDateTime=0x1d7b063, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 0 [0288.178] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0288.178] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9cb66e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4f9cb66e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4f9cb66e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.178] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cefc6a2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0288.179] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.179] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.179] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.179] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.179] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.179] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.179] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5707d0) returned 1 [0288.180] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.180] CryptHashData (hHash=0x55e210, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.180] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e190) returned 1 [0288.180] CryptDestroyHash (hHash=0x55e210) returned 1 [0288.180] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.180] GetLastError () returned 0x0 [0288.180] GetLastError () returned 0x0 [0288.180] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.181] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.181] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.182] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.185] WriteFile (in: hFile=0x248, lpBuffer=0x23e3524*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3524*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.186] SetEndOfFile (hFile=0x248) returned 1 [0288.186] CloseHandle (hObject=0x248) returned 1 [0288.186] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.187] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.187] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.187] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.187] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.187] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.187] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0288.188] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.188] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.188] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.188] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.188] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.188] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.188] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.188] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.188] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.188] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.188] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.189] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.189] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.189] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.189] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.189] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.189] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.189] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.189] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.189] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.189] CryptDestroyKey (hKey=0x55e190) returned 1 [0288.189] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0288.190] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fafc94a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0288.190] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fafc94a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.190] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fafc94a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fafc94a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fb24067, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.190] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f7789b6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0288.190] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.190] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.190] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.190] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.190] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.190] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.190] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570d20) returned 1 [0288.191] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.191] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.191] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0288.191] CryptDestroyHash (hHash=0x55e290) returned 1 [0288.191] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.191] GetLastError () returned 0x0 [0288.191] GetLastError () returned 0x0 [0288.191] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.192] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.193] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.193] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.194] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.196] SetEndOfFile (hFile=0x24c) returned 1 [0288.196] CloseHandle (hObject=0x24c) returned 1 [0288.196] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.197] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.197] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.197] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.197] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0288.198] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.198] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.198] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.198] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.198] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.198] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.199] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.199] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.199] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.199] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.199] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.199] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.199] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.199] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.200] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.200] CryptDestroyKey (hKey=0x55e710) returned 1 [0288.200] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0288.200] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fb24067, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0288.201] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3cefc6a2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fb24067, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.201] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6b9fab, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f6b9fab, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f6b9fab, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x94, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0288.201] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fb24067, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fb24067, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fb24067, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.201] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6b9fab, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f6b9fab, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f706441, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4be, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Microsoft Outlook.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MICROS~1.CRY")) returned 1 [0288.201] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f706441, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f706441, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f706441, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Shows Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SHOWSD~1.CRY")) returned 1 [0288.201] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3fec53d2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xad13dd79, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad13dd79, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0288.201] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.201] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.201] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.201] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0288.201] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x5710d8) returned 1 [0288.202] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0288.202] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.202] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0288.202] CryptDestroyHash (hHash=0x55e190) returned 1 [0288.202] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0288.202] GetLastError () returned 0x0 [0288.202] GetLastError () returned 0x0 [0288.202] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.203] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0288.213] WriteFile (in: hFile=0x250, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.215] SetEndOfFile (hFile=0x250) returned 1 [0288.217] CloseHandle (hObject=0x250) returned 1 [0288.217] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.218] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.218] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.218] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.218] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.218] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.219] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.219] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.219] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.219] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.219] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.219] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.219] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.220] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.220] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.220] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.220] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.220] CryptDestroyKey (hKey=0x55e650) returned 1 [0288.220] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0288.220] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3fec53d2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xad13dd79, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4fb48e9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0288.221] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x3fec53d2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xad13dd79, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x4fb48e9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.221] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fb48e9f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fb48e9f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fb6ef6c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.221] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0288.221] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.221] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.221] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.221] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.221] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.221] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.221] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570fc8) returned 1 [0288.222] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0288.222] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.222] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e390) returned 1 [0288.222] CryptDestroyHash (hHash=0x55e210) returned 1 [0288.222] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ea58*=0x18) returned 1 [0288.222] GetLastError () returned 0x0 [0288.222] GetLastError () returned 0x0 [0288.222] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.223] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.223] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.224] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0288.226] WriteFile (in: hFile=0x254, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.227] SetEndOfFile (hFile=0x254) returned 1 [0288.227] CloseHandle (hObject=0x254) returned 1 [0288.227] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.228] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.228] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.234] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.234] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.234] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0288.234] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.234] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.235] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.235] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.235] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.235] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.235] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.235] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.235] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.235] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.236] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.236] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.236] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.236] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.236] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.236] CryptDestroyKey (hKey=0x55e390) returned 1 [0288.236] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0288.236] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fb6ef6c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0288.237] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fb6ef6c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.237] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fb6ef6c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fb6ef6c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fb6ef6c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.237] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fb6ef6c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fb6ef6c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fb6ef6c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.237] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0288.237] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xad13dd79, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f7789b6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0288.237] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.237] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.237] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.237] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.237] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571408) returned 1 [0288.238] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0288.238] CryptHashData (hHash=0x55e290, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.238] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0288.238] CryptDestroyHash (hHash=0x55e290) returned 1 [0288.238] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ea58*=0x18) returned 1 [0288.238] GetLastError () returned 0x0 [0288.238] GetLastError () returned 0x0 [0288.238] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.239] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0288.240] WriteFile (in: hFile=0x254, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.241] SetEndOfFile (hFile=0x254) returned 1 [0288.242] CloseHandle (hObject=0x254) returned 1 [0288.242] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.243] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.243] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.243] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.243] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.243] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.243] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0288.243] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.244] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.244] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.244] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.244] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.244] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.244] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.245] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.245] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.245] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.245] CryptDestroyKey (hKey=0x55e210) returned 1 [0288.245] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0288.246] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xad13dd79, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fb9b663, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0288.246] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xad13dd79, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fb9b663, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.246] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f72c5d4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f72c5d4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f72c5d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0288.246] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7527cf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f7527cf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f7527cf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x405534, dwReserved1=0x0, cFileName="File Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILEEX~1.CRY")) returned 1 [0288.246] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fb9b663, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fb9b663, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fb9b663, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.246] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fb9b663, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fb9b663, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fb9b663, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.246] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0288.246] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xad13dd79, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f7789b6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TaskBar", cAlternateFileName="")) returned 0 [0288.246] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0288.248] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7789b6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f7789b6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x70704174, dwReserved1=0x726f6853, cFileName="Window Switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~1.CRY")) returned 1 [0288.248] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7789b6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f7789b6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x70704174, dwReserved1=0x726f6853, cFileName="Window Switcher.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~1.CRY")) returned 0 [0288.248] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0288.248] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="UserData", cAlternateFileName="")) returned 1 [0288.248] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.248] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.249] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.249] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.249] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.249] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0288.249] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5708e0) returned 1 [0288.250] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.250] CryptHashData (hHash=0x55e190, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.250] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0288.250] CryptDestroyHash (hHash=0x55e190) returned 1 [0288.250] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.250] GetLastError () returned 0x0 [0288.250] GetLastError () returned 0x0 [0288.250] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.251] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.251] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.252] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.253] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.254] SetEndOfFile (hFile=0x24c) returned 1 [0288.254] CloseHandle (hObject=0x24c) returned 1 [0288.254] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.255] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.255] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.255] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.255] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.255] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.255] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.255] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.256] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.256] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.256] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.256] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.256] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.256] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.256] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.256] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.256] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.256] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.256] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.256] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.256] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.257] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.257] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.257] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.257] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.257] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.257] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0288.257] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0288.257] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fbbb4bf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0288.257] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fbbb4bf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.257] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbbb4bf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fbbb4bf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fbbb4bf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.257] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0288.258] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.258] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.258] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.258] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.258] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.258] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0288.259] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0288.259] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.259] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e710) returned 1 [0288.259] CryptDestroyHash (hHash=0x55e650) returned 1 [0288.259] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0288.259] GetLastError () returned 0x0 [0288.259] GetLastError () returned 0x0 [0288.259] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.259] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0288.261] WriteFile (in: hFile=0x250, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.262] SetEndOfFile (hFile=0x250) returned 1 [0288.262] CloseHandle (hObject=0x250) returned 1 [0288.262] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.281] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.281] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.281] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.281] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.281] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.281] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0288.282] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.282] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.282] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.282] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.282] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.282] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.282] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.282] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.282] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.282] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.282] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.282] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.283] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.283] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.283] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.283] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.283] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.283] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.283] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.283] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.283] CryptDestroyKey (hKey=0x55e710) returned 1 [0288.283] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0288.283] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fbbb4bf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0288.284] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fbbb4bf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.284] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fbbb4bf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fbbb4bf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fbbb4bf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.284] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fbbb4bf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fbbb4bf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fbbb4bf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.284] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0288.284] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0288.284] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0288.284] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42ce6642, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42ce6642, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x42ce6642, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74697753, dwReserved1=0x72656863, cFileName="UserData", cAlternateFileName="")) returned 0 [0288.284] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0288.284] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x3704a98f, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x636e7561, dwReserved1=0x5f4f5468, cFileName="MMC", cAlternateFileName="")) returned 1 [0288.284] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.284] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.285] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.285] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.285] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.285] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.285] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571518) returned 1 [0288.285] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.285] CryptHashData (hHash=0x55e310, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.286] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0288.286] CryptDestroyHash (hHash=0x55e310) returned 1 [0288.286] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.286] GetLastError () returned 0x0 [0288.286] GetLastError () returned 0x0 [0288.286] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.287] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.288] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.288] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\mmc\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.290] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.291] SetEndOfFile (hFile=0x248) returned 1 [0288.291] CloseHandle (hObject=0x248) returned 1 [0288.291] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.292] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.292] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.296] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.296] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.296] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.296] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0288.297] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.297] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.297] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.297] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.297] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.297] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.297] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.298] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.298] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.298] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.298] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.298] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.298] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.298] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.299] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.299] CryptDestroyKey (hKey=0x55e650) returned 1 [0288.299] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0288.299] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\MMC\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\mmc\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4fc079c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0288.299] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3704a98f, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3704a98f, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4fc079c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.299] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc079c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fc079c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fc079c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.299] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc079c7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fc079c7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fc079c7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.299] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0288.300] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Network", cAlternateFileName="")) returned 1 [0288.300] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.300] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.300] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.300] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.300] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0288.300] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5709f0) returned 1 [0288.301] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.301] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.301] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e290) returned 1 [0288.301] CryptDestroyHash (hHash=0x55e650) returned 1 [0288.301] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.301] GetLastError () returned 0x0 [0288.301] GetLastError () returned 0x0 [0288.301] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.302] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.303] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.305] SetEndOfFile (hFile=0x248) returned 1 [0288.305] CloseHandle (hObject=0x248) returned 1 [0288.305] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.306] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.306] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.306] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.306] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.306] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.306] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.307] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.307] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.307] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.307] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.307] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.307] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.308] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.308] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.308] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.308] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.308] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.308] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.309] CryptDestroyKey (hKey=0x55e290) returned 1 [0288.309] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0288.309] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4fc34273, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0288.312] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4fc34273, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.312] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0288.312] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.312] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.313] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.313] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.313] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.313] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.313] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570a78) returned 1 [0288.313] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.313] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.314] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0288.314] CryptDestroyHash (hHash=0x55e290) returned 1 [0288.314] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.314] GetLastError () returned 0x0 [0288.314] GetLastError () returned 0x0 [0288.314] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.315] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.315] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.315] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.316] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.317] SetEndOfFile (hFile=0x24c) returned 1 [0288.318] CloseHandle (hObject=0x24c) returned 1 [0288.318] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.318] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.319] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.319] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.319] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.319] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0288.319] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.319] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.320] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.320] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.320] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.320] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.320] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.320] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.320] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.320] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.320] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.320] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.321] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.321] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.321] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.321] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.321] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.321] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.322] CryptDestroyKey (hKey=0x55e910) returned 1 [0288.322] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0288.322] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4fc53dc5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0288.322] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4fc53dc5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.322] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc53dc5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fc53dc5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fc53dc5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.322] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1 [0288.322] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.322] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.323] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.323] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.323] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.323] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.323] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0288.324] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0288.324] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.324] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e710) returned 1 [0288.324] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.324] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0288.324] GetLastError () returned 0x0 [0288.324] GetLastError () returned 0x0 [0288.324] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.326] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0288.327] WriteFile (in: hFile=0x250, lpBuffer=0x23e524c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e524c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.329] SetEndOfFile (hFile=0x250) returned 1 [0288.329] CloseHandle (hObject=0x250) returned 1 [0288.329] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.330] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.330] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.330] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.331] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.331] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0288.331] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.331] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.331] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.332] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.332] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.332] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.332] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.333] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.333] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.333] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.333] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.333] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.333] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.334] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.334] CryptDestroyKey (hKey=0x55e710) returned 1 [0288.334] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0288.334] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4fc7a387, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0288.334] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x4fc7a387, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.334] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc7a387, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fc7a387, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fc7a387, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.334] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f7789b6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1 [0288.334] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.335] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.335] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.335] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.335] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0288.335] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570c98) returned 1 [0288.335] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0288.335] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.336] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e390) returned 1 [0288.336] CryptDestroyHash (hHash=0x55e710) returned 1 [0288.336] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ea58*=0x18) returned 1 [0288.336] GetLastError () returned 0x0 [0288.336] GetLastError () returned 0x0 [0288.336] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.337] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.337] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.338] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0288.341] WriteFile (in: hFile=0x254, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.342] SetEndOfFile (hFile=0x254) returned 1 [0288.342] CloseHandle (hObject=0x254) returned 1 [0288.342] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.343] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.343] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.355] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.355] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.355] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.356] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.362] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.366] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.366] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.366] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.366] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.366] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.366] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.366] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.366] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.366] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.366] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.367] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.367] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.367] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.367] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.368] CryptDestroyKey (hKey=0x55e390) returned 1 [0288.368] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0288.368] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fc7a387, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0288.369] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fc7a387, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.369] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc7a387, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fc7a387, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fca1cb9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.369] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7789b6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f7789b6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="rasphone.pbk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RASPHO~1.CRY")) returned 1 [0288.370] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7789b6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f7789b6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="rasphone.pbk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RASPHO~1.CRY")) returned 0 [0288.370] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0288.370] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x3f7789b6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f7789b6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 0 [0288.370] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0288.370] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f3fb46a, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x6f3fb46a, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x6f3fb46a, ftLastWriteTime.dwHighDateTime=0x1d7006c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 0 [0288.370] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0288.370] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc34273, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fc34273, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fc34273, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.370] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc34273, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fc34273, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fc34273, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.370] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0288.370] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80f7a98f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa45e20df, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa45e20df, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Office", cAlternateFileName="")) returned 1 [0288.371] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.371] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.371] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.371] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.371] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.371] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.371] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570b00) returned 1 [0288.372] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.372] CryptHashData (hHash=0x55e650, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.372] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e210) returned 1 [0288.372] CryptDestroyHash (hHash=0x55e650) returned 1 [0288.372] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.372] GetLastError () returned 0x0 [0288.372] GetLastError () returned 0x0 [0288.373] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.373] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.375] WriteFile (in: hFile=0x248, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.376] SetEndOfFile (hFile=0x248) returned 1 [0288.376] CloseHandle (hObject=0x248) returned 1 [0288.376] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.377] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.377] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0288.377] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.378] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.378] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.378] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.378] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.378] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.379] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.379] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.379] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.379] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.379] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.379] CryptDestroyKey (hKey=0x55e210) returned 1 [0288.379] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0288.379] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80f7a98f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa45e20df, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4fcec787, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0288.380] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80f7a98f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa45e20df, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4fcec787, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.380] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fcec787, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fcec787, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fcec787, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.380] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80f81d62, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x80f81d62, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80f83167, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0288.380] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa45e20df, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x3f81139e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f81139e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0288.380] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.380] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.380] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.380] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.380] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.380] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570b88) returned 1 [0288.381] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.381] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.381] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e650) returned 1 [0288.381] CryptDestroyHash (hHash=0x55e710) returned 1 [0288.381] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.381] GetLastError () returned 0x0 [0288.381] GetLastError () returned 0x0 [0288.381] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.382] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.382] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.383] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.384] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.385] SetEndOfFile (hFile=0x24c) returned 1 [0288.385] CloseHandle (hObject=0x24c) returned 1 [0288.385] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.386] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.386] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0288.387] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.388] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.388] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.388] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.388] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.388] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.389] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.389] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.389] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.389] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.389] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.389] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.390] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.390] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.390] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.390] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.390] CryptDestroyKey (hKey=0x55e650) returned 1 [0288.390] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0288.391] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\office\\recent\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa45e20df, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x3f81139e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fcec787, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0288.391] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa45e20df, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x3f81139e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fcec787, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.391] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fcec787, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fcec787, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fcec787, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.391] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f79f8e4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f79f8e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f79f8e4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="index.dat.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="INDEXD~1.CRY")) returned 1 [0288.391] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f79f8e4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f79f8e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f81139e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4ab, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Templates.LNK.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TEMPLA~1.CRY")) returned 1 [0288.391] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f79f8e4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f79f8e4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f81139e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4ab, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Templates.LNK.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TEMPLA~1.CRY")) returned 0 [0288.391] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0288.391] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa45e20df, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x3f81139e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f81139e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 0 [0288.392] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0288.392] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661c6965, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x661c6965, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x877953e5, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c63612e, dwReserved1=0x5f4f545f, cFileName="Outlook", cAlternateFileName="")) returned 1 [0288.392] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.392] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.392] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.392] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.392] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0288.392] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570e30) returned 1 [0288.394] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.394] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.395] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e290) returned 1 [0288.395] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.395] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.395] GetLastError () returned 0x0 [0288.395] GetLastError () returned 0x0 [0288.395] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.396] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\outlook\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.397] WriteFile (in: hFile=0x248, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.399] SetEndOfFile (hFile=0x248) returned 1 [0288.399] CloseHandle (hObject=0x248) returned 1 [0288.399] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.400] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.400] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.400] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.401] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.401] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.401] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.401] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.401] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.402] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.402] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.402] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.402] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.402] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.403] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.406] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.406] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.406] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.407] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.407] CryptDestroyKey (hKey=0x55e290) returned 1 [0288.407] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0288.407] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Outlook\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\outlook\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661c6965, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x877953e5, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x4fd12a52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0288.407] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x661c6965, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x877953e5, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x4fd12a52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.407] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd12a52, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fd12a52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fd12a52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.408] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abbe5b6, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x6abbe5b6, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x6acd6e90, ftLastWriteTime.dwHighDateTime=0x1d70699, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0288.408] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877953e5, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x877953e5, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8864a351, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x956, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0288.408] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877953e5, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x877953e5, ftLastAccessTime.dwHighDateTime=0x1d70699, ftLastWriteTime.dwLowDateTime=0x8864a351, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x956, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 0 [0288.408] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0288.408] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x50866c1c, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6c6d782e, dwReserved1=0x5f4f545f, cFileName="Protect", cAlternateFileName="")) returned 1 [0288.408] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.408] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.408] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.408] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.408] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.408] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.408] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570eb8) returned 1 [0288.409] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.409] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.409] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0288.409] CryptDestroyHash (hHash=0x55e750) returned 1 [0288.409] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.409] GetLastError () returned 0x0 [0288.409] GetLastError () returned 0x0 [0288.409] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.410] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.411] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.412] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\protect\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.417] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.419] SetEndOfFile (hFile=0x248) returned 1 [0288.419] CloseHandle (hObject=0x248) returned 1 [0288.419] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.420] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.420] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.421] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.421] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0288.421] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.421] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.421] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.422] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.422] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.422] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.427] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.427] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.428] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.428] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.428] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.428] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.428] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.428] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.428] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.428] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.429] CryptDestroyKey (hKey=0x55e650) returned 1 [0288.429] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0288.429] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\protect\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50866c1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fd38c25, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0288.429] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x50866c1c, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fd38c25, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.429] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xcf68faea, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0288.429] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd38c25, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fd38c25, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fd5edea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.429] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x50866c1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8060823c, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x8060823c, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="S-1-5-21-1560258661-3990802383-1811730007-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0288.430] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.430] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.430] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.430] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.430] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.430] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.430] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570a78) returned 1 [0288.431] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.431] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.431] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0288.431] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.431] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.431] GetLastError () returned 0x0 [0288.431] GetLastError () returned 0x0 [0288.431] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.432] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1560258661-3990802383-1811730007-1000\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1560258661-3990802383-1811730007-1000\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.434] WriteFile (in: hFile=0x24c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.438] SetEndOfFile (hFile=0x24c) returned 1 [0288.439] CloseHandle (hObject=0x24c) returned 1 [0288.439] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.440] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.440] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.440] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.440] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0288.441] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.441] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.441] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.441] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.441] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.442] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.442] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.442] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.442] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.443] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.443] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.443] CryptDestroyKey (hKey=0x55e710) returned 1 [0288.443] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0288.443] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1560258661-3990802383-1811730007-1000\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1560258661-3990802383-1811730007-1000\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x50866c1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8060823c, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x4fd5edea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0288.443] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x50866c1c, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x8060823c, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x4fd5edea, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.444] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8060823c, ftCreationTime.dwHighDateTime=0x1d8a649, ftLastAccessTime.dwLowDateTime=0x8060823c, ftLastAccessTime.dwHighDateTime=0x1d8a649, ftLastWriteTime.dwLowDateTime=0x80627df0, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1c1d304f-aa8f-4534-b2cb-33b61c83ed15", cAlternateFileName="1C1D30~1")) returned 1 [0288.444] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x562658a2, ftCreationTime.dwHighDateTime=0x1d82a22, ftLastAccessTime.dwLowDateTime=0x562658a2, ftLastAccessTime.dwHighDateTime=0x1d82a22, ftLastWriteTime.dwLowDateTime=0xcf6b6c82, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="26d4f968-a540-431b-ab1b-a50e9bbda5d1", cAlternateFileName="26D4F9~1")) returned 1 [0288.444] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9a745757, ftCreationTime.dwHighDateTime=0x1d75217, ftLastAccessTime.dwLowDateTime=0x9a745757, ftLastAccessTime.dwHighDateTime=0x1d75217, ftLastWriteTime.dwLowDateTime=0xcf6e7ae7, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="b1182ce8-69d1-4194-8156-bc78cfec3a39", cAlternateFileName="B1182C~1")) returned 1 [0288.444] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xde7dde0f, ftCreationTime.dwHighDateTime=0x1d7b055, ftLastAccessTime.dwLowDateTime=0xde7dde0f, ftLastAccessTime.dwHighDateTime=0x1d7b055, ftLastWriteTime.dwLowDateTime=0xcf714bf2, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="be39cc84-e9bf-4c2d-a3a5-e953c9f3df24", cAlternateFileName="BE39CC~1")) returned 1 [0288.444] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5088b163, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5088b163, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xcf741f26, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cfeedb70-e610-451b-90c2-def194b5fe80", cAlternateFileName="CFEEDB~1")) returned 1 [0288.444] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd5edea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fd5edea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fd850a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.444] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5088b163, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5088b163, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x80631a6d, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0288.444] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5088b163, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5088b163, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x80631a6d, ftLastWriteTime.dwHighDateTime=0x1d8a649, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0 [0288.444] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0288.444] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xcf753085, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x544e6465, dwReserved1=0x5f4f545f, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0288.444] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44792966, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x44792966, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xcf753085, ftLastWriteTime.dwHighDateTime=0x1d85953, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x544e6465, dwReserved1=0x5f4f545f, cFileName="SYNCHIST", cAlternateFileName="")) returned 0 [0288.444] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0288.444] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563371fc, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5635d3c1, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x5635d3c1, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35312d54, dwReserved1=0x35323036, cFileName="Spelling", cAlternateFileName="")) returned 1 [0288.445] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.445] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.445] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.445] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0288.445] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570a78) returned 1 [0288.446] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.446] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.446] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0288.446] CryptDestroyHash (hHash=0x55e750) returned 1 [0288.446] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.446] GetLastError () returned 0x0 [0288.446] GetLastError () returned 0x0 [0288.446] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.447] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.448] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.449] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.453] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.455] SetEndOfFile (hFile=0x248) returned 1 [0288.455] CloseHandle (hObject=0x248) returned 1 [0288.455] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.456] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.457] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.457] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.457] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.457] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.458] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.458] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.458] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.458] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.458] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.458] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.458] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.459] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.459] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.459] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.459] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.459] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.459] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.459] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.459] CryptDestroyKey (hKey=0x55e650) returned 1 [0288.459] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0288.460] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563371fc, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5635d3c1, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4fd850a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0288.460] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563371fc, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5635d3c1, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4fd850a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.460] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5635d3c1, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3f85ef21, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f85ef21, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0288.460] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.460] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.460] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.460] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.461] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0288.461] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.461] CryptHashData (hHash=0x55e310, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.461] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0288.461] CryptDestroyHash (hHash=0x55e310) returned 1 [0288.461] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.462] GetLastError () returned 0x0 [0288.462] GetLastError () returned 0x0 [0288.462] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.462] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\en-US\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\en-us\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.466] WriteFile (in: hFile=0x24c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.467] SetEndOfFile (hFile=0x24c) returned 1 [0288.467] CloseHandle (hObject=0x24c) returned 1 [0288.467] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.468] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.468] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.468] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.469] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.469] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0288.469] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.469] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.470] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.470] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.470] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.470] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.471] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.471] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.471] CryptDestroyKey (hKey=0x55e910) returned 1 [0288.471] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0288.471] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Spelling\\en-US\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\spelling\\en-us\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5635d3c1, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3f85ef21, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fdac063, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0288.472] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5635d3c1, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x3f85ef21, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fdac063, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.472] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x567d5b26, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x567d5b26, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0xbfbb9feb, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="default.acl", cAlternateFileName="")) returned 1 [0288.472] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5648e4eb, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x5648e4eb, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0xbfbb3e6f, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="default.dic", cAlternateFileName="")) returned 1 [0288.472] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f85ef21, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f85ef21, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f85ef21, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="default.exc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DEFAUL~1.CRY")) returned 1 [0288.472] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdac063, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fdac063, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fdd1deb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.472] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fdac063, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fdac063, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fdd1deb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.472] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0288.472] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd850a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fd850a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fdac063, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.472] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fd850a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fd850a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fdac063, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.472] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0288.472] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0288.472] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.473] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.473] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.473] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.473] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.473] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.473] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571408) returned 1 [0288.474] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.474] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.474] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0288.474] CryptDestroyHash (hHash=0x55e650) returned 1 [0288.474] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.474] GetLastError () returned 0x0 [0288.474] GetLastError () returned 0x0 [0288.474] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.475] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.476] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.476] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.479] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.480] SetEndOfFile (hFile=0x248) returned 1 [0288.485] CloseHandle (hObject=0x248) returned 1 [0288.485] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.487] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.487] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.487] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.494] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0288.495] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.495] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.495] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.495] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.495] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.495] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.495] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.496] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.496] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.496] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.496] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.496] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.496] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.496] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.499] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.499] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.499] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.499] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.499] CryptDestroyKey (hKey=0x55e910) returned 1 [0288.499] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0288.500] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fdd1deb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0288.500] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fdd1deb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.500] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fdd1deb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fdd1deb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fdd1deb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.500] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0288.500] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.500] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.500] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.500] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.500] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0288.501] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5710d8) returned 1 [0288.501] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.501] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.502] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0288.502] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.502] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.502] GetLastError () returned 0x0 [0288.502] GetLastError () returned 0x0 [0288.502] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.503] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\my\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.506] WriteFile (in: hFile=0x24c, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.507] SetEndOfFile (hFile=0x24c) returned 1 [0288.508] CloseHandle (hObject=0x24c) returned 1 [0288.508] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.509] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.509] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.509] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.510] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.510] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.510] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.510] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.511] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.511] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.511] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.511] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.511] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.512] CryptDestroyKey (hKey=0x55e390) returned 1 [0288.512] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0288.512] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\my\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fe1da9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0288.512] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fe1da9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.513] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AppContainerUserCertRead", cAlternateFileName="APPCON~1")) returned 1 [0288.513] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0288.513] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.513] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.513] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.513] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.513] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.513] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0288.513] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570fc8) returned 1 [0288.514] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0288.514] CryptHashData (hHash=0x55e210, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.514] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0288.514] CryptDestroyHash (hHash=0x55e210) returned 1 [0288.514] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0288.514] GetLastError () returned 0x0 [0288.514] GetLastError () returned 0x0 [0288.514] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.515] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.516] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.516] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0288.519] WriteFile (in: hFile=0x250, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.520] SetEndOfFile (hFile=0x250) returned 1 [0288.520] CloseHandle (hObject=0x250) returned 1 [0288.521] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.522] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.522] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.522] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.522] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.522] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.522] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0288.523] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.523] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.523] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.523] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.523] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.523] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.523] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.523] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.523] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.524] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.524] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.524] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.524] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.524] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.524] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.524] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.524] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.524] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.524] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.524] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.525] CryptDestroyKey (hKey=0x55e650) returned 1 [0288.525] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0288.525] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fe43daf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0288.525] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fe43daf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.525] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fe43daf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fe43daf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fe43daf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.525] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fe43daf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fe43daf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fe43daf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.525] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0288.525] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="CRLs", cAlternateFileName="")) returned 1 [0288.526] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.526] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.526] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.526] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.526] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0288.526] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570da8) returned 1 [0288.527] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0288.527] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.527] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0288.527] CryptDestroyHash (hHash=0x55e650) returned 1 [0288.527] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0288.527] GetLastError () returned 0x0 [0288.527] GetLastError () returned 0x0 [0288.527] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.528] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0288.529] WriteFile (in: hFile=0x250, lpBuffer=0x23e526c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e526c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.531] SetEndOfFile (hFile=0x250) returned 1 [0288.531] CloseHandle (hObject=0x250) returned 1 [0288.531] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.532] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.532] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.532] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.532] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.532] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.532] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0288.533] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.533] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.533] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.533] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.533] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.534] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.534] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.534] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.534] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.535] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.535] CryptDestroyKey (hKey=0x55e190) returned 1 [0288.535] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0288.535] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fe6a008, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0288.535] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fe6a008, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.535] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fe6a008, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fe6a008, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fe6a008, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.536] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fe6a008, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fe6a008, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fe6a008, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.536] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0288.536] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="CTLs", cAlternateFileName="")) returned 1 [0288.536] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.536] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.536] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.536] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.536] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571050) returned 1 [0288.537] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0288.537] CryptHashData (hHash=0x55e390, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.537] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0288.537] CryptDestroyHash (hHash=0x55e390) returned 1 [0288.537] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0288.537] GetLastError () returned 0x0 [0288.537] GetLastError () returned 0x0 [0288.537] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.539] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.539] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.540] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0288.546] WriteFile (in: hFile=0x250, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.547] SetEndOfFile (hFile=0x250) returned 1 [0288.547] CloseHandle (hObject=0x250) returned 1 [0288.547] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.548] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.548] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.549] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.549] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.549] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.550] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.550] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.550] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.550] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.550] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.550] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.551] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.551] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.551] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.551] CryptDestroyKey (hKey=0x55e290) returned 1 [0288.551] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0288.551] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fe900e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0288.552] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4fe900e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.552] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fe900e8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fe900e8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fe900e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.552] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fe900e8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fe900e8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fe900e8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.552] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0288.552] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fe1da9e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fe1da9e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fe1da9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.552] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fe1da9e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fe1da9e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fe1da9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.552] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0288.552] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x5ec61c93, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x5ec61c93, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5ec61c93, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0 [0288.552] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0288.552] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80b78b76, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x6aa33cc5, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x6aa33cc5, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0288.553] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.553] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.560] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.560] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0288.560] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570b00) returned 1 [0288.562] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.562] CryptHashData (hHash=0x55e650, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.562] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e7d0) returned 1 [0288.562] CryptDestroyHash (hHash=0x55e650) returned 1 [0288.563] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.563] GetLastError () returned 0x0 [0288.563] GetLastError () returned 0x0 [0288.563] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.565] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.567] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.568] SetEndOfFile (hFile=0x248) returned 1 [0288.568] CloseHandle (hObject=0x248) returned 1 [0288.568] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.569] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.569] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.569] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.569] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.569] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.569] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0288.570] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.570] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.570] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.570] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.570] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.571] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.571] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.571] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.571] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0288.571] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0288.571] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80b78b76, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x6aa33cc5, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x4feb6d7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0288.572] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80b78b76, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x6aa33cc5, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x4feb6d7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.572] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4feb6d7b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4feb6d7b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4feb6d7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.572] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="LiveContent", cAlternateFileName="LIVECO~1")) returned 1 [0288.572] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.572] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.572] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.572] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.572] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0288.572] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571270) returned 1 [0288.573] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.573] CryptHashData (hHash=0x55e710, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.573] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0288.573] CryptDestroyHash (hHash=0x55e710) returned 1 [0288.573] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.573] GetLastError () returned 0x0 [0288.573] GetLastError () returned 0x0 [0288.573] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.574] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.574] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.575] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.576] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3544*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3544*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.578] SetEndOfFile (hFile=0x24c) returned 1 [0288.578] CloseHandle (hObject=0x24c) returned 1 [0288.578] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.579] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.579] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.579] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.579] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.579] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0288.579] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.580] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.580] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.580] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.580] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.580] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.580] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.580] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.580] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.580] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.580] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.580] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.581] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.581] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.581] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.581] CryptDestroyKey (hKey=0x55e750) returned 1 [0288.581] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0288.581] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4fedc60b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0288.582] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4fedc60b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.582] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96dfa773, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0288.582] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.582] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.582] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.582] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.582] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570c10) returned 1 [0288.583] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0288.583] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.583] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e210) returned 1 [0288.583] CryptDestroyHash (hHash=0x55e290) returned 1 [0288.583] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0288.583] GetLastError () returned 0x0 [0288.583] GetLastError () returned 0x0 [0288.583] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.584] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0288.597] WriteFile (in: hFile=0x250, lpBuffer=0x23e528c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e528c*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.598] SetEndOfFile (hFile=0x250) returned 1 [0288.598] CloseHandle (hObject=0x250) returned 1 [0288.598] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.600] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.600] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.600] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.600] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.600] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.600] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.601] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.601] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.601] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.601] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.601] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.601] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.601] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.601] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.601] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.601] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.602] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.602] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.602] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.602] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.602] CryptDestroyKey (hKey=0x55e210) returned 1 [0288.602] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0288.602] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff0286f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0288.602] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff0286f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.602] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff0286f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ff0286f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ff0286f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.602] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d88102, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d88102, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Managed", cAlternateFileName="")) returned 1 [0288.603] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.603] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.603] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.603] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.603] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0288.603] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x5707d0) returned 1 [0288.604] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0288.604] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.604] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e750) returned 1 [0288.604] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.604] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ea58*=0x18) returned 1 [0288.604] GetLastError () returned 0x0 [0288.604] GetLastError () returned 0x0 [0288.604] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.605] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.605] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.606] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0288.607] WriteFile (in: hFile=0x254, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.608] SetEndOfFile (hFile=0x254) returned 1 [0288.608] CloseHandle (hObject=0x254) returned 1 [0288.609] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.609] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.609] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.609] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.610] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0288.610] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.610] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.610] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.610] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.610] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.611] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.611] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.611] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.611] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.611] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.611] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.611] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.612] CryptDestroyKey (hKey=0x55e750) returned 1 [0288.612] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0288.612] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d88102, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff28ac9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0288.612] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d88102, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff28ac9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.612] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Document Themes", cAlternateFileName="DOCUME~1")) returned 1 [0288.612] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.612] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.612] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.612] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.612] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0288.612] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571408) returned 1 [0288.613] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0288.613] CryptHashData (hHash=0x55e750, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.613] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e190) returned 1 [0288.613] CryptDestroyHash (hHash=0x55e750) returned 1 [0288.613] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0288.613] GetLastError () returned 0x0 [0288.613] GetLastError () returned 0x0 [0288.613] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.614] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0288.616] WriteFile (in: hFile=0x258, lpBuffer=0x23e3594*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3594*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.617] SetEndOfFile (hFile=0x258) returned 1 [0288.617] CloseHandle (hObject=0x258) returned 1 [0288.617] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.618] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.618] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.620] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.620] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.620] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0288.621] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.621] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.621] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.621] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.621] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.621] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.621] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.622] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.622] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.622] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.622] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.622] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.622] CryptDestroyKey (hKey=0x55e190) returned 1 [0288.622] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0288.622] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff28ac9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0288.623] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff28ac9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.623] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98c54758, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98c54758, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0288.623] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.623] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.623] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.623] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.623] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.623] CryptAcquireContextA (in: phProv=0x19e57c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e57c*=0x571380) returned 1 [0288.624] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e534 | out: phHash=0x19e534) returned 1 [0288.624] CryptHashData (hHash=0x55e210, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.624] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19e578 | out: phKey=0x19e578*=0x55e390) returned 1 [0288.624] CryptDestroyHash (hHash=0x55e210) returned 1 [0288.624] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19e588*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19e588*=0x18) returned 1 [0288.624] GetLastError () returned 0x0 [0288.624] GetLastError () returned 0x0 [0288.624] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.625] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.625] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.626] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c [0288.627] WriteFile (in: hFile=0x25c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e2b0, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19e2b0*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.629] SetEndOfFile (hFile=0x25c) returned 1 [0288.629] CloseHandle (hObject=0x25c) returned 1 [0288.629] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.630] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.630] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.630] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.630] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.630] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.630] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.631] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.631] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.631] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.631] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.631] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.631] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.631] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.631] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.632] CryptDestroyKey (hKey=0x55e390) returned 1 [0288.632] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0288.632] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98c54758, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff4ec80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0288.632] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98c54758, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff4ec80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.632] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff4ec80, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ff4ec80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ff4ec80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.632] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9826b304, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9826b304, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x70d51000, ftLastWriteTime.dwHighDateTime=0x1d43fbc, nFileSizeHigh=0x0, nFileSizeLow=0x893c1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03090430[[fn=Banded]].thmx", cAlternateFileName="TM0309~1.THM")) returned 1 [0288.632] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x984f5d1e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x984f5d1e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa299a700, ftLastWriteTime.dwHighDateTime=0x1d43fbb, nFileSizeHigh=0x0, nFileSizeLow=0x192bb1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03090434[[fn=Wood Type]].thmx", cAlternateFileName="TM0309~2.THM")) returned 1 [0288.632] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x988e757c, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x988e757c, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xbdc7df00, ftLastWriteTime.dwHighDateTime=0x1d43fda, nFileSizeHigh=0x0, nFileSizeLow=0x883d3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03457444[[fn=Basis]].thmx", cAlternateFileName="TM2094~1.THM")) returned 1 [0288.632] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98acf19f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98acf19f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xe42a5200, ftLastWriteTime.dwHighDateTime=0x1d43fbb, nFileSizeHigh=0x0, nFileSizeLow=0x8b615, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03457464[[fn=Dividend]].thmx", cAlternateFileName="TM5959~1.THM")) returned 1 [0288.632] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9841a2b8, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9841a2b8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xf2786e00, ftLastWriteTime.dwHighDateTime=0x1d43fbb, nFileSizeHigh=0x0, nFileSizeLow=0x7fb28, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03457475[[fn=Frame]].thmx", cAlternateFileName="TM7844~1.THM")) returned 1 [0288.632] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98af6207, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98af6207, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x34091900, ftLastWriteTime.dwHighDateTime=0x1d43fbc, nFileSizeHigh=0x0, nFileSizeLow=0x2ef7a4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03457485[[fn=Mesh]].thmx", cAlternateFileName="TM2703~1.THM")) returned 1 [0288.632] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987adf7a, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x987adf7a, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xea6cfe00, ftLastWriteTime.dwHighDateTime=0x1d43fbc, nFileSizeHigh=0x0, nFileSizeLow=0xbddaf, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03457491[[fn=Metropolitan]].thmx", cAlternateFileName="TM5623~1.THM")) returned 1 [0288.632] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x980694ab, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x980694ab, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80545900, ftLastWriteTime.dwHighDateTime=0x1d43fbc, nFileSizeHigh=0x0, nFileSizeLow=0xe1c0f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03457496[[fn=Parallax]].thmx", cAlternateFileName="TM0345~2.THM")) returned 1 [0288.632] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9818a945, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9818a945, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xba712b00, ftLastWriteTime.dwHighDateTime=0x1d43fbb, nFileSizeHigh=0x0, nFileSizeLow=0xec122, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03457503[[fn=Quotable]].thmx", cAlternateFileName="TM0345~4.THM")) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97fbbf10, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x97fbbf10, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc65ced00, ftLastWriteTime.dwHighDateTime=0x1d43fbb, nFileSizeHigh=0x0, nFileSizeLow=0x125f51, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03457510[[fn=Savon]].thmx", cAlternateFileName="TM0345~1.THM")) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x980b633e, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x980b633e, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x80545900, ftLastWriteTime.dwHighDateTime=0x1d43fbc, nFileSizeHigh=0x0, nFileSizeLow=0x76cc4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03457515[[fn=View]].thmx", cAlternateFileName="TM0345~3.THM")) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x978145cc, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x978145cc, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc65ced00, ftLastWriteTime.dwHighDateTime=0x1d43fbb, nFileSizeHigh=0x0, nFileSizeLow=0xee481, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM04033917[[fn=Berlin]].thmx", cAlternateFileName="TM0403~1.THM")) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x984c4fd2, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x984c4fd2, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xdd034400, ftLastWriteTime.dwHighDateTime=0x1d43fbb, nFileSizeHigh=0x0, nFileSizeLow=0x165552, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM04033919[[fn=Circuit]].thmx", cAlternateFileName="TMFEFA~1.THM")) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982f049f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x982f049f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5c911300, ftLastWriteTime.dwHighDateTime=0x1d43fbc, nFileSizeHigh=0x0, nFileSizeLow=0x21dbbf, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM04033921[[fn=Damask]].thmx", cAlternateFileName="TM0403~4.THM")) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ab2749, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98ab2749, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xc68a00, ftLastWriteTime.dwHighDateTime=0x1d43fbc, nFileSizeHigh=0x0, nFileSizeLow=0x1ab70b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM04033925[[fn=Droplet]].thmx", cAlternateFileName="TM9F98~1.THM")) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x981588c3, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x981588c3, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x2358a300, ftLastWriteTime.dwHighDateTime=0x1d43fbc, nFileSizeHigh=0x0, nFileSizeLow=0x2c9ecd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM04033927[[fn=Main Event]].thmx", cAlternateFileName="TM0403~3.THM")) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9852435b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9852435b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x9cf09100, ftLastWriteTime.dwHighDateTime=0x1d43fbc, nFileSizeHigh=0x0, nFileSizeLow=0x23f73b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM04033929[[fn=Slate]].thmx", cAlternateFileName="TMA957~1.THM")) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9800b4e9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9800b4e9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4f742400, ftLastWriteTime.dwHighDateTime=0x1d43fbc, nFileSizeHigh=0x0, nFileSizeLow=0x371abc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM04033937[[fn=Vapor Trail]].thmx", cAlternateFileName="TM0403~2.THM")) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98742454, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98742454, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x973bdf00, ftLastWriteTime.dwHighDateTime=0x1d4196d, nFileSizeHigh=0x0, nFileSizeLow=0x10a79d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM10001114[[fn=Gallery]].thmx", cAlternateFileName="TM1000~2.THM")) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9860260f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9860260f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x235700, ftLastWriteTime.dwHighDateTime=0x1d4196e, nFileSizeHigh=0x0, nFileSizeLow=0x9477a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM10001115[[fn=Parcel]].thmx", cAlternateFileName="TM1000~1.THM")) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9860260f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9860260f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x235700, ftLastWriteTime.dwHighDateTime=0x1d4196e, nFileSizeHigh=0x0, nFileSizeLow=0x9477a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM10001115[[fn=Parcel]].thmx", cAlternateFileName="TM1000~1.THM")) returned 0 [0288.633] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff28ac9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ff28ac9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ff28ac9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x5b353131, dwReserved1=0x3d6e665b, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff28ac9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ff28ac9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ff28ac9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x5b353131, dwReserved1=0x3d6e665b, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.633] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff28ac9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ff28ac9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ff28ac9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.633] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d88102, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d88102, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d88102, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SmartArt Graphics", cAlternateFileName="SMARTA~1")) returned 1 [0288.633] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.633] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.634] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.634] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.634] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0288.634] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570fc8) returned 1 [0288.634] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0288.634] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.634] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e290) returned 1 [0288.635] CryptDestroyHash (hHash=0x55e790) returned 1 [0288.635] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0288.635] GetLastError () returned 0x0 [0288.635] GetLastError () returned 0x0 [0288.635] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.635] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0288.636] WriteFile (in: hFile=0x258, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.640] SetEndOfFile (hFile=0x258) returned 1 [0288.640] CloseHandle (hObject=0x258) returned 1 [0288.640] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.641] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.641] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.641] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.641] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0288.642] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.642] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.642] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.642] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.642] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.642] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.643] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.643] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.643] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.643] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.643] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.643] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.643] CryptDestroyKey (hKey=0x55e290) returned 1 [0288.643] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0288.644] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d88102, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d88102, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff4ec80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0288.644] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d88102, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d88102, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff4ec80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.644] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d88102, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98c48439, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98c48439, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0288.644] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.644] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.644] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.644] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.644] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0288.644] CryptAcquireContextA (in: phProv=0x19e57c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e57c*=0x571408) returned 1 [0288.645] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e534 | out: phHash=0x19e534) returned 1 [0288.645] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.645] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19e578 | out: phKey=0x19e578*=0x55e190) returned 1 [0288.645] CryptDestroyHash (hHash=0x55e210) returned 1 [0288.645] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19e588*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19e588*=0x18) returned 1 [0288.645] GetLastError () returned 0x0 [0288.645] GetLastError () returned 0x0 [0288.645] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.646] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0288.647] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.647] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c [0288.649] WriteFile (in: hFile=0x25c, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e2b0, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19e2b0*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.650] SetEndOfFile (hFile=0x25c) returned 1 [0288.650] CloseHandle (hObject=0x25c) returned 1 [0288.650] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.651] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.651] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.651] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.651] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0288.652] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.652] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.652] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.652] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.652] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.652] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.652] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.652] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.652] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.652] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.652] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.653] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.653] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.653] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.653] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.653] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.653] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.653] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.653] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.653] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.654] CryptDestroyKey (hKey=0x55e190) returned 1 [0288.654] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0288.654] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d88102, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98c48439, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff74f72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0288.654] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d88102, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98c48439, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff74f72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.654] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff74f72, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ff74f72, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ff74f72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.654] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97837aab, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x97837aab, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x97837aab, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1697, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328884[[fn=architecture]].glox", cAlternateFileName="TM0332~4.GLO")) returned 1 [0288.654] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97fe91ef, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x97fe91ef, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x97fea554, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xfba, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328893[[fn=BracketList]].glox", cAlternateFileName="TME5C2~1.GLO")) returned 1 [0288.654] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9776d1cd, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9776d1cd, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x9776d1cd, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1093, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328905[[fn=Chevron Accent]].glox", cAlternateFileName="TM0332~2.GLO")) returned 1 [0288.654] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97706a49, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x97706a49, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x97707caf, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x41a6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328908[[fn=Circle Process]].glox", cAlternateFileName="TM0332~1.GLO")) returned 1 [0288.654] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de9b8d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x97de9b8d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x97deae93, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x2c74, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328916[[fn=Converging Text]].glox", cAlternateFileName="TMF131~1.GLO")) returned 1 [0288.654] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98433dab, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98433dab, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98435131, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1788, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328919[[fn=Hexagon Radial]].glox", cAlternateFileName="TM6EE1~1.GLO")) returned 1 [0288.654] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98403091, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98403091, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98404408, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x23e7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328925[[fn=Interconnected Block Process]].glox", cAlternateFileName="TM5FE4~1.GLO")) returned 1 [0288.654] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x984400fa, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x984400fa, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x984400fa, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x10e6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328932[[fn=Picture Frame]].glox", cAlternateFileName="TMD322~1.GLO")) returned 1 [0288.654] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x980f6e44, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x980f6e44, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x980f6e44, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1cca, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328935[[fn=Picture Organization Chart]].glox", cAlternateFileName="TMB8BB~1.GLO")) returned 1 [0288.655] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9824557b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9824557b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x9824557b, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x15dc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328940[[fn=Radial Picture List]].glox", cAlternateFileName="TMC309~1.GLO")) returned 1 [0288.655] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x978020a2, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x978020a2, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x978034d1, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328951[[fn=Tabbed Arc]].glox", cAlternateFileName="TM0332~3.GLO")) returned 1 [0288.655] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x983aecac, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x983aecac, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x983affea, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1318, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328972[[fn=Tab List]].glox", cAlternateFileName="TM2A4A~1.GLO")) returned 1 [0288.655] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x983bfdac, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x983bfdac, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x983bfdac, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1930, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328975[[fn=Theme Picture Accent]].glox", cAlternateFileName="TM8247~1.GLO")) returned 1 [0288.655] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98c45cf1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98c45cf1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98c47043, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x15fe, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328983[[fn=Theme Picture Alternating Accent]].glox", cAlternateFileName="TM8366~1.GLO")) returned 1 [0288.655] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9879b688, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9879b688, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x9879b688, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x1831, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328986[[fn=Theme Picture Grid]].glox", cAlternateFileName="TM02CE~1.GLO")) returned 1 [0288.655] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98ad5311, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98ad5311, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98ad5311, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xc03, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328990[[fn=Varying Width List]].glox", cAlternateFileName="TM6E5C~1.GLO")) returned 1 [0288.655] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98913495, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98913495, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98913495, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x141f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328998[[fn=Rings]].glox", cAlternateFileName="TM5448~1.GLO")) returned 1 [0288.655] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98913495, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98913495, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98913495, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x141f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03328998[[fn=Rings]].glox", cAlternateFileName="TM5448~1.GLO")) returned 0 [0288.655] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0288.655] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff4ec80, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ff4ec80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ff74f72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x5b383939, dwReserved1=0x3d6e665b, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.655] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff4ec80, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ff4ec80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ff74f72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x5b383939, dwReserved1=0x3d6e665b, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.655] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0288.655] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d88102, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x983d5bf8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x983d5bf8, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Word Document Bibliography Styles", cAlternateFileName="WORDDO~2")) returned 1 [0288.655] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.655] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.655] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.655] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.655] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.656] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0288.656] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5708e0) returned 1 [0288.656] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0288.656] CryptHashData (hHash=0x55e190, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.656] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e7d0) returned 1 [0288.656] CryptDestroyHash (hHash=0x55e190) returned 1 [0288.656] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0288.656] GetLastError () returned 0x0 [0288.656] GetLastError () returned 0x0 [0288.656] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.657] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Bibliography Styles\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document bibliography styles\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0288.660] WriteFile (in: hFile=0x258, lpBuffer=0x23e35c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e35c4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.662] SetEndOfFile (hFile=0x258) returned 1 [0288.662] CloseHandle (hObject=0x258) returned 1 [0288.662] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.663] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.663] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.663] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.663] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.663] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.663] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0288.663] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.663] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.664] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.664] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.664] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.664] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.664] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.664] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.664] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.664] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.664] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.664] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.664] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.664] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.664] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.665] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.665] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.665] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.665] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.665] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.665] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0288.665] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0288.665] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Bibliography Styles\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document bibliography styles\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d88102, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x983d5bf8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff9b25f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0288.665] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d88102, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x983d5bf8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff9b25f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.665] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff9b25f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ff9b25f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ff9b25f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.665] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9763f96c, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9763f96c, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x9764341c, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x515ca, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM02851216[[fn=apasixtheditionofficeonline]].xsl", cAlternateFileName="TM0285~2.XSL")) returned 1 [0288.665] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9779cbce, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9779cbce, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x9779f2aa, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x486d2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM02851217[[fn=chicago]].xsl", cAlternateFileName="TM0285~4.XSL")) returned 1 [0288.666] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97625f0b, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x97625f0b, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x9762869a, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4181d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM02851218[[fn=gb]].xsl", cAlternateFileName="TM0285~1.XSL")) returned 1 [0288.666] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x978514f8, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x978514f8, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x97853bdd, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3e7cc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM02851219[[fn=gostname]].xsl", cAlternateFileName="TM003E~1.XSL")) returned 1 [0288.666] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x976cbe5d, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x976cbe5d, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x976d0c4a, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3d498, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM02851220[[fn=gosttitle]].xsl", cAlternateFileName="TM0285~3.XSL")) returned 1 [0288.666] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x983d213f, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x983d213f, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x983d4a29, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x456ff, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM02851221[[fn=harvardanglia2008officeonline]].xsl", cAlternateFileName="TM8026~1.XSL")) returned 1 [0288.666] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982fc8d7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x982fc8d7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x982fc8d7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x47d22, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM02851222[[fn=ieee2006officeonline]].xsl", cAlternateFileName="TMA855~1.XSL")) returned 1 [0288.666] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98050de7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98050de7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98055ce4, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x41f76, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM02851223[[fn=iso690]].xsl", cAlternateFileName="TM536F~1.XSL")) returned 1 [0288.666] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x977efc44, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x977efc44, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x977f0f37, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x35031, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM02851224[[fn=iso690nmerical]].xsl", cAlternateFileName="TM9858~1.XSL")) returned 1 [0288.666] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9786c3ef, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9786c3ef, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x9786d825, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3e39b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM02851225[[fn=mlaseventheditionofficeonline]].xsl", cAlternateFileName="TM49BE~1.XSL")) returned 1 [0288.666] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x977a2c28, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x977a2c28, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x977a3fe6, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x540ef, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM02851226[[fn=turabian]].xsl", cAlternateFileName="TME914~1.XSL")) returned 1 [0288.666] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9830edbc, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9830edbc, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98311346, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3d467, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM02851227[[fn=sist02]].xsl", cAlternateFileName="TMC2F6~1.XSL")) returned 1 [0288.666] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9830edbc, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9830edbc, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98311346, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x3d467, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM02851227[[fn=sist02]].xsl", cAlternateFileName="TMC2F6~1.XSL")) returned 0 [0288.666] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0288.666] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b373232, dwReserved1=0x3d6e665b, cFileName="Word Document Building Blocks", cAlternateFileName="WORDDO~1")) returned 1 [0288.666] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.666] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.666] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.666] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.666] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.667] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0288.667] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x5712f8) returned 1 [0288.667] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0288.667] CryptHashData (hHash=0x55e210, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.667] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e750) returned 1 [0288.667] CryptDestroyHash (hHash=0x55e210) returned 1 [0288.667] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0288.667] GetLastError () returned 0x0 [0288.667] GetLastError () returned 0x0 [0288.668] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.668] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Building Blocks\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document building blocks\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0288.677] WriteFile (in: hFile=0x258, lpBuffer=0x23e3604*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3604*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.678] SetEndOfFile (hFile=0x258) returned 1 [0288.678] CloseHandle (hObject=0x258) returned 1 [0288.678] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.680] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.680] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.680] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.680] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.680] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0288.680] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.680] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.680] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.680] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.681] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.681] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.681] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.681] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.681] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.681] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.681] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.681] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.681] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.681] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.681] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.682] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.682] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.682] CryptDestroyKey (hKey=0x55e750) returned 1 [0288.682] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0288.682] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Building Blocks\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document building blocks\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff9b25f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0288.682] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ff9b25f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.682] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x3f94266f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f94266f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0288.682] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.682] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.687] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.687] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.687] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.687] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0288.687] CryptAcquireContextA (in: phProv=0x19e57c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e57c*=0x570eb8) returned 1 [0288.688] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e534 | out: phHash=0x19e534) returned 1 [0288.688] CryptHashData (hHash=0x55e190, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.688] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19e578 | out: phKey=0x19e578*=0x55e790) returned 1 [0288.688] CryptDestroyHash (hHash=0x55e190) returned 1 [0288.688] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19e588*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19e588*=0x18) returned 1 [0288.688] GetLastError () returned 0x0 [0288.688] GetLastError () returned 0x0 [0288.688] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.689] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Building Blocks\\1033\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document building blocks\\1033\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c [0288.690] WriteFile (in: hFile=0x25c, lpBuffer=0x23e3644*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e2b0, lpOverlapped=0x0 | out: lpBuffer=0x23e3644*, lpNumberOfBytesWritten=0x19e2b0*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.691] SetEndOfFile (hFile=0x25c) returned 1 [0288.691] CloseHandle (hObject=0x25c) returned 1 [0288.691] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.693] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.693] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.693] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.693] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.693] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.693] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0288.694] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.694] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.694] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.694] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.694] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.694] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.694] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.694] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.694] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.694] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.694] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.694] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.694] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.695] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.695] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.695] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.695] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.695] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.695] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.695] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.695] CryptDestroyKey (hKey=0x55e790) returned 1 [0288.695] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0288.695] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Word Document Building Blocks\\1033\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\word document building blocks\\1033\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x3f94266f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ffea305, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0288.696] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x3f94266f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ffea305, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.696] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ffea305, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ffea305, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ffea305, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.696] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x980dfb29, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x980dfb29, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x980e0ec2, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0xca72, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM01840907[[fn=Equations]].dotx", cAlternateFileName="TM0184~1.DOT")) returned 1 [0288.696] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f91c530, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f91c530, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f94266f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xb8c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TM0283~1.CRY")) returned 1 [0288.696] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98167377, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x98167377, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x98167377, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x866f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03998158[[fn=Element]].dotx", cAlternateFileName="TM0399~1.DOT")) returned 1 [0288.696] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9846e6c1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9846e6c1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x985f3b86, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x34df74, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03998159[[fn=Insight]].dotx", cAlternateFileName="TM0399~2.DOT")) returned 1 [0288.696] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9846e6c1, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x9846e6c1, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x985f3b86, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x34df74, dwReserved0=0x405534, dwReserved1=0x0, cFileName="TM03998159[[fn=Insight]].dotx", cAlternateFileName="TM0399~2.DOT")) returned 0 [0288.696] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0288.696] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff9b25f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ff9b25f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ffc3029, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.696] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff9b25f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ff9b25f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4ffc3029, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x5b393531, dwReserved1=0x3d6e665b, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.696] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0288.696] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d61fa7, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96d61fa7, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96d61fa7, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5b373232, dwReserved1=0x3d6e665b, cFileName="Word Document Building Blocks", cAlternateFileName="WORDDO~1")) returned 0 [0288.696] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0288.696] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d7563, dwReserved1=0x4220746e, cFileName="User", cAlternateFileName="")) returned 1 [0288.696] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.696] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.696] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.697] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.697] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.697] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.697] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571408) returned 1 [0288.697] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0288.697] CryptHashData (hHash=0x55e750, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.697] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e7d0) returned 1 [0288.697] CryptDestroyHash (hHash=0x55e750) returned 1 [0288.698] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19ea58*=0x18) returned 1 [0288.698] GetLastError () returned 0x0 [0288.698] GetLastError () returned 0x0 [0288.698] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.698] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0288.700] WriteFile (in: hFile=0x254, lpBuffer=0x23e3654*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3654*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.701] SetEndOfFile (hFile=0x254) returned 1 [0288.701] CloseHandle (hObject=0x254) returned 1 [0288.702] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.704] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.704] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.704] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.704] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.704] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.704] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0288.704] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.705] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.705] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.705] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.705] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.705] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.705] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.705] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.706] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.706] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.706] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.706] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.706] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0288.706] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0288.706] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ffea305, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0288.707] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x4ffea305, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.707] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Document Themes", cAlternateFileName="DOCUME~1")) returned 1 [0288.707] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.707] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.707] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.707] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.707] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0288.707] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570e30) returned 1 [0288.708] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0288.708] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.708] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0288.708] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.708] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0288.708] GetLastError () returned 0x0 [0288.708] GetLastError () returned 0x0 [0288.708] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.709] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0288.711] WriteFile (in: hFile=0x258, lpBuffer=0x23e3694*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3694*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.712] SetEndOfFile (hFile=0x258) returned 1 [0288.712] CloseHandle (hObject=0x258) returned 1 [0288.712] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.713] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.713] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.713] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.713] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.713] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0288.713] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.714] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.714] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.714] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.714] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.714] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.714] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.714] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.714] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.714] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.714] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.714] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.715] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.715] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.715] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.715] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.716] CryptDestroyKey (hKey=0x55e790) returned 1 [0288.716] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0288.716] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5000efbf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0288.716] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5000efbf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.716] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0288.716] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.716] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.716] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.717] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.717] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.717] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0288.717] CryptAcquireContextA (in: phProv=0x19e57c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e57c*=0x5707d0) returned 1 [0288.717] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e534 | out: phHash=0x19e534) returned 1 [0288.717] CryptHashData (hHash=0x55e7d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.717] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19e578 | out: phKey=0x19e578*=0x55e910) returned 1 [0288.717] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0288.718] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19e588*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19e588*=0x18) returned 1 [0288.718] GetLastError () returned 0x0 [0288.718] GetLastError () returned 0x0 [0288.718] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.718] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\1033\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c [0288.719] WriteFile (in: hFile=0x25c, lpBuffer=0x23e36a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e2b0, lpOverlapped=0x0 | out: lpBuffer=0x23e36a4*, lpNumberOfBytesWritten=0x19e2b0*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.721] SetEndOfFile (hFile=0x25c) returned 1 [0288.721] CloseHandle (hObject=0x25c) returned 1 [0288.721] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.722] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.722] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.722] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.722] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.722] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.722] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0288.722] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.722] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.723] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.723] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.723] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.723] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.723] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.723] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.723] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.724] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.724] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.724] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.724] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.724] CryptDestroyKey (hKey=0x55e910) returned 1 [0288.724] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0288.724] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\1033\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x50033ab6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0288.724] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x50033ab6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.724] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50033ab6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50033ab6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50033ab6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.725] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50033ab6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50033ab6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50033ab6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.725] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0288.725] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5000efbf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5000efbf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5000efbf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.725] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5000efbf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5000efbf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5000efbf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.725] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0288.725] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ffea305, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4ffea305, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5000efbf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.725] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SmartArt Graphics", cAlternateFileName="SMARTA~1")) returned 1 [0288.725] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.725] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.725] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.725] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.725] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.725] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570eb8) returned 1 [0288.726] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0288.726] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.726] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e7d0) returned 1 [0288.726] CryptDestroyHash (hHash=0x55e790) returned 1 [0288.726] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0288.726] GetLastError () returned 0x0 [0288.726] GetLastError () returned 0x0 [0288.726] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.727] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0288.729] WriteFile (in: hFile=0x258, lpBuffer=0x23e36e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e36e4*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.730] SetEndOfFile (hFile=0x258) returned 1 [0288.730] CloseHandle (hObject=0x258) returned 1 [0288.730] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.733] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.733] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0288.733] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.733] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.733] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.733] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.734] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.734] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.734] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.734] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.734] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.734] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.734] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.734] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.735] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.735] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0288.735] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0288.735] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x50033ab6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0288.735] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x50033ab6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.735] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96e30af9, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0288.735] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.735] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.736] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.736] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.736] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0288.736] CryptAcquireContextA (in: phProv=0x19e57c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e57c*=0x571270) returned 1 [0288.736] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e534 | out: phHash=0x19e534) returned 1 [0288.736] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.736] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19e578 | out: phKey=0x19e578*=0x55e910) returned 1 [0288.736] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0288.737] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19e588*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19e588*=0x18) returned 1 [0288.737] GetLastError () returned 0x0 [0288.737] GetLastError () returned 0x0 [0288.737] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.737] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\1033\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c [0288.738] WriteFile (in: hFile=0x25c, lpBuffer=0x23e36f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e2b0, lpOverlapped=0x0 | out: lpBuffer=0x23e36f4*, lpNumberOfBytesWritten=0x19e2b0*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.740] SetEndOfFile (hFile=0x25c) returned 1 [0288.740] CloseHandle (hObject=0x25c) returned 1 [0288.740] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.741] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.741] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0288.741] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.741] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.741] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.741] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.742] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.742] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.742] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.742] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.742] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.742] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.742] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.742] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.742] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.742] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.742] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.742] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.743] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.743] CryptDestroyKey (hKey=0x55e910) returned 1 [0288.743] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0288.743] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\SmartArt Graphics\\1033\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\smartart graphics\\1033\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5005a1a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0288.743] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e30af9, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5005a1a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.743] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5005a1a3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5005a1a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5005a1a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.743] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5005a1a3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5005a1a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5005a1a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.743] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0288.743] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50033ab6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50033ab6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50033ab6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.743] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50033ab6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50033ab6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50033ab6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.743] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0288.744] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96dfa773, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96dfa773, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Word Document Bibliography Styles", cAlternateFileName="WORDDO~1")) returned 1 [0288.744] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.744] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.744] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.744] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.744] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0288.744] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x570748) returned 1 [0288.745] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0288.745] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.745] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e7d0) returned 1 [0288.745] CryptDestroyHash (hHash=0x55e790) returned 1 [0288.745] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0288.745] GetLastError () returned 0x0 [0288.745] GetLastError () returned 0x0 [0288.745] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.745] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Word Document Bibliography Styles\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\word document bibliography styles\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0288.751] WriteFile (in: hFile=0x258, lpBuffer=0x23e3734*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3734*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.752] SetEndOfFile (hFile=0x258) returned 1 [0288.752] CloseHandle (hObject=0x258) returned 1 [0288.752] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.753] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.753] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0288.753] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.754] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.754] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.754] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.754] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.754] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.755] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.755] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.755] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.755] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.755] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.755] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0288.756] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0288.756] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Word Document Bibliography Styles\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\word document bibliography styles\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96dfa773, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5005a1a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0288.756] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96dfa773, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x5005a1a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.756] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5005a1a3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5005a1a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50089172, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.756] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5005a1a3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5005a1a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50089172, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.756] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0288.759] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Word Document Building Blocks", cAlternateFileName="WORDDO~2")) returned 1 [0288.759] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.759] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.760] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.760] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.760] CryptAcquireContextA (in: phProv=0x19e7e4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e7e4*=0x571408) returned 1 [0288.761] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e79c | out: phHash=0x19e79c) returned 1 [0288.761] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.761] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19e7e0 | out: phKey=0x19e7e0*=0x55e790) returned 1 [0288.761] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.761] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19e7f0*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19e7f0*=0x18) returned 1 [0288.761] GetLastError () returned 0x0 [0288.761] GetLastError () returned 0x0 [0288.761] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.762] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Word Document Building Blocks\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\word document building blocks\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x258 [0288.763] WriteFile (in: hFile=0x258, lpBuffer=0x23e3774*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e518, lpOverlapped=0x0 | out: lpBuffer=0x23e3774*, lpNumberOfBytesWritten=0x19e518*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.764] SetEndOfFile (hFile=0x258) returned 1 [0288.765] CloseHandle (hObject=0x258) returned 1 [0288.765] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.766] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.766] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.766] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.766] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.766] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0288.767] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.767] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.767] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.767] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.767] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.767] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.768] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.768] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.768] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.768] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.768] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.768] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.769] CryptDestroyKey (hKey=0x55e790) returned 1 [0288.769] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0288.769] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Word Document Building Blocks\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\word document building blocks\\*.*"), lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x50089172, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0288.769] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x50089172, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.769] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0288.769] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.769] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.770] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.770] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.770] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.770] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0288.770] CryptAcquireContextA (in: phProv=0x19e57c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19e57c*=0x570b00) returned 1 [0288.771] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19e534 | out: phHash=0x19e534) returned 1 [0288.771] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.771] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19e578 | out: phKey=0x19e578*=0x55e390) returned 1 [0288.771] CryptDestroyHash (hHash=0x55e790) returned 1 [0288.771] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19e588*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19e588*=0x18) returned 1 [0288.771] GetLastError () returned 0x0 [0288.771] GetLastError () returned 0x0 [0288.771] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.772] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Word Document Building Blocks\\1033\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\word document building blocks\\1033\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x25c [0288.773] WriteFile (in: hFile=0x25c, lpBuffer=0x23e37b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e2b0, lpOverlapped=0x0 | out: lpBuffer=0x23e37b4*, lpNumberOfBytesWritten=0x19e2b0*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.775] SetEndOfFile (hFile=0x25c) returned 1 [0288.775] CloseHandle (hObject=0x25c) returned 1 [0288.775] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.776] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.776] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.776] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.776] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.776] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0288.777] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.777] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.777] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.777] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.777] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.778] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.780] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.780] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.780] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.780] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.780] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.780] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.780] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.781] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.781] CryptDestroyKey (hKey=0x55e390) returned 1 [0288.781] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0288.781] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Word Document Building Blocks\\1033\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\word document building blocks\\1033\\*.*"), lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x500a6242, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0288.781] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x500a6242, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.781] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500a6242, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x500a6242, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x500a6242, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.781] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19e530 | out: lpFindFileData=0x19e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500a6242, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x500a6242, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x500a6242, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.782] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0288.782] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50089172, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50089172, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x500a6242, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.782] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19e798 | out: lpFindFileData=0x19e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50089172, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50089172, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x500a6242, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.782] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0288.782] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec9752, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96ec9752, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Word Document Building Blocks", cAlternateFileName="WORDDO~2")) returned 0 [0288.782] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0288.782] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfa773, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x96e30af9, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0x96ec9752, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d7563, dwReserved1=0x4220746e, cFileName="User", cAlternateFileName="")) returned 0 [0288.782] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0288.782] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fedc60b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fedc60b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fedc60b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.782] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fedc60b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4fedc60b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4fedc60b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.782] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0288.782] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4614163, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4614163, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa46a67ce, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4641, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0288.782] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4614163, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0xa4614163, ftLastAccessTime.dwHighDateTime=0x1d705ee, ftLastWriteTime.dwLowDateTime=0xa46a67ce, ftLastWriteTime.dwHighDateTime=0x1d705ee, nFileSizeHigh=0x0, nFileSizeLow=0x4641, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 0 [0288.783] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0288.783] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0xb898985, ftLastWriteTime.dwHighDateTime=0x1d70071, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6d746f64, dwReserved1=0x5f4f545f, cFileName="Vault", cAlternateFileName="")) returned 1 [0288.783] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.783] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.783] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.783] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0288.783] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570a78) returned 1 [0288.784] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.784] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.784] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e790) returned 1 [0288.784] CryptDestroyHash (hHash=0x55e650) returned 1 [0288.784] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.784] GetLastError () returned 0x0 [0288.784] GetLastError () returned 0x0 [0288.784] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.785] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\vault\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.786] WriteFile (in: hFile=0x248, lpBuffer=0x23e37c4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e37c4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.788] SetEndOfFile (hFile=0x248) returned 1 [0288.788] CloseHandle (hObject=0x248) returned 1 [0288.788] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.789] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.789] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.789] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0288.789] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.789] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.790] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.790] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.790] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.790] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.790] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.790] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.790] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.790] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.790] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.790] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.790] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.790] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.791] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.791] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.791] CryptDestroyKey (hKey=0x55e790) returned 1 [0288.791] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0288.791] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Vault\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\vault\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x500cc558, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0288.792] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb898985, ftCreationTime.dwHighDateTime=0x1d70071, ftLastAccessTime.dwLowDateTime=0xb898985, ftLastAccessTime.dwHighDateTime=0x1d70071, ftLastWriteTime.dwLowDateTime=0x500cc558, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.792] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500cc558, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x500cc558, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x500cc558, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.792] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500cc558, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x500cc558, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x500cc558, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.792] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0288.792] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43708645, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43708645, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Windows", cAlternateFileName="")) returned 1 [0288.792] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.792] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.792] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.792] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.792] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.793] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571270) returned 1 [0288.793] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0288.793] CryptHashData (hHash=0x55e650, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.794] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e210) returned 1 [0288.794] CryptDestroyHash (hHash=0x55e650) returned 1 [0288.794] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f190*=0x18) returned 1 [0288.794] GetLastError () returned 0x0 [0288.794] GetLastError () returned 0x0 [0288.794] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.795] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0288.797] WriteFile (in: hFile=0x248, lpBuffer=0x23e3804*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3804*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.798] SetEndOfFile (hFile=0x248) returned 1 [0288.798] CloseHandle (hObject=0x248) returned 1 [0288.798] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.799] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.799] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.799] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.799] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0288.800] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.800] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.800] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.800] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.800] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.800] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.800] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.800] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.800] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.801] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.801] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.801] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.801] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.801] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.801] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.802] CryptDestroyKey (hKey=0x55e210) returned 1 [0288.802] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0288.802] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaeb77be3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x500f2764, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0288.802] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xaeb77be3, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x500f2764, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.802] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f968a16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f968a16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AccountPictures", cAlternateFileName="ACCOUN~1")) returned 1 [0288.802] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.802] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.802] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.802] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.802] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.803] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0288.803] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0288.803] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.803] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.803] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0288.803] CryptDestroyHash (hHash=0x55e710) returned 1 [0288.803] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.803] GetLastError () returned 0x0 [0288.804] GetLastError () returned 0x0 [0288.804] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.804] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\accountpictures\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.807] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3814*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3814*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.808] SetEndOfFile (hFile=0x24c) returned 1 [0288.808] CloseHandle (hObject=0x24c) returned 1 [0288.809] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.810] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.810] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.810] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.810] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.810] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.810] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0288.810] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.810] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.811] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.811] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.811] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.811] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.811] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.811] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.811] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.812] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.812] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.812] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.812] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.815] CryptDestroyKey (hKey=0x55e910) returned 1 [0288.815] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0288.815] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\accountpictures\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f968a16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x500f2764, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0288.816] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f968a16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x500f2764, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.816] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f968a16, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f968a16, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f968a16, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0288.816] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500f2764, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x500f2764, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x500f2764, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.816] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500f2764, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x500f2764, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x500f2764, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.816] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0288.816] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500f2764, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x500f2764, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x500f2764, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.816] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x4347fe61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f98eb29, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f98eb29, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0288.816] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.816] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.816] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.816] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.816] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.817] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0288.817] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5709f0) returned 1 [0288.817] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.817] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.817] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0288.817] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.817] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.818] GetLastError () returned 0x0 [0288.818] GetLastError () returned 0x0 [0288.818] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.818] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\libraries\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.820] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3854*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3854*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.821] SetEndOfFile (hFile=0x24c) returned 1 [0288.821] CloseHandle (hObject=0x24c) returned 1 [0288.821] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.822] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.822] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.822] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.822] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.822] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0288.823] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.823] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.823] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.823] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.823] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.823] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.824] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.824] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.824] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.824] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.824] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.824] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.824] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0288.824] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.824] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.824] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.824] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.827] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.827] CryptDestroyKey (hKey=0x55e710) returned 1 [0288.827] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0288.827] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\libraries\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x4347fe61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f98eb29, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x501193a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0288.828] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x4347fe61, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3f98eb29, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x501193a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.828] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b10dbc5, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b10dbc5, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b10dbc5, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x3fa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CameraRoll.library-ms", cAlternateFileName="CAMERA~1.LIB")) returned 1 [0288.828] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f98eb29, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f98eb29, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f98eb29, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0288.828] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43649a85, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4366fcc2, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43695fb2, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x858, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Documents.library-ms", cAlternateFileName="DOCUME~1.LIB")) returned 1 [0288.828] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501193a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x501193a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x501193a4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.828] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4372e947, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43754b80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43754b80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x82e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Music.library-ms", cAlternateFileName="MUSIC~1.LIB")) returned 1 [0288.828] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436bc315, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x436e2464, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x436e2464, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x83f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Pictures.library-ms", cAlternateFileName="PICTUR~1.LIB")) returned 1 [0288.828] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b1d2cc3, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x2b1d2cc3, ftLastAccessTime.dwHighDateTime=0x1d70504, ftLastWriteTime.dwLowDateTime=0x2b1d4063, ftLastWriteTime.dwHighDateTime=0x1d70504, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SavedPictures.library-ms", cAlternateFileName="SAVEDP~1.LIB")) returned 1 [0288.828] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434a60af, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435d73aa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435d73aa, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x84a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Videos.library-ms", cAlternateFileName="VIDEOS~1.LIB")) returned 1 [0288.828] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434a60af, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x435d73aa, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x435d73aa, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x84a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Videos.library-ms", cAlternateFileName="VIDEOS~1.LIB")) returned 0 [0288.828] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0288.828] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7262696c, dwReserved1=0x2d797261, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1 [0288.828] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.828] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.828] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.829] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.829] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.829] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.829] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570e30) returned 1 [0288.829] CryptCreateHash (in: hProv=0x570e30, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.829] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.830] CryptDeriveKey (in: hProv=0x570e30, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0288.830] CryptDestroyHash (hHash=0x55e710) returned 1 [0288.830] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.830] GetLastError () returned 0x0 [0288.830] GetLastError () returned 0x0 [0288.830] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.830] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\network shortcuts\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.835] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3864*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3864*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.836] SetEndOfFile (hFile=0x24c) returned 1 [0288.841] CloseHandle (hObject=0x24c) returned 1 [0288.841] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.842] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.842] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.843] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0288.843] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.843] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.843] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.844] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.844] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.844] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.844] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.844] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.844] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.844] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.844] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.844] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.845] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.845] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.845] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.845] CryptDestroyKey (hKey=0x55e750) returned 1 [0288.845] CryptReleaseContext (hProv=0x570e30, dwFlags=0x0) returned 1 [0288.845] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\network shortcuts\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5013eb99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0288.845] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5013eb99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.845] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5013eb99, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5013eb99, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5013eb99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.846] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5013eb99, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5013eb99, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5013eb99, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.846] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0288.846] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1 [0288.846] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.846] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.846] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.846] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.846] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.846] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0288.846] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0288.847] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.847] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.847] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e210) returned 1 [0288.847] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.847] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.847] GetLastError () returned 0x0 [0288.847] GetLastError () returned 0x0 [0288.847] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.848] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\printer shortcuts\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.850] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38a4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38a4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.851] SetEndOfFile (hFile=0x24c) returned 1 [0288.851] CloseHandle (hObject=0x24c) returned 1 [0288.851] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.852] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.853] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.853] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.853] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.854] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.854] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.854] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.854] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.854] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.854] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.855] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.855] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.855] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.855] CryptDestroyKey (hKey=0x55e210) returned 1 [0288.855] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0288.855] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\printer shortcuts\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x50164d02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0288.855] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x50164d02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.855] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50164d02, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50164d02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50164d02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.856] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50164d02, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50164d02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50164d02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.856] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0288.856] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40802fbe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40802fbe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Recent", cAlternateFileName="")) returned 1 [0288.856] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.856] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.856] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.856] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.856] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.857] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.857] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5707d0) returned 1 [0288.857] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.857] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.857] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0288.857] CryptDestroyHash (hHash=0x55e710) returned 1 [0288.857] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.858] GetLastError () returned 0x0 [0288.858] GetLastError () returned 0x0 [0288.858] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.858] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.860] WriteFile (in: hFile=0x24c, lpBuffer=0x23e38b4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e38b4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.861] SetEndOfFile (hFile=0x24c) returned 1 [0288.861] CloseHandle (hObject=0x24c) returned 1 [0288.861] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.863] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.863] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.863] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.863] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0288.863] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.863] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.864] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.864] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.864] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.864] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.864] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.864] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.864] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.864] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.864] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.864] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.864] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.864] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.865] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.865] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.865] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.865] CryptDestroyKey (hKey=0x55e750) returned 1 [0288.865] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0288.865] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40802fbe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5018b2fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40802fbe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5018b2fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f9b4ef0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f9b4ef0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f9b4ef0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x273, dwReserved0=0x405534, dwReserved1=0x0, cFileName="-8dlx0wewoZ_y4Htiby.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="-8DLX0~1.CRY")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f9b4ef0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f9b4ef0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f9b4ef0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x418, dwReserved0=0x405534, dwReserved1=0x0, cFileName="-FRX5OOzUmfVjJcHf_DE.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="-FRX5O~1.CRY")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f9db0d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f9db0d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f9db0d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x405534, dwReserved1=0x0, cFileName="-QEWNDo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="-QEWND~1.CRY")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f9db0d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3f9db0d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3f9db0d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0oOW.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="0OOWLN~1.CRY")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa01406, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fa01406, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fa01406, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x405534, dwReserved1=0x0, cFileName="10Dj0NoHfl1fRCzJ80-K.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="10DJ0N~1.CRY")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa01406, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fa01406, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fa01406, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1NWhODXrGU7fJ4svX5as.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="1NWHOD~1.CRY")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa27590, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fa27590, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fa27590, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3ff, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1obvxKB7GQj04t1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="1OBVXK~1.CRY")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa53c98, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fa53c98, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fa53c98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3e4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="270n1ChiZI_1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="270N1C~1.CRY")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa53c98, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fa53c98, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fa73a2f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3fa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2KVS--9w1I7HQQG.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="2KVS--~1.CRY")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa73a2f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fa73a2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fa73a2f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="3Fk41qKybaiEKn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="3FK41Q~1.CRY")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa73a2f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fa73a2f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fa73a2f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="4vz-qweGNEXago h.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="4VZ-QW~1.CRY")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa99dc8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fa99dc8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fa99dc8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6b8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5iATZtFB1RdzznP.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="5IATZT~1.CRY")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fa99dc8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fa99dc8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fa99dc8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x48a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6HqpTudWoWceVCJqYhCX.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="6HQPTU~1.CRY")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fae6271, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fae6271, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fae6271, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6MHrGlVxhYS.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="6MHRGL~1.CRY")) returned 1 [0288.866] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fae6271, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fae6271, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fae6271, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7eWaq5.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="7EWAQ5~1.CRY")) returned 1 [0288.867] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fae6271, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fae6271, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fb0c362, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7lbgTAC0tGktM8kIYBG.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="7LBGTA~1.CRY")) returned 1 [0288.867] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb0c362, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fb0c362, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fb0c362, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3c1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="8adwgo6-Bnt-dki97r.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="8ADWGO~1.CRY")) returned 1 [0288.867] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb0c362, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fb0c362, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fb325c1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x564, dwReserved0=0x405534, dwReserved1=0x0, cFileName="8gkv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="8GKVLN~1.CRY")) returned 1 [0288.867] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb325c1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fb325c1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fb325c1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3c6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="95RH.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="95RHLN~1.CRY")) returned 1 [0288.867] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fba4b95, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fba4b95, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fbcaf67, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9bUTXvZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="9BUTXV~1.CRY")) returned 1 [0288.867] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbcaf67, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fbcaf67, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fbcaf67, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9xZXIJPvpfTMPJSEH.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="9XZXIJ~1.CRY")) returned 1 [0288.867] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbcaf67, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fbcaf67, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fbcaf67, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AFlQACoQ_XkZ5Kbtg.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AFLQAC~1.CRY")) returned 1 [0288.867] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbf11a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fbf11a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fbf11a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x700, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AiBxNvuTw_1M7cqH.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AIBXNV~1.CRY")) returned 1 [0288.867] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fbf11a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fbf11a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fbf11a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ALx4yvVwcZQdL.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ALX4YV~1.CRY")) returned 1 [0288.867] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc175d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fc175d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fc175d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x56c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AOn1rEEg25j0A.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AON1RE~1.CRY")) returned 1 [0288.867] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc175d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fc175d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fc175d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4ab, dwReserved0=0x405534, dwReserved1=0x0, cFileName="aQdi_mAs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AQDI_M~1.CRY")) returned 1 [0288.867] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad1fc938, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xfc9bc882, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9bc882, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AutomaticDestinations", cAlternateFileName="AUTOMA~1")) returned 1 [0288.867] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.867] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.868] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.868] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.868] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.868] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571408) returned 1 [0288.868] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0288.869] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.869] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e750) returned 1 [0288.869] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.869] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0288.869] GetLastError () returned 0x0 [0288.869] GetLastError () returned 0x0 [0288.869] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.869] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0288.871] WriteFile (in: hFile=0x250, lpBuffer=0x23e38f4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e38f4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.875] SetEndOfFile (hFile=0x250) returned 1 [0288.875] CloseHandle (hObject=0x250) returned 1 [0288.875] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.877] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.877] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.877] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.877] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0288.886] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.886] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.886] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.886] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.886] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.887] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.887] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.887] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.887] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.887] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.890] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0288.890] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.890] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.890] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.890] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.890] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.891] CryptDestroyKey (hKey=0x55e750) returned 1 [0288.891] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0288.891] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad1fc938, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xfc9bc882, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x5018b2fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0288.891] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad1fc938, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xfc9bc882, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0x5018b2fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.891] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc7c4616, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc7c4616, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc7ce3f1, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="162797d679096999.automaticDestinations-ms", cAlternateFileName="162797~1.AUT")) returned 1 [0288.891] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc865920, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc865920, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc866bda, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1b6ebacd7cd2f25a.automaticDestinations-ms", cAlternateFileName="1B6EBA~1.AUT")) returned 1 [0288.891] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc8e0cb1, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc8e0cb1, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc8ea8a2, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1bc9bbbe61f14501.automaticDestinations-ms", cAlternateFileName="1BC9BB~1.AUT")) returned 1 [0288.893] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc687169, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc687169, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc6980f1, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="319f01bf9fe00f2d.automaticDestinations-ms", cAlternateFileName="319F01~1.AUT")) returned 1 [0288.893] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc806631, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc806631, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc80b397, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5175b273ceba776b.automaticDestinations-ms", cAlternateFileName="5175B2~1.AUT")) returned 1 [0288.893] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cccb199, ftCreationTime.dwHighDateTime=0x1d7006c, ftLastAccessTime.dwLowDateTime=0x7cccb199, ftLastAccessTime.dwHighDateTime=0x1d7006c, ftLastWriteTime.dwLowDateTime=0x2b75487f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2b304, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5f7b5f1e01b83767.automaticDestinations-ms", cAlternateFileName="5F7B5F~1.AUT")) returned 1 [0288.893] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc79fc22, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc79fc22, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc7a247f, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="61ebb1e65cfcb8da.automaticDestinations-ms", cAlternateFileName="61EBB1~1.AUT")) returned 1 [0288.893] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc90b8b4, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc90b8b4, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc90cbd6, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6d2bac8f1edf6668.automaticDestinations-ms", cAlternateFileName="6D2BAC~1.AUT")) returned 1 [0288.893] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc89da90, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc89da90, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc89ee20, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="75668a91ce73b054.automaticDestinations-ms", cAlternateFileName="75668A~1.AUT")) returned 1 [0288.893] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc997ea6, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc997ea6, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9992be, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="78f0afb5bd4bb278.automaticDestinations-ms", cAlternateFileName="78F0AF~1.AUT")) returned 1 [0288.893] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6597e99, ftCreationTime.dwHighDateTime=0x1d70070, ftLastAccessTime.dwLowDateTime=0xd6597e99, ftLastAccessTime.dwHighDateTime=0x1d70070, ftLastWriteTime.dwLowDateTime=0xbaf4e259, ftLastWriteTime.dwHighDateTime=0x1d7b056, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7e4dca80246863e3.automaticDestinations-ms", cAlternateFileName="7E4DCA~1.AUT")) returned 1 [0288.893] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc840e11, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc840e11, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc842181, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="80d13f95c2c02af9.automaticDestinations-ms", cAlternateFileName="80D13F~1.AUT")) returned 1 [0288.893] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc96abfa, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc96abfa, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc96bf6b, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9c08ad74ad8708df.automaticDestinations-ms", cAlternateFileName="9C08AD~1.AUT")) returned 1 [0288.893] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc7568e2, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc7568e2, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc757bed, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9cfafb05ce914942.automaticDestinations-ms", cAlternateFileName="9CFAFB~1.AUT")) returned 1 [0288.893] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a384c9, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x4a384c9, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x4af7079, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9d1f905ce5044aee.automaticDestinations-ms", cAlternateFileName="9D1F90~1.AUT")) returned 1 [0288.894] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc6eb1d2, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc6eb1d2, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc6ec503, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="b8ab77100df80ab2.automaticDestinations-ms", cAlternateFileName="B8AB77~1.AUT")) returned 1 [0288.894] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc72bcc8, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc72bcc8, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc72d15e, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="b8b3a97bfbf120b6.automaticDestinations-ms", cAlternateFileName="B8B3A9~1.AUT")) returned 1 [0288.894] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc944e34, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc944e34, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9475f5, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="d00655d2aa12ff6d.automaticDestinations-ms", cAlternateFileName="D00655~1.AUT")) returned 1 [0288.894] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad222b42, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad222b42, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x2b62368e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="f01b4d95cf55d32a.automaticDestinations-ms", cAlternateFileName="F01B4D~1.AUT")) returned 1 [0288.894] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc9bc882, ftCreationTime.dwHighDateTime=0x1d8a64a, ftLastAccessTime.dwLowDateTime=0xfc9bc882, ftLastAccessTime.dwHighDateTime=0x1d8a64a, ftLastWriteTime.dwLowDateTime=0xfc9bef75, ftLastWriteTime.dwHighDateTime=0x1d8a64a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x405534, dwReserved1=0x0, cFileName="fb3b0dbfee58fac8.automaticDestinations-ms", cAlternateFileName="FB3B0D~1.AUT")) returned 1 [0288.894] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5018b2fa, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5018b2fa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x501b1312, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.894] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5018b2fa, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5018b2fa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x501b1312, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.894] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0288.895] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc6394b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fc6394b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fc6394b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="AV_xxjsK txE9KQ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AV_XXJ~1.CRY")) returned 1 [0288.895] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc6394b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fc6394b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fcafd4d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="BdHdcndlyia--o2TJO.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="BDHDCN~1.CRY")) returned 1 [0288.895] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fcd5fff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fcd5fff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fcd5fff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="BEL0Hf.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="BEL0HF~1.CRY")) returned 1 [0288.895] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fcd5fff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fcd5fff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fcd5fff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="BJW1-4TBmjzVeS tFS.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="BJW1-4~1.CRY")) returned 1 [0288.895] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fcfc479, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fcfc479, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fcfc479, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="boIZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="BOIZLN~1.CRY")) returned 1 [0288.895] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fd2cd4f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fd2cd4f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fd2cd4f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="BRFxsko.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="BRFXSK~1.CRY")) returned 1 [0288.895] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fd2cd4f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fd2cd4f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fd4871f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="BuEKJlvF9UEYrFNSTJA.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="BUEKJL~1.CRY")) returned 1 [0288.895] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fd6e96f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fd6e96f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fd6e96f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x40f, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="C lTvIFLCLEIOs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CLTVIF~1.CRY")) returned 1 [0288.895] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fd6e96f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fd6e96f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fd94b80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="CHKfwx_.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CHKFWX~1.CRY")) returned 1 [0288.895] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fd94b80, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fd94b80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fd94b80, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x687, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Cms8gjs.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CMS8GJ~1.CRY")) returned 1 [0288.896] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fd94b80, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fd94b80, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fdbadff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Common Files.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="COMMON~1.CRY")) returned 1 [0288.896] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad222b42, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x83fbd036, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x83fbd036, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="CustomDestinations", cAlternateFileName="CUSTOM~1")) returned 1 [0288.896] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.896] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.896] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.896] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.896] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0288.896] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571518) returned 1 [0288.898] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0288.898] CryptHashData (hHash=0x55e390, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.898] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e910) returned 1 [0288.898] CryptDestroyHash (hHash=0x55e390) returned 1 [0288.898] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0288.898] GetLastError () returned 0x0 [0288.898] GetLastError () returned 0x0 [0288.898] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.899] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0288.902] WriteFile (in: hFile=0x250, lpBuffer=0x23e3904*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3904*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.904] SetEndOfFile (hFile=0x250) returned 1 [0288.904] CloseHandle (hObject=0x250) returned 1 [0288.904] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.906] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.906] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.906] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.906] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.906] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.907] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.907] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.907] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.907] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.908] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.908] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.908] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.908] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.909] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.909] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.909] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.909] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.909] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.909] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.910] CryptDestroyKey (hKey=0x55e910) returned 1 [0288.910] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0288.910] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad222b42, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x83fbd036, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x501f85f4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0288.911] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad222b42, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x83fbd036, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x501f85f4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.911] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad45eebc, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad45eebc, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad45eebc, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7e4dca80246863e3.customDestinations-ms", cAlternateFileName="7E4DCA~1.CUS")) returned 1 [0288.911] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83f96e92, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x83f96e92, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x83fbd036, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x24e0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9149d0f5ebf7f710.customDestinations-ms", cAlternateFileName="9149D0~1.CUS")) returned 1 [0288.911] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aee66, ftCreationTime.dwHighDateTime=0x1d70460, ftLastAccessTime.dwLowDateTime=0x40aee66, ftLastAccessTime.dwHighDateTime=0x1d70460, ftLastWriteTime.dwLowDateTime=0x40aee66, ftLastWriteTime.dwHighDateTime=0x1d70460, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9d1f905ce5044aee.customDestinations-ms", cAlternateFileName="9D1F90~1.CUS")) returned 1 [0288.911] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad222b42, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xad222b42, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0xad222b42, ftLastWriteTime.dwHighDateTime=0x1d7006b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x405534, dwReserved1=0x0, cFileName="f01b4d95cf55d32a.customDestinations-ms", cAlternateFileName="F01B4D~1.CUS")) returned 1 [0288.911] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501f85f4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x501f85f4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x501ffb09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.911] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501f85f4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x501f85f4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x501ffb09, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0288.911] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0288.911] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdbadff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fdbadff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fdbadff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Daw XG.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DAWXGL~1.CRY")) returned 1 [0288.911] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fde10de, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fde10de, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fde10de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0288.911] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fde10de, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fde10de, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fe072f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3d7, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="DkWdW-k.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DKWDW-~1.CRY")) returned 1 [0288.911] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe072f1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fe072f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fe072f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="dsd4xng9Vd1K.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DSD4XN~1.CRY")) returned 1 [0288.911] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe072f1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fe072f1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fe072f1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="dTBWs5OPc_Ez8klubHY.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DTBWS5~1.CRY")) returned 1 [0288.911] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe2d58a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fe2d58a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fe2d58a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="EH1JpmpeO46ag.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EH1JPM~1.CRY")) returned 1 [0288.911] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe2d58a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fe2d58a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fe2d58a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ExGkHXAjJlu-KbVwYaT.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EXGKHX~1.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe53793, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fe53793, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fe53793, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="fBcb0Eywdbm (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FBCB0E~1.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe53793, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fe53793, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fe53793, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="fBcb0Eywdbm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FBCB0E~2.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe7995e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fe7995e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fe7995e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="FThXpfrBZPMJLX.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FTHXPF~1.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe7995e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fe7995e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fe7995e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="fTLHb2oaa.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FTLHB2~1.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe7995e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fe7995e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fe9fb6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="fxGkChym_qpotd.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FXGKCH~1.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe9fb6b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fe9fb6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fe9fb6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3cb, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="gHRER.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GHRERL~1.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe9fb6b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fe9fb6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fec5ee4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3e9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="gJbDSP9uu5zxm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GJBDSP~1.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fec5ee4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fec5ee4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fec5ee4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x407, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="GT MqBo1IsSDe6tEL9w.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GTMQBO~1.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3feec093, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3feec093, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3feec093, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="GTVE7s8yay vT.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GTVE7S~1.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3feec093, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3feec093, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3feec093, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x46c, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="gzCcmy5r.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GZCCMY~1.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3feec093, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3feec093, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3ff122f2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="HIjE Bz.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="HIJEBZ~1.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ff122f2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3ff122f2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3ff122f2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x67d, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="hjW1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="HJW1LN~1.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ff122f2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3ff122f2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3ff3858f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IEEEJcQHB4cvJ_cdO_.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IEEEJC~1.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5018b2fa, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5018b2fa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5018b2fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ff3858f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3ff3858f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3ff3858f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IHUUW_UC0Nn8T.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IHUUW_~1.CRY")) returned 1 [0288.912] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ff3858f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3ff3858f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3ff5e7d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IK2lOrscFawass.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IK2LOR~1.CRY")) returned 1 [0288.913] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ff5e7d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3ff5e7d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3ff5e7d0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="iV1eysp19dqsXKWg2u0.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IV1EYS~1.CRY")) returned 1 [0288.913] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ff5e7d0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3ff5e7d0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3ff84a52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IzC9E.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IZC9EL~1.CRY")) returned 1 [0288.913] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ff84a52, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3ff84a52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3ff84a52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x38a, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="JAB0S_rGExV_SLJ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="JAB0S_~1.CRY")) returned 1 [0288.913] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ff84a52, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3ff84a52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3ffaaccb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3e6, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="k _jfq9EKV.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="K_JFQ9~1.CRY")) returned 1 [0288.913] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffaaccb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3ffaaccb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3ffaaccb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="k2jJ-.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="K2JJ-L~1.CRY")) returned 1 [0288.913] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffd0fa9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3ffd0fa9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3ffd0fa9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kfd4AT641M9lZzo.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="KFD4AT~1.CRY")) returned 1 [0288.913] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffd0fa9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3ffd0fa9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3ffd0fa9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Khe4uWhPkS4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="KHE4UW~1.CRY")) returned 1 [0288.913] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fff7206, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fff7206, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fff7206, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x405, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="kQZZ OvT-A19.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="KQZZOV~1.CRY")) returned 1 [0288.913] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fff7206, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x3fff7206, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x3fff7206, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LEWorMp4uRNygtAMs5 (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="LEWORM~1.CRY")) returned 1 [0288.913] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4001d408, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4001d408, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4001d408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LEWorMp4uRNygtAMs5.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="LEWORM~2.CRY")) returned 1 [0288.913] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4001d408, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4001d408, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4001d408, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6a4, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LyzxRwKCPSt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="LYZXRW~1.CRY")) returned 1 [0288.913] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40043eca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40043eca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40043eca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3cb, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="m299G.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="M299GL~1.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40043eca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40043eca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40043eca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mbzzavocx5tumDy.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MBZZAV~1.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400698c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x400698c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x400698c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="MNH8zaGFzoVYD5Z6B.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MNH8ZA~1.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x400698c8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x400698c8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x400698c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Mnnvfs8UvOlcl.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MNNVFS~1.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4008fc60, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4008fc60, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4008fc60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="msy2N7n2 mhY (2).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MSY2N7~1.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4008fc60, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4008fc60, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4014e747, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="msy2N7n2 mhY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MSY2N7~2.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4014e747, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4014e747, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x401748a1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4fe, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mt1d10co8b8orGro7.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MT1D10~1.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401748a1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x401748a1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x401748a1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="mTRn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MTRNLN~1.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401748a1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x401748a1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4019aab5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2f2, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Music.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MUSICL~1.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4019aab5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4019aab5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4019aab5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x413, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="N5qOeuBE2tNgsag QcZm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="N5QOEU~1.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4019aab5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4019aab5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x401c0dd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3c5, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="n8JDFGSB2.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="N8JDFG~1.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401c0dd1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x401c0dd1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x401c0dd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="nE6sHIObtlA7xNApjaL4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NE6SHI~1.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401c0dd1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x401c0dd1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x401e6e52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="NoXrRHISMhJBNo0cfL.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NOXRRH~1.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x401e6e52, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x401e6e52, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x401e6e52, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6b3, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="NquTqUFX3Dwb1.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NQUTQU~1.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4020d394, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4020d394, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4020d394, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x55c, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Nr0iCrSGwQMcpOn9gZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NR0ICR~1.CRY")) returned 1 [0288.914] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4020d394, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4020d394, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4020d394, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="OJKcISn3d2BAzwlafETu.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="OJKCIS~1.CRY")) returned 1 [0288.915] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x402595e5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x402595e5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x402595e5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="PAU1zPeoNTZTO1prSM.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PAU1ZP~1.CRY")) returned 1 [0288.915] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x402595e5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x402595e5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x402595e5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="PcrR2Lm.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PCRR2L~1.CRY")) returned 1 [0288.915] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4027f8cf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4027f8cf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4027f8cf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x305, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Pictures.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PICTUR~1.CRY")) returned 1 [0288.915] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x402cbd5c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x402cbd5c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x402cbd5c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="pjxi.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PJXILN~1.CRY")) returned 1 [0288.915] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x402cbd5c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x402cbd5c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x402cbd5c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="pR186criUq8W6F.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PR186C~1.CRY")) returned 1 [0288.915] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x402f206d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x402f206d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x402f206d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x60f, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="QhgY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="QHGYLN~1.CRY")) returned 1 [0288.916] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x402f206d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x402f206d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x402f206d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="qJQGc1JI O8.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="QJQGC1~1.CRY")) returned 1 [0288.916] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x403181c6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x403181c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x403181c6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="QSer_RfUObTRfZ-i.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="QSER_R~1.CRY")) returned 1 [0288.916] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x403181c6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x403181c6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4033e5f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x476, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="qZUaC4VwVU.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="QZUAC4~1.CRY")) returned 1 [0288.916] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4033e5f5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4033e5f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4033e5f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RF70W9.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RF70W9~1.CRY")) returned 1 [0288.916] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4033e5f5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4033e5f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40364774, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6ca, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="rFTnkA9Jc0y6Km6KDmoJ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RFTNKA~1.CRY")) returned 1 [0288.916] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40364774, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40364774, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40364774, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4bd, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="rHA5Ynh D2qLJ.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RHA5YN~1.CRY")) returned 1 [0288.916] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40364774, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40364774, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x403d6ee8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Roaming.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ROAMIN~1.CRY")) returned 1 [0288.916] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x403d6ee8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x403d6ee8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x403d6ee8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RthKlZazZoygA81MZ.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RTHKLZ~1.CRY")) returned 1 [0288.916] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x403d6ee8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x403d6ee8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x403fd0a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="RW0X.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RW0XLN~1.CRY")) returned 1 [0288.916] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x403fd0a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x403fd0a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x403fd0a2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3e9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="rWi_LKN_vlOUM.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RWI_LK~1.CRY")) returned 1 [0288.923] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x403fd0a2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x403fd0a2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4042337d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3df, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="S22voOMZ0nN.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="S22VOO~1.CRY")) returned 1 [0288.923] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4042337d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4042337d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4042337d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x55f, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="s89b6.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="S89B6L~1.CRY")) returned 1 [0288.923] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4042337d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4042337d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4044958c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="sIWWQ-WC9.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SIWWQ-~1.CRY")) returned 1 [0288.923] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4044958c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4044958c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4044958c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="SU6aI2.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SU6AI2~1.CRY")) returned 1 [0288.923] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4044958c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4044958c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40470139, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="suj0H6VnG1d.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SUJ0H6~1.CRY")) returned 1 [0288.923] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40470139, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40470139, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40495a55, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x45d, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="t0tZUKO4i913ZI.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="T0TZUK~1.CRY")) returned 1 [0288.923] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40495a55, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40495a55, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40495a55, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="tf ZOqi-Uy kGkn5g.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TFZOQI~1.CRY")) returned 1 [0288.923] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40495a55, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40495a55, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x404bbd8a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="tJzY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TJZYLN~1.CRY")) returned 1 [0288.924] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404bbd8a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x404bbd8a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x404bbd8a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x55d, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="tMlj6-2of.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TMLJ6-~1.CRY")) returned 1 [0288.924] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404bbd8a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x404bbd8a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x404bbd8a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x614, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ToW_sv.ots.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TOW_SV~1.CRY")) returned 1 [0288.924] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404e1db8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x404e1db8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x404e1db8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Tyk8QAxzpbww82Wlk.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TYK8QA~1.CRY")) returned 1 [0288.924] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404e1db8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x404e1db8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x404e1db8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="u1C0tTQR_1SPifEt0TEn.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="U1C0TT~1.CRY")) returned 1 [0288.924] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x404e1db8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x404e1db8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40508133, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="U8r288JvxsAlu2vt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="U8R288~1.CRY")) returned 1 [0288.924] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40508133, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40508133, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40508133, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x69d, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="udCFH17BURL.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UDCFH1~1.CRY")) returned 1 [0288.925] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40508133, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40508133, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40508133, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="usItM.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USITML~1.CRY")) returned 1 [0288.925] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4052e3a9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4052e3a9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4052e3a9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="uuLOLCY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UULOLC~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4052e3a9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4052e3a9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4052e3a9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x48f, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="uz_9Msior_qUWWI.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UZ_9MS~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40554619, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40554619, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40554619, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="v-hS0ZFeO.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="V-HS0Z~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40554619, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40554619, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40554619, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="v4YCbLNj.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="V4YCBL~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40554619, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40554619, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4057a87d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3e1, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="VD4qBAi.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VD4QBA~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4057a87d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4057a87d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4057a87d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x413, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="vezPmeybY48YDb4rAa6.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VEZPME~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4057a87d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4057a87d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4057a87d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2f9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Videos.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VIDEOS~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x405a0acf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x405a0acf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x405a0acf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="VlzDVW69dNfCp zkR.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VLZDVW~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x405a0acf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x405a0acf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x405a0acf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="voQySJ4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VOQYSJ~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x405c6d36, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x405c6d36, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x405c6d36, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x382, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Vu4oRX8zmoARco.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VU4ORX~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x405c6d36, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x405c6d36, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x405c6d36, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Wfn55FaOLc2P-yaWvMX.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WFN55F~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x405c6d36, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x405c6d36, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x405ecf5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="WgUX39PHXYiqGx8CP.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WGUX39~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x405ecf5a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x405ecf5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x405ecf5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2a4, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="wL84FPIPRrjF.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WL84FP~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x405ecf5a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x405ecf5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x405ecf5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4a6, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Wnyk20dy85PKi.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WNYK20~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406394f7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x406394f7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x406394f7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x459, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="wrrB3.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WRRB3L~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406394f7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x406394f7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x406394f7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x409, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="X7Iini03CbUwi31eN.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="X7IINI~1.CRY")) returned 1 [0288.926] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406671ff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x406671ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x406671ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="xBS0G9T4s0KTw2EN.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="XBS0G9~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406671ff, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x406671ff, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x406671ff, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="XKTGJScA6wfs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="XKTGJS~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4068586d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4068586d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4068586d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="xRz0 CrxkDW.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="XRZ0CR~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4068586d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4068586d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4068586d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="yaRd.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="YARDLN~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406d1d72, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x406d1d72, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x406d1d72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4b5, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="yfv4lWxLPw.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="YFV4LW~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406d1d72, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x406d1d72, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x406d1d72, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ymTcIWR_gWH.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="YMTCIW~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406d1d72, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x406d1d72, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x406f7fc0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f5, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="yVSZ-e4lR27Ww.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="YVSZ-E~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406f7fc0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x406f7fc0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x406f7fc0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="YWKAsaltVFvRmuT6Bq.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="YWKASA~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x406f7fc0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x406f7fc0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4071e269, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="YyZCa.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="YYZCAF~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4071e269, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4071e269, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4071e269, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x409, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Z5y0BnViuyw9OKsWr.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="Z5Y0BN~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4071e269, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4071e269, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4071e269, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Zc1lfVUI5Sjl7oZcSD.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZC1LFV~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4079086f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4079086f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4079086f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x404, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="zggXaEqM7UQYVgQY.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZGGXAE~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4079086f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4079086f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4079086f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x456, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ZhhStph4.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZHHSTP~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x407b6c10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x407b6c10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x407b6c10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ZrVCQnLs.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZRVCQN~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x407b6c10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x407b6c10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x407dcec8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ZSGop.flv.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZSGOPF~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x407dcec8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x407dcec8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x407dcec8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3c6, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ztrelWGv875J1kOIbuq.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZTRELW~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40802fbe, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40802fbe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40802fbe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="_7kx8h.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="_7KX8H~1.CRY")) returned 1 [0288.927] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40802fbe, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40802fbe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40802fbe, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x373, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="_7kx8h.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="_7KX8H~1.CRY")) returned 0 [0288.928] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0288.928] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x408c1a5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x408c1a5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6b6e6c, dwReserved1=0x70797263, cFileName="SendTo", cAlternateFileName="")) returned 1 [0288.928] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.928] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.928] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.928] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.928] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.928] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571160) returned 1 [0288.929] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.929] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.929] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e790) returned 1 [0288.929] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.930] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.930] GetLastError () returned 0x0 [0288.930] GetLastError () returned 0x0 [0288.930] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.931] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\sendto\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.933] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3944*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3944*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.934] SetEndOfFile (hFile=0x24c) returned 1 [0288.935] CloseHandle (hObject=0x24c) returned 1 [0288.935] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.937] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.937] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.937] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.937] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.937] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.937] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0288.937] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.937] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.937] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.937] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.938] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.938] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.938] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.938] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.938] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.938] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.938] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.938] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.938] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.939] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.939] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.939] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.939] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.940] CryptDestroyKey (hKey=0x55e790) returned 1 [0288.940] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0288.940] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\sendto\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x408c1a5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50243d65, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0288.940] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x408c1a5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50243d65, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.940] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40802fbe, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40802fbe, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40829240, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x41f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Bluetooth File Transfer.LNK.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="BLUETO~1.CRY")) returned 1 [0288.940] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d02d92b, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d02d92b, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Compressed (zipped) Folder.ZFSendToTarget", cAlternateFileName="COMPRE~1.ZFS")) returned 1 [0288.940] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d00768a, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d00768a, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop (create shortcut).DeskLink", cAlternateFileName="DESKTO~1.DES")) returned 1 [0288.940] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40829240, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40829240, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40829240, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0288.940] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437ed538, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437ed538, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437ed538, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Documents.mydocs", cAlternateFileName="DOCUME~1.MYD")) returned 1 [0288.940] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40829240, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40829240, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x408c1a5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x458, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Fax Recipient.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FAXREC~1.CRY")) returned 1 [0288.940] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50242b5f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50242b5f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50249f7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.940] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cfe14e9, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cfe14e9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 1 [0288.940] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cfe14e9, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cfe14e9, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x973fb817, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Mail Recipient.MAPIMail", cAlternateFileName="MAILRE~1.MAP")) returned 0 [0288.940] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0288.941] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x408c1a5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x408c1a5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69706963, dwReserved1=0x2e746e65, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0288.941] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.941] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.941] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.941] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.941] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570858) returned 1 [0288.942] CryptCreateHash (in: hProv=0x570858, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0288.942] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.942] CryptDeriveKey (in: hProv=0x570858, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e750) returned 1 [0288.942] CryptDestroyHash (hHash=0x55e710) returned 1 [0288.942] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0288.942] GetLastError () returned 0x0 [0288.942] GetLastError () returned 0x0 [0288.942] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.943] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0288.946] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3984*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3984*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.948] SetEndOfFile (hFile=0x24c) returned 1 [0288.948] CloseHandle (hObject=0x24c) returned 1 [0288.948] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.949] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.949] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.949] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.949] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0288.950] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.950] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.950] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.950] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.950] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.950] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.950] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.950] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.950] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.951] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.951] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.951] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.951] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0288.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.951] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.951] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.951] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.951] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.953] CryptDestroyKey (hKey=0x55e750) returned 1 [0288.953] CryptReleaseContext (hProv=0x570858, dwFlags=0x0) returned 1 [0288.953] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x408c1a5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5024edd7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0288.953] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x408c1a5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5024edd7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.953] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x408c1a5a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x408c1a5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x408c1a5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0288.953] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5024edd7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5024edd7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5024edd7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.953] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x409ccc71, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x409ccc71, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1 [0288.954] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.954] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.954] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.954] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.954] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0288.954] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570748) returned 1 [0288.955] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0288.955] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.955] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e290) returned 1 [0288.955] CryptDestroyHash (hHash=0x55e710) returned 1 [0288.955] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0288.955] GetLastError () returned 0x0 [0288.955] GetLastError () returned 0x0 [0288.955] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.956] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0288.957] WriteFile (in: hFile=0x250, lpBuffer=0x23e3994*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3994*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.958] SetEndOfFile (hFile=0x250) returned 1 [0288.958] CloseHandle (hObject=0x250) returned 1 [0288.958] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.960] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.960] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.960] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.960] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0288.961] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.961] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.961] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.961] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.961] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.962] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.962] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.962] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.962] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.962] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.963] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.963] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.963] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.963] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.963] CryptDestroyKey (hKey=0x55e290) returned 1 [0288.963] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0288.963] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x409ccc71, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x502769ab, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0288.963] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x409ccc71, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x502769ab, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.964] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40934353, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40934353, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~2")) returned 1 [0288.964] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.964] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.964] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.964] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.964] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0288.964] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571408) returned 1 [0288.965] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0288.965] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.965] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e210) returned 1 [0288.965] CryptDestroyHash (hHash=0x55e910) returned 1 [0288.965] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ea58*=0x18) returned 1 [0288.965] GetLastError () returned 0x0 [0288.965] GetLastError () returned 0x0 [0288.965] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.966] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0288.967] WriteFile (in: hFile=0x254, lpBuffer=0x23e39d4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e39d4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.971] SetEndOfFile (hFile=0x254) returned 1 [0288.978] CloseHandle (hObject=0x254) returned 1 [0288.978] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.979] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.979] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.980] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.980] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.980] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0288.980] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.980] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.980] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.980] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0288.981] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.981] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.981] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.981] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.981] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0288.981] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0288.981] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0288.981] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.981] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0288.982] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0288.982] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0288.982] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.982] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.982] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0288.982] CryptDestroyKey (hKey=0x55e210) returned 1 [0288.982] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0288.982] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40934353, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x502769ab, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0288.983] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40934353, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x502769ab, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0288.983] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x408c1a5a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x408c1a5a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x408c1a5a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0288.983] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x502769ab, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x502769ab, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5029b60b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0288.983] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x408e7e57, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x408e7e57, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4090dedf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Magnify.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MAGNIF~1.CRY")) returned 1 [0288.983] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40934353, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40934353, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40934353, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Narrator.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NARRAT~1.CRY")) returned 1 [0288.983] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40934353, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40934353, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40934353, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x405534, dwReserved1=0x0, cFileName="On-Screen Keyboard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ON-SCR~1.CRY")) returned 1 [0288.983] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40934353, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40934353, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40934353, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x452, dwReserved0=0x405534, dwReserved1=0x0, cFileName="On-Screen Keyboard.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ON-SCR~1.CRY")) returned 0 [0288.984] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0288.989] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4095a4c1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4095a4c1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4b206e65, dwReserved1=0x6f627965, cFileName="Accessories", cAlternateFileName="ACCESS~1")) returned 1 [0288.989] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0288.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.989] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0288.989] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0288.989] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0288.990] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0288.990] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x5706c0) returned 1 [0288.990] CryptCreateHash (in: hProv=0x5706c0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0288.990] CryptHashData (hHash=0x55e750, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0288.990] CryptDeriveKey (in: hProv=0x5706c0, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e910) returned 1 [0288.991] CryptDestroyHash (hHash=0x55e750) returned 1 [0288.991] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ea58*=0x18) returned 1 [0288.991] GetLastError () returned 0x0 [0288.991] GetLastError () returned 0x0 [0288.991] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0288.991] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0288.993] WriteFile (in: hFile=0x254, lpBuffer=0x23e39e4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e39e4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0288.995] SetEndOfFile (hFile=0x254) returned 1 [0288.995] CloseHandle (hObject=0x254) returned 1 [0288.995] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0288.997] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.997] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.997] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0288.997] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0288.998] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0288.998] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0288.999] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0288.999] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.000] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.000] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.000] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.001] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.001] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.001] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.001] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.001] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.001] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0289.002] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.002] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.003] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.003] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.003] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.003] CryptDestroyKey (hKey=0x55e910) returned 1 [0289.003] CryptReleaseContext (hProv=0x5706c0, dwFlags=0x0) returned 1 [0289.003] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4095a4c1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x502c1963, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0289.003] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4095a4c1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x502c1963, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.004] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40934353, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40934353, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4095a4c1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.004] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x502c1963, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x502c1963, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x502c1963, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.004] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4095a4c1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4095a4c1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4095a4c1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x531, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Internet Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="INTERN~1.CRY")) returned 1 [0289.004] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4095a4c1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4095a4c1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4095a4c1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Notepad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NOTEPA~1.CRY")) returned 1 [0289.004] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4095a4c1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4095a4c1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4095a4c1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Notepad.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NOTEPA~1.CRY")) returned 0 [0289.004] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0289.004] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x409a6a27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x409a6a27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6b6e6c2e, dwReserved1=0x7972632e, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1 [0289.004] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.004] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.004] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.004] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.004] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0289.004] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571490) returned 1 [0289.005] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0289.005] CryptHashData (hHash=0x55e750, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.005] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e7d0) returned 1 [0289.005] CryptDestroyHash (hHash=0x55e750) returned 1 [0289.005] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ea58*=0x18) returned 1 [0289.005] GetLastError () returned 0x0 [0289.005] GetLastError () returned 0x0 [0289.005] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.006] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0289.009] WriteFile (in: hFile=0x254, lpBuffer=0x23e3a24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3a24*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.010] SetEndOfFile (hFile=0x254) returned 1 [0289.010] CloseHandle (hObject=0x254) returned 1 [0289.010] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.011] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.011] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.011] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.011] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0289.012] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.012] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.012] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.012] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.012] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.012] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.013] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.013] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0289.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.013] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.013] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.013] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.013] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.013] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0289.013] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0289.014] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x409a6a27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x502e7c75, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0289.014] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x409a6a27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x502e7c75, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.014] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409806c2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x409806c2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x409a6a27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.014] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x502e7c75, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x502e7c75, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x502e7c75, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.014] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x502e7c75, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x502e7c75, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x502e7c75, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.014] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0289.014] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409a6a27, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x409a6a27, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x409a6a27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.014] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x502769ab, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x502769ab, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x502769ab, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.014] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a19165, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40a19165, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1 [0289.014] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.019] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.019] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.019] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.019] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.019] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0289.019] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571270) returned 1 [0289.020] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0289.020] CryptHashData (hHash=0x55e210, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.020] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e190) returned 1 [0289.020] CryptDestroyHash (hHash=0x55e210) returned 1 [0289.020] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ea58*=0x18) returned 1 [0289.020] GetLastError () returned 0x0 [0289.020] GetLastError () returned 0x0 [0289.020] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.020] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0289.023] WriteFile (in: hFile=0x254, lpBuffer=0x23e3a34*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3a34*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.025] SetEndOfFile (hFile=0x254) returned 1 [0289.028] CloseHandle (hObject=0x254) returned 1 [0289.028] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.029] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.029] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.029] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.030] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.030] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.030] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0289.030] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.030] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.030] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.030] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.030] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.030] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.031] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.031] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.031] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.031] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.031] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.031] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.031] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.032] CryptDestroyKey (hKey=0x55e190) returned 1 [0289.032] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0289.032] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a19165, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5030dd38, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0289.032] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a19165, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5030dd38, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.032] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409f2e97, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x409f2e97, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x409f2e97, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.032] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5030dd38, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5030dd38, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5030dd38, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.032] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5030dd38, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5030dd38, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5030dd38, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.032] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0289.032] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a3f31a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40a3f31a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Startup", cAlternateFileName="")) returned 1 [0289.033] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.033] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.033] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.033] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.033] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0289.033] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571490) returned 1 [0289.033] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0289.033] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.034] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e750) returned 1 [0289.034] CryptDestroyHash (hHash=0x55e910) returned 1 [0289.034] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ea58*=0x18) returned 1 [0289.034] GetLastError () returned 0x0 [0289.034] GetLastError () returned 0x0 [0289.034] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.034] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0289.035] WriteFile (in: hFile=0x254, lpBuffer=0x23e3a74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3a74*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.036] SetEndOfFile (hFile=0x254) returned 1 [0289.037] CloseHandle (hObject=0x254) returned 1 [0289.037] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.037] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.037] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.038] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.038] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.038] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0289.038] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.038] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.038] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.038] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.038] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.039] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.039] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.039] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.039] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.039] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.039] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.039] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.040] CryptDestroyKey (hKey=0x55e750) returned 1 [0289.040] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0289.040] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a3f31a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50333f34, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0289.040] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43708645, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40a3f31a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50333f34, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.040] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a19165, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40a19165, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40a19165, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.040] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50333f34, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50333f34, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50333f34, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.040] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50333f34, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50333f34, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50333f34, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.040] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0289.040] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40b24151, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40b24151, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1 [0289.040] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.040] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.041] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.041] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.041] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0289.041] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x570748) returned 1 [0289.041] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0289.041] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.041] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e750) returned 1 [0289.041] CryptDestroyHash (hHash=0x55e910) returned 1 [0289.041] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ea58*=0x18) returned 1 [0289.041] GetLastError () returned 0x0 [0289.042] GetLastError () returned 0x0 [0289.042] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.042] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0289.044] WriteFile (in: hFile=0x254, lpBuffer=0x23e3a84*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3a84*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.045] SetEndOfFile (hFile=0x254) returned 1 [0289.046] CloseHandle (hObject=0x254) returned 1 [0289.046] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.047] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.047] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.047] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.047] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0289.047] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.048] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.048] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.048] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.048] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.048] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.048] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.048] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.049] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0289.049] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.049] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.049] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.049] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.049] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.049] CryptDestroyKey (hKey=0x55e750) returned 1 [0289.049] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0289.049] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40b24151, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50333f34, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0289.049] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40b24151, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50333f34, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.049] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a6562d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40a6562d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40a6562d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x476, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Command Prompt.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="COMMAN~1.CRY")) returned 1 [0289.050] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a8b94e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40a8b94e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40a8b94e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x14f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="computer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="COMPUT~1.CRY")) returned 1 [0289.050] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ab1a0f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40ab1a0f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40ab1a0f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x195, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Control Panel.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CONTRO~1.CRY")) returned 1 [0289.050] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ad853f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40ad853f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40ad853f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x32f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Default Apps.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DEFAUL~1.CRY")) returned 1 [0289.050] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ad853f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40ad853f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40ad853f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3e0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.050] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ad853f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40ad853f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40afe004, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Devices.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DEVICE~1.CRY")) returned 1 [0289.050] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40afe004, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40afe004, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40b24151, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x405534, dwReserved1=0x0, cFileName="File Explorer.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FILEEX~1.CRY")) returned 1 [0289.050] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50333f34, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50333f34, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5035a070, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.050] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b24151, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40b24151, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40b24151, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RUNLNK~1.CRY")) returned 1 [0289.050] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b24151, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40b24151, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40b24151, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x199, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Run.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RUNLNK~1.CRY")) returned 0 [0289.050] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0289.050] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40be2bef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40be2bef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7972632e, dwReserved1=0x64657470, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0289.050] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.050] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.050] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.050] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.050] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.051] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0289.051] CryptAcquireContextA (in: phProv=0x19ea4c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ea4c*=0x571380) returned 1 [0289.051] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ea04 | out: phHash=0x19ea04) returned 1 [0289.051] CryptHashData (hHash=0x55e7d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.051] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e7d0, dwFlags=0x0, phKey=0x19ea48 | out: phKey=0x19ea48*=0x55e290) returned 1 [0289.051] CryptDestroyHash (hHash=0x55e7d0) returned 1 [0289.051] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ea58*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ea58*=0x18) returned 1 [0289.051] GetLastError () returned 0x0 [0289.051] GetLastError () returned 0x0 [0289.052] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.052] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x254 [0289.053] WriteFile (in: hFile=0x254, lpBuffer=0x23e3ac4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e780, lpOverlapped=0x0 | out: lpBuffer=0x23e3ac4*, lpNumberOfBytesWritten=0x19e780*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.054] SetEndOfFile (hFile=0x254) returned 1 [0289.054] CloseHandle (hObject=0x254) returned 1 [0289.054] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.055] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.055] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.055] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.055] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.055] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.055] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0289.056] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.056] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.056] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.056] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.056] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.056] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.056] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.056] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.056] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.056] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.056] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.057] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0289.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.057] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.057] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.057] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.057] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.057] CryptDestroyKey (hKey=0x55e290) returned 1 [0289.057] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0289.057] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\*.*"), lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40be2bef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5035a070, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0289.058] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40be2bef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5035a070, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.058] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b24151, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40b24151, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40b4a488, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.058] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5035a070, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5035a070, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5035a070, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.058] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b4a488, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40b4a488, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40b4a488, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x8bc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows PowerShell (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~1.CRY")) returned 1 [0289.058] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b4a488, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40b4a488, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40b7050c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows PowerShell ISE (x86).lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~2.CRY")) returned 1 [0289.058] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bc1b1a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40bc1b1a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40bc1b1a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4fa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows PowerShell ISE.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~3.CRY")) returned 1 [0289.058] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bc1b1a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40bc1b1a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40be2bef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x8bc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~4.CRY")) returned 1 [0289.058] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19ea00 | out: lpFindFileData=0x19ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bc1b1a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40bc1b1a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40be2bef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x8bc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Windows PowerShell.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WINDOW~4.CRY")) returned 0 [0289.058] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0289.058] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40be2bef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40be2bef, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7972632e, dwReserved1=0x64657470, cFileName="Windows PowerShell", cAlternateFileName="WINDOW~1")) returned 0 [0289.058] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0289.058] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x409ccc71, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x409ccc71, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 0 [0289.058] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0289.058] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4173, dwReserved1=0x5f4f545f, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0289.058] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.058] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.059] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.059] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.059] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0289.059] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x5712f8) returned 1 [0289.059] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0289.059] CryptHashData (hHash=0x55e2d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.059] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e390) returned 1 [0289.059] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0289.059] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19ef28*=0x18) returned 1 [0289.059] GetLastError () returned 0x0 [0289.060] GetLastError () returned 0x0 [0289.060] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.060] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\templates\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0289.068] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3ad4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3ad4*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.070] SetEndOfFile (hFile=0x24c) returned 1 [0289.070] CloseHandle (hObject=0x24c) returned 1 [0289.070] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.071] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.071] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.071] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.071] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.071] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0289.072] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.072] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.072] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.072] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.072] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.072] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.072] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.073] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.073] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.073] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.073] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.073] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.073] CryptDestroyKey (hKey=0x55e390) returned 1 [0289.073] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0289.073] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\templates\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5035a070, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0289.074] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3ced6473, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x5035a070, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.074] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5035a070, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5035a070, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50380934, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.074] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5035a070, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5035a070, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50380934, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.074] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0289.074] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeb77be3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x2b8131a0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b8131a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Themes", cAlternateFileName="")) returned 1 [0289.074] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.074] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.074] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.074] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.074] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.074] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0289.075] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571408) returned 1 [0289.075] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0289.075] CryptHashData (hHash=0x55e210, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.075] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e910) returned 1 [0289.075] CryptDestroyHash (hHash=0x55e210) returned 1 [0289.075] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0289.075] GetLastError () returned 0x0 [0289.075] GetLastError () returned 0x0 [0289.075] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.076] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\themes\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0289.083] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b14*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.084] SetEndOfFile (hFile=0x24c) returned 1 [0289.084] CloseHandle (hObject=0x24c) returned 1 [0289.084] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.085] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.085] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.085] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.085] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.085] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.085] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0289.085] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.085] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.085] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.085] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.086] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.086] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.086] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.086] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.086] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.086] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.087] CryptDestroyKey (hKey=0x55e910) returned 1 [0289.087] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0289.087] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\themes\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeb77be3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x2b8131a0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x503a6784, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0289.087] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeb77be3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x2b8131a0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x503a6784, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.087] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b8131a0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40c2f2bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40c2f2bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CachedFiles", cAlternateFileName="CACHED~1")) returned 1 [0289.087] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.087] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.088] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.088] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0289.088] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571160) returned 1 [0289.088] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0289.088] CryptHashData (hHash=0x55e710, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.088] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e190) returned 1 [0289.088] CryptDestroyHash (hHash=0x55e710) returned 1 [0289.088] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0289.088] GetLastError () returned 0x0 [0289.088] GetLastError () returned 0x0 [0289.089] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.089] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0289.091] WriteFile (in: hFile=0x250, lpBuffer=0x23e3b24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3b24*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.092] SetEndOfFile (hFile=0x250) returned 1 [0289.092] CloseHandle (hObject=0x250) returned 1 [0289.093] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.093] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.093] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.094] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.094] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.094] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.094] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0289.094] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.094] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.094] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.094] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.094] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.094] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.095] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.095] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.095] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.096] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.096] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.096] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.096] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.096] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.096] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0289.096] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.096] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.096] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.096] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.096] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.097] CryptDestroyKey (hKey=0x55e190) returned 1 [0289.097] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0289.097] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b8131a0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40c2f2bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x503a6784, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0289.097] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2b8131a0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40c2f2bc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x503a6784, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.097] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d8dcdaa, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4d8dcdaa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4d9030c8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x69621, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CachedImage_1440_900_POS4.jpg", cAlternateFileName="CACHED~1.JPG")) returned 1 [0289.097] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40be2bef, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40be2bef, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40c2f2bc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x69621, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CachedImage_1440_900_POS4.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CACHED~1.CRY")) returned 1 [0289.097] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x503a6784, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x503a6784, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x503cc7fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.097] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x503a6784, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x503a6784, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x503cc7fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.097] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0289.097] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50380934, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50380934, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x503a6784, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.097] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb9dc6c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaeb9dc6c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x7cc85678, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x73a1e, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TranscodedWallpaper", cAlternateFileName="TRANSC~1")) returned 1 [0289.097] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeb9dc6c, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0xaeb9dc6c, ftLastAccessTime.dwHighDateTime=0x1d7006b, ftLastWriteTime.dwLowDateTime=0x7cc85678, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x73a1e, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="TranscodedWallpaper", cAlternateFileName="TRANSC~1")) returned 0 [0289.097] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0289.097] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeb77be3, ftCreationTime.dwHighDateTime=0x1d7006b, ftLastAccessTime.dwLowDateTime=0x2b8131a0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x2b8131a0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Themes", cAlternateFileName="")) returned 0 [0289.098] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0289.098] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x669f9558, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x669f9558, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f757365, dwReserved1=0x75637472, cFileName="Word", cAlternateFileName="")) returned 1 [0289.098] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.098] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.098] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.098] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.098] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0289.098] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x5709f0) returned 1 [0289.099] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0289.099] CryptHashData (hHash=0x55e650, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.099] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e710) returned 1 [0289.099] CryptDestroyHash (hHash=0x55e650) returned 1 [0289.099] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18) returned 1 [0289.099] GetLastError () returned 0x0 [0289.099] GetLastError () returned 0x0 [0289.099] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.100] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\word\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0289.101] WriteFile (in: hFile=0x248, lpBuffer=0x23e3b64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3b64*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.102] SetEndOfFile (hFile=0x248) returned 1 [0289.102] CloseHandle (hObject=0x248) returned 1 [0289.102] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.103] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.103] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.103] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.103] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0289.103] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.103] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.104] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.104] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.104] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.104] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.104] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.104] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.104] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0289.105] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.105] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.105] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.105] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.105] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.105] CryptDestroyKey (hKey=0x55e710) returned 1 [0289.105] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0289.105] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\word\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x669f9558, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x503cc7fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0289.105] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x669f9558, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x503cc7fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.105] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x503cc7fd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x503cc7fd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x503cc7fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.105] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x669f9558, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x669f9558, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x669f9558, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0289.106] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.106] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.106] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.106] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.106] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0289.106] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570a78) returned 1 [0289.106] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0289.106] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.107] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0289.107] CryptDestroyHash (hHash=0x55e910) returned 1 [0289.107] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0289.107] GetLastError () returned 0x0 [0289.107] GetLastError () returned 0x0 [0289.107] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.107] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\word\\startup\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0289.109] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3b74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3b74*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.110] SetEndOfFile (hFile=0x24c) returned 1 [0289.110] CloseHandle (hObject=0x24c) returned 1 [0289.110] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.111] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.111] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.111] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.111] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.111] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0289.112] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.112] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.112] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.112] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.112] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.112] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.112] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.112] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.112] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.113] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.113] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.113] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.113] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.113] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.113] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.113] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.113] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.113] CryptDestroyKey (hKey=0x55e710) returned 1 [0289.113] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0289.114] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\microsoft\\word\\startup\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x669f9558, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x669f9558, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x503cc7fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0289.114] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x669f9558, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x669f9558, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x503cc7fd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.114] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x503cc7fd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x503cc7fd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x503f31ab, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.114] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x503cc7fd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x503cc7fd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x503f31ab, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.114] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0289.114] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x669f9558, ftCreationTime.dwHighDateTime=0x1d8a651, ftLastAccessTime.dwLowDateTime=0x669f9558, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x669f9558, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 0 [0289.114] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0289.114] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x811e4423, ftCreationTime.dwHighDateTime=0x1d705ee, ftLastAccessTime.dwLowDateTime=0x669f9558, ftLastAccessTime.dwHighDateTime=0x1d8a651, ftLastWriteTime.dwLowDateTime=0x669f9558, ftLastWriteTime.dwHighDateTime=0x1d8a651, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f757365, dwReserved1=0x75637472, cFileName="Word", cAlternateFileName="")) returned 0 [0289.114] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0289.114] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40c554c0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40c554c0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40c7b6c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x4dc5, dwReserved0=0x69747365, dwReserved1=0x61636966, cFileName="NoXrRHISMhJBNo0cfL.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NOXRRH~1.CRY")) returned 1 [0289.114] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40c7b6c5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40c7b6c5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40c7b6c5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xc687, dwReserved0=0x69747365, dwReserved1=0x61636966, cFileName="OJKcISn3d2BAzwlafETu.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="OJKCIS~1.CRY")) returned 1 [0289.114] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ca18d8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40ca18d8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40ca18d8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xc278, dwReserved0=0x69747365, dwReserved1=0x61636966, cFileName="SG285k.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SG285K~1.CRY")) returned 1 [0289.114] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb003583b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb003583b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb003583b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x69747365, dwReserved1=0x61636966, cFileName="Sun", cAlternateFileName="")) returned 1 [0289.114] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.115] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.115] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.115] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.115] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0289.115] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570a78) returned 1 [0289.116] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0289.116] CryptHashData (hHash=0x55e750, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.116] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e750, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e610) returned 1 [0289.116] CryptDestroyHash (hHash=0x55e750) returned 1 [0289.116] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0289.116] GetLastError () returned 0x0 [0289.116] GetLastError () returned 0x0 [0289.116] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.116] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Sun\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\sun\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0289.117] WriteFile (in: hFile=0x244, lpBuffer=0x23e3bb4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3bb4*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.118] SetEndOfFile (hFile=0x244) returned 1 [0289.119] CloseHandle (hObject=0x244) returned 1 [0289.119] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.120] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.120] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.120] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.120] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.120] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.120] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0289.120] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.120] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.120] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.120] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.120] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.121] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.121] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.121] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.121] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.121] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.121] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.121] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.121] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.121] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.121] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.122] CryptDestroyKey (hKey=0x55e610) returned 1 [0289.122] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0289.122] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Sun\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\sun\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb003583b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb003583b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x503f31ab, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0289.122] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb003583b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb003583b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x503f31ab, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.122] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x503f31ab, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x503f31ab, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x503f31ab, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.122] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb003583b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb003583b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb003583b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0289.122] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.122] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.122] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.122] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.123] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.123] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0289.123] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570d20) returned 1 [0289.123] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0289.123] CryptHashData (hHash=0x55e710, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.123] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e910) returned 1 [0289.123] CryptDestroyHash (hHash=0x55e710) returned 1 [0289.123] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f190*=0x18) returned 1 [0289.123] GetLastError () returned 0x0 [0289.123] GetLastError () returned 0x0 [0289.124] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.124] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Sun\\Java\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\sun\\java\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0289.126] WriteFile (in: hFile=0x248, lpBuffer=0x23e3bc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3bc4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.127] SetEndOfFile (hFile=0x248) returned 1 [0289.127] CloseHandle (hObject=0x248) returned 1 [0289.127] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.128] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.128] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.128] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.128] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0289.128] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.129] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.129] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.129] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.129] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.129] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.129] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.129] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0289.130] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.130] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.130] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.130] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.130] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.130] CryptDestroyKey (hKey=0x55e910) returned 1 [0289.130] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0289.130] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Sun\\Java\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\sun\\java\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb003583b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb003583b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x50418d49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e790 [0289.130] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb003583b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb003583b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x50418d49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.130] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb003583b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb003583b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb003583b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0289.131] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.131] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.131] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.131] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.131] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0289.131] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571050) returned 1 [0289.131] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0289.131] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.131] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e610) returned 1 [0289.132] CryptDestroyHash (hHash=0x55e910) returned 1 [0289.132] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ef28*=0x18) returned 1 [0289.132] GetLastError () returned 0x0 [0289.132] GetLastError () returned 0x0 [0289.132] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.132] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Sun\\Java\\Deployment\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\sun\\java\\deployment\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0289.133] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3c04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3c04*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.134] SetEndOfFile (hFile=0x24c) returned 1 [0289.134] CloseHandle (hObject=0x24c) returned 1 [0289.134] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.135] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.135] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.136] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0289.136] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.136] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.136] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.136] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.136] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.137] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.137] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.137] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0289.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.137] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.137] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.137] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.137] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.138] CryptDestroyKey (hKey=0x55e610) returned 1 [0289.138] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0289.138] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\Sun\\Java\\Deployment\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\sun\\java\\deployment\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb003583b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb003583b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x50418d49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0289.138] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb003583b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb003583b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0x50418d49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.138] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50418d49, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50418d49, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50418d49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.138] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50418d49, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50418d49, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50418d49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.138] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0289.138] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50418d49, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50418d49, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50418d49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.138] FindNextFileA (in: hFindFile=0x55e790, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50418d49, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50418d49, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50418d49, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.138] FindClose (in: hFindFile=0x55e790 | out: hFindFile=0x55e790) returned 1 [0289.138] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb003583b, ftCreationTime.dwHighDateTime=0x1d8c106, ftLastAccessTime.dwLowDateTime=0xb003583b, ftLastAccessTime.dwHighDateTime=0x1d8c106, ftLastWriteTime.dwLowDateTime=0xb003583b, ftLastWriteTime.dwHighDateTime=0x1d8c106, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0289.138] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0289.139] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ca18d8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40ca18d8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40cc7b98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3f92, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="tf ZOqi-Uy kGkn5g.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TFZOQI~1.CRY")) returned 1 [0289.139] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40cc7b98, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40cc7b98, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40cc7b98, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x95b6, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Tyk8QAxzpbww82Wlk.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TYK8QA~1.CRY")) returned 1 [0289.139] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec24cb20, ftCreationTime.dwHighDateTime=0x1d8b848, ftLastAccessTime.dwLowDateTime=0xe4f583b0, ftLastAccessTime.dwHighDateTime=0x1d8c033, ftLastWriteTime.dwLowDateTime=0xe4f583b0, ftLastWriteTime.dwHighDateTime=0x1d8c033, nFileSizeHigh=0x0, nFileSizeLow=0x9622, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="UYkUoEhU9.mp4", cAlternateFileName="UYKUOE~1.MP4")) returned 1 [0289.139] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe689b350, ftCreationTime.dwHighDateTime=0x1d8bd35, ftLastAccessTime.dwLowDateTime=0x14f42de0, ftLastAccessTime.dwHighDateTime=0x1d8be69, ftLastWriteTime.dwLowDateTime=0x14f42de0, ftLastWriteTime.dwHighDateTime=0x1d8be69, nFileSizeHigh=0x0, nFileSizeLow=0x15bc3, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="V KXWh-99EWHgypt.mp4", cAlternateFileName="VKXWH-~1.MP4")) returned 1 [0289.139] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40cedd4d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40cedd4d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40cedd4d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="v-hS0ZFeO.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="V-HS0Z~1.CRY")) returned 1 [0289.139] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40cedd4d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40cedd4d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40d1409b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12715, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="VgeIJtKEri.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VGEIJT~1.CRY")) returned 1 [0289.139] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d1409b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40d1409b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40d1409b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="VlzDVW69dNfCp zkR.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VLZDVW~1.CRY")) returned 1 [0289.139] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d3a226, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40d3a226, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40d604b5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x71b7, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="voQySJ4.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VOQYSJ~1.CRY")) returned 1 [0289.139] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d604b5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40d604b5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40d604b5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1e7a, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="W9UNqm5rN4-1sAvH-.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="W9UNQM~1.CRY")) returned 1 [0289.139] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbb9df0, ftCreationTime.dwHighDateTime=0x1d8b398, ftLastAccessTime.dwLowDateTime=0xa23a7000, ftLastAccessTime.dwHighDateTime=0x1d8bda2, ftLastWriteTime.dwLowDateTime=0xa23a7000, ftLastWriteTime.dwHighDateTime=0x1d8bda2, nFileSizeHigh=0x0, nFileSizeLow=0x8f12, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Wfn55FaOLc2P-yaWvMX.pptx", cAlternateFileName="WFN55F~1.PPT")) returned 1 [0289.139] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d604b5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40d604b5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40d866a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x34cf, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="WgUX39PHXYiqGx8CP.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WGUX39~1.CRY")) returned 1 [0289.139] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0702f90, ftCreationTime.dwHighDateTime=0x1d8bb5f, ftLastAccessTime.dwLowDateTime=0xbc10e2b0, ftLastAccessTime.dwHighDateTime=0x1d8bede, ftLastWriteTime.dwLowDateTime=0xbc10e2b0, ftLastWriteTime.dwHighDateTime=0x1d8bede, nFileSizeHigh=0x0, nFileSizeLow=0x1461e, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="yYXsBR9K865RraAKF5r.wav", cAlternateFileName="YYXSBR~1.WAV")) returned 1 [0289.139] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0702f90, ftCreationTime.dwHighDateTime=0x1d8bb5f, ftLastAccessTime.dwLowDateTime=0xbc10e2b0, ftLastAccessTime.dwHighDateTime=0x1d8bede, ftLastWriteTime.dwLowDateTime=0xbc10e2b0, ftLastWriteTime.dwHighDateTime=0x1d8bede, nFileSizeHigh=0x0, nFileSizeLow=0x1461e, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="yYXsBR9K865RraAKF5r.wav", cAlternateFileName="YYXSBR~1.WAV")) returned 0 [0289.139] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0289.139] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40d866a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40d866a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e7466, dwReserved1=0x5f4f545f, cFileName="Roaming", cAlternateFileName="")) returned 0 [0289.140] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0289.140] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0289.140] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.140] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.140] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.140] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.140] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.140] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0289.140] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571380) returned 1 [0289.141] CryptCreateHash (in: hProv=0x571380, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0289.141] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.141] CryptDeriveKey (in: hProv=0x571380, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e290) returned 1 [0289.141] CryptDestroyHash (hHash=0x55e790) returned 1 [0289.141] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0289.141] GetLastError () returned 0x0 [0289.141] GetLastError () returned 0x0 [0289.141] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.142] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Application Data\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\application data\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0289.142] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3c14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3c14*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.142] SetEndOfFile (hFile=0x23c) returned 1 [0289.142] CloseHandle (hObject=0x23c) returned 1 [0289.142] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.143] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.143] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.143] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.143] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.143] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0289.144] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.144] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.144] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.144] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.144] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.145] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.145] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.145] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.145] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.145] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.145] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.145] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.146] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.146] CryptDestroyKey (hKey=0x55e290) returned 1 [0289.146] CryptReleaseContext (hProv=0x571380, dwFlags=0x0) returned 1 [0289.146] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Application Data\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\application data\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0289.147] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40d866a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40d866a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="Contacts", cAlternateFileName="")) returned 1 [0289.147] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.147] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.147] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.147] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.147] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0289.147] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570da8) returned 1 [0289.148] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0289.148] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.148] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e7d0) returned 1 [0289.148] CryptDestroyHash (hHash=0x55e790) returned 1 [0289.148] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0289.148] GetLastError () returned 0x0 [0289.148] GetLastError () returned 0x0 [0289.148] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.149] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Contacts\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\contacts\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0289.150] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3c54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3c54*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.151] SetEndOfFile (hFile=0x23c) returned 1 [0289.152] CloseHandle (hObject=0x23c) returned 1 [0289.152] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.152] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.152] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.153] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.153] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0289.153] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.153] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.153] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.154] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.154] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.154] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.154] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.154] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.154] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.155] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.155] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.155] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.158] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.158] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.159] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0289.159] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0289.159] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Contacts\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\contacts\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40d866a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5043f101, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e2d0 [0289.159] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x435fd682, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x40d866a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5043f101, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.159] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d866a3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40d866a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40d866a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.159] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5043f101, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5043f101, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5043f101, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.159] FindNextFileA (in: hFindFile=0x55e2d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5043f101, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5043f101, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5043f101, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.159] FindClose (in: hFindFile=0x55e2d0 | out: hFindFile=0x55e2d0) returned 1 [0289.159] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="Cookies", cAlternateFileName="")) returned 1 [0289.160] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.160] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.160] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.160] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.160] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0289.160] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570da8) returned 1 [0289.161] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0289.161] CryptHashData (hHash=0x55e310, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.161] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e310, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e210) returned 1 [0289.161] CryptDestroyHash (hHash=0x55e310) returned 1 [0289.161] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0289.161] GetLastError () returned 0x0 [0289.161] GetLastError () returned 0x0 [0289.161] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.162] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Cookies\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\cookies\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0289.162] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3c94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3c94*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.163] SetEndOfFile (hFile=0x23c) returned 1 [0289.166] CloseHandle (hObject=0x23c) returned 1 [0289.167] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.168] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.168] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.168] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.168] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0289.169] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.169] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.169] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.169] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.169] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.169] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.169] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.170] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.170] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.170] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.170] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.170] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.170] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.170] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.170] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.170] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.171] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.171] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.171] CryptDestroyKey (hKey=0x55e210) returned 1 [0289.171] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0289.171] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Cookies\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\cookies\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0289.171] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x413fe576, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x413fe576, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="Desktop", cAlternateFileName="")) returned 1 [0289.172] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.172] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.172] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.172] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.172] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0289.172] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571270) returned 1 [0289.173] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0289.173] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.173] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e910) returned 1 [0289.173] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0289.173] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0289.173] GetLastError () returned 0x0 [0289.173] GetLastError () returned 0x0 [0289.173] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.174] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0289.177] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3cd4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3cd4*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.179] SetEndOfFile (hFile=0x23c) returned 1 [0289.179] CloseHandle (hObject=0x23c) returned 1 [0289.179] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.180] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.180] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.180] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.180] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.180] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.180] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0289.181] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.181] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.181] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.181] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.181] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.181] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.181] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.182] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.182] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.182] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.182] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.182] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.182] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.182] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.182] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.183] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.183] CryptDestroyKey (hKey=0x55e910) returned 1 [0289.183] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0289.183] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x413fe576, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5048b511, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0289.183] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x413fe576, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5048b511, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.183] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1636c790, ftCreationTime.dwHighDateTime=0x1d8be8b, ftLastAccessTime.dwLowDateTime=0x40eb7aa3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40eb7aa3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="-8dlx0wewoZ_y4Htiby", cAlternateFileName="-8DLX0~1")) returned 1 [0289.184] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.184] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.184] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.184] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.184] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.184] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0289.184] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571050) returned 1 [0289.185] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0289.185] CryptHashData (hHash=0x55e190, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.185] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e210) returned 1 [0289.185] CryptDestroyHash (hHash=0x55e190) returned 1 [0289.185] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18) returned 1 [0289.185] GetLastError () returned 0x0 [0289.185] GetLastError () returned 0x0 [0289.185] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.186] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0289.190] WriteFile (in: hFile=0x240, lpBuffer=0x23e3d14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3d14*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.191] SetEndOfFile (hFile=0x240) returned 1 [0289.192] CloseHandle (hObject=0x240) returned 1 [0289.192] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.193] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.193] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0289.193] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.194] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.194] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.194] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.194] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.194] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.194] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.194] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.194] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.194] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.195] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.195] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.195] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.195] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.195] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.195] CryptDestroyKey (hKey=0x55e210) returned 1 [0289.195] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0289.196] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1636c790, ftCreationTime.dwHighDateTime=0x1d8be8b, ftLastAccessTime.dwLowDateTime=0x40eb7aa3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x504b1740, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0289.196] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1636c790, ftCreationTime.dwHighDateTime=0x1d8be8b, ftLastAccessTime.dwLowDateTime=0x40eb7aa3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x504b1740, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.196] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb38cbd70, ftCreationTime.dwHighDateTime=0x1d8bf25, ftLastAccessTime.dwLowDateTime=0x40dd2b95, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40dd2b95, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1NWhODXrGU7fJ4svX5as", cAlternateFileName="1NWHOD~1")) returned 1 [0289.196] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.196] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.196] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.196] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.196] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.196] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0289.196] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x5709f0) returned 1 [0289.197] CryptCreateHash (in: hProv=0x5709f0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0289.197] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.197] CryptDeriveKey (in: hProv=0x5709f0, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e190) returned 1 [0289.197] CryptDestroyHash (hHash=0x55e610) returned 1 [0289.197] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0289.197] GetLastError () returned 0x0 [0289.197] GetLastError () returned 0x0 [0289.198] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.198] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\1NWhODXrGU7fJ4svX5as\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\1nwhodxrgu7fj4svx5as\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0289.201] WriteFile (in: hFile=0x244, lpBuffer=0x23e3d24*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3d24*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.202] SetEndOfFile (hFile=0x244) returned 1 [0289.203] CloseHandle (hObject=0x244) returned 1 [0289.203] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.237] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.237] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.237] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.237] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0289.237] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.238] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.238] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.238] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.238] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.238] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.238] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.239] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.239] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.239] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.239] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.240] CryptDestroyKey (hKey=0x55e190) returned 1 [0289.240] CryptReleaseContext (hProv=0x5709f0, dwFlags=0x0) returned 1 [0289.240] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\-8dlx0wewoZ_y4Htiby\\1NWhODXrGU7fJ4svX5as\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\-8dlx0wewoz_y4htiby\\1nwhodxrgu7fj4svx5as\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb38cbd70, ftCreationTime.dwHighDateTime=0x1d8bf25, ftLastAccessTime.dwLowDateTime=0x40dd2b95, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x504b1740, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e190 [0289.240] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb38cbd70, ftCreationTime.dwHighDateTime=0x1d8bf25, ftLastAccessTime.dwLowDateTime=0x40dd2b95, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x504b1740, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.240] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91feb3d0, ftCreationTime.dwHighDateTime=0x1d8b3e9, ftLastAccessTime.dwLowDateTime=0xb7dac7d0, ftLastAccessTime.dwHighDateTime=0x1d8bc25, ftLastWriteTime.dwLowDateTime=0xb7dac7d0, ftLastWriteTime.dwHighDateTime=0x1d8bc25, nFileSizeHigh=0x0, nFileSizeLow=0xde3d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5HKjNvUNgnIPmSM.mp4", cAlternateFileName="5HKJNV~1.MP4")) returned 1 [0289.240] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x504b1740, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x504b1740, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x504b1740, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.240] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf84b1050, ftCreationTime.dwHighDateTime=0x1d8bbc5, ftLastAccessTime.dwLowDateTime=0xaa38f460, ftLastAccessTime.dwHighDateTime=0x1d8bc04, ftLastWriteTime.dwLowDateTime=0xaa38f460, ftLastWriteTime.dwHighDateTime=0x1d8bc04, nFileSizeHigh=0x0, nFileSizeLow=0x24a9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="L8W10SFwZ.wav", cAlternateFileName="L8W10S~1.WAV")) returned 1 [0289.240] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bcca4e0, ftCreationTime.dwHighDateTime=0x1d8b5f1, ftLastAccessTime.dwLowDateTime=0xb7662f0, ftLastAccessTime.dwHighDateTime=0x1d8ba69, ftLastWriteTime.dwLowDateTime=0xb7662f0, ftLastWriteTime.dwHighDateTime=0x1d8ba69, nFileSizeHigh=0x0, nFileSizeLow=0x15075, dwReserved0=0x405534, dwReserved1=0x0, cFileName="lRVGHUTH_i_aPTF4.m4a", cAlternateFileName="LRVGHU~1.M4A")) returned 1 [0289.240] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0feb680, ftCreationTime.dwHighDateTime=0x1d8be77, ftLastAccessTime.dwLowDateTime=0x7f2c4bd0, ftLastAccessTime.dwHighDateTime=0x1d8bfa8, ftLastWriteTime.dwLowDateTime=0x7f2c4bd0, ftLastWriteTime.dwHighDateTime=0x1d8bfa8, nFileSizeHigh=0x0, nFileSizeLow=0xb355, dwReserved0=0x405534, dwReserved1=0x0, cFileName="oE8bHbD-Dc3tTUzAvtP.m4a", cAlternateFileName="OE8BHB~1.M4A")) returned 1 [0289.240] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40dac948, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40dac948, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40dac948, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x94a4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="t0tZUKO4i913ZI.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="T0TZUK~1.CRY")) returned 1 [0289.240] FindNextFileA (in: hFindFile=0x55e190, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40dac948, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40dac948, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40dac948, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x94a4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="t0tZUKO4i913ZI.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="T0TZUK~1.CRY")) returned 0 [0289.240] FindClose (in: hFindFile=0x55e190 | out: hFindFile=0x55e190) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40dd2b95, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40dd2b95, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40dd2b95, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xd367, dwReserved0=0x31396934, dwReserved1=0x2e495a33, cFileName="Cx-QE.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CX-QEA~1.CRY")) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40dfb71d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40dfb71d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40dfb71d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x14843, dwReserved0=0x31396934, dwReserved1=0x2e495a33, cFileName="GPyn7kNjWJZ2.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GPYN7K~1.CRY")) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40e1faa2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40e1faa2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40e45580, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xd0fe, dwReserved0=0x31396934, dwReserved1=0x2e495a33, cFileName="GTVE7s8yay vT.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GTVE7S~1.CRY")) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x504b1740, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x504b1740, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x504b1740, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x31396934, dwReserved1=0x2e495a33, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15681090, ftCreationTime.dwHighDateTime=0x1d8b340, ftLastAccessTime.dwLowDateTime=0x349ffc0, ftLastAccessTime.dwHighDateTime=0x1d8b40f, ftLastWriteTime.dwLowDateTime=0x349ffc0, ftLastWriteTime.dwHighDateTime=0x1d8b40f, nFileSizeHigh=0x0, nFileSizeLow=0x9746, dwReserved0=0x31396934, dwReserved1=0x2e495a33, cFileName="SS16v2ADnlow6oSM8kTK.swf", cAlternateFileName="SS16V2~1.SWF")) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x614510f0, ftCreationTime.dwHighDateTime=0x1d8ba3c, ftLastAccessTime.dwLowDateTime=0x46e605e0, ftLastAccessTime.dwHighDateTime=0x1d8bea9, ftLastWriteTime.dwLowDateTime=0x46e605e0, ftLastWriteTime.dwHighDateTime=0x1d8bea9, nFileSizeHigh=0x0, nFileSizeLow=0xbf30, dwReserved0=0x31396934, dwReserved1=0x2e495a33, cFileName="T4KDENHu5JTCk.m4a", cAlternateFileName="T4KDEN~1.M4A")) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40e6bb91, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40e6bb91, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40e6bb91, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x13898, dwReserved0=0x31396934, dwReserved1=0x2e495a33, cFileName="Tk57GbGZqKRx.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TK57GB~1.CRY")) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40e917d8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40e917d8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40eb7aa3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xd7c5, dwReserved0=0x31396934, dwReserved1=0x2e495a33, cFileName="Vu4oRX8zmoARco.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="VU4ORX~1.CRY")) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54416990, ftCreationTime.dwHighDateTime=0x1d8b7bb, ftLastAccessTime.dwLowDateTime=0xbaa1510, ftLastAccessTime.dwHighDateTime=0x1d8c067, ftLastWriteTime.dwLowDateTime=0xbaa1510, ftLastWriteTime.dwHighDateTime=0x1d8c067, nFileSizeHigh=0x0, nFileSizeLow=0xca9a, dwReserved0=0x31396934, dwReserved1=0x2e495a33, cFileName="Yhe9IkX717wLh.wav", cAlternateFileName="YHE9IK~1.WAV")) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54416990, ftCreationTime.dwHighDateTime=0x1d8b7bb, ftLastAccessTime.dwLowDateTime=0xbaa1510, ftLastAccessTime.dwHighDateTime=0x1d8c067, ftLastWriteTime.dwLowDateTime=0xbaa1510, ftLastWriteTime.dwHighDateTime=0x1d8c067, nFileSizeHigh=0x0, nFileSizeLow=0xca9a, dwReserved0=0x31396934, dwReserved1=0x2e495a33, cFileName="Yhe9IkX717wLh.wav", cAlternateFileName="YHE9IK~1.WAV")) returned 0 [0289.241] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40eddcbf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40eddcbf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40f03f64, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1675c, dwReserved0=0x77373137, dwReserved1=0x772e684c, cFileName="3Fk41qKybaiEKn.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="3FK41Q~1.CRY")) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3733d70, ftCreationTime.dwHighDateTime=0x1d8bd35, ftLastAccessTime.dwLowDateTime=0x34910300, ftLastAccessTime.dwHighDateTime=0x1d8bf2a, ftLastWriteTime.dwLowDateTime=0x34910300, ftLastWriteTime.dwHighDateTime=0x1d8bf2a, nFileSizeHigh=0x0, nFileSizeLow=0x124b0, dwReserved0=0x77373137, dwReserved1=0x772e684c, cFileName="4wUap.m4a", cAlternateFileName="")) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x1, ftCreationTime.dwLowDateTime=0x9f3ab000, ftCreationTime.dwHighDateTime=0x1d8ccb5, ftLastAccessTime.dwLowDateTime=0x9fd34680, ftLastAccessTime.dwHighDateTime=0x1d8ccb5, ftLastWriteTime.dwLowDateTime=0x39432e00, ftLastWriteTime.dwHighDateTime=0x1d8cc9f, nFileSizeHigh=0x0, nFileSizeLow=0x2b000, dwReserved0=0x77373137, dwReserved1=0x772e684c, cFileName="9ee11e680b1781159a9dac27566e45051dbe3016ff272f1d9c17cdf658e2ed7f.exe", cAlternateFileName="9EE11E~1.EXE")) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f2a13a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40f2a13a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40f2a13a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xb4b1, dwReserved0=0x77373137, dwReserved1=0x772e684c, cFileName="AFlQACoQ_XkZ5Kbtg.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AFLQAC~1.CRY")) returned 1 [0289.241] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98aad280, ftCreationTime.dwHighDateTime=0x1d8b778, ftLastAccessTime.dwLowDateTime=0xffd0a120, ftLastAccessTime.dwHighDateTime=0x1d8b998, ftLastWriteTime.dwLowDateTime=0xffd0a120, ftLastWriteTime.dwHighDateTime=0x1d8b998, nFileSizeHigh=0x0, nFileSizeLow=0xc766, dwReserved0=0x77373137, dwReserved1=0x772e684c, cFileName="ALetk1xGO6QA.m4a", cAlternateFileName="ALETK1~1.M4A")) returned 1 [0289.242] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f502ae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40f502ae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40f502ae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x7e6a, dwReserved0=0x77373137, dwReserved1=0x772e684c, cFileName="BJW1-4TBmjzVeS tFS.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="BJW1-4~1.CRY")) returned 1 [0289.242] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f7656d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40f7656d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40f9c872, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1045e, dwReserved0=0x77373137, dwReserved1=0x772e684c, cFileName="CHKfwx_.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CHKFWX~1.CRY")) returned 1 [0289.242] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f9c872, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40f9c872, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40fc2a60, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x77373137, dwReserved1=0x772e684c, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.242] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40fc2a60, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x40fc2a60, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x40fe8d4e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xbf14, dwReserved0=0x77373137, dwReserved1=0x772e684c, cFileName="ExGkHXAjJlu-KbVwYaT.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EXGKHX~1.CRY")) returned 1 [0289.242] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a4f7010, ftCreationTime.dwHighDateTime=0x1d8c079, ftLastAccessTime.dwLowDateTime=0x410cda9f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x410cda9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77373137, dwReserved1=0x772e684c, cFileName="fBcb0Eywdbm", cAlternateFileName="FBCB0E~1")) returned 1 [0289.242] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.242] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.242] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.242] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.242] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.242] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0289.242] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570c98) returned 1 [0289.243] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0289.243] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.243] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0289.243] CryptDestroyHash (hHash=0x55e790) returned 1 [0289.243] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f660*=0x18) returned 1 [0289.243] GetLastError () returned 0x0 [0289.243] GetLastError () returned 0x0 [0289.243] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.244] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0289.245] WriteFile (in: hFile=0x240, lpBuffer=0x23e3d64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3d64*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.247] SetEndOfFile (hFile=0x240) returned 1 [0289.247] CloseHandle (hObject=0x240) returned 1 [0289.247] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.248] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.248] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.248] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.248] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.248] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.248] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0289.249] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.249] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.249] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.249] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.249] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.249] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.250] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.250] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.250] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.250] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.250] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.250] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.250] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.250] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.250] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.251] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.251] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.251] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.251] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0289.251] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0289.251] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\fBcb0Eywdbm\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\fbcb0eywdbm\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a4f7010, ftCreationTime.dwHighDateTime=0x1d8c079, ftLastAccessTime.dwLowDateTime=0x410cda9f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50523d7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0289.251] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3a4f7010, ftCreationTime.dwHighDateTime=0x1d8c079, ftLastAccessTime.dwLowDateTime=0x410cda9f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50523d7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.251] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bf7a270, ftCreationTime.dwHighDateTime=0x1d8bc2c, ftLastAccessTime.dwLowDateTime=0xd5a9b800, ftLastAccessTime.dwHighDateTime=0x1d8bed9, ftLastWriteTime.dwLowDateTime=0xd5a9b800, ftLastWriteTime.dwHighDateTime=0x1d8bed9, nFileSizeHigh=0x0, nFileSizeLow=0x154da, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Ezm6rhO0KEsql.wav", cAlternateFileName="EZM6RH~1.WAV")) returned 1 [0289.251] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50523d7b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50523d7b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50523d7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4100f1f8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4100f1f8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x41035220, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xe8ee, dwReserved0=0x405534, dwReserved1=0x0, cFileName="MNH8zaGFzoVYD5Z6B.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MNH8ZA~1.CRY")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1236bd20, ftCreationTime.dwHighDateTime=0x1d8b77a, ftLastAccessTime.dwLowDateTime=0x71d96b10, ftLastAccessTime.dwHighDateTime=0x1d8ba4a, ftLastWriteTime.dwLowDateTime=0x71d96b10, ftLastWriteTime.dwHighDateTime=0x1d8ba4a, nFileSizeHigh=0x0, nFileSizeLow=0x8cbb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="oj_I2hof2cL4iCtZ.wav", cAlternateFileName="OJ_I2H~1.WAV")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4105b356, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4105b356, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x410816b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x187c6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="QSer_RfUObTRfZ-i.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="QSER_R~1.CRY")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x410816b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x410816b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x410a784c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xe76c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RthKlZazZoygA81MZ.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RTHKLZ~1.CRY")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x410816b8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x410816b8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x410a784c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xe76c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RthKlZazZoygA81MZ.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RTHKLZ~1.CRY")) returned 0 [0289.252] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4a1f310, ftCreationTime.dwHighDateTime=0x1d8c124, ftLastAccessTime.dwLowDateTime=0x6b9e1c10, ftLastAccessTime.dwHighDateTime=0x1d8c12e, ftLastWriteTime.dwLowDateTime=0x6b9e1c10, ftLastWriteTime.dwHighDateTime=0x1d8c12e, nFileSizeHigh=0x0, nFileSizeLow=0x979, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="Ft3yPFlLda4HfpGaHR.swf", cAlternateFileName="FT3YPF~1.SWF")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5048b511, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5048b511, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5048b511, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x410cda9f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x410cda9f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x410cda9f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x127c, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="k2jJ-.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="K2JJ-J~1.CRY")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f25bd70, ftCreationTime.dwHighDateTime=0x1d8bbc9, ftLastAccessTime.dwLowDateTime=0xa2b0dcc0, ftLastAccessTime.dwHighDateTime=0x1d8bcd7, ftLastWriteTime.dwLowDateTime=0xa2b0dcc0, ftLastWriteTime.dwHighDateTime=0x1d8bcd7, nFileSizeHigh=0x0, nFileSizeLow=0x3315, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="KFOnZrXcibqJ-rzhU.m4a", cAlternateFileName="KFONZR~1.M4A")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeaddfe0, ftCreationTime.dwHighDateTime=0x1d8b7ac, ftLastAccessTime.dwLowDateTime=0x8a3a7f10, ftLastAccessTime.dwHighDateTime=0x1d8bd37, ftLastWriteTime.dwLowDateTime=0x8a3a7f10, ftLastWriteTime.dwHighDateTime=0x1d8bd37, nFileSizeHigh=0x0, nFileSizeLow=0x6478, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="NMYzcSVMbuoShDSEUEr4.swf", cAlternateFileName="NMYZCS~1.SWF")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68e1eb10, ftCreationTime.dwHighDateTime=0x1d8b6e2, ftLastAccessTime.dwLowDateTime=0x706f31c0, ftLastAccessTime.dwHighDateTime=0x1d8b94f, ftLastWriteTime.dwLowDateTime=0x706f31c0, ftLastWriteTime.dwHighDateTime=0x1d8b94f, nFileSizeHigh=0x0, nFileSizeLow=0x1327b, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="oHQuuCEivKXjdHUMs.wav", cAlternateFileName="OHQUUC~1.WAV")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x410f3d34, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x410f3d34, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x410f3d34, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x25fd, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="r2Jb2xWXO9z.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="R2JB2X~1.CRY")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96e7ef0, ftCreationTime.dwHighDateTime=0x1d8b5f0, ftLastAccessTime.dwLowDateTime=0xcc02a960, ftLastAccessTime.dwHighDateTime=0x1d8c09b, ftLastWriteTime.dwLowDateTime=0xcc02a960, ftLastWriteTime.dwHighDateTime=0x1d8c09b, nFileSizeHigh=0x0, nFileSizeLow=0xbce6, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="RPB19Tq0.wav", cAlternateFileName="")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22b10da0, ftCreationTime.dwHighDateTime=0x1d8bfee, ftLastAccessTime.dwLowDateTime=0xbafc0f40, ftLastAccessTime.dwHighDateTime=0x1d8bffa, ftLastWriteTime.dwLowDateTime=0xbafc0f40, ftLastWriteTime.dwHighDateTime=0x1d8bffa, nFileSizeHigh=0x0, nFileSizeLow=0x10e89, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="sG4YrsPkBWouawt6j.m4a", cAlternateFileName="SG4YRS~1.M4A")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d36030, ftCreationTime.dwHighDateTime=0x1d8bc47, ftLastAccessTime.dwLowDateTime=0x1a922930, ftLastAccessTime.dwHighDateTime=0x1d8bf8d, ftLastWriteTime.dwLowDateTime=0x1a922930, ftLastWriteTime.dwHighDateTime=0x1d8bf8d, nFileSizeHigh=0x0, nFileSizeLow=0x15903, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="V3xi3wO l.m4a", cAlternateFileName="V3XI3W~1.M4A")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41119f6b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x41119f6b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x41119f6b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa20c, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="v4YCbLNj.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="V4YCBL~1.CRY")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701b06e0, ftCreationTime.dwHighDateTime=0x1d8b855, ftLastAccessTime.dwLowDateTime=0x243b4990, ftLastAccessTime.dwHighDateTime=0x1d8c00e, ftLastWriteTime.dwLowDateTime=0x243b4990, ftLastWriteTime.dwHighDateTime=0x1d8c00e, nFileSizeHigh=0x0, nFileSizeLow=0xfcbc, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="w23TEnSoX0X bUh.wav", cAlternateFileName="W23TEN~1.WAV")) returned 1 [0289.252] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41140247, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x41140247, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x411665aa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x15a6a, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="wL84FPIPRrjF.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WL84FP~1.CRY")) returned 1 [0289.253] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4118c616, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4118c616, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4118c616, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x306a, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="wZnk91fFxeq-ux.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WZNK91~1.CRY")) returned 1 [0289.253] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4118c616, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4118c616, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x411b293d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x146e9, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="YbJLketrmcupsFcqKK4K.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="YBJLKE~1.CRY")) returned 1 [0289.253] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411b293d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x411b293d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x411d8bb0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x91e8, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="ymTcIWR_gWH.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="YMTCIW~1.CRY")) returned 1 [0289.253] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411fee5e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x411fee5e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x41225611, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x10145, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="Zc1lfVUI5Sjl7oZcSD.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZC1LFV~1.CRY")) returned 1 [0289.253] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41225611, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x41225611, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4124b1d6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x184ae, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="ZQL0Wg7u6I.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZQL0WG~1.CRY")) returned 1 [0289.253] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41225611, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x41225611, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4124b1d6, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x184ae, dwReserved0=0x796f5a7a, dwReserved1=0x31384167, cFileName="ZQL0Wg7u6I.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZQL0WG~1.CRY")) returned 0 [0289.253] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0289.253] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4211b55f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4211b55f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e493675, dwReserved1=0x2e766b6d, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0289.253] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.253] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.254] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.254] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.254] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.254] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0289.254] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570f40) returned 1 [0289.255] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0289.255] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.255] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e610) returned 1 [0289.255] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0289.255] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0289.255] GetLastError () returned 0x0 [0289.255] GetLastError () returned 0x0 [0289.255] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.256] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0289.257] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3d74*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3d74*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.259] SetEndOfFile (hFile=0x23c) returned 1 [0289.259] CloseHandle (hObject=0x23c) returned 1 [0289.259] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.260] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.260] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.260] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.260] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.260] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0289.260] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.261] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.261] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.261] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.261] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.261] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.261] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.261] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.261] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.261] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.261] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.261] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.262] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.262] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.262] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0289.262] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.262] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.262] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.262] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.262] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.262] CryptDestroyKey (hKey=0x55e610) returned 1 [0289.263] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0289.263] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4211b55f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5054a03a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0289.263] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4211b55f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5054a03a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.263] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab6b260, ftCreationTime.dwHighDateTime=0x1d87877, ftLastAccessTime.dwLowDateTime=0x608960d0, ftLastAccessTime.dwHighDateTime=0x1d878fb, ftLastWriteTime.dwLowDateTime=0x608960d0, ftLastWriteTime.dwHighDateTime=0x1d878fb, nFileSizeHigh=0x0, nFileSizeLow=0x1f62, dwReserved0=0x405534, dwReserved1=0x0, cFileName="-FRX5OOzUmfVjJcHf_DE.pptx", cAlternateFileName="-FRX5O~1.PPT")) returned 1 [0289.263] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d58e4f0, ftCreationTime.dwHighDateTime=0x1d85c99, ftLastAccessTime.dwLowDateTime=0x8523830, ftLastAccessTime.dwHighDateTime=0x1d8bcdd, ftLastWriteTime.dwLowDateTime=0x8523830, ftLastWriteTime.dwHighDateTime=0x1d8bcdd, nFileSizeHigh=0x0, nFileSizeLow=0x14fcc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1obvxKB7GQj04t1.pptx", cAlternateFileName="1OBVXK~1.PPT")) returned 1 [0289.263] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x413fe576, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x413fe576, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x41424717, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x129c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="2KVS--9w1I7HQQG.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="2KVS--~1.CRY")) returned 1 [0289.263] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce4f5ca0, ftCreationTime.dwHighDateTime=0x1d897d7, ftLastAccessTime.dwLowDateTime=0xbf2ca240, ftLastAccessTime.dwHighDateTime=0x1d8a890, ftLastWriteTime.dwLowDateTime=0xbf2ca240, ftLastWriteTime.dwHighDateTime=0x1d8a890, nFileSizeHigh=0x0, nFileSizeLow=0x15bfa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="95RH.xlsx", cAlternateFileName="95RH~1.XLS")) returned 1 [0289.263] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb897f0, ftCreationTime.dwHighDateTime=0x1d873c9, ftLastAccessTime.dwLowDateTime=0x259a1cf0, ftLastAccessTime.dwHighDateTime=0x1d8b4ef, ftLastWriteTime.dwLowDateTime=0x259a1cf0, ftLastWriteTime.dwHighDateTime=0x1d8b4ef, nFileSizeHigh=0x0, nFileSizeLow=0x1830e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9bUTXvZ.xlsx", cAlternateFileName="9BUTXV~1.XLS")) returned 1 [0289.263] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41745872, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x41745872, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x41745872, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.263] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadda3310, ftCreationTime.dwHighDateTime=0x1d8a091, ftLastAccessTime.dwLowDateTime=0x8914d100, ftLastAccessTime.dwHighDateTime=0x1d8c0eb, ftLastWriteTime.dwLowDateTime=0x8914d100, ftLastWriteTime.dwHighDateTime=0x1d8c0eb, nFileSizeHigh=0x0, nFileSizeLow=0x7340, dwReserved0=0x405534, dwReserved1=0x0, cFileName="DkWdW-k.xlsx", cAlternateFileName="DKWDW-~1.XLS")) returned 1 [0289.263] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4176c8cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4176c8cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x417de2a1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xee73, dwReserved0=0x405534, dwReserved1=0x0, cFileName="gHRER.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GHRERD~1.CRY")) returned 1 [0289.263] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc255b0, ftCreationTime.dwHighDateTime=0x1d8bd9f, ftLastAccessTime.dwLowDateTime=0xe4abca50, ftLastAccessTime.dwHighDateTime=0x1d8c050, ftLastWriteTime.dwLowDateTime=0xe4abca50, ftLastWriteTime.dwHighDateTime=0x1d8c050, nFileSizeHigh=0x0, nFileSizeLow=0x45d4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="HIjE Bz.odp", cAlternateFileName="HIJEBZ~1.ODP")) returned 1 [0289.263] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5054a03a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5054a03a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5054a03a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.263] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418509d4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x418509d4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x418509d4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2838, dwReserved0=0x405534, dwReserved1=0x0, cFileName="k _jfq9EKV.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="K_JFQ9~1.CRY")) returned 1 [0289.263] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73e4efe0, ftCreationTime.dwHighDateTime=0x1d89d69, ftLastAccessTime.dwLowDateTime=0x8c5fdbc0, ftLastAccessTime.dwHighDateTime=0x1d8a81d, ftLastWriteTime.dwLowDateTime=0x8c5fdbc0, ftLastWriteTime.dwHighDateTime=0x1d8a81d, nFileSizeHigh=0x0, nFileSizeLow=0x16a9f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="m299G.xlsx", cAlternateFileName="M299G~1.XLS")) returned 1 [0289.263] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0289.264] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.264] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.264] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.264] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.264] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.264] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0289.264] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570968) returned 1 [0289.316] CryptCreateHash (in: hProv=0x570968, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0289.317] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.317] CryptDeriveKey (in: hProv=0x570968, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e390) returned 1 [0289.317] CryptDestroyHash (hHash=0x55e710) returned 1 [0289.317] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0289.317] GetLastError () returned 0x0 [0289.317] GetLastError () returned 0x0 [0289.317] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.318] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my music\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0289.360] WriteFile (in: hFile=0x240, lpBuffer=0x23e3db4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3db4*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.362] SetEndOfFile (hFile=0x240) returned 1 [0289.362] CloseHandle (hObject=0x240) returned 1 [0289.362] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.363] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.363] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.363] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.363] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0289.364] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.364] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.364] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.364] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.364] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.364] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.364] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.364] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.364] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.365] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.365] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.365] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.365] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.365] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.365] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.365] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.365] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.365] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.365] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.365] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.366] CryptDestroyKey (hKey=0x55e390) returned 1 [0289.366] CryptReleaseContext (hProv=0x570968, dwFlags=0x0) returned 1 [0289.366] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Music\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my music\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f68c, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f66c, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90æU")) returned 0xffffffff [0289.366] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x20, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0289.366] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.366] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.366] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.367] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.367] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.367] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0289.367] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570da8) returned 1 [0289.367] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0289.368] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.368] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e190) returned 1 [0289.368] CryptDestroyHash (hHash=0x55e910) returned 1 [0289.368] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f660*=0x18) returned 1 [0289.368] GetLastError () returned 0x0 [0289.368] GetLastError () returned 0x0 [0289.368] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.369] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my pictures\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0289.370] WriteFile (in: hFile=0x240, lpBuffer=0x23e3dc4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3dc4*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.371] SetEndOfFile (hFile=0x240) returned 1 [0289.371] CloseHandle (hObject=0x240) returned 1 [0289.371] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.372] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.372] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.372] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.372] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.372] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.373] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0289.373] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.373] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.373] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.373] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.373] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.373] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.374] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.374] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.374] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.374] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.374] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0289.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.375] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.375] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.375] CryptDestroyKey (hKey=0x55e190) returned 1 [0289.375] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0289.375] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Pictures\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my pictures\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f68c, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f66c, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90æU")) returned 0xffffffff [0289.376] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x20, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0289.376] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.376] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.376] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.376] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0289.376] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571518) returned 1 [0289.377] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0289.377] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.377] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0289.377] CryptDestroyHash (hHash=0x55e650) returned 1 [0289.377] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ec2304*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1ec2304*, pdwDataLen=0x19f660*=0x18) returned 1 [0289.377] GetLastError () returned 0x0 [0289.377] GetLastError () returned 0x0 [0289.378] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.378] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my videos\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0289.380] WriteFile (in: hFile=0x240, lpBuffer=0x23e3e14*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3e14*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.381] SetEndOfFile (hFile=0x240) returned 1 [0289.381] CloseHandle (hObject=0x240) returned 1 [0289.381] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.382] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.382] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.382] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.382] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.382] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.382] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebfebc) returned 0x1 [0289.383] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.383] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.383] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.383] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.383] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.383] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.383] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.384] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.384] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.384] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.384] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.384] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.384] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.384] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.384] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.384] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.384] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.385] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.385] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0289.385] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0289.385] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\My Videos\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\my videos\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f68c, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f66c, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90æU")) returned 0xffffffff [0289.385] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b899860, ftCreationTime.dwHighDateTime=0x1d8b283, ftLastAccessTime.dwLowDateTime=0x5b922ad0, ftLastAccessTime.dwHighDateTime=0x1d8b285, ftLastWriteTime.dwLowDateTime=0x5b922ad0, ftLastWriteTime.dwHighDateTime=0x1d8b285, nFileSizeHigh=0x0, nFileSizeLow=0x128a3, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="N5qOeuBE2tNgsag QcZm.ods", cAlternateFileName="N5QOEU~1.ODS")) returned 1 [0289.385] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x41c3065f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x41c3065f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0289.385] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.385] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.386] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.386] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0289.386] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5712f8) returned 1 [0289.387] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0289.387] CryptHashData (hHash=0x55e2d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.387] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e2d0, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0289.387] CryptDestroyHash (hHash=0x55e2d0) returned 1 [0289.387] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f660*=0x18) returned 1 [0289.388] GetLastError () returned 0x0 [0289.388] GetLastError () returned 0x0 [0289.388] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.388] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0289.391] WriteFile (in: hFile=0x240, lpBuffer=0x23e3e54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3e54*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.393] SetEndOfFile (hFile=0x240) returned 1 [0289.393] CloseHandle (hObject=0x240) returned 1 [0289.393] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.394] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.394] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.394] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.394] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.394] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.395] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6578fc) returned 0x1 [0289.395] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.395] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.396] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.396] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.396] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.396] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.396] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.397] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.397] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.397] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.397] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.397] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.397] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.397] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.397] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.398] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.398] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.398] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.398] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.399] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.400] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0289.400] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0289.400] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\Outlook Files\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\outlook files\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x41c3065f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x506a13e5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0289.401] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63954f0d, ftCreationTime.dwHighDateTime=0x1d70699, ftLastAccessTime.dwLowDateTime=0x41c3065f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x506a13e5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.401] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ab31a4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x41ab31a4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x41c3065f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x405534, dwReserved1=0x0, cFileName="achoo@gdllo.de.pst.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ACHOO@~1.CRY")) returned 1 [0289.401] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5067b313, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5067b313, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x506a13e5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.401] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5067b313, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5067b313, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x506a13e5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.401] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0289.401] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41c3065f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x41c3065f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x41c3065f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x77e5, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="suj0H6VnG1d.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SUJ0H6~1.CRY")) returned 1 [0289.401] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27e29ee0, ftCreationTime.dwHighDateTime=0x1d89499, ftLastAccessTime.dwLowDateTime=0x3529eaf0, ftLastAccessTime.dwHighDateTime=0x1d8b3e2, ftLastWriteTime.dwLowDateTime=0x3529eaf0, ftLastWriteTime.dwHighDateTime=0x1d8b3e2, nFileSizeHigh=0x0, nFileSizeLow=0x121cb, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="vezPmeybY48YDb4rAa6.xlsx", cAlternateFileName="VEZPME~1.XLS")) returned 1 [0289.401] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f779b9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x41f779b9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x41f9dc9c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xd0ca, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="X7Iini03CbUwi31eN.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="X7IINI~1.CRY")) returned 1 [0289.401] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d62c10, ftCreationTime.dwHighDateTime=0x1d881dd, ftLastAccessTime.dwLowDateTime=0xfec4500, ftLastAccessTime.dwHighDateTime=0x1d8a18e, ftLastWriteTime.dwLowDateTime=0xfec4500, ftLastWriteTime.dwHighDateTime=0x1d8a18e, nFileSizeHigh=0x0, nFileSizeLow=0xf18, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="XKTGJScA6wfs.pptx", cAlternateFileName="XKTGJS~1.PPT")) returned 1 [0289.401] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6cae8f0, ftCreationTime.dwHighDateTime=0x1d83989, ftLastAccessTime.dwLowDateTime=0x6ca7ec60, ftLastAccessTime.dwHighDateTime=0x1d8812f, ftLastWriteTime.dwLowDateTime=0x6ca7ec60, ftLastWriteTime.dwHighDateTime=0x1d8812f, nFileSizeHigh=0x0, nFileSizeLow=0xd342, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="yVSZ-e4lR27Ww.pptx", cAlternateFileName="YVSZ-E~1.PPT")) returned 1 [0289.401] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c4c9c0, ftCreationTime.dwHighDateTime=0x1d8bde6, ftLastAccessTime.dwLowDateTime=0x420f52f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x420f52f5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="YWKAsaltVFvRmuT6Bq", cAlternateFileName="YWKASA~1")) returned 1 [0289.402] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.402] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.402] GetWindowTextA (in: hWnd=0x60240, lpString=0x223b368, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.402] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.402] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x223b368) returned 0x18 [0289.402] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5710d8) returned 1 [0289.403] CryptCreateHash (in: hProv=0x5710d8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0289.403] CryptHashData (hHash=0x55e710, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.403] CryptDeriveKey (in: hProv=0x5710d8, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e750) returned 1 [0289.403] CryptDestroyHash (hHash=0x55e710) returned 1 [0289.403] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x21ebf84*, pdwDataLen=0x19f660*=0x18) returned 1 [0289.403] GetLastError () returned 0x0 [0289.403] GetLastError () returned 0x0 [0289.403] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.404] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0289.440] WriteFile (in: hFile=0x240, lpBuffer=0x23e3e64*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3e64*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.441] SetEndOfFile (hFile=0x240) returned 1 [0289.441] CloseHandle (hObject=0x240) returned 1 [0289.441] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.442] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.442] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.442] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0289.442] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.442] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.443] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.443] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.443] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.443] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.443] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.443] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.443] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.443] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.443] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.443] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.443] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.444] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.444] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.444] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.444] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.444] CryptDestroyKey (hKey=0x55e750) returned 1 [0289.444] CryptReleaseContext (hProv=0x5710d8, dwFlags=0x0) returned 1 [0289.444] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\YWKAsaltVFvRmuT6Bq\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\ywkasaltvfvrmut6bq\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c4c9c0, ftCreationTime.dwHighDateTime=0x1d8bde6, ftLastAccessTime.dwLowDateTime=0x420f52f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50713be1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0289.444] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x78c4c9c0, ftCreationTime.dwHighDateTime=0x1d8bde6, ftLastAccessTime.dwLowDateTime=0x420f52f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50713be1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.444] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50713be1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50713be1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50713be1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.444] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4203664d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4203664d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4205d446, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x94e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RF70W9.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RF70W9~1.CRY")) returned 1 [0289.444] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bb1b710, ftCreationTime.dwHighDateTime=0x1d8b49d, ftLastAccessTime.dwLowDateTime=0x1c44a3e0, ftLastAccessTime.dwHighDateTime=0x1d8b829, ftLastWriteTime.dwLowDateTime=0x1c44a3e0, ftLastWriteTime.dwHighDateTime=0x1d8b829, nFileSizeHigh=0x0, nFileSizeLow=0x2ee0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="rHA5Ynh D2qLJ.ots", cAlternateFileName="RHA5YN~1.OTS")) returned 1 [0289.444] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42082b09, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42082b09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x420aa6b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x15470, dwReserved0=0x405534, dwReserved1=0x0, cFileName="U8r288JvxsAlu2vt.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="U8R288~1.CRY")) returned 1 [0289.444] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42082b09, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42082b09, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x420aa6b8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x15470, dwReserved0=0x405534, dwReserved1=0x0, cFileName="U8r288JvxsAlu2vt.pdf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="U8R288~1.CRY")) returned 0 [0289.445] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0289.445] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x420f52f5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x420f52f5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4211b55f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xbc94, dwReserved0=0x41737876, dwReserved1=0x7632756c, cFileName="Z5y0BnViuyw9OKsWr.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="Z5Y0BN~1.CRY")) returned 1 [0289.445] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f85c530, ftCreationTime.dwHighDateTime=0x1d84f2d, ftLastAccessTime.dwLowDateTime=0x88903a70, ftLastAccessTime.dwHighDateTime=0x1d89306, ftLastWriteTime.dwLowDateTime=0x88903a70, ftLastWriteTime.dwHighDateTime=0x1d89306, nFileSizeHigh=0x0, nFileSizeLow=0x5a8a, dwReserved0=0x41737876, dwReserved1=0x7632756c, cFileName="zggXaEqM7UQYVgQY.pptx", cAlternateFileName="ZGGXAE~1.PPT")) returned 1 [0289.445] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1a61c90, ftCreationTime.dwHighDateTime=0x1d8ba8b, ftLastAccessTime.dwLowDateTime=0x421b3ec8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x421b3ec8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41737876, dwReserved1=0x7632756c, cFileName="_7kx8h", cAlternateFileName="")) returned 1 [0289.445] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.445] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.445] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.445] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.445] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0289.445] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570638) returned 1 [0289.446] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0289.446] CryptHashData (hHash=0x55e210, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.446] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e5d0) returned 1 [0289.446] CryptDestroyHash (hHash=0x55e210) returned 1 [0289.446] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f660*=0x18) returned 1 [0289.446] GetLastError () returned 0x0 [0289.446] GetLastError () returned 0x0 [0289.446] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.447] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0289.448] WriteFile (in: hFile=0x240, lpBuffer=0x23e3ea4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3ea4*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.449] SetEndOfFile (hFile=0x240) returned 1 [0289.449] CloseHandle (hObject=0x240) returned 1 [0289.449] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.450] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.450] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.450] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.450] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0289.450] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.450] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.451] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.451] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.451] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.451] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.451] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.451] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.451] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.452] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.452] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.452] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.452] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.453] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0289.453] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0289.453] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1a61c90, ftCreationTime.dwHighDateTime=0x1d8ba8b, ftLastAccessTime.dwLowDateTime=0x421b3ec8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50713be1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e7d0 [0289.453] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1a61c90, ftCreationTime.dwHighDateTime=0x1d8ba8b, ftLastAccessTime.dwLowDateTime=0x421b3ec8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50713be1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.453] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37cd9960, ftCreationTime.dwHighDateTime=0x1d8bc56, ftLastAccessTime.dwLowDateTime=0xf41f55d0, ftLastAccessTime.dwHighDateTime=0x1d8bed7, ftLastWriteTime.dwLowDateTime=0xf41f55d0, ftLastWriteTime.dwHighDateTime=0x1d8bed7, nFileSizeHigh=0x0, nFileSizeLow=0x13f65, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6HqpTudWoWceVCJqYhCX.ots", cAlternateFileName="6HQPTU~1.OTS")) returned 1 [0289.453] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4211b55f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4211b55f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42141760, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xcea8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7lbgTAC0tGktM8kIYBG.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="7LBGTA~1.CRY")) returned 1 [0289.453] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50713be1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50713be1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50713be1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.453] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bd9b070, ftCreationTime.dwHighDateTime=0x1d8c068, ftLastAccessTime.dwLowDateTime=0xe510e860, ftLastAccessTime.dwHighDateTime=0x1d8c08a, ftLastWriteTime.dwLowDateTime=0xe510e860, ftLastWriteTime.dwHighDateTime=0x1d8c08a, nFileSizeHigh=0x0, nFileSizeLow=0xb811, dwReserved0=0x405534, dwReserved1=0x0, cFileName="mTRn.odp", cAlternateFileName="")) returned 1 [0289.453] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4218dc73, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4218dc73, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x421b3ec8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xdb78, dwReserved0=0x405534, dwReserved1=0x0, cFileName="RW0X.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RW0XDO~1.CRY")) returned 1 [0289.453] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67b83d40, ftCreationTime.dwHighDateTime=0x1d8bc76, ftLastAccessTime.dwLowDateTime=0x42200307, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42200307, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="VD4qBAi", cAlternateFileName="")) returned 1 [0289.453] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.453] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.454] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.454] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.454] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.454] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0289.454] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570fc8) returned 1 [0289.455] CryptCreateHash (in: hProv=0x570fc8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0289.455] CryptHashData (hHash=0x55e610, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.455] CryptDeriveKey (in: hProv=0x570fc8, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e710) returned 1 [0289.455] CryptDestroyHash (hHash=0x55e610) returned 1 [0289.455] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0289.455] GetLastError () returned 0x0 [0289.455] GetLastError () returned 0x0 [0289.455] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.456] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0289.457] WriteFile (in: hFile=0x244, lpBuffer=0x23e3eb4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3eb4*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.458] SetEndOfFile (hFile=0x244) returned 1 [0289.458] CloseHandle (hObject=0x244) returned 1 [0289.458] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.459] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.460] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.460] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.460] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0289.460] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.460] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.460] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.460] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.460] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.461] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.461] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.461] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.461] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0289.461] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.461] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.461] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.461] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.462] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.462] CryptDestroyKey (hKey=0x55e710) returned 1 [0289.462] CryptReleaseContext (hProv=0x570fc8, dwFlags=0x0) returned 1 [0289.462] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67b83d40, ftCreationTime.dwHighDateTime=0x1d8bc76, ftLastAccessTime.dwLowDateTime=0x42200307, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5073a11b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0289.462] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67b83d40, ftCreationTime.dwHighDateTime=0x1d8bc76, ftLastAccessTime.dwLowDateTime=0x42200307, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5073a11b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.462] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x421b3ec8, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x421b3ec8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x421d9fd7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x125b9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="EH1JpmpeO46ag.doc.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="EH1JPM~1.CRY")) returned 1 [0289.462] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5073a11b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5073a11b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5073a11b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.462] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3a6b70, ftCreationTime.dwHighDateTime=0x1d8b569, ftLastAccessTime.dwLowDateTime=0x572a20a0, ftLastAccessTime.dwHighDateTime=0x1d8bfc9, ftLastWriteTime.dwLowDateTime=0x572a20a0, ftLastWriteTime.dwHighDateTime=0x1d8bfc9, nFileSizeHigh=0x0, nFileSizeLow=0x10aab, dwReserved0=0x405534, dwReserved1=0x0, cFileName="mt1d10co8b8orGro7.pptx", cAlternateFileName="MT1D10~1.PPT")) returned 1 [0289.462] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19db5970, ftCreationTime.dwHighDateTime=0x1d8b944, ftLastAccessTime.dwLowDateTime=0x424d5859, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x424d5859, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ZhhStph4", cAlternateFileName="")) returned 1 [0289.462] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.462] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.463] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.463] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.463] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.463] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0289.463] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x571270) returned 1 [0289.464] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0289.464] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.464] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e650) returned 1 [0289.464] CryptDestroyHash (hHash=0x55e610) returned 1 [0289.464] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f190*=0x18) returned 1 [0289.464] GetLastError () returned 0x0 [0289.464] GetLastError () returned 0x0 [0289.464] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.465] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0289.466] WriteFile (in: hFile=0x248, lpBuffer=0x23e3ef4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3ef4*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.468] SetEndOfFile (hFile=0x248) returned 1 [0289.468] CloseHandle (hObject=0x248) returned 1 [0289.468] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.469] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.469] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.469] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.469] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.469] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0289.470] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.470] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.470] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.470] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.470] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.471] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.471] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.471] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.471] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0289.471] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.471] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.472] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.472] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.472] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.472] CryptDestroyKey (hKey=0x55e650) returned 1 [0289.472] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0289.472] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19db5970, ftCreationTime.dwHighDateTime=0x1d8b944, ftLastAccessTime.dwLowDateTime=0x424d5859, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5073a11b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0289.472] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19db5970, ftCreationTime.dwHighDateTime=0x1d8b944, ftLastAccessTime.dwLowDateTime=0x424d5859, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5073a11b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.472] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x334b7040, ftCreationTime.dwHighDateTime=0x1d8b21c, ftLastAccessTime.dwLowDateTime=0x4237da65, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4237da65, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="10Dj0NoHfl1fRCzJ80-K", cAlternateFileName="10DJ0N~1")) returned 1 [0289.473] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.473] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.473] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.473] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.473] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.473] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0289.473] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c98) returned 1 [0289.474] CryptCreateHash (in: hProv=0x570c98, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0289.474] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.474] CryptDeriveKey (in: hProv=0x570c98, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e710) returned 1 [0289.474] CryptDestroyHash (hHash=0x55e650) returned 1 [0289.474] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0289.474] GetLastError () returned 0x0 [0289.474] GetLastError () returned 0x0 [0289.474] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.475] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0289.481] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3f04*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3f04*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.482] SetEndOfFile (hFile=0x24c) returned 1 [0289.482] CloseHandle (hObject=0x24c) returned 1 [0289.483] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.484] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.484] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.484] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.484] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.484] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0289.484] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.484] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.485] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.485] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.485] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.485] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.485] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.485] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0289.485] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.486] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.486] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.486] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.486] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.486] CryptDestroyKey (hKey=0x55e710) returned 1 [0289.486] CryptReleaseContext (hProv=0x570c98, dwFlags=0x0) returned 1 [0289.486] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x334b7040, ftCreationTime.dwHighDateTime=0x1d8b21c, ftLastAccessTime.dwLowDateTime=0x4237da65, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507600ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0289.486] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x334b7040, ftCreationTime.dwHighDateTime=0x1d8b21c, ftLastAccessTime.dwLowDateTime=0x4237da65, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507600ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.486] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd10750, ftCreationTime.dwHighDateTime=0x1d8bc60, ftLastAccessTime.dwLowDateTime=0x4233153e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4233153e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="8gkv", cAlternateFileName="")) returned 1 [0289.486] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.486] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.487] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.487] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.487] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0289.487] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x571270) returned 1 [0289.487] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0289.487] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.487] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e710) returned 1 [0289.487] CryptDestroyHash (hHash=0x55e650) returned 1 [0289.487] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0289.487] GetLastError () returned 0x0 [0289.488] GetLastError () returned 0x0 [0289.488] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.488] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0289.489] WriteFile (in: hFile=0x250, lpBuffer=0x23e3f44*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f44*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.490] SetEndOfFile (hFile=0x250) returned 1 [0289.490] CloseHandle (hObject=0x250) returned 1 [0289.490] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.491] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.491] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.492] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.492] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.492] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.492] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0289.492] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.492] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.492] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.492] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.492] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.492] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.493] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.493] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.493] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.493] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.493] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.493] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.493] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.493] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.493] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0289.493] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.493] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.493] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.493] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.493] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.494] CryptDestroyKey (hKey=0x55e710) returned 1 [0289.494] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0289.494] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\8gkv\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\8gkv\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd10750, ftCreationTime.dwHighDateTime=0x1d8bc60, ftLastAccessTime.dwLowDateTime=0x4233153e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507871fb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0289.494] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd10750, ftCreationTime.dwHighDateTime=0x1d8bc60, ftLastAccessTime.dwLowDateTime=0x4233153e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507871fb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.494] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa08d8640, ftCreationTime.dwHighDateTime=0x1d8c0b6, ftLastAccessTime.dwLowDateTime=0x4a419250, ftLastAccessTime.dwHighDateTime=0x1d8c12d, ftLastWriteTime.dwLowDateTime=0x4a419250, ftLastWriteTime.dwHighDateTime=0x1d8c12d, nFileSizeHigh=0x0, nFileSizeLow=0x10fc4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5iATZtFB1RdzznP.ods", cAlternateFileName="5IATZT~1.ODS")) returned 1 [0289.494] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x507871fb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x507871fb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507871fb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.494] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42200307, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42200307, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4224c80b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xd2e8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IzC9E.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IZC9EP~1.CRY")) returned 1 [0289.494] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6643220, ftCreationTime.dwHighDateTime=0x1d8ba6a, ftLastAccessTime.dwLowDateTime=0x95cc9840, ftLastAccessTime.dwHighDateTime=0x1d8bada, ftLastWriteTime.dwLowDateTime=0x95cc9840, ftLastWriteTime.dwHighDateTime=0x1d8bada, nFileSizeHigh=0x0, nFileSizeLow=0x62e2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="LyzxRwKCPSt.odp", cAlternateFileName="LYZXRW~1.ODP")) returned 1 [0289.494] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4224c80b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4224c80b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4233153e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaab9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="NquTqUFX3Dwb1.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NQUTQU~1.CRY")) returned 1 [0289.494] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4224c80b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4224c80b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4233153e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xaab9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="NquTqUFX3Dwb1.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NQUTQU~1.CRY")) returned 0 [0289.494] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0289.494] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d19880, ftCreationTime.dwHighDateTime=0x1d8b593, ftLastAccessTime.dwLowDateTime=0xfef28970, ftLastAccessTime.dwHighDateTime=0x1d8beb7, ftLastWriteTime.dwLowDateTime=0xfef28970, ftLastWriteTime.dwHighDateTime=0x1d8beb7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77443358, dwReserved1=0x642e3162, cFileName="ALx4yvVwcZQdL", cAlternateFileName="ALX4YV~1")) returned 1 [0289.494] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.495] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.495] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.495] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.495] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.495] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0289.495] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570b00) returned 1 [0289.495] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0289.495] CryptHashData (hHash=0x55e390, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.495] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e650) returned 1 [0289.496] CryptDestroyHash (hHash=0x55e390) returned 1 [0289.496] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0289.496] GetLastError () returned 0x0 [0289.496] GetLastError () returned 0x0 [0289.496] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.496] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\ALx4yvVwcZQdL\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\alx4yvvwczqdl\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0289.499] WriteFile (in: hFile=0x250, lpBuffer=0x23e3f54*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3f54*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.500] SetEndOfFile (hFile=0x250) returned 1 [0289.500] CloseHandle (hObject=0x250) returned 1 [0289.500] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.501] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.501] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.501] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0289.501] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.501] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.502] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.502] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.502] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.502] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.502] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.502] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.502] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.503] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.503] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.503] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.503] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.503] CryptDestroyKey (hKey=0x55e650) returned 1 [0289.503] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0289.503] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\10Dj0NoHfl1fRCzJ80-K\\ALx4yvVwcZQdL\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\10dj0nohfl1frczj80-k\\alx4yvvwczqdl\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d19880, ftCreationTime.dwHighDateTime=0x1d8b593, ftLastAccessTime.dwLowDateTime=0xfef28970, ftLastAccessTime.dwHighDateTime=0x1d8beb7, ftLastWriteTime.dwLowDateTime=0x507871fb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0289.503] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d19880, ftCreationTime.dwHighDateTime=0x1d8b593, ftLastAccessTime.dwLowDateTime=0xfef28970, ftLastAccessTime.dwHighDateTime=0x1d8beb7, ftLastWriteTime.dwLowDateTime=0x507871fb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.503] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0f2f870, ftCreationTime.dwHighDateTime=0x1d8b7ad, ftLastAccessTime.dwLowDateTime=0xc9feeb30, ftLastAccessTime.dwHighDateTime=0x1d8b879, ftLastWriteTime.dwLowDateTime=0xc9feeb30, ftLastWriteTime.dwHighDateTime=0x1d8b879, nFileSizeHigh=0x0, nFileSizeLow=0x5776, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AiBxNvuTw_1M7cqH.odp", cAlternateFileName="AIBXNV~1.ODP")) returned 1 [0289.503] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x507871fb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x507871fb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507ac5b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.503] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x507871fb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x507871fb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507ac5b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.503] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0289.504] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4233153e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4233153e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4237da65, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x17d68, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="fxGkChym_qpotd.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FXGKCH~1.CRY")) returned 1 [0289.504] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x507600ac, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x507600ac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507600ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.504] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x507600ac, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x507600ac, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507600ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.504] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0289.504] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x423cca56, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x423cca56, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x423cca56, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xb617, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="AOn1rEEg25j0A.pps.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AON1RE~1.CRY")) returned 1 [0289.504] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5073a11b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5073a11b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507600ac, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.504] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ed75610, ftCreationTime.dwHighDateTime=0x1d8bbf4, ftLastAccessTime.dwLowDateTime=0x4241630c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4241630c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="LEWorMp4uRNygtAMs5", cAlternateFileName="LEWORM~1")) returned 1 [0289.504] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.504] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.504] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.504] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.504] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.504] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0289.504] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570c10) returned 1 [0289.505] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0289.505] CryptHashData (hHash=0x55e650, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.505] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e190) returned 1 [0289.505] CryptDestroyHash (hHash=0x55e650) returned 1 [0289.505] CryptEncrypt (in: hKey=0x55e190, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19ef28*=0x18) returned 1 [0289.505] GetLastError () returned 0x0 [0289.505] GetLastError () returned 0x0 [0289.505] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.506] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0289.507] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3f94*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3f94*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.508] SetEndOfFile (hFile=0x24c) returned 1 [0289.508] CloseHandle (hObject=0x24c) returned 1 [0289.508] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.509] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.509] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.509] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.509] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0289.510] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.510] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.510] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.510] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.510] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.510] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.510] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.511] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.511] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.511] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.511] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.511] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.511] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.511] CryptDestroyKey (hKey=0x55e190) returned 1 [0289.511] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0289.511] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ed75610, ftCreationTime.dwHighDateTime=0x1d8bbf4, ftLastAccessTime.dwLowDateTime=0x4241630c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507ac5b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0289.512] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ed75610, ftCreationTime.dwHighDateTime=0x1d8bbf4, ftLastAccessTime.dwLowDateTime=0x4241630c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507ac5b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.512] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4241630c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4241630c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4241630c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6fda, dwReserved0=0x405534, dwReserved1=0x0, cFileName="0oOW.csv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="0OOWCS~1.CRY")) returned 1 [0289.512] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x507ac5b7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x507ac5b7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507ac5b7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.512] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa430c5a0, ftCreationTime.dwHighDateTime=0x1d8befe, ftLastAccessTime.dwLowDateTime=0xa9219130, ftLastAccessTime.dwHighDateTime=0x1d8c047, ftLastWriteTime.dwLowDateTime=0xa9219130, ftLastWriteTime.dwHighDateTime=0x1d8c047, nFileSizeHigh=0x0, nFileSizeLow=0x96e4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="pjxi.xls", cAlternateFileName="")) returned 1 [0289.512] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5537be0, ftCreationTime.dwHighDateTime=0x1d8bd45, ftLastAccessTime.dwLowDateTime=0x73085d90, ftLastAccessTime.dwHighDateTime=0x1d8c07e, ftLastWriteTime.dwLowDateTime=0x73085d90, ftLastWriteTime.dwHighDateTime=0x1d8c07e, nFileSizeHigh=0x0, nFileSizeLow=0x12d3a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="QhgY.xlsx", cAlternateFileName="QHGY~1.XLS")) returned 1 [0289.512] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb785fd70, ftCreationTime.dwHighDateTime=0x1d8bbeb, ftLastAccessTime.dwLowDateTime=0x424aed8a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x424aed8a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="s89b6", cAlternateFileName="")) returned 1 [0289.512] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.512] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.512] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.512] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.512] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.512] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0289.512] CryptAcquireContextA (in: phProv=0x19ecb4, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ecb4*=0x570f40) returned 1 [0289.513] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19ec6c | out: phHash=0x19ec6c) returned 1 [0289.513] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.513] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19ecb0 | out: phKey=0x19ecb0*=0x55e710) returned 1 [0289.513] CryptDestroyHash (hHash=0x55e650) returned 1 [0289.513] CryptEncrypt (in: hKey=0x55e710, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19ecc0*=0x18) returned 1 [0289.513] GetLastError () returned 0x0 [0289.513] GetLastError () returned 0x0 [0289.513] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.513] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x250 [0289.528] WriteFile (in: hFile=0x250, lpBuffer=0x23e3fa4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19e9e8, lpOverlapped=0x0 | out: lpBuffer=0x23e3fa4*, lpNumberOfBytesWritten=0x19e9e8*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.529] SetEndOfFile (hFile=0x250) returned 1 [0289.529] CloseHandle (hObject=0x250) returned 1 [0289.529] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.531] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.531] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.531] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.532] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.532] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.532] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0289.534] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.534] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.534] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.534] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.535] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.535] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.535] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.535] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.535] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.535] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.535] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.536] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.536] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.536] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.536] CryptDestroyKey (hKey=0x55e710) returned 1 [0289.536] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0289.536] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Documents\\_7kx8h\\VD4qBAi\\ZhhStph4\\LEWorMp4uRNygtAMs5\\s89b6\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\documents\\_7kx8h\\vd4qbai\\zhhstph4\\lewormp4urnygtams5\\s89b6\\*.*"), lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb785fd70, ftCreationTime.dwHighDateTime=0x1d8bbeb, ftLastAccessTime.dwLowDateTime=0x424aed8a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507d26f9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0289.536] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb785fd70, ftCreationTime.dwHighDateTime=0x1d8bbeb, ftLastAccessTime.dwLowDateTime=0x424aed8a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507d26f9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bf35b0, ftCreationTime.dwHighDateTime=0x1d8c02c, ftLastAccessTime.dwLowDateTime=0x8fbdb810, ftLastAccessTime.dwHighDateTime=0x1d8c11c, ftLastWriteTime.dwLowDateTime=0x8fbdb810, ftLastWriteTime.dwHighDateTime=0x1d8c11c, nFileSizeHigh=0x0, nFileSizeLow=0xfbae, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Cms8gjs.ots", cAlternateFileName="")) returned 1 [0289.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadfd9130, ftCreationTime.dwHighDateTime=0x1d8b1b6, ftLastAccessTime.dwLowDateTime=0x6b28ddf0, ftLastAccessTime.dwHighDateTime=0x1d8be6e, ftLastWriteTime.dwLowDateTime=0x6b28ddf0, ftLastWriteTime.dwHighDateTime=0x1d8be6e, nFileSizeHigh=0x0, nFileSizeLow=0x8248, dwReserved0=0x405534, dwReserved1=0x0, cFileName="hjW1.pptx", cAlternateFileName="HJW1~1.PPT")) returned 1 [0289.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x507d26f9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x507d26f9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507d26f9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4243c646, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4243c646, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x424628f2, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x15a2f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="rFTnkA9Jc0y6Km6KDmoJ.rtf.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RFTNKA~1.CRY")) returned 1 [0289.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83386500, ftCreationTime.dwHighDateTime=0x1d8b572, ftLastAccessTime.dwLowDateTime=0x9080aa0, ftLastAccessTime.dwHighDateTime=0x1d8b6fe, ftLastWriteTime.dwLowDateTime=0x9080aa0, ftLastWriteTime.dwHighDateTime=0x1d8b6fe, nFileSizeHigh=0x0, nFileSizeLow=0x70b2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="udCFH17BURL.ods", cAlternateFileName="UDCFH1~1.ODS")) returned 1 [0289.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424628f2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x424628f2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42488ec7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xc82d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="usItM.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USITMP~1.CRY")) returned 1 [0289.537] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19ec68 | out: lpFindFileData=0x19ec68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424628f2, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x424628f2, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42488ec7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xc82d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="usItM.ppt.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="USITMP~1.CRY")) returned 0 [0289.537] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0289.537] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678876d0, ftCreationTime.dwHighDateTime=0x1d8b156, ftLastAccessTime.dwLowDateTime=0x8b847db0, ftLastAccessTime.dwHighDateTime=0x1d8bfc8, ftLastWriteTime.dwLowDateTime=0x8b847db0, ftLastWriteTime.dwHighDateTime=0x1d8bfc8, nFileSizeHigh=0x0, nFileSizeLow=0xb0a9, dwReserved0=0x632e7470, dwReserved1=0x74707972, cFileName="ToW_sv.ots", cAlternateFileName="")) returned 1 [0289.537] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x678876d0, ftCreationTime.dwHighDateTime=0x1d8b156, ftLastAccessTime.dwLowDateTime=0x8b847db0, ftLastAccessTime.dwHighDateTime=0x1d8bfc8, ftLastWriteTime.dwLowDateTime=0x8b847db0, ftLastWriteTime.dwHighDateTime=0x1d8bfc8, nFileSizeHigh=0x0, nFileSizeLow=0xb0a9, dwReserved0=0x632e7470, dwReserved1=0x74707972, cFileName="ToW_sv.ots", cAlternateFileName="")) returned 0 [0289.537] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0289.537] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424d5859, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x424d5859, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x424d5859, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x49a5, dwReserved0=0x5473746f, dwReserved1=0x5f4f545f, cFileName="tMlj6-2of.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TMLJ6-~1.CRY")) returned 1 [0289.537] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424d5859, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x424d5859, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x424d5859, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x49a5, dwReserved0=0x5473746f, dwReserved1=0x5f4f545f, cFileName="tMlj6-2of.docx.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TMLJ6-~1.CRY")) returned 0 [0289.537] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0289.538] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19db5970, ftCreationTime.dwHighDateTime=0x1d8b944, ftLastAccessTime.dwLowDateTime=0x424d5859, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x424d5859, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ZhhStph4", cAlternateFileName="")) returned 0 [0289.538] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0289.538] FindNextFileA (in: hFindFile=0x55e7d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67b83d40, ftCreationTime.dwHighDateTime=0x1d8bc76, ftLastAccessTime.dwLowDateTime=0x42200307, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42200307, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="VD4qBAi", cAlternateFileName="")) returned 0 [0289.538] FindClose (in: hFindFile=0x55e7d0 | out: hFindFile=0x55e7d0) returned 1 [0289.538] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1a61c90, ftCreationTime.dwHighDateTime=0x1d8ba8b, ftLastAccessTime.dwLowDateTime=0x421b3ec8, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x421b3ec8, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x41737876, dwReserved1=0x7632756c, cFileName="_7kx8h", cAlternateFileName="")) returned 0 [0289.538] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0289.538] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x424fb209, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x424fb209, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5155374d, dwReserved1=0x51675659, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0289.538] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.538] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.539] GetWindowTextA (in: hWnd=0x60240, lpString=0x21ebf84, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.539] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.539] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x21ebf84) returned 0x18 [0289.539] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571490) returned 1 [0289.540] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0289.540] CryptHashData (hHash=0x55e910, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.540] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e5d0) returned 1 [0289.540] CryptDestroyHash (hHash=0x55e910) returned 1 [0289.540] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0289.540] GetLastError () returned 0x0 [0289.540] GetLastError () returned 0x0 [0289.540] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.541] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0289.544] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3fe4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3fe4*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.546] SetEndOfFile (hFile=0x23c) returned 1 [0289.546] CloseHandle (hObject=0x23c) returned 1 [0289.546] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.547] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.547] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.548] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.548] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.548] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.548] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0289.548] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.548] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.548] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.548] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.548] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.549] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.549] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.549] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.549] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.549] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.549] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.550] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.550] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.550] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.550] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.550] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0289.550] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0289.550] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Downloads\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\downloads\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x424fb209, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507f93f7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e390 [0289.550] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x424fb209, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x507f93f7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.550] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424fb209, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x424fb209, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x424fb209, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.551] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x507f93f7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x507f93f7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5081ed08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.551] FindNextFileA (in: hFindFile=0x55e390, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x507f93f7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x507f93f7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5081ed08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.551] FindClose (in: hFindFile=0x55e390 | out: hFindFile=0x55e390) returned 1 [0289.551] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4269ec0f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4269ec0f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0289.551] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.551] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.551] GetWindowTextA (in: hWnd=0x60240, lpString=0x668e18, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.551] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.551] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x668e18) returned 0x18 [0289.551] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570b88) returned 1 [0289.552] CryptCreateHash (in: hProv=0x570b88, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0289.552] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.552] CryptDeriveKey (in: hProv=0x570b88, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e610) returned 1 [0289.552] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0289.552] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x6534d8*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0289.552] GetLastError () returned 0x0 [0289.552] GetLastError () returned 0x0 [0289.552] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.553] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0289.554] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3ff4*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3ff4*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.555] SetEndOfFile (hFile=0x23c) returned 1 [0289.555] CloseHandle (hObject=0x23c) returned 1 [0289.556] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.557] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.557] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.557] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1e83ef8) returned 0x1 [0289.557] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.557] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.558] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.558] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.558] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.558] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.558] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.558] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.558] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.558] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.558] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.559] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.559] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.559] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.559] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.559] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.559] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.559] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.559] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.559] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.560] CryptDestroyKey (hKey=0x55e610) returned 1 [0289.560] CryptReleaseContext (hProv=0x570b88, dwFlags=0x0) returned 1 [0289.560] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4269ec0f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5081ed08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0289.560] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4269ec0f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5081ed08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.560] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43053b43, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x43053b43, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x43079e90, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Bing.url", cAlternateFileName="")) returned 1 [0289.560] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x424fb209, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x424fb209, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4256d98d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.560] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5081ed08, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5081ed08, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5081ed08, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.560] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x426cc67f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x426cc67f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0289.560] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.560] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.560] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.560] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebc864, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.560] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.561] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebc864) returned 0x18 [0289.561] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570a78) returned 1 [0289.564] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0289.564] CryptHashData (hHash=0x55e290, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.564] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e910) returned 1 [0289.564] CryptDestroyHash (hHash=0x55e290) returned 1 [0289.565] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1f0ff50*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1f0ff50*, pdwDataLen=0x19f660*=0x18) returned 1 [0289.565] GetLastError () returned 0x0 [0289.565] GetLastError () returned 0x0 [0289.565] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.565] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\Links\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\links\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0289.566] WriteFile (in: hFile=0x240, lpBuffer=0x23e4044*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e4044*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.567] SetEndOfFile (hFile=0x240) returned 1 [0289.568] CloseHandle (hObject=0x240) returned 1 [0289.568] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.569] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.569] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.570] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x223b360) returned 0x1 [0289.570] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.570] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.570] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.570] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.570] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.571] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.571] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.571] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0289.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.571] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.571] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.571] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.571] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.572] CryptDestroyKey (hKey=0x55e910) returned 1 [0289.572] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0289.572] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Favorites\\Links\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\favorites\\links\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x426cc67f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50844f10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e310 [0289.572] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x426cc67f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50844f10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.572] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x426cc67f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x426cc67f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x426cc67f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.572] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50844f10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50844f10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50844f10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.572] FindNextFileA (in: hFindFile=0x55e310, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50844f10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50844f10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50844f10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.572] FindClose (in: hFindFile=0x55e310 | out: hFindFile=0x55e310) returned 1 [0289.572] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x42cc0372, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x426cc67f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x426cc67f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 0 [0289.572] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0289.572] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48be7df1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x48be7df1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x48be7df1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.572] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x427375a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x427375a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Links", cAlternateFileName="")) returned 1 [0289.572] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.572] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.573] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.573] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.573] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0289.573] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571408) returned 1 [0289.573] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0289.573] CryptHashData (hHash=0x55e390, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.573] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e310) returned 1 [0289.574] CryptDestroyHash (hHash=0x55e390) returned 1 [0289.574] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x657904*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x657904*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0289.574] GetLastError () returned 0x0 [0289.574] GetLastError () returned 0x0 [0289.574] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.574] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0289.576] WriteFile (in: hFile=0x23c, lpBuffer=0x23e527c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e527c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.577] SetEndOfFile (hFile=0x23c) returned 1 [0289.577] CloseHandle (hObject=0x23c) returned 1 [0289.577] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.579] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.579] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.580] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.580] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.580] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x668e10) returned 0x1 [0289.581] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.581] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.581] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.582] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.582] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.582] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.582] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.582] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.583] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.583] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.583] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.583] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.583] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.584] CryptDestroyKey (hKey=0x55e310) returned 1 [0289.584] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0289.584] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Links\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\links\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x427375a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50844f10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0289.584] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x427375a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50844f10, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.584] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x426eb133, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x426eb133, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x426eb133, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.584] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42711207, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42711207, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42711207, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x207, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Desktop.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~2.CRY")) returned 1 [0289.584] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427375a3, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x427375a3, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x427375a3, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3d0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Downloads.lnk.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DOWNLO~1.CRY")) returned 1 [0289.584] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50844f10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50844f10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5086b0fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.584] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50844f10, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50844f10, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5086b0fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0289.584] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0289.584] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x5f4f545f, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0289.584] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.584] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.585] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.585] GetWindowTextA (in: hWnd=0x60240, lpString=0x6534d8, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.585] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.585] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x6534d8) returned 0x18 [0289.585] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570da8) returned 1 [0289.585] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0289.585] CryptHashData (hHash=0x55e5d0, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.586] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e910) returned 1 [0289.586] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0289.586] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x229302c*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x229302c*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0289.586] GetLastError () returned 0x0 [0289.586] GetLastError () returned 0x0 [0289.586] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.587] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0289.587] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.588] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Local Settings\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\local settings\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0289.588] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.589] SetEndOfFile (hFile=0x23c) returned 1 [0289.590] CloseHandle (hObject=0x23c) returned 1 [0289.590] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.591] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.591] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.591] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.591] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ebc85c) returned 0x1 [0289.592] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.592] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.592] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.592] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.592] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.593] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.593] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.593] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.594] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.594] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.594] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.594] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.594] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.594] CryptDestroyKey (hKey=0x55e910) returned 1 [0289.594] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0289.594] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Local Settings\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\local settings\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0289.595] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4294d6a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4294d6a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="Music", cAlternateFileName="")) returned 1 [0289.595] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.595] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.595] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ec2304, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.595] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.595] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ec2304) returned 0x18 [0289.595] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571050) returned 1 [0289.596] CryptCreateHash (in: hProv=0x571050, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0289.596] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.596] CryptDeriveKey (in: hProv=0x571050, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e390) returned 1 [0289.596] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0289.596] CryptEncrypt (in: hKey=0x55e390, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0289.596] GetLastError () returned 0x0 [0289.596] GetLastError () returned 0x0 [0289.596] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.596] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0289.597] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3574*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3574*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.597] SetEndOfFile (hFile=0x23c) returned 1 [0289.597] CloseHandle (hObject=0x23c) returned 1 [0289.597] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.598] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.598] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.598] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0289.598] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.598] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.598] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.599] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.599] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.599] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.599] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.599] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.599] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.600] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.600] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.600] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.600] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.600] CryptDestroyKey (hKey=0x55e390) returned 1 [0289.600] CryptReleaseContext (hProv=0x571050, dwFlags=0x0) returned 1 [0289.600] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4294d6a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x506550de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e710 [0289.600] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4294d6a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x506550de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.600] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427620de, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x427620de, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x427620de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0289.600] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506550de, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x506550de, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5089141b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.600] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5c270f0, ftCreationTime.dwHighDateTime=0x1d8be82, ftLastAccessTime.dwLowDateTime=0xfc0019b0, ftLastAccessTime.dwHighDateTime=0x1d8be91, ftLastWriteTime.dwLowDateTime=0xfc0019b0, ftLastWriteTime.dwHighDateTime=0x1d8be91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="JAB0S_rGExV_SLJ", cAlternateFileName="JAB0S_~1")) returned 1 [0289.600] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.601] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.601] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.601] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.601] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0289.601] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5712f8) returned 1 [0289.601] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0289.601] CryptHashData (hHash=0x55e210, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.601] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e750) returned 1 [0289.602] CryptDestroyHash (hHash=0x55e210) returned 1 [0289.602] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0289.602] GetLastError () returned 0x0 [0289.602] GetLastError () returned 0x0 [0289.602] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.602] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0289.603] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.603] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0289.604] WriteFile (in: hFile=0x240, lpBuffer=0x23e3554*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3554*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.606] SetEndOfFile (hFile=0x240) returned 1 [0289.606] CloseHandle (hObject=0x240) returned 1 [0289.606] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.606] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.606] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.751] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.751] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.751] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0289.752] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.752] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.752] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.752] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.752] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.752] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.752] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.752] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.752] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.752] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.752] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.752] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.752] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0289.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.753] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.753] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.753] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.753] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.753] CryptDestroyKey (hKey=0x55e750) returned 1 [0289.753] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0289.753] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5c270f0, ftCreationTime.dwHighDateTime=0x1d8be82, ftLastAccessTime.dwLowDateTime=0xfc0019b0, ftLastAccessTime.dwHighDateTime=0x1d8be91, ftLastWriteTime.dwLowDateTime=0x5089141b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0289.754] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc5c270f0, ftCreationTime.dwHighDateTime=0x1d8be82, ftLastAccessTime.dwLowDateTime=0xfc0019b0, ftLastAccessTime.dwHighDateTime=0x1d8be91, ftLastWriteTime.dwLowDateTime=0x5089141b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.754] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdff16190, ftCreationTime.dwHighDateTime=0x1d8bc55, ftLastAccessTime.dwLowDateTime=0xc6fd2ca0, ftLastAccessTime.dwHighDateTime=0x1d8bd4a, ftLastWriteTime.dwLowDateTime=0xc6fd2ca0, ftLastWriteTime.dwHighDateTime=0x1d8bd4a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="BuEKJlvF9UEYrFNSTJA", cAlternateFileName="BUEKJL~1")) returned 1 [0289.754] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.754] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.754] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.754] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.754] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0289.754] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x570eb8) returned 1 [0289.755] CryptCreateHash (in: hProv=0x570eb8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0289.755] CryptHashData (hHash=0x55e910, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.755] CryptDeriveKey (in: hProv=0x570eb8, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e650) returned 1 [0289.755] CryptDestroyHash (hHash=0x55e910) returned 1 [0289.755] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0289.755] GetLastError () returned 0x0 [0289.755] GetLastError () returned 0x0 [0289.755] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.756] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0289.757] WriteFile (in: hFile=0x244, lpBuffer=0x23e3564*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e3564*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.758] SetEndOfFile (hFile=0x244) returned 1 [0289.758] CloseHandle (hObject=0x244) returned 1 [0289.758] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.759] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.759] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.759] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.759] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0289.759] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.760] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.760] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.760] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.760] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.760] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.760] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.760] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.760] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.760] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.760] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.760] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.760] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.761] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.761] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.761] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.761] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.761] CryptDestroyKey (hKey=0x55e650) returned 1 [0289.761] CryptReleaseContext (hProv=0x570eb8, dwFlags=0x0) returned 1 [0289.761] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdff16190, ftCreationTime.dwHighDateTime=0x1d8bc55, ftLastAccessTime.dwLowDateTime=0xc6fd2ca0, ftLastAccessTime.dwHighDateTime=0x1d8bd4a, ftLastWriteTime.dwLowDateTime=0x50a0ebaf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0289.761] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdff16190, ftCreationTime.dwHighDateTime=0x1d8bc55, ftLastAccessTime.dwLowDateTime=0xc6fd2ca0, ftLastAccessTime.dwHighDateTime=0x1d8bd4a, ftLastWriteTime.dwLowDateTime=0x50a0ebaf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.761] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe094b120, ftCreationTime.dwHighDateTime=0x1d8bace, ftLastAccessTime.dwLowDateTime=0x427a9cd1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x427a9cd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="aQdi_mAs", cAlternateFileName="")) returned 1 [0289.762] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.762] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.762] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.762] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.762] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0289.762] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570c10) returned 1 [0289.762] CryptCreateHash (in: hProv=0x570c10, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0289.762] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.763] CryptDeriveKey (in: hProv=0x570c10, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e750) returned 1 [0289.763] CryptDestroyHash (hHash=0x55e610) returned 1 [0289.763] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f190*=0x18) returned 1 [0289.763] GetLastError () returned 0x0 [0289.763] GetLastError () returned 0x0 [0289.763] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.763] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0289.764] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.764] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0289.768] WriteFile (in: hFile=0x248, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.769] SetEndOfFile (hFile=0x248) returned 1 [0289.770] CloseHandle (hObject=0x248) returned 1 [0289.770] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.770] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.770] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.771] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0289.771] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.771] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.771] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.771] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.771] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.772] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.772] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.772] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0289.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.772] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.772] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.772] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.772] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.773] CryptDestroyKey (hKey=0x55e750) returned 1 [0289.773] CryptReleaseContext (hProv=0x570c10, dwFlags=0x0) returned 1 [0289.773] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\aQdi_mAs\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\aqdi_mas\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe094b120, ftCreationTime.dwHighDateTime=0x1d8bace, ftLastAccessTime.dwLowDateTime=0x427a9cd1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50a3a769, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e690 [0289.773] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe094b120, ftCreationTime.dwHighDateTime=0x1d8bace, ftLastAccessTime.dwLowDateTime=0x427a9cd1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50a3a769, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.773] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427620de, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x427620de, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42783a7e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xc620, dwReserved0=0x405534, dwReserved1=0x0, cFileName="5fH-hdHKsmOh2NzWZaK.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="5FH-HD~1.CRY")) returned 1 [0289.773] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12764a00, ftCreationTime.dwHighDateTime=0x1d8bf84, ftLastAccessTime.dwLowDateTime=0xb2dd1500, ftLastAccessTime.dwHighDateTime=0x1d8c0b0, ftLastWriteTime.dwLowDateTime=0xb2dd1500, ftLastWriteTime.dwHighDateTime=0x1d8c0b0, nFileSizeHigh=0x0, nFileSizeLow=0x5ae4, dwReserved0=0x405534, dwReserved1=0x0, cFileName="AVvqNFqoKehakno.m4a", cAlternateFileName="AVVQNF~1.M4A")) returned 1 [0289.773] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80372b50, ftCreationTime.dwHighDateTime=0x1d8b885, ftLastAccessTime.dwLowDateTime=0x807ffd80, ftLastAccessTime.dwHighDateTime=0x1d8bd4e, ftLastWriteTime.dwLowDateTime=0x807ffd80, ftLastWriteTime.dwHighDateTime=0x1d8bd4e, nFileSizeHigh=0x0, nFileSizeLow=0xb953, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cEik3IcUKGk1fK.wav", cAlternateFileName="CEIK3I~1.WAV")) returned 1 [0289.773] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb603fd80, ftCreationTime.dwHighDateTime=0x1d8bb8c, ftLastAccessTime.dwLowDateTime=0xad00600, ftLastAccessTime.dwHighDateTime=0x1d8bfe9, ftLastWriteTime.dwLowDateTime=0xad00600, ftLastWriteTime.dwHighDateTime=0x1d8bfe9, nFileSizeHigh=0x0, nFileSizeLow=0xa889, dwReserved0=0x405534, dwReserved1=0x0, cFileName="d_X BLpyB.m4a", cAlternateFileName="D_XBLP~1.M4A")) returned 1 [0289.773] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c03cbe0, ftCreationTime.dwHighDateTime=0x1d8b902, ftLastAccessTime.dwLowDateTime=0xec5b9e0, ftLastAccessTime.dwHighDateTime=0x1d8be2b, ftLastWriteTime.dwLowDateTime=0xec5b9e0, ftLastWriteTime.dwHighDateTime=0x1d8be2b, nFileSizeHigh=0x0, nFileSizeLow=0x2071, dwReserved0=0x405534, dwReserved1=0x0, cFileName="GK3uVMA.wav", cAlternateFileName="")) returned 1 [0289.773] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a3a769, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50a3a769, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50a3a769, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.773] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6340700, ftCreationTime.dwHighDateTime=0x1d8b747, ftLastAccessTime.dwLowDateTime=0x18d61c00, ftLastAccessTime.dwHighDateTime=0x1d8bc45, ftLastWriteTime.dwLowDateTime=0x18d61c00, ftLastWriteTime.dwHighDateTime=0x1d8bc45, nFileSizeHigh=0x0, nFileSizeLow=0xd9c0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ygowDOg.m4a", cAlternateFileName="")) returned 1 [0289.773] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42783a7e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42783a7e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x427a9cd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x188aa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ZEfz.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZEFZMP~1.CRY")) returned 1 [0289.773] FindNextFileA (in: hFindFile=0x55e690, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42783a7e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42783a7e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x427a9cd1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x188aa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ZEfz.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZEFZMP~1.CRY")) returned 0 [0289.773] FindClose (in: hFindFile=0x55e690 | out: hFindFile=0x55e690) returned 1 [0289.773] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf20d1af0, ftCreationTime.dwHighDateTime=0x1d8b600, ftLastAccessTime.dwLowDateTime=0xc83bc530, ftLastAccessTime.dwHighDateTime=0x1d8b7ba, ftLastWriteTime.dwLowDateTime=0xc83bc530, ftLastWriteTime.dwHighDateTime=0x1d8b7ba, nFileSizeHigh=0x0, nFileSizeLow=0x18c21, dwReserved0=0x72632e33, dwReserved1=0x65747079, cFileName="BhNn8N0WVSSOiyf.m4a", cAlternateFileName="BHNN8N~1.M4A")) returned 1 [0289.773] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a0ebaf, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50a0ebaf, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50a0ebaf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x72632e33, dwReserved1=0x65747079, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.773] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ca7abc0, ftCreationTime.dwHighDateTime=0x1d8b259, ftLastAccessTime.dwLowDateTime=0x428b4cfb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x428b4cfb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72632e33, dwReserved1=0x65747079, cFileName="yaRd", cAlternateFileName="")) returned 1 [0289.774] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.774] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.774] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.774] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.774] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0289.774] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570748) returned 1 [0289.775] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0289.775] CryptHashData (hHash=0x55e610, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.775] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e310) returned 1 [0289.775] CryptDestroyHash (hHash=0x55e610) returned 1 [0289.775] CryptEncrypt (in: hKey=0x55e310, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f190*=0x18) returned 1 [0289.775] GetLastError () returned 0x0 [0289.775] GetLastError () returned 0x0 [0289.775] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.775] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0289.779] WriteFile (in: hFile=0x248, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.780] SetEndOfFile (hFile=0x248) returned 1 [0289.781] CloseHandle (hObject=0x248) returned 1 [0289.781] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.781] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.781] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.782] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0289.782] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.782] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.782] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.782] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.782] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.783] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.783] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.783] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.783] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.783] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.783] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.783] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0289.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.783] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.783] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.783] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.783] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.784] CryptDestroyKey (hKey=0x55e310) returned 1 [0289.784] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0289.784] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ca7abc0, ftCreationTime.dwHighDateTime=0x1d8b259, ftLastAccessTime.dwLowDateTime=0x428b4cfb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50a3a769, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0289.784] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ca7abc0, ftCreationTime.dwHighDateTime=0x1d8b259, ftLastAccessTime.dwLowDateTime=0x428b4cfb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50a3a769, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.784] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6c8990, ftCreationTime.dwHighDateTime=0x1d8b7b1, ftLastAccessTime.dwLowDateTime=0xbd8434c0, ftLastAccessTime.dwHighDateTime=0x1d8bb9c, ftLastWriteTime.dwLowDateTime=0xbd8434c0, ftLastWriteTime.dwHighDateTime=0x1d8bb9c, nFileSizeHigh=0x0, nFileSizeLow=0x1168d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="CjaCoa0VVG3jMjA13.wav", cAlternateFileName="CJACOA~1.WAV")) returned 1 [0289.784] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc53cf20, ftCreationTime.dwHighDateTime=0x1d8b889, ftLastAccessTime.dwLowDateTime=0x4281c3df, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4281c3df, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FThXpfrBZPMJLX", cAlternateFileName="FTHXPF~1")) returned 1 [0289.784] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.784] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.784] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.784] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.784] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.785] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0289.785] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x571518) returned 1 [0289.785] CryptCreateHash (in: hProv=0x571518, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0289.785] CryptHashData (hHash=0x55e190, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.785] CryptDeriveKey (in: hProv=0x571518, Algid=0x6801, hBaseData=0x55e190, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e290) returned 1 [0289.785] CryptDestroyHash (hHash=0x55e190) returned 1 [0289.785] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19ef28*=0x18) returned 1 [0289.785] GetLastError () returned 0x0 [0289.785] GetLastError () returned 0x0 [0289.785] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.786] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0289.787] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.787] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0289.788] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.789] SetEndOfFile (hFile=0x24c) returned 1 [0289.789] CloseHandle (hObject=0x24c) returned 1 [0289.789] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.790] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.791] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.791] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.791] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0289.792] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.792] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.792] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.793] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.793] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.793] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.793] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.794] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.794] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.794] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.794] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.794] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.794] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0289.795] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.795] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.795] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.795] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.843] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.843] CryptDestroyKey (hKey=0x55e290) returned 1 [0289.843] CryptReleaseContext (hProv=0x571518, dwFlags=0x0) returned 1 [0289.844] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yaRd\\FThXpfrBZPMJLX\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yard\\fthxpfrbzpmjlx\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc53cf20, ftCreationTime.dwHighDateTime=0x1d8b889, ftLastAccessTime.dwLowDateTime=0x4281c3df, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50a5b046, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0289.844] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc53cf20, ftCreationTime.dwHighDateTime=0x1d8b889, ftLastAccessTime.dwLowDateTime=0x4281c3df, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50a5b046, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.844] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427cfe7e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x427cfe7e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x427f6209, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x146c7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="bM2Zf8u4-gGvo8ahkil.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="BM2ZF8~1.CRY")) returned 1 [0289.844] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5129160, ftCreationTime.dwHighDateTime=0x1d8b2b4, ftLastAccessTime.dwLowDateTime=0xcd7d1b50, ftLastAccessTime.dwHighDateTime=0x1d8b4dd, ftLastWriteTime.dwLowDateTime=0xcd7d1b50, ftLastWriteTime.dwHighDateTime=0x1d8b4dd, nFileSizeHigh=0x0, nFileSizeLow=0x148ca, dwReserved0=0x405534, dwReserved1=0x0, cFileName="eXdi.wav", cAlternateFileName="")) returned 1 [0289.844] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x427f6209, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x427f6209, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4281c3df, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xeca0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="FHzFkqjvUhy9UfbfPi.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="FHZFKQ~1.CRY")) returned 1 [0289.844] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a5b046, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50a5b046, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50a5b046, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.844] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a63010, ftCreationTime.dwHighDateTime=0x1d8b9e3, ftLastAccessTime.dwLowDateTime=0x41e6ca20, ftLastAccessTime.dwHighDateTime=0x1d8bd5a, ftLastWriteTime.dwLowDateTime=0x41e6ca20, ftLastWriteTime.dwHighDateTime=0x1d8bd5a, nFileSizeHigh=0x0, nFileSizeLow=0x2d7d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="sQONhex-nI.wav", cAlternateFileName="SQONHE~1.WAV")) returned 1 [0289.844] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a63010, ftCreationTime.dwHighDateTime=0x1d8b9e3, ftLastAccessTime.dwLowDateTime=0x41e6ca20, ftLastAccessTime.dwHighDateTime=0x1d8bd5a, ftLastWriteTime.dwLowDateTime=0x41e6ca20, ftLastWriteTime.dwHighDateTime=0x1d8bd5a, nFileSizeHigh=0x0, nFileSizeLow=0x2d7d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="sQONhex-nI.wav", cAlternateFileName="SQONHE~1.WAV")) returned 0 [0289.844] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0289.844] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be43a50, ftCreationTime.dwHighDateTime=0x1d8be77, ftLastAccessTime.dwLowDateTime=0x731c15f0, ftLastAccessTime.dwHighDateTime=0x1d8c129, ftLastWriteTime.dwLowDateTime=0x731c15f0, ftLastWriteTime.dwHighDateTime=0x1d8c129, nFileSizeHigh=0x0, nFileSizeLow=0x10276, dwReserved0=0x2e496e2d, dwReserved1=0x5f766177, cFileName="HsJ8R.m4a", cAlternateFileName="")) returned 1 [0289.844] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a3a769, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50a3a769, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50a5b046, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x2e496e2d, dwReserved1=0x5f766177, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.844] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4281c3df, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4281c3df, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4288ea8d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x10f2e, dwReserved0=0x2e496e2d, dwReserved1=0x5f766177, cFileName="JnUbo9SAXwd v.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="JNUBO9~1.CRY")) returned 1 [0289.844] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4288ea8d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4288ea8d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x428b4cfb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2950, dwReserved0=0x2e496e2d, dwReserved1=0x5f766177, cFileName="TbHNNivYDYJa.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TBHNNI~1.CRY")) returned 1 [0289.844] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadbee5e0, ftCreationTime.dwHighDateTime=0x1d8b8da, ftLastAccessTime.dwLowDateTime=0x64adee00, ftLastAccessTime.dwHighDateTime=0x1d8bc77, ftLastWriteTime.dwLowDateTime=0x64adee00, ftLastWriteTime.dwHighDateTime=0x1d8bc77, nFileSizeHigh=0x0, nFileSizeLow=0xeddf, dwReserved0=0x2e496e2d, dwReserved1=0x5f766177, cFileName="Z j4L7 8DgxbW.m4a", cAlternateFileName="ZJ4L78~1.M4A")) returned 1 [0289.844] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadbee5e0, ftCreationTime.dwHighDateTime=0x1d8b8da, ftLastAccessTime.dwLowDateTime=0x64adee00, ftLastAccessTime.dwHighDateTime=0x1d8bc77, ftLastWriteTime.dwLowDateTime=0x64adee00, ftLastWriteTime.dwHighDateTime=0x1d8bc77, nFileSizeHigh=0x0, nFileSizeLow=0xeddf, dwReserved0=0x2e496e2d, dwReserved1=0x5f766177, cFileName="Z j4L7 8DgxbW.m4a", cAlternateFileName="ZJ4L78~1.M4A")) returned 0 [0289.844] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0289.845] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce6840, ftCreationTime.dwHighDateTime=0x1d8b79b, ftLastAccessTime.dwLowDateTime=0x4290116f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4290116f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78674438, dwReserved1=0x6d2e5762, cFileName="yfv4lWxLPw", cAlternateFileName="YFV4LW~1")) returned 1 [0289.845] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.845] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.845] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.845] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.845] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0289.845] CryptAcquireContextA (in: phProv=0x19f184, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f184*=0x570b00) returned 1 [0289.846] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f13c | out: phHash=0x19f13c) returned 1 [0289.846] CryptHashData (hHash=0x55e650, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.846] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e650, dwFlags=0x0, phKey=0x19f180 | out: phKey=0x19f180*=0x55e790) returned 1 [0289.846] CryptDestroyHash (hHash=0x55e650) returned 1 [0289.846] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f190*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f190*=0x18) returned 1 [0289.846] GetLastError () returned 0x0 [0289.846] GetLastError () returned 0x0 [0289.846] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.847] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x248 [0289.848] WriteFile (in: hFile=0x248, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19eeb8, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19eeb8*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.849] SetEndOfFile (hFile=0x248) returned 1 [0289.849] CloseHandle (hObject=0x248) returned 1 [0289.849] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.850] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.850] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.851] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.851] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.851] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0289.852] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.852] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.852] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.852] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.852] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.853] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.853] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.853] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.853] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.853] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.853] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.853] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.854] CryptDestroyKey (hKey=0x55e790) returned 1 [0289.854] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0289.854] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\*.*"), lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce6840, ftCreationTime.dwHighDateTime=0x1d8b79b, ftLastAccessTime.dwLowDateTime=0x4290116f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50af3aae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0289.854] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce6840, ftCreationTime.dwHighDateTime=0x1d8b79b, ftLastAccessTime.dwLowDateTime=0x4290116f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50af3aae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.854] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7696f160, ftCreationTime.dwHighDateTime=0x1d8bc32, ftLastAccessTime.dwLowDateTime=0x2b589b20, ftLastAccessTime.dwHighDateTime=0x1d8c030, ftLastWriteTime.dwLowDateTime=0x2b589b20, ftLastWriteTime.dwHighDateTime=0x1d8c030, nFileSizeHigh=0x0, nFileSizeLow=0x1dc6, dwReserved0=0x405534, dwReserved1=0x0, cFileName="15fobDQKgftok_8F.m4a", cAlternateFileName="15FOBD~1.M4A")) returned 1 [0289.854] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x117f23f0, ftCreationTime.dwHighDateTime=0x1d8b7dd, ftLastAccessTime.dwLowDateTime=0x10afae80, ftLastAccessTime.dwHighDateTime=0x1d8ba18, ftLastWriteTime.dwLowDateTime=0x10afae80, ftLastWriteTime.dwHighDateTime=0x1d8ba18, nFileSizeHigh=0x0, nFileSizeLow=0x63fc, dwReserved0=0x405534, dwReserved1=0x0, cFileName="eCZDYjnVaSKawkc.m4a", cAlternateFileName="ECZDYJ~1.M4A")) returned 1 [0289.854] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50af3aae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50af3aae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50af3aae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.854] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b56810, ftCreationTime.dwHighDateTime=0x1d8b5ef, ftLastAccessTime.dwLowDateTime=0x90f7e020, ftLastAccessTime.dwHighDateTime=0x1d8bf37, ftLastWriteTime.dwLowDateTime=0x90f7e020, ftLastWriteTime.dwHighDateTime=0x1d8bf37, nFileSizeHigh=0x0, nFileSizeLow=0x11d85, dwReserved0=0x405534, dwReserved1=0x0, cFileName="jWScJhJn.wav", cAlternateFileName="")) returned 1 [0289.854] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf80a6da0, ftCreationTime.dwHighDateTime=0x1d8bfd2, ftLastAccessTime.dwLowDateTime=0x13370400, ftLastAccessTime.dwHighDateTime=0x1d8c11b, ftLastWriteTime.dwLowDateTime=0x13370400, ftLastWriteTime.dwHighDateTime=0x1d8c11b, nFileSizeHigh=0x0, nFileSizeLow=0x51e5, dwReserved0=0x405534, dwReserved1=0x0, cFileName="KEr9ngVT2XB4gdmf.m4a", cAlternateFileName="KER9NG~1.M4A")) returned 1 [0289.854] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76982e30, ftCreationTime.dwHighDateTime=0x1d8baa3, ftLastAccessTime.dwLowDateTime=0x428daf76, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x428daf76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Nr0iCrSGwQMcpOn9gZ", cAlternateFileName="NR0ICR~1")) returned 1 [0289.854] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.854] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.855] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.855] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.855] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0289.855] CryptAcquireContextA (in: phProv=0x19ef1c, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19ef1c*=0x570da8) returned 1 [0289.855] CryptCreateHash (in: hProv=0x570da8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19eed4 | out: phHash=0x19eed4) returned 1 [0289.855] CryptHashData (hHash=0x55e790, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.855] CryptDeriveKey (in: hProv=0x570da8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19ef18 | out: phKey=0x19ef18*=0x55e7d0) returned 1 [0289.856] CryptDestroyHash (hHash=0x55e790) returned 1 [0289.856] CryptEncrypt (in: hKey=0x55e7d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19ef28*=0x18) returned 1 [0289.856] GetLastError () returned 0x0 [0289.856] GetLastError () returned 0x0 [0289.856] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.857] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0289.857] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.857] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\Nr0iCrSGwQMcpOn9gZ\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\nr0icrsgwqmcpon9gz\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x24c [0289.859] WriteFile (in: hFile=0x24c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19ec50, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19ec50*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.860] SetEndOfFile (hFile=0x24c) returned 1 [0289.860] CloseHandle (hObject=0x24c) returned 1 [0289.860] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.861] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.861] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.861] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.861] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0289.862] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.862] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.862] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.862] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.862] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.862] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.862] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.863] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.863] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0289.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.863] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.863] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.863] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.863] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.863] CryptDestroyKey (hKey=0x55e7d0) returned 1 [0289.863] CryptReleaseContext (hProv=0x570da8, dwFlags=0x0) returned 1 [0289.863] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Music\\JAB0S_rGExV_SLJ\\BuEKJlvF9UEYrFNSTJA\\yfv4lWxLPw\\Nr0iCrSGwQMcpOn9gZ\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\music\\jab0s_rgexv_slj\\buekjlvf9ueyrfnstja\\yfv4lwxlpw\\nr0icrsgwqmcpon9gz\\*.*"), lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76982e30, ftCreationTime.dwHighDateTime=0x1d8baa3, ftLastAccessTime.dwLowDateTime=0x428daf76, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50af3aae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e290 [0289.864] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76982e30, ftCreationTime.dwHighDateTime=0x1d8baa3, ftLastAccessTime.dwLowDateTime=0x428daf76, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50af3aae, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0289.864] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe5e8c0, ftCreationTime.dwHighDateTime=0x1d8b2b9, ftLastAccessTime.dwLowDateTime=0xe11e4bd0, ftLastAccessTime.dwHighDateTime=0x1d8b752, ftLastWriteTime.dwLowDateTime=0xe11e4bd0, ftLastWriteTime.dwHighDateTime=0x1d8b752, nFileSizeHigh=0x0, nFileSizeLow=0x102fb, dwReserved0=0x405534, dwReserved1=0x0, cFileName="3Mg0J3t-ptjcxV5wylC.wav", cAlternateFileName="3MG0J3~1.WAV")) returned 1 [0289.864] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50af3aae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50af3aae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50b1ba43, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.864] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384a60e0, ftCreationTime.dwHighDateTime=0x1d8b0d9, ftLastAccessTime.dwLowDateTime=0x7f015770, ftLastAccessTime.dwHighDateTime=0x1d8b474, ftLastWriteTime.dwLowDateTime=0x7f015770, ftLastWriteTime.dwHighDateTime=0x1d8b474, nFileSizeHigh=0x0, nFileSizeLow=0xf4e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="kN7akgVC.wav", cAlternateFileName="")) returned 1 [0289.864] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb18a71d0, ftCreationTime.dwHighDateTime=0x1d8b150, ftLastAccessTime.dwLowDateTime=0x157fc2f0, ftLastAccessTime.dwHighDateTime=0x1d8b901, ftLastWriteTime.dwLowDateTime=0x157fc2f0, ftLastWriteTime.dwHighDateTime=0x1d8b901, nFileSizeHigh=0x0, nFileSizeLow=0x1791f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="p6xFnK5SfNIY7K.wav", cAlternateFileName="P6XFNK~1.WAV")) returned 1 [0289.864] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f17f050, ftCreationTime.dwHighDateTime=0x1d8b425, ftLastAccessTime.dwLowDateTime=0xddbb96d0, ftLastAccessTime.dwHighDateTime=0x1d8bc4a, ftLastWriteTime.dwLowDateTime=0xddbb96d0, ftLastWriteTime.dwHighDateTime=0x1d8bc4a, nFileSizeHigh=0x0, nFileSizeLow=0x4f4a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="qnFY7nvUpa7At.wav", cAlternateFileName="QNFY7N~1.WAV")) returned 1 [0289.864] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x299c8490, ftCreationTime.dwHighDateTime=0x1d8b5ae, ftLastAccessTime.dwLowDateTime=0x49b4ebf0, ftLastAccessTime.dwHighDateTime=0x1d8bb49, ftLastWriteTime.dwLowDateTime=0x49b4ebf0, ftLastWriteTime.dwHighDateTime=0x1d8bb49, nFileSizeHigh=0x0, nFileSizeLow=0x2f63, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Uc10D.m4a", cAlternateFileName="")) returned 1 [0289.864] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428daf76, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x428daf76, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x428daf76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xd70f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Xezfm.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="XEZFMM~1.CRY")) returned 1 [0289.864] FindNextFileA (in: hFindFile=0x55e290, lpFindFileData=0x19eed0 | out: lpFindFileData=0x19eed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428daf76, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x428daf76, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x428daf76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xd70f, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Xezfm.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="XEZFMM~1.CRY")) returned 0 [0289.864] FindClose (in: hFindFile=0x55e290 | out: hFindFile=0x55e290) returned 1 [0289.864] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf690eab0, ftCreationTime.dwHighDateTime=0x1d8b787, ftLastAccessTime.dwLowDateTime=0xecb425a0, ftLastAccessTime.dwHighDateTime=0x1d8bea5, ftLastWriteTime.dwLowDateTime=0xecb425a0, ftLastWriteTime.dwHighDateTime=0x1d8bea5, nFileSizeHigh=0x0, nFileSizeLow=0x55f4, dwReserved0=0x632e3370, dwReserved1=0x74707972, cFileName="O hafpyo08HaHxT.wav", cAlternateFileName="OHAFPY~1.WAV")) returned 1 [0289.864] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4290116f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4290116f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4290116f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x93e1, dwReserved0=0x632e3370, dwReserved1=0x74707972, cFileName="TiCRJaJzkoxMi1--lQCA.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TICRJA~1.CRY")) returned 1 [0289.864] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f138 | out: lpFindFileData=0x19f138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4290116f, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4290116f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4290116f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x93e1, dwReserved0=0x632e3370, dwReserved1=0x74707972, cFileName="TiCRJaJzkoxMi1--lQCA.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TICRJA~1.CRY")) returned 0 [0289.864] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0289.864] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbce6840, ftCreationTime.dwHighDateTime=0x1d8b79b, ftLastAccessTime.dwLowDateTime=0x4290116f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4290116f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x78674438, dwReserved1=0x6d2e5762, cFileName="yfv4lWxLPw", cAlternateFileName="YFV4LW~1")) returned 0 [0289.864] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0289.864] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089141b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5089141b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5089141b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x5477504c, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0289.865] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6feec3c0, ftCreationTime.dwHighDateTime=0x1d8b123, ftLastAccessTime.dwLowDateTime=0xfb9954b0, ftLastAccessTime.dwHighDateTime=0x1d8bc38, ftLastWriteTime.dwLowDateTime=0xfb9954b0, ftLastWriteTime.dwHighDateTime=0x1d8bc38, nFileSizeHigh=0x0, nFileSizeLow=0x7481, dwReserved0=0x5477504c, dwReserved1=0x5f4f545f, cFileName="JH QbUa.wav", cAlternateFileName="JHQBUA~1.WAV")) returned 1 [0289.865] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d54750, ftCreationTime.dwHighDateTime=0x1d8b384, ftLastAccessTime.dwLowDateTime=0xd663b160, ftLastAccessTime.dwHighDateTime=0x1d8b592, ftLastWriteTime.dwLowDateTime=0xd663b160, ftLastWriteTime.dwHighDateTime=0x1d8b592, nFileSizeHigh=0x0, nFileSizeLow=0x8d74, dwReserved0=0x5477504c, dwReserved1=0x5f4f545f, cFileName="X10hz.m4a", cAlternateFileName="")) returned 1 [0289.865] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94d54750, ftCreationTime.dwHighDateTime=0x1d8b384, ftLastAccessTime.dwLowDateTime=0xd663b160, ftLastAccessTime.dwHighDateTime=0x1d8b592, ftLastWriteTime.dwLowDateTime=0xd663b160, ftLastWriteTime.dwHighDateTime=0x1d8b592, nFileSizeHigh=0x0, nFileSizeLow=0x8d74, dwReserved0=0x5477504c, dwReserved1=0x5f4f545f, cFileName="X10hz.m4a", cAlternateFileName="")) returned 0 [0289.865] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0289.865] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42927440, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42927440, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42927440, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x13af5, dwReserved0=0x76616134, dwReserved1=0x5f4f545f, cFileName="qg6rQLteOW6jCe.mp3.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="QG6RQL~1.CRY")) returned 1 [0289.865] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ab9090, ftCreationTime.dwHighDateTime=0x1d8b2a9, ftLastAccessTime.dwLowDateTime=0x1dbac800, ftLastAccessTime.dwHighDateTime=0x1d8be9e, ftLastWriteTime.dwLowDateTime=0x1dbac800, ftLastWriteTime.dwHighDateTime=0x1d8be9e, nFileSizeHigh=0x0, nFileSizeLow=0x1588d, dwReserved0=0x76616134, dwReserved1=0x5f4f545f, cFileName="TaZ0jZ6-p.m4a", cAlternateFileName="TAZ0JZ~1.M4A")) returned 1 [0289.865] FindNextFileA (in: hFindFile=0x55e710, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ab9090, ftCreationTime.dwHighDateTime=0x1d8b2a9, ftLastAccessTime.dwLowDateTime=0x1dbac800, ftLastAccessTime.dwHighDateTime=0x1d8be9e, ftLastWriteTime.dwLowDateTime=0x1dbac800, ftLastWriteTime.dwHighDateTime=0x1d8be9e, nFileSizeHigh=0x0, nFileSizeLow=0x1588d, dwReserved0=0x76616134, dwReserved1=0x5f4f545f, cFileName="TaZ0jZ6-p.m4a", cAlternateFileName="TAZ0JZ~1.M4A")) returned 0 [0289.865] FindClose (in: hFindFile=0x55e710 | out: hFindFile=0x55e710) returned 1 [0289.865] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d374e80, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d374e80, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d374e80, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2e656134, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0289.865] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.865] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.865] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.865] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.865] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0289.865] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571270) returned 1 [0289.866] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0289.866] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.866] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e610) returned 1 [0289.866] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0289.866] CryptEncrypt (in: hKey=0x55e610, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0289.866] GetLastError () returned 0x0 [0289.866] GetLastError () returned 0x0 [0289.866] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.867] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\My Documents\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\my documents\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0289.867] WriteFile (in: hFile=0x23c, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.867] SetEndOfFile (hFile=0x23c) returned 1 [0289.867] CloseHandle (hObject=0x23c) returned 1 [0289.867] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.868] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.868] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.869] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.869] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0289.869] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.869] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.869] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.870] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.870] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.870] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.870] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.870] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.870] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.870] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.870] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.870] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.870] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0289.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.871] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.871] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.871] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.871] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.871] CryptDestroyKey (hKey=0x55e610) returned 1 [0289.871] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0289.871] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\My Documents\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\my documents\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0289.872] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x20, cFileName="NetHood", cAlternateFileName="")) returned 1 [0289.872] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.872] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.872] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.872] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.872] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0289.872] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570638) returned 1 [0289.873] CryptCreateHash (in: hProv=0x570638, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0289.873] CryptHashData (hHash=0x55e710, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.873] CryptDeriveKey (in: hProv=0x570638, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e790) returned 1 [0289.873] CryptDestroyHash (hHash=0x55e710) returned 1 [0289.873] CryptEncrypt (in: hKey=0x55e790, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0289.873] GetLastError () returned 0x0 [0289.873] GetLastError () returned 0x0 [0289.873] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.875] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0289.876] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.876] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\NetHood\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\nethood\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0289.876] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0289.876] SetEndOfFile (hFile=0x23c) returned 1 [0289.937] CloseHandle (hObject=0x23c) returned 1 [0289.937] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0289.940] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0289.940] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0289.940] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.940] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0289.941] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.941] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.941] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.941] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0289.941] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0289.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.942] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.942] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0289.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0289.942] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0289.942] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0289.942] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0289.942] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0289.943] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.943] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0289.943] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0289.943] CryptDestroyKey (hKey=0x55e790) returned 1 [0289.943] CryptReleaseContext (hProv=0x570638, dwFlags=0x0) returned 1 [0289.943] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\NetHood\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\nethood\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0289.943] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x3ce3dbd0, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x6021d26, ftLastAccessTime.dwHighDateTime=0x1d8c107, ftLastWriteTime.dwLowDateTime=0x6021d26, ftLastWriteTime.dwHighDateTime=0x1d8c107, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0289.943] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4294d6a7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4294d6a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4294d6a7, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="NTUSER.DAT.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NTUSER~1.CRY")) returned 1 [0289.943] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d2dc444, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0289.944] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d2dc444, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xb3000, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0289.944] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d2dc444, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d2dc444, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x63434853, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0289.944] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d3026e1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d3026e1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6340e659, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0289.944] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3d3026e1, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d3026e1, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x6340e659, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="NTUSER.DAT{62e13464-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0289.944] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4294d6a7, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4294d6a7, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42973839, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="ntuser.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NTUSER~2.CRY")) returned 1 [0289.944] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x84ac775d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x429bfe02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x429bfe02, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0289.944] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0289.944] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.944] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0289.944] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0289.944] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0289.944] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0289.944] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x5707d0) returned 1 [0289.945] CryptCreateHash (in: hProv=0x5707d0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0289.945] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0289.945] CryptDeriveKey (in: hProv=0x5707d0, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e910) returned 1 [0289.945] CryptDestroyHash (hHash=0x55e710) returned 1 [0289.945] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0289.945] GetLastError () returned 0x0 [0289.945] GetLastError () returned 0x0 [0289.946] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0289.946] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0290.052] WriteFile (in: hFile=0x23c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.054] SetEndOfFile (hFile=0x23c) returned 1 [0290.074] CloseHandle (hObject=0x23c) returned 1 [0290.074] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.075] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.075] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.076] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.076] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.076] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0290.076] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.076] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.076] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.076] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.077] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.077] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.077] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.077] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.077] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.077] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.077] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.078] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0290.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.078] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.078] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.078] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.078] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.078] CryptDestroyKey (hKey=0x55e910) returned 1 [0290.078] CryptReleaseContext (hProv=0x5707d0, dwFlags=0x0) returned 1 [0290.079] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\OneDrive\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\onedrive\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x84ac775d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x429bfe02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50bd87cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0290.079] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x84ac775d, ftCreationTime.dwHighDateTime=0x1d70074, ftLastAccessTime.dwLowDateTime=0x429bfe02, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50bd87cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.079] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42973839, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42973839, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42999b5e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0290.079] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50bd87cb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50bd87cb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50d09b76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0290.079] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50bd87cb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50bd87cb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50d09b76, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0290.079] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0290.079] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4339578c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4339578c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Pictures", cAlternateFileName="")) returned 1 [0290.079] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.079] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.081] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.081] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.081] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0290.081] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x5712f8) returned 1 [0290.082] CryptCreateHash (in: hProv=0x5712f8, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0290.082] CryptHashData (hHash=0x55e790, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.082] CryptDeriveKey (in: hProv=0x5712f8, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e5d0) returned 1 [0290.082] CryptDestroyHash (hHash=0x55e790) returned 1 [0290.082] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0290.082] GetLastError () returned 0x0 [0290.082] GetLastError () returned 0x0 [0290.082] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.083] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0290.083] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.084] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0290.084] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.084] SetEndOfFile (hFile=0x23c) returned 1 [0290.084] CloseHandle (hObject=0x23c) returned 1 [0290.085] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.085] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.085] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.085] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.086] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0290.086] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.086] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.086] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.086] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.087] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.087] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.087] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.087] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.087] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0290.087] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.088] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.088] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.088] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.088] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.088] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0290.088] CryptReleaseContext (hProv=0x5712f8, dwFlags=0x0) returned 1 [0290.088] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4339578c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x506550de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0290.088] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4339578c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x506550de, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.089] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a0c448, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42a0c448, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42a32a3c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x9475, dwReserved0=0x405534, dwReserved1=0x0, cFileName="270n1ChiZI_1.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="270N1C~1.CRY")) returned 1 [0290.089] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1ec9c20, ftCreationTime.dwHighDateTime=0x1d8c077, ftLastAccessTime.dwLowDateTime=0x430e9849, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x430e9849, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="6MHrGlVxhYS", cAlternateFileName="6MHRGL~1")) returned 1 [0290.089] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.089] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.089] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.089] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.089] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.089] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0290.089] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571490) returned 1 [0290.090] CryptCreateHash (in: hProv=0x571490, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0290.090] CryptHashData (hHash=0x55e390, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.090] CryptDeriveKey (in: hProv=0x571490, Algid=0x6801, hBaseData=0x55e390, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e2d0) returned 1 [0290.090] CryptDestroyHash (hHash=0x55e390) returned 1 [0290.090] CryptEncrypt (in: hKey=0x55e2d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f660*=0x18) returned 1 [0290.090] GetLastError () returned 0x0 [0290.090] GetLastError () returned 0x0 [0290.090] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.091] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0290.092] WriteFile (in: hFile=0x240, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.162] SetEndOfFile (hFile=0x240) returned 1 [0290.162] CloseHandle (hObject=0x240) returned 1 [0290.163] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.163] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.164] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.164] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0290.164] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.164] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.165] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.165] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.165] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.165] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.165] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.165] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.165] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0290.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.166] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.166] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.166] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.166] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.166] CryptDestroyKey (hKey=0x55e2d0) returned 1 [0290.166] CryptReleaseContext (hProv=0x571490, dwFlags=0x0) returned 1 [0290.167] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\6MHrGlVxhYS\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\6mhrglvxhys\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1ec9c20, ftCreationTime.dwHighDateTime=0x1d8c077, ftLastAccessTime.dwLowDateTime=0x430e9849, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50d2fd83, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1ec9c20, ftCreationTime.dwHighDateTime=0x1d8c077, ftLastAccessTime.dwLowDateTime=0x430e9849, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50d2fd83, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a5868d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42a5868d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42a5868d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1189e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="7eWaq5.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="7EWAQ5~1.CRY")) returned 1 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a7e8fa, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42a7e8fa, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42a7e8fa, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x5b13, dwReserved0=0x405534, dwReserved1=0x0, cFileName="9xZXIJPvpfTMPJSEH.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="9XZXIJ~1.CRY")) returned 1 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42acad7b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42acad7b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42acad7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x155c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="boIZ.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="BOIZJP~1.CRY")) returned 1 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42acad7b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42acad7b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42af0fca, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xc4fa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="dsd4xng9Vd1K.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DSD4XN~1.CRY")) returned 1 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42af0fca, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42af0fca, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42b17273, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1325d, dwReserved0=0x405534, dwReserved1=0x0, cFileName="gzCcmy5r.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GZCCMY~1.CRY")) returned 1 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50d2fd83, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50d2fd83, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50dee917, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b3d5e6, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42b3d5e6, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42b63641, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xb69a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IHUUW_UC0Nn8T.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IHUUW_~1.CRY")) returned 1 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bd6c58, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42bd6c58, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42bd6c58, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3512, dwReserved0=0x405534, dwReserved1=0x0, cFileName="iV1eysp19dqsXKWg2u0.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IV1EYS~1.CRY")) returned 1 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42bfbf9e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42bfbf9e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42bfbf9e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xfcec, dwReserved0=0x405534, dwReserved1=0x0, cFileName="nE6sHIObtlA7xNApjaL4.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="NE6SHI~1.CRY")) returned 1 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c48605, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42c48605, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42c6e8d9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x12352, dwReserved0=0x405534, dwReserved1=0x0, cFileName="qJQGc1JI O8.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="QJQGC1~1.CRY")) returned 1 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c6e8d9, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42c6e8d9, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42c98014, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6a0b, dwReserved0=0x405534, dwReserved1=0x0, cFileName="qZUaC4VwVU.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="QZUAC4~1.CRY")) returned 1 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c98014, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42c98014, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42cee26d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1252c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="SU6aI2.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="SU6AI2~1.CRY")) returned 1 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d537ae, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42d537ae, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42d798c4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x178e3, dwReserved0=0x405534, dwReserved1=0x0, cFileName="tJzY.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TJZYGI~1.CRY")) returned 1 [0290.167] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e1216e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42e1216e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42e1216e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x13a7e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="u1C0tTQR_1SPifEt0TEn.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="U1C0TT~1.CRY")) returned 1 [0290.168] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e38336, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42e38336, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42e5e731, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xa322, dwReserved0=0x405534, dwReserved1=0x0, cFileName="uz_9Msior_qUWWI.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UZ_9MS~1.CRY")) returned 1 [0290.168] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e848ea, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42e848ea, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42ed0cad, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x7c32, dwReserved0=0x405534, dwReserved1=0x0, cFileName="wrrB3.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WRRB3G~1.CRY")) returned 1 [0290.168] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ef6f06, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x42ef6f06, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42f1d273, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x111ef, dwReserved0=0x405534, dwReserved1=0x0, cFileName="xBS0G9T4s0KTw2EN.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="XBS0G9~1.CRY")) returned 1 [0290.168] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43001e5d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43001e5d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4309a7dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x34fa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="xRz0 CrxkDW.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="XRZ0CR~1.CRY")) returned 1 [0290.168] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43001e5d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43001e5d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4309a7dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x34fa, dwReserved0=0x405534, dwReserved1=0x0, cFileName="xRz0 CrxkDW.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="XRZ0CR~1.CRY")) returned 0 [0290.168] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0290.168] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430e9849, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x430e9849, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x431593c9, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xcbb, dwReserved0=0x57446b78, dwReserved1=0x706d622e, cFileName="BRFxsko.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="BRFXSK~1.CRY")) returned 1 [0290.168] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x4317f629, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4317f629, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x57446b78, dwReserved1=0x706d622e, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0290.168] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.168] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.168] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.168] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.168] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.169] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0290.169] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x571160) returned 1 [0290.169] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0290.169] CryptHashData (hHash=0x55e610, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.169] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e910) returned 1 [0290.169] CryptDestroyHash (hHash=0x55e610) returned 1 [0290.169] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f660*=0x18) returned 1 [0290.170] GetLastError () returned 0x0 [0290.170] GetLastError () returned 0x0 [0290.170] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.171] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0290.172] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.173] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0290.176] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.177] SetEndOfFile (hFile=0x240) returned 1 [0290.177] CloseHandle (hObject=0x240) returned 1 [0290.177] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.178] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.178] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.180] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.180] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.180] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.180] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0290.180] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.181] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.181] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.181] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.181] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.181] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.181] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.181] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.181] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.181] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.181] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.181] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.182] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.182] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0290.182] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.182] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.182] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.182] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.182] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.182] CryptDestroyKey (hKey=0x55e910) returned 1 [0290.183] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0290.183] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Camera Roll\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\camera roll\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x4317f629, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50e14c20, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0290.183] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b0e752d, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x4317f629, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50e14c20, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.183] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4317f629, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4317f629, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4317f629, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0290.183] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e14c20, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50e14c20, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50e14c20, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0290.183] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e14c20, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50e14c20, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50e14c20, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0290.183] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0290.183] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4317f629, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4317f629, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4317f629, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0290.183] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4317f629, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4317f629, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x431f1f27, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x18118, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="gJbDSP9uu5zxm.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GJBDSP~1.CRY")) returned 1 [0290.183] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4321926d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4321926d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4323e217, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x13d88, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="GT MqBo1IsSDe6tEL9w.gif.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="GTMQBO~1.CRY")) returned 1 [0290.183] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506550de, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x506550de, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50d2fd83, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0290.183] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4323e217, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4323e217, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4326446b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xd15f, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="IK2lOrscFawass.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="IK2LOR~1.CRY")) returned 1 [0290.183] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4326446b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4326446b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4328a758, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x13d97, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="PcrR2Lm.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PCRR2L~1.CRY")) returned 1 [0290.184] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x432b09cb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x432b09cb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x432b09cb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x15c1, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="rWi_LKN_vlOUM.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RWI_LK~1.CRY")) returned 1 [0290.184] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x432d6c4d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x432d6c4d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43356206, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x11d71, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="S22voOMZ0nN.png.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="S22VOO~1.CRY")) returned 1 [0290.184] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x4336f6b0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4336f6b0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0290.184] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.184] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.184] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.184] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.184] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.184] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0290.184] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570968) returned 1 [0290.185] CryptCreateHash (in: hProv=0x570968, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0290.185] CryptHashData (hHash=0x55e610, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.185] CryptDeriveKey (in: hProv=0x570968, Algid=0x6801, hBaseData=0x55e610, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e650) returned 1 [0290.185] CryptDestroyHash (hHash=0x55e610) returned 1 [0290.185] CryptEncrypt (in: hKey=0x55e650, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f660*=0x18) returned 1 [0290.185] GetLastError () returned 0x0 [0290.185] GetLastError () returned 0x0 [0290.185] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.186] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0290.189] WriteFile (in: hFile=0x240, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.191] SetEndOfFile (hFile=0x240) returned 1 [0290.191] CloseHandle (hObject=0x240) returned 1 [0290.191] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.192] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.192] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.192] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.192] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0290.193] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.193] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.193] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.193] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.193] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.193] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.194] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.194] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.194] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.194] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0290.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.194] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.194] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.194] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.194] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.195] CryptDestroyKey (hKey=0x55e650) returned 1 [0290.195] CryptReleaseContext (hProv=0x570968, dwFlags=0x0) returned 1 [0290.195] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Pictures\\Saved Pictures\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\pictures\\saved pictures\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x4336f6b0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50e3adc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e610 [0290.195] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2b1a6533, ftCreationTime.dwHighDateTime=0x1d70504, ftLastAccessTime.dwLowDateTime=0x4336f6b0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50e3adc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.195] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43356206, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43356206, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43356206, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0290.195] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e3adc4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50e3adc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50e3adc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0290.195] FindNextFileA (in: hFindFile=0x55e610, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50e3adc4, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50e3adc4, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50e3adc4, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0290.195] FindClose (in: hFindFile=0x55e610 | out: hFindFile=0x55e610) returned 1 [0290.195] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4336f6b0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4336f6b0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4336f6b0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x3e20, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="uuLOLCY.bmp.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="UULOLC~1.CRY")) returned 1 [0290.196] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4336f6b0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4336f6b0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4339578c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x167e9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ZrVCQnLs.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZRVCQN~1.CRY")) returned 1 [0290.196] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4336f6b0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4336f6b0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4339578c, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x167e9, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="ZrVCQnLs.jpg.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZRVCQN~1.CRY")) returned 0 [0290.196] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0290.196] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x72632e67, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0290.196] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.196] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.196] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.196] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.196] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.196] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0290.196] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570b00) returned 1 [0290.197] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0290.197] CryptHashData (hHash=0x55e5d0, pbData=0x1f05fdc, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.197] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e910) returned 1 [0290.197] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0290.197] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0290.197] GetLastError () returned 0x0 [0290.197] GetLastError () returned 0x0 [0290.197] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.198] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0290.199] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.199] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\PrintHood\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\printhood\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0290.200] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.200] SetEndOfFile (hFile=0x23c) returned 1 [0290.200] CloseHandle (hObject=0x23c) returned 1 [0290.200] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.201] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.201] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.201] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.201] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.202] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.202] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0290.236] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.236] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.236] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.236] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.236] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.236] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.237] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.237] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.237] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.237] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0290.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.237] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.237] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.237] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.237] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.238] CryptDestroyKey (hKey=0x55e910) returned 1 [0290.238] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0290.238] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\PrintHood\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\printhood\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0290.238] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x20, cFileName="Recent", cAlternateFileName="")) returned 1 [0290.238] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.238] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.239] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.239] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.239] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0290.239] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570968) returned 1 [0290.240] CryptCreateHash (in: hProv=0x570968, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0290.240] CryptHashData (hHash=0x55e5d0, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.240] CryptDeriveKey (in: hProv=0x570968, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e210) returned 1 [0290.240] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0290.240] CryptEncrypt (in: hKey=0x55e210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1e83f00*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1e83f00*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0290.240] GetLastError () returned 0x0 [0290.240] GetLastError () returned 0x0 [0290.240] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.241] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Recent\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\recent\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0290.241] WriteFile (in: hFile=0x23c, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.241] SetEndOfFile (hFile=0x23c) returned 1 [0290.242] CloseHandle (hObject=0x23c) returned 1 [0290.242] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.242] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.243] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.243] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.243] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.243] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.243] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x6534d0) returned 0x1 [0290.243] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.243] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.244] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.244] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.244] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.244] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.244] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.244] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.244] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.244] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0290.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.245] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.245] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.245] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.245] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.245] CryptDestroyKey (hKey=0x55e210) returned 1 [0290.245] CryptReleaseContext (hProv=0x570968, dwFlags=0x0) returned 1 [0290.246] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Recent\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\recent\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0290.246] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x433bbb07, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x433bbb07, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0290.246] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.246] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.301] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.302] GetWindowTextA (in: hWnd=0x60240, lpString=0x229302c, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.302] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.302] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x229302c) returned 0x18 [0290.302] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571270) returned 1 [0290.305] CryptCreateHash (in: hProv=0x571270, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0290.305] CryptHashData (hHash=0x55e790, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.305] CryptDeriveKey (in: hProv=0x571270, Algid=0x6801, hBaseData=0x55e790, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e910) returned 1 [0290.305] CryptDestroyHash (hHash=0x55e790) returned 1 [0290.305] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebfec4*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0290.305] GetLastError () returned 0x0 [0290.305] GetLastError () returned 0x0 [0290.305] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.307] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0290.307] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.308] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0290.324] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.326] SetEndOfFile (hFile=0x23c) returned 1 [0290.326] CloseHandle (hObject=0x23c) returned 1 [0290.326] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.327] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.328] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.328] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.328] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.328] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.328] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1ec22fc) returned 0x1 [0290.329] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.329] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.329] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.329] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.329] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.329] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.329] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.329] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.330] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.330] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.330] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.330] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0290.330] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.330] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.330] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.330] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.330] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.331] CryptDestroyKey (hKey=0x55e910) returned 1 [0290.331] CryptReleaseContext (hProv=0x571270, dwFlags=0x0) returned 1 [0290.331] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Saved Games\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\saved games\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x433bbb07, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50f6c008, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e910 [0290.331] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x433bbb07, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50f6c008, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.332] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4339578c, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4339578c, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x433bbb07, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0290.332] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f45dee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50f45dee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50f6c008, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0290.332] FindNextFileA (in: hFindFile=0x55e910, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f45dee, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50f45dee, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50f6c008, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 0 [0290.332] FindClose (in: hFindFile=0x55e910 | out: hFindFile=0x55e910) returned 1 [0290.332] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x433bbb07, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x433bbb07, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e4157, dwReserved1=0x5f4f545f, cFileName="Searches", cAlternateFileName="")) returned 1 [0290.332] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.332] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.332] GetWindowTextA (in: hWnd=0x60240, lpString=0x1f0ff50, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.332] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.332] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1f0ff50) returned 0x18 [0290.333] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570f40) returned 1 [0290.333] CryptCreateHash (in: hProv=0x570f40, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0290.333] CryptHashData (hHash=0x55e5d0, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.333] CryptDeriveKey (in: hProv=0x570f40, Algid=0x6801, hBaseData=0x55e5d0, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e690) returned 1 [0290.333] CryptDestroyHash (hHash=0x55e5d0) returned 1 [0290.333] CryptEncrypt (in: hKey=0x55e690, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0290.334] GetLastError () returned 0x0 [0290.334] GetLastError () returned 0x0 [0290.334] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.334] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Searches\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0290.337] WriteFile (in: hFile=0x23c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.338] SetEndOfFile (hFile=0x23c) returned 1 [0290.339] CloseHandle (hObject=0x23c) returned 1 [0290.339] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.340] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.340] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.340] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.340] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.340] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.340] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0290.340] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.340] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.341] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.341] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.341] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.341] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.341] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.341] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.341] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.341] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.341] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.341] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.341] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.342] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.342] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0290.342] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.342] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.342] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.342] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.342] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.343] CryptDestroyKey (hKey=0x55e690) returned 1 [0290.343] CryptReleaseContext (hProv=0x570f40, dwFlags=0x0) returned 1 [0290.343] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Searches\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\searches\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x433bbb07, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50f92308, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e750 [0290.344] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43695fb2, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x433bbb07, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50f92308, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.344] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433bbb07, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x433bbb07, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x433bbb07, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0290.344] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x437a1142, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x437a1142, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x437a1142, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0290.344] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f92308, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x50f92308, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50f92308, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0290.344] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x4377acca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4377acca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4377acca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0290.344] FindNextFileA (in: hFindFile=0x55e750, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x4377acca, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4377acca, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x4377acca, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0290.344] FindClose (in: hFindFile=0x55e750 | out: hFindFile=0x55e750) returned 1 [0290.344] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6f697461, cFileName="SendTo", cAlternateFileName="")) returned 1 [0290.344] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.344] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.345] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.345] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.345] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.345] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0290.345] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570d20) returned 1 [0290.346] CryptCreateHash (in: hProv=0x570d20, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0290.346] CryptHashData (hHash=0x55e710, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.346] CryptDeriveKey (in: hProv=0x570d20, Algid=0x6801, hBaseData=0x55e710, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e910) returned 1 [0290.346] CryptDestroyHash (hHash=0x55e710) returned 1 [0290.346] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0290.346] GetLastError () returned 0x0 [0290.346] GetLastError () returned 0x0 [0290.346] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.347] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0290.347] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.348] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\SendTo\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\sendto\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0290.349] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.349] SetEndOfFile (hFile=0x23c) returned 1 [0290.349] CloseHandle (hObject=0x23c) returned 1 [0290.349] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.350] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.350] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.350] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.350] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.350] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0290.350] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.351] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.351] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.351] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.351] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.351] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.351] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.351] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.351] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.351] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.351] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.352] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.352] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.352] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.352] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0290.352] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.352] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.352] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.352] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.352] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.353] CryptDestroyKey (hKey=0x55e910) returned 1 [0290.353] CryptReleaseContext (hProv=0x570d20, dwFlags=0x0) returned 1 [0290.353] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\SendTo\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\sendto\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0290.353] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x20, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0290.353] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.353] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.353] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.354] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.354] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.354] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0290.354] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570a78) returned 1 [0290.354] CryptCreateHash (in: hProv=0x570a78, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0290.354] CryptHashData (hHash=0x55e290, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.355] CryptDeriveKey (in: hProv=0x570a78, Algid=0x6801, hBaseData=0x55e290, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e910) returned 1 [0290.355] CryptDestroyHash (hHash=0x55e290) returned 1 [0290.355] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0290.355] GetLastError () returned 0x0 [0290.355] GetLastError () returned 0x0 [0290.355] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.356] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Start Menu\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\start menu\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0290.356] WriteFile (in: hFile=0x23c, lpBuffer=0x23e525c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e525c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.356] SetEndOfFile (hFile=0x23c) returned 1 [0290.357] CloseHandle (hObject=0x23c) returned 1 [0290.357] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.357] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.357] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.358] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.358] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.358] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0290.360] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.360] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.360] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.360] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.360] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.361] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.361] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.361] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.361] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.361] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.361] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.361] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1eaf7c8, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.361] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1eaf7c8) returned 0x20 [0290.361] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.362] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.362] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.362] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.362] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.362] CryptDestroyKey (hKey=0x55e910) returned 1 [0290.362] CryptReleaseContext (hProv=0x570a78, dwFlags=0x0) returned 1 [0290.362] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Start Menu\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\start menu\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0290.362] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3d39b021, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3d39b021, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3d39b021, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x20, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0290.363] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.363] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.363] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.363] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.363] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0290.363] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x570748) returned 1 [0290.364] CryptCreateHash (in: hProv=0x570748, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0290.364] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.364] CryptDeriveKey (in: hProv=0x570748, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e5d0) returned 1 [0290.364] CryptDestroyHash (hHash=0x55e910) returned 1 [0290.364] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0290.364] GetLastError () returned 0x0 [0290.364] GetLastError () returned 0x0 [0290.364] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.365] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0290.366] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.366] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Templates\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\templates\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0290.366] WriteFile (in: hFile=0x23c, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.367] SetEndOfFile (hFile=0x23c) returned 1 [0290.367] CloseHandle (hObject=0x23c) returned 1 [0290.367] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.368] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.368] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.368] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0290.368] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.368] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.369] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.369] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.369] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.369] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.369] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.369] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.369] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.369] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0290.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.370] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.370] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.370] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.370] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.370] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0290.370] CryptReleaseContext (hProv=0x570748, dwFlags=0x0) returned 1 [0290.371] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Templates\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\templates\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x28, ftCreationTime.dwLowDateTime=0x402215, ftCreationTime.dwHighDateTime=0x19f8f4, ftLastAccessTime.dwLowDateTime=0x40223e, ftLastAccessTime.dwHighDateTime=0x402245, ftLastWriteTime.dwLowDateTime=0x1e74a3c, ftLastWriteTime.dwHighDateTime=0x1e74a6c, nFileSizeHigh=0x6801, nFileSizeLow=0x0, dwReserved0=0x19f8d4, dwReserved1=0x402506, cFileName="à0@", cAlternateFileName="\x90åU")) returned 0xffffffff [0290.371] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4361e23f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4361e23f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="Videos", cAlternateFileName="")) returned 1 [0290.371] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.371] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.371] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.371] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.371] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.371] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0290.371] CryptAcquireContextA (in: phProv=0x19f8bc, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f8bc*=0x571408) returned 1 [0290.372] CryptCreateHash (in: hProv=0x571408, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f874 | out: phHash=0x19f874) returned 1 [0290.372] CryptHashData (hHash=0x55e210, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.372] CryptDeriveKey (in: hProv=0x571408, Algid=0x6801, hBaseData=0x55e210, dwFlags=0x0, phKey=0x19f8b8 | out: phKey=0x19f8b8*=0x55e910) returned 1 [0290.372] CryptDestroyHash (hHash=0x55e210) returned 1 [0290.372] CryptEncrypt (in: hKey=0x55e910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f8c8*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f8c8*=0x18) returned 1 [0290.372] GetLastError () returned 0x0 [0290.372] GetLastError () returned 0x0 [0290.372] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.373] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x23c [0290.373] WriteFile (in: hFile=0x23c, lpBuffer=0x23e523c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f5f0, lpOverlapped=0x0 | out: lpBuffer=0x23e523c*, lpNumberOfBytesWritten=0x19f5f0*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.373] SetEndOfFile (hFile=0x23c) returned 1 [0290.374] CloseHandle (hObject=0x23c) returned 1 [0290.374] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.375] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.375] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.375] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.375] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0290.375] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.376] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.376] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.376] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.376] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.376] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.376] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.377] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0290.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.377] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.377] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.377] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.377] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.378] CryptDestroyKey (hKey=0x55e910) returned 1 [0290.378] CryptReleaseContext (hProv=0x571408, dwFlags=0x0) returned 1 [0290.378] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\*.*"), lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4361e23f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5067b313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e650 [0290.378] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4361e23f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5067b313, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.378] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33df26b0, ftCreationTime.dwHighDateTime=0x1d8b7ac, ftLastAccessTime.dwLowDateTime=0x99019220, ftLastAccessTime.dwHighDateTime=0x1d8bed8, ftLastWriteTime.dwLowDateTime=0x99019220, ftLastWriteTime.dwHighDateTime=0x1d8bed8, nFileSizeHigh=0x0, nFileSizeLow=0x14c19, dwReserved0=0x405534, dwReserved1=0x0, cFileName="1QvM.swf", cAlternateFileName="")) returned 1 [0290.378] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433e1b7b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x433e1b7b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x433e1b7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xb718, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Ayt0.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AYT0MK~1.CRY")) returned 1 [0290.378] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970c2e10, ftCreationTime.dwHighDateTime=0x1d8b11f, ftLastAccessTime.dwLowDateTime=0x4355f56d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4355f56d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="BdHdcndlyia--o2TJO", cAlternateFileName="BDHDCN~1")) returned 1 [0290.378] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.378] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.378] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.378] GetWindowTextA (in: hWnd=0x60240, lpString=0x1ebfec4, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.379] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.379] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1ebfec4) returned 0x18 [0290.379] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x5708e0) returned 1 [0290.379] CryptCreateHash (in: hProv=0x5708e0, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0290.379] CryptHashData (hHash=0x55e910, pbData=0x66d41c, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.379] CryptDeriveKey (in: hProv=0x5708e0, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e750) returned 1 [0290.380] CryptDestroyHash (hHash=0x55e910) returned 1 [0290.380] CryptEncrypt (in: hKey=0x55e750, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x1ebc864*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x1ebc864*, pdwDataLen=0x19f660*=0x18) returned 1 [0290.380] GetLastError () returned 0x0 [0290.380] GetLastError () returned 0x0 [0290.380] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.381] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0290.381] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.382] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0290.383] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.385] SetEndOfFile (hFile=0x240) returned 1 [0290.385] CloseHandle (hObject=0x240) returned 1 [0290.385] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.386] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.386] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.386] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.386] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x1f0ff48) returned 0x1 [0290.387] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.387] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.387] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.388] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.388] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.388] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.388] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.388] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.388] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.388] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.389] GetWindowTextA (in: hWnd=0x9002a, lpString=0x6648a4, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.389] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x6648a4) returned 0x20 [0290.389] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.389] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.391] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.391] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.391] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.392] CryptDestroyKey (hKey=0x55e750) returned 1 [0290.392] CryptReleaseContext (hProv=0x5708e0, dwFlags=0x0) returned 1 [0290.392] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970c2e10, ftCreationTime.dwHighDateTime=0x1d8b11f, ftLastAccessTime.dwLowDateTime=0x4355f56d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x510049dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0290.392] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970c2e10, ftCreationTime.dwHighDateTime=0x1d8b11f, ftLastAccessTime.dwLowDateTime=0x4355f56d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x510049dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.392] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1e3e510, ftCreationTime.dwHighDateTime=0x1d8b5ac, ftLastAccessTime.dwLowDateTime=0x17a4cf00, ftLastAccessTime.dwHighDateTime=0x1d8bb34, ftLastWriteTime.dwLowDateTime=0x17a4cf00, ftLastWriteTime.dwHighDateTime=0x1d8bb34, nFileSizeHigh=0x0, nFileSizeLow=0x1ca2, dwReserved0=0x405534, dwReserved1=0x0, cFileName="a3itWRZvWpmLXsozDFw.mp4", cAlternateFileName="A3ITWR~1.MP4")) returned 1 [0290.392] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433e1b7b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x433e1b7b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x433e1b7b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x405534, dwReserved1=0x0, cFileName="aZA Bm1.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="AZABM1~1.CRY")) returned 1 [0290.392] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43407f62, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43407f62, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x43407f62, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x8144, dwReserved0=0x405534, dwReserved1=0x0, cFileName="b1e_wUWCHFNA7nDr8n.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="B1E_WU~1.CRY")) returned 1 [0290.392] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43407f62, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x43407f62, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4342e1af, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x114f7, dwReserved0=0x405534, dwReserved1=0x0, cFileName="cdad4T_Z0CG2NFrmq2Q.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="CDAD4T~1.CRY")) returned 1 [0290.392] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510049dc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x510049dc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x510049dc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0290.393] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf50ab3d0, ftCreationTime.dwHighDateTime=0x1d8bb40, ftLastAccessTime.dwLowDateTime=0x434a08eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x434a08eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="msy2N7n2 mhY", cAlternateFileName="MSY2N7~1")) returned 1 [0290.393] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.393] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.425] GetWindowTextA (in: hWnd=0x60240, lpString=0x657904, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.425] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.425] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x657904) returned 0x18 [0290.425] CryptAcquireContextA (in: phProv=0x19f3ec, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f3ec*=0x571160) returned 1 [0290.426] CryptCreateHash (in: hProv=0x571160, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f3a4 | out: phHash=0x19f3a4) returned 1 [0290.426] CryptHashData (hHash=0x55e690, pbData=0x21e4d40, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.426] CryptDeriveKey (in: hProv=0x571160, Algid=0x6801, hBaseData=0x55e690, dwFlags=0x0, phKey=0x19f3e8 | out: phKey=0x19f3e8*=0x55e5d0) returned 1 [0290.426] CryptDestroyHash (hHash=0x55e690) returned 1 [0290.426] CryptEncrypt (in: hKey=0x55e5d0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x223b368*, pdwDataLen=0x19f3f8*=0x18, dwBufLen=0x18 | out: pbData=0x223b368*, pdwDataLen=0x19f3f8*=0x18) returned 1 [0290.426] GetLastError () returned 0x0 [0290.426] GetLastError () returned 0x0 [0290.426] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.427] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x244 [0290.429] WriteFile (in: hFile=0x244, lpBuffer=0x23e522c*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f120, lpOverlapped=0x0 | out: lpBuffer=0x23e522c*, lpNumberOfBytesWritten=0x19f120*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.431] SetEndOfFile (hFile=0x244) returned 1 [0290.431] CloseHandle (hObject=0x244) returned 1 [0290.431] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.432] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.432] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.433] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.433] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x21ebf7c) returned 0x1 [0290.433] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.433] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.434] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.434] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.434] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.435] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.435] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.435] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.435] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1ebec84, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.435] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1ebec84) returned 0x20 [0290.435] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.436] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.436] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.436] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.436] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.436] CryptDestroyKey (hKey=0x55e5d0) returned 1 [0290.436] CryptReleaseContext (hProv=0x571160, dwFlags=0x0) returned 1 [0290.436] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\BdHdcndlyia--o2TJO\\msy2N7n2 mhY\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\bdhdcndlyia--o2tjo\\msy2n7n2 mhy\\*.*"), lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf50ab3d0, ftCreationTime.dwHighDateTime=0x1d8bb40, ftLastAccessTime.dwLowDateTime=0x434a08eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x51088572, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e5d0 [0290.436] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf50ab3d0, ftCreationTime.dwHighDateTime=0x1d8bb40, ftLastAccessTime.dwLowDateTime=0x434a08eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x51088572, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.437] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f53fc40, ftCreationTime.dwHighDateTime=0x1d8bc6d, ftLastAccessTime.dwLowDateTime=0x69263560, ftLastAccessTime.dwHighDateTime=0x1d8c009, ftLastWriteTime.dwLowDateTime=0x69263560, ftLastWriteTime.dwHighDateTime=0x1d8c009, nFileSizeHigh=0x0, nFileSizeLow=0xe72a, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Hnf-2cDg-V5mRQgzfb.swf", cAlternateFileName="HNF-2C~1.SWF")) returned 1 [0290.437] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51088572, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x51088572, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x5108fcbf, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0290.437] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4342e1af, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4342e1af, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4345450e, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x49f1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="PAU1zPeoNTZTO1prSM.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="PAU1ZP~1.CRY")) returned 1 [0290.437] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x584f4dc0, ftCreationTime.dwHighDateTime=0x1d8b236, ftLastAccessTime.dwLowDateTime=0x7b516b10, ftLastAccessTime.dwHighDateTime=0x1d8bdc5, ftLastWriteTime.dwLowDateTime=0x7b516b10, ftLastWriteTime.dwHighDateTime=0x1d8bdc5, nFileSizeHigh=0x0, nFileSizeLow=0xc680, dwReserved0=0x405534, dwReserved1=0x0, cFileName="ptMheWgNMc.swf", cAlternateFileName="PTMHEW~1.SWF")) returned 1 [0290.437] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18c7b2b0, ftCreationTime.dwHighDateTime=0x1d8b898, ftLastAccessTime.dwLowDateTime=0x52888710, ftLastAccessTime.dwHighDateTime=0x1d8ba0d, ftLastWriteTime.dwLowDateTime=0x52888710, ftLastWriteTime.dwHighDateTime=0x1d8ba0d, nFileSizeHigh=0x0, nFileSizeLow=0x9d24, dwReserved0=0x405534, dwReserved1=0x0, cFileName="QntZJev21J.swf", cAlternateFileName="QNTZJE~1.SWF")) returned 1 [0290.437] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4345450e, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4345450e, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4347a728, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xcbd1, dwReserved0=0x405534, dwReserved1=0x0, cFileName="rOdVWBBX9Gqw6r7kRh.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="RODVWB~1.CRY")) returned 1 [0290.437] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4347a728, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4347a728, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x434a08eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xf39c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="YyZCa.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="YYZCAF~1.CRY")) returned 1 [0290.437] FindNextFileA (in: hFindFile=0x55e5d0, lpFindFileData=0x19f3a0 | out: lpFindFileData=0x19f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4347a728, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4347a728, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x434a08eb, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xf39c, dwReserved0=0x405534, dwReserved1=0x0, cFileName="YyZCa.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="YYZCAF~1.CRY")) returned 0 [0290.437] FindClose (in: hFindFile=0x55e5d0 | out: hFindFile=0x55e5d0) returned 1 [0290.437] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434a08eb, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x434a08eb, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x434c6b31, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xceda, dwReserved0=0x632e766c, dwReserved1=0x74707972, cFileName="T7NndB1TqdAPY7tj.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="T7NNDB~1.CRY")) returned 1 [0290.437] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x434ece25, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x434ece25, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4351304a, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0xd4d0, dwReserved0=0x632e766c, dwReserved1=0x74707972, cFileName="tIs2ezheQuxi.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="TIS2EZ~1.CRY")) returned 1 [0290.437] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4351304a, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4351304a, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x435393b0, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x15d22, dwReserved0=0x632e766c, dwReserved1=0x74707972, cFileName="Wnyk20dy85PKi.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WNYK20~1.CRY")) returned 1 [0290.437] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17eadb50, ftCreationTime.dwHighDateTime=0x1d8bd3a, ftLastAccessTime.dwLowDateTime=0x62f118b0, ftLastAccessTime.dwHighDateTime=0x1d8be6d, ftLastWriteTime.dwLowDateTime=0x62f118b0, ftLastWriteTime.dwHighDateTime=0x1d8be6d, nFileSizeHigh=0x0, nFileSizeLow=0xfc4d, dwReserved0=0x632e766c, dwReserved1=0x74707972, cFileName="yF5D.mp4", cAlternateFileName="")) returned 1 [0290.437] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435393b0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x435393b0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4355f56d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x7bd0, dwReserved0=0x632e766c, dwReserved1=0x74707972, cFileName="z2Sa.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="Z2SAAV~1.CRY")) returned 1 [0290.437] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435393b0, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x435393b0, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4355f56d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x7bd0, dwReserved0=0x632e766c, dwReserved1=0x74707972, cFileName="z2Sa.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="Z2SAAV~1.CRY")) returned 0 [0290.437] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0290.438] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4355f56d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4355f56d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4355f56d, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x72632e69, dwReserved1=0x65747079, cFileName="desktop.ini.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="DESKTO~1.CRY")) returned 1 [0290.438] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5067b313, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x5067b313, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x50fde836, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x72632e69, dwReserved1=0x65747079, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0290.438] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a9b8860, ftCreationTime.dwHighDateTime=0x1d8b1b9, ftLastAccessTime.dwLowDateTime=0xe1de420, ftLastAccessTime.dwHighDateTime=0x1d8b446, ftLastWriteTime.dwLowDateTime=0xe1de420, ftLastWriteTime.dwHighDateTime=0x1d8b446, nFileSizeHigh=0x0, nFileSizeLow=0x1812b, dwReserved0=0x72632e69, dwReserved1=0x65747079, cFileName="mwNhvkt.mp4", cAlternateFileName="")) returned 1 [0290.438] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4355f56d, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x4355f56d, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x435857d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x7a5e, dwReserved0=0x72632e69, dwReserved1=0x65747079, cFileName="n8JDFGSB2.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="N8JDFG~1.CRY")) returned 1 [0290.438] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435857d5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x435857d5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x435857d5, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x2a10, dwReserved0=0x72632e69, dwReserved1=0x65747079, cFileName="oiFOzr1sMX1.mkv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="OIFOZR~1.CRY")) returned 1 [0290.438] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbde04c40, ftCreationTime.dwHighDateTime=0x1d8bf72, ftLastAccessTime.dwLowDateTime=0xc85c56b0, ftLastAccessTime.dwHighDateTime=0x1d8c0e8, ftLastWriteTime.dwLowDateTime=0xc85c56b0, ftLastWriteTime.dwHighDateTime=0x1d8c0e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ac, dwReserved0=0x72632e69, dwReserved1=0x65747079, cFileName="Qr0CzuC_rb.swf", cAlternateFileName="QR0CZU~1.SWF")) returned 1 [0290.438] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2fd70, ftCreationTime.dwHighDateTime=0x1d8b9f0, ftLastAccessTime.dwLowDateTime=0x435d204b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x435d204b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72632e69, dwReserved1=0x65747079, cFileName="sIWWQ-WC9", cAlternateFileName="SIWWQ-~1")) returned 1 [0290.438] GetWindowTextLengthA (hWnd=0x60240) returned 24 [0290.438] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0290.438] GetWindowTextA (in: hWnd=0x60240, lpString=0x1e83f00, nMaxCount=25 | out: lpString="kokoskd949949393939dksds") returned 24 [0290.438] GetPropA (hWnd=0x60240, lpString="SELF_") returned 0x1e75744 [0290.438] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x60240, Msg=0xd, wParam=0x19, lParam=0x1e83f00) returned 0x18 [0290.439] CryptAcquireContextA (in: phProv=0x19f654, szContainer=0x0, szProvider="Microsoft Enhanced Cryptographic Provider v1.0", dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x19f654*=0x570b00) returned 1 [0290.439] CryptCreateHash (in: hProv=0x570b00, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x19f60c | out: phHash=0x19f60c) returned 1 [0290.439] CryptHashData (hHash=0x55e910, pbData=0x1f340e0, dwDataLen=0xf, dwFlags=0x0) returned 1 [0290.439] CryptDeriveKey (in: hProv=0x570b00, Algid=0x6801, hBaseData=0x55e910, dwFlags=0x0, phKey=0x19f650 | out: phKey=0x19f650*=0x55e290) returned 1 [0290.439] CryptDestroyHash (hHash=0x55e910) returned 1 [0290.439] CryptEncrypt (in: hKey=0x55e290, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x668e18*, pdwDataLen=0x19f660*=0x18, dwBufLen=0x18 | out: pbData=0x668e18*, pdwDataLen=0x19f660*=0x18) returned 1 [0290.439] GetLastError () returned 0x0 [0290.440] GetLastError () returned 0x0 [0290.440] VirtualFree (lpAddress=0x23e0000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.440] VirtualAlloc (lpAddress=0x23e0000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e0000 [0290.441] VirtualAlloc (lpAddress=0x23e4000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x23e4000 [0290.442] CreateFileA (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\if_you_want_to_get_all_your_files_back_please_read_this.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x240 [0290.443] WriteFile (in: hFile=0x240, lpBuffer=0x23e3514*, nNumberOfBytesToWrite=0x1cf9, lpNumberOfBytesWritten=0x19f388, lpOverlapped=0x0 | out: lpBuffer=0x23e3514*, lpNumberOfBytesWritten=0x19f388*=0x1cf9, lpOverlapped=0x0) returned 1 [0290.444] SetEndOfFile (hFile=0x240) returned 1 [0290.444] CloseHandle (hObject=0x240) returned 1 [0290.445] VirtualFree (lpAddress=0x23e4000, dwSize=0x4000, dwFreeType=0x4000) returned 1 [0290.445] SendMessageA (hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.445] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.446] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb0, wParam=0x0, lParam=0x0) returned 0x0 [0290.446] SetWindowTextA (hWnd=0x9002a, lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 1 [0290.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.446] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xc, wParam=0x0, lParam=0x2293024) returned 0x1 [0290.446] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.446] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.446] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x4008000, lParam=0x9002a) returned 0x0 [0290.447] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.447] SendMessageA (hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.447] GetWindowTextLengthA (hWnd=0x9002a) returned 32 [0290.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.447] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x20 [0290.447] GetWindowTextA (in: hWnd=0x9002a, lpString=0x1f65eac, nMaxCount=33 | out: lpString="tZpa1+X7kVs7q0rimOC/rS7koabJXmTe") returned 32 [0290.447] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.448] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xd, wParam=0x21, lParam=0x1f65eac) returned 0x20 [0290.448] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb005, wParam=0x3008000, lParam=0x9002a) returned 0x0 [0290.448] InvalidateRect (hWnd=0x9002a, lpRect=0x0, bErase=1) returned 1 [0290.448] SendMessageA (hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.448] GetPropA (hWnd=0x9002a, lpString="SELF_") returned 0x1e742e8 [0290.448] CallWindowProcA (lpPrevWndFunc=0x777eafb0, hWnd=0x9002a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0290.448] CryptDestroyKey (hKey=0x55e290) returned 1 [0290.448] CryptReleaseContext (hProv=0x570b00, dwFlags=0x0) returned 1 [0290.448] FindFirstFileA (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Videos\\sIWWQ-WC9\\*.*" (normalized: "c:\\users\\rdhj0cnfevzx\\videos\\siwwq-wc9\\*.*"), lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2fd70, ftCreationTime.dwHighDateTime=0x1d8b9f0, ftLastAccessTime.dwLowDateTime=0x435d204b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x510983cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x55e210 [0290.449] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2fd70, ftCreationTime.dwHighDateTime=0x1d8b9f0, ftLastAccessTime.dwLowDateTime=0x435d204b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x510983cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0290.449] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510983cc, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x510983cc, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x510983cc, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1cf9, dwReserved0=0x405534, dwReserved1=0x0, cFileName="IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.HTML", cAlternateFileName="IF_YOU~1.HTM")) returned 1 [0290.449] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435857d5, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x435857d5, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x435ab9dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x35f0, dwReserved0=0x405534, dwReserved1=0x0, cFileName="LcmxR7.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="LCMXR7~1.CRY")) returned 1 [0290.449] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435ab9dd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x435ab9dd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x435ab9dd, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x6c40, dwReserved0=0x405534, dwReserved1=0x0, cFileName="Mnnvfs8UvOlcl.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="MNNVFS~1.CRY")) returned 1 [0290.449] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435ab9dd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x435ab9dd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x435d204b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1392, dwReserved0=0x405534, dwReserved1=0x0, cFileName="X72qAh71Gd3CZ5l.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="X72QAH~1.CRY")) returned 1 [0290.449] FindNextFileA (in: hFindFile=0x55e210, lpFindFileData=0x19f608 | out: lpFindFileData=0x19f608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435ab9dd, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x435ab9dd, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x435d204b, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1392, dwReserved0=0x405534, dwReserved1=0x0, cFileName="X72qAh71Gd3CZ5l.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="X72QAH~1.CRY")) returned 0 [0290.449] FindClose (in: hFindFile=0x55e210 | out: hFindFile=0x55e210) returned 1 [0290.449] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831b0ea0, ftCreationTime.dwHighDateTime=0x1d8b596, ftLastAccessTime.dwLowDateTime=0xa6810d10, ftLastAccessTime.dwHighDateTime=0x1d8b5d0, ftLastWriteTime.dwLowDateTime=0xa6810d10, ftLastWriteTime.dwHighDateTime=0x1d8b5d0, nFileSizeHigh=0x0, nFileSizeLow=0xfd26, dwReserved0=0x33644731, dwReserved1=0x6c355a43, cFileName="sk2Tn_0.swf", cAlternateFileName="")) returned 1 [0290.449] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc093b800, ftCreationTime.dwHighDateTime=0x1d8ba86, ftLastAccessTime.dwLowDateTime=0x41588990, ftLastAccessTime.dwHighDateTime=0x1d8bf2b, ftLastWriteTime.dwLowDateTime=0x41588990, ftLastWriteTime.dwHighDateTime=0x1d8bf2b, nFileSizeHigh=0x0, nFileSizeLow=0x11020, dwReserved0=0x33644731, dwReserved1=0x6c355a43, cFileName="WKrUZfIi7AKxe1iu.mp4", cAlternateFileName="WKRUZF~1.MP4")) returned 1 [0290.449] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435d204b, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x435d204b, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x435f7ea1, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x1548d, dwReserved0=0x33644731, dwReserved1=0x6c355a43, cFileName="wUWg61_zdaLIjlPP9.avi.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="WUWG61~1.CRY")) returned 1 [0290.449] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435f7ea1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x435f7ea1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4361e23f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x16c60, dwReserved0=0x33644731, dwReserved1=0x6c355a43, cFileName="ZSGop.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZSGOPF~1.CRY")) returned 1 [0290.449] FindNextFileA (in: hFindFile=0x55e650, lpFindFileData=0x19f870 | out: lpFindFileData=0x19f870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435f7ea1, ftCreationTime.dwHighDateTime=0x1d8ccb6, ftLastAccessTime.dwLowDateTime=0x435f7ea1, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4361e23f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x16c60, dwReserved0=0x33644731, dwReserved1=0x6c355a43, cFileName="ZSGop.flv.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx", cAlternateFileName="ZSGOPF~1.CRY")) returned 0 [0290.449] FindClose (in: hFindFile=0x55e650 | out: hFindFile=0x55e650) returned 1 [0290.449] FindNextFileA (in: hFindFile=0x55e590, lpFindFileData=0x19fad8 | out: lpFindFileData=0x19fad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ceb0231, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x4361e23f, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x4361e23f, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x40a6c8, dwReserved1=0x20, cFileName="Videos", cAlternateFileName="")) returned 0 [0290.449] FindClose (in: hFindFile=0x55e590 | out: hFindFile=0x55e590) returned 1 [0290.450] FindNextFileA (in: hFindFile=0x55e250, lpFindFileData=0x19fd40 | out: lpFindFileData=0x19fd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x42973839, ftLastAccessTime.dwHighDateTime=0x1d8ccb6, ftLastWriteTime.dwLowDateTime=0x42973839, ftLastWriteTime.dwHighDateTime=0x1d8ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x544e7373, dwReserved1=0x5f4f545f, cFileName="RDhJ0CNFevzX", cAlternateFileName="RDHJ0C~1")) returned 0 [0290.450] FindClose (in: hFindFile=0x55e250 | out: hFindFile=0x55e250) returned 1 [0290.455] ShowWindow (hWnd=0x502b2, nCmdShow=0) returned 0 [0290.455] GetClientRect (in: hWnd=0x5020a, lpRect=0x19ff1c | out: lpRect=0x19ff1c) returned 1 [0290.459] WaitMessage () returned 1 [0290.459] PeekMessageA (in: lpMsg=0x19ff2c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x19ff2c) returned 1 [0290.459] TranslateMessage (lpMsg=0x19ff2c) returned 0 [0290.459] DispatchMessageA (lpMsg=0x19ff2c) returned 0x0 [0290.460] GetPropA (hWnd=0x5020a, lpString="SELF_") returned 0x1e7037c [0290.460] NtdllDefWindowProc_A (hWnd=0x5020a, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0290.460] PeekMessageA (in: lpMsg=0x19ff2c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x19ff2c) returned 1 [0290.460] TranslateMessage (lpMsg=0x19ff2c) returned 0 [0290.460] DispatchMessageA (lpMsg=0x19ff2c) returned 0x0 [0290.460] GetPropA (hWnd=0x502b2, lpString="SELF_") returned 0x1e709b8 [0290.460] NtdllDefWindowProc_A (hWnd=0x502b2, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0290.460] PeekMessageA (in: lpMsg=0x19ff2c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x19ff2c) returned 0 [0290.461] WaitMessage () Thread: id = 6 os_tid = 0xc38 Thread: id = 11 os_tid = 0x7a8